rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-4642 
Cross-site scripting (XSS) vulnerability in XWiki Enterprise before 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-30T20:00:00.000Z
CVE-2010-4643 
Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file in an ODF or Microsoft Office document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-28T21:13:00.000Z
CVE-2010-4644 
Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T18:00:00.000Z
CVE-2010-4645 
strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-11T01:00:00.000Z
CVE-2010-4646 
Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web script or HTML via a crafted background attribute within a cell in a TABLE element, related to improper use of the htmLawed filter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-18T17:00:00.000Z
CVE-2010-4647 
Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-13T18:35:00.000Z
CVE-2010-4648 
The orinoco_ioctl_set_auth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel before 2.6.37 does not properly implement a TKIP protection mechanism, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading Wi-Fi frames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-21T23:00:00.000Z
CVE-2010-4649 
Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large value of a certain structure member.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-18T19:00:00.000Z
CVE-2010-4650 
Buffer overflow in the fuse_do_ioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging the ability to operate a CUSE server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-21T23:00:00.000Z
CVE-2010-4651 
Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T22:00:00.000Z
CVE-2010-4652 
Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD before 1.3.3d, when mod_sql is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly handled during construction of an SQL query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-02T00:00:00.000Z
CVE-2010-4653 
An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.
Problem types: description: Integer Overflow
Affected products: vendor: poppler
product: poppler
Published: 2019-11-13T19:12:53.000Z
CVE-2010-4654 
poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.
Problem types: description: Other
Affected products: vendor: poppler
product: poppler
Published: 2019-11-13T19:41:43.000Z
CVE-2010-4655 
net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability for an ethtool ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-18T19:00:00.000Z
CVE-2010-4656 
The iowarrior_write function in drivers/usb/misc/iowarrior.c in the Linux kernel before 2.6.37 does not properly allocate memory, which might allow local users to trigger a heap-based buffer overflow, and consequently cause a denial of service or gain privileges, via a long report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-18T19:00:00.000Z
CVE-2010-4657 
PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.
Problem types: description: Memory Leak
Affected products: vendor: php5
product: php5
Published: 2019-11-13T20:06:56.000Z
CVE-2010-4658 
statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks.
Problem types: description: Other
Affected products: vendor: statusnet
product: statusnet
Published: 2020-02-07T15:04:58.000Z
CVE-2010-4659 
Cross-site scripting (XSS) vulnerability in statusnet through 2010 in error message contents.
Problem types: description: unspecified
Affected products: vendor: statusnet
product: statusnet
Published: 2019-11-20T16:47:43.000Z
CVE-2010-4660 
Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes..
Problem types: description: unspecified
Affected products: vendor: statusnet
product: statusnet
Published: 2019-11-20T15:41:50.000Z
CVE-2010-4661 
udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.
Problem types: description: Other
Affected products: vendor: udisks
product: udisks
Published: 2019-11-13T20:57:06.000Z
CVE-2010-4662 
PmWiki before 2.2.21 has XSS.
Problem types: description: Cross-Site Scripting
Affected products: vendor: pmwiki
product: pmwiki
Published: 2020-02-05T18:13:22.000Z
CVE-2010-4663 
Unspecified vulnerability in the News module in CMS Made Simple (CMSMS) before 1.9.1 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-08T10:00:00.000Z
CVE-2010-4664 
In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session.
Problem types: description: Policy restrictions break-out via remote Virtual Network Computing (VNC) session
Affected products: vendor: consolekit
product: consolekit
Published: 2019-11-13T21:43:34.000Z
CVE-2010-4665 
Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF file containing a directory data structure with many directory entries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T20:00:00.000Z
CVE-2010-4666 
Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-13T20:00:00.000Z
CVE-2010-4667 
Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-14T17:00:00.000Z
CVE-2010-4668 
The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device, related to an unaligned map.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4163.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-03T19:26:00.000Z
CVE-2010-4669 
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service (CPU consumption and system hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4670 
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package, aka Bug ID CSCti24526.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4671 
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS before 15.0(1)XA5 allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package, aka Bug ID CSCti33534.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4672 
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier allow remote attackers to cause a denial of service (block exhaustion) via EIGRP traffic that triggers an EIGRP multicast storm, aka Bug ID CSCtf20269.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4673 
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allow remote attackers to cause a denial of service via a flood of packets, aka Bug ID CSCtg06316.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4674 
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allows remote attackers to cause a denial of service (block exhaustion) via multicast traffic, aka Bug ID CSCtg63992.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4675 
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly determine the interfaces for which TELNET connections should be permitted, which allows remote authenticated users to bypass intended access restrictions via vectors involving the "lowest security level interface," aka Bug ID CSCsv40504.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4676 
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote authenticated users to cause a denial of service (device crash) via a high volume of IPsec traffic, aka Bug ID CSCsx52748.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4677 
emWEB on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (daemon crash) via a request for a document whose name contains space characters, aka Bug ID CSCsy08416.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4678 
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4679 
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly handle Online Certificate Status Protocol (OCSP) connection failures, which allows remote OCSP responders to cause a denial of service (TCP socket exhaustion) by rejecting connection attempts, aka Bug ID CSCsz36816.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4680 
The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, aka Bug ID CSCsz80777.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4681 
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character, aka Bug ID CSCte14901.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4682 
Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (memory consumption) by making multiple incorrect LDAP authentication attempts, aka Bug ID CSCtf29867.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4683 
Memory leak in Cisco IOS before 15.0(1)XA5 might allow remote attackers to cause a denial of service (memory consumption) by sending a crafted SIP REGISTER message over UDP, aka Bug ID CSCtg41733.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T18:00:00.000Z
CVE-2010-4684 
Cisco IOS before 15.0(1)XA1, when certain TFTP debugging is enabled, allows remote attackers to cause a denial of service (device crash) via a TFTP copy over IPv6, aka Bug ID CSCtb28877.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T18:00:00.000Z
CVE-2010-4685 
Cisco IOS before 15.0(1)XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T18:00:00.000Z
CVE-2010-4686 
CallManager Express (CME) on Cisco IOS before 15.0(1)XA1 does not properly handle SIP TRUNK traffic that contains rate bursts and a "peculiar" request size, which allows remote attackers to cause a denial of service (memory consumption) by sending this traffic over a long duration, aka Bug ID CSCtb47950.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T18:00:00.000Z
CVE-2010-4687 
STCAPP (aka the SCCP telephony control application) on Cisco IOS before 15.0(1)XA1 does not properly handle multiple calls to a shared line, which allows remote attackers to cause a denial of service (port hang) by simultaneously ending two calls that were controlled by CallManager Express (CME), aka Bug ID CSCtd42552.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T18:00:00.000Z
CVE-2010-4688 
Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device crash) by making many SIP calls, aka Bug ID CSCte20030.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T22:00:00.000Z
CVE-2010-4689 
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) do not properly preserve ACL behavior after a migration, which allows remote attackers to bypass intended access restrictions via an unspecified type of network traffic that had previously been denied, aka Bug ID CSCte46460.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T22:00:00.000Z
CVE-2010-4690 
The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T22:00:00.000Z
CVE-2010-4691 
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device crash) via multicast traffic, aka Bug IDs CSCtg61810 and CSCtg69742.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T22:00:00.000Z
CVE-2010-4692 
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device crash) via a large number of LAN-to-LAN (aka L2L) IPsec sessions, aka Bug ID CSCth36592.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T22:00:00.000Z
CVE-2010-4693 
Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters to help.php, or (3) picfile_XXX parameter to searchnew.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-11T01:00:00.000Z
CVE-2010-4694 
Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-14T17:00:00.000Z
CVE-2010-4695 
A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png_2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories via a crafted command-line argument, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-14T17:00:00.000Z
CVE-2010-4696 
Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the (1) filter_order or (2) filter_order_Dir parameter in a com_contact action to index.php, a different vulnerability than CVE-2010-4166.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-18T17:00:00.000Z
CVE-2010-4697 
Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service (heap memory corruption) or have unspecified other impact via vectors related to use of __set, __get, __isset, and __unset methods on objects accessed by a reference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-18T19:00:00.000Z
CVE-2010-4698 
Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent attackers to cause a denial of service (application crash) via a large number of anti-aliasing steps in an argument to the imagepstext function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-18T19:00:00.000Z
CVE-2010-4699 
The iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4 does not properly handle encodings that are unrecognized by the iconv and mbstring (aka Multibyte String) implementations, which allows remote attackers to trigger an incomplete output array, and possibly bypass spam detection or have unspecified other impact, via a crafted Subject header in an e-mail message, as demonstrated by the ks_c_5601-1987 character set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-18T19:00:00.000Z
CVE-2010-4700 
The set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly interact with use of the mysqli_fetch_assoc function, which might make it easier for context-dependent attackers to conduct SQL injection attacks via crafted input that had been properly handled in earlier PHP versions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-18T19:00:00.000Z
CVE-2010-4701 
Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long record in a Fax Cover Page (.cov) file. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-20T18:00:00.000Z
CVE-2010-4702 
SQL injection vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-20T18:00:00.000Z
CVE-2010-4703 
SQL injection vulnerability in default.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PageId parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-20T18:00:00.000Z