rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-4767 
Open Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which the From line contains UTF-8 characters associated with diacritical marks and an invalid charset, which allows remote attackers to cause a denial of service (duplicate tickets and duplicate auto-responses) by sending a crafted message to a POP3 mailbox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-18T16:00:00.000Z
CVE-2010-4768 
Open Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remove operations involving both hidden permissions and other permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-18T16:00:00.000Z
CVE-2010-4769 
Directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the task parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T21:00:00.000Z
CVE-2010-4770 
SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a catalog action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T21:00:00.000Z
CVE-2010-4771 
SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T21:00:00.000Z
CVE-2010-4772 
Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter to viewforum.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T21:00:00.000Z
CVE-2010-4773 
Unspecified vulnerability in Hitachi EUR Form Client before 05-10 -/D 2010.11.15 and 05-10-CA (* 2) 2010.11.15; Hitachi EUR Form Service before 05-10 -/D 2010.11.15; and uCosminexus EUR Form Service before 07-60 -/D 2010.11.15 on Windows, before 05-10 -/D 2010.11.15 and 07-50 -/D 2010.11.15 on Linux, and before 07-50 -/C 2010.11.15 on AIX; allows remote attackers to execute arbitrary code via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T21:00:00.000Z
CVE-2010-4774 
SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T21:00:00.000Z
CVE-2010-4775 
The Relevant Content module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 for Drupal does not properly implement node access logic, which allows remote attackers to discover restricted node titles and relationships.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T21:00:00.000Z
CVE-2010-4776 
SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers to execute arbitrary SQL commands via the tid2 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T21:00:00.000Z
CVE-2010-4777 
The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSInventory to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-10T17:00:00.000Z
CVE-2010-4778 
Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allow remote attackers to inject arbitrary web script or HTML via the (1) username (aka fmusername), (2) password (aka fmpassword), or (3) server (aka fmserver) field in a fetchmail_prefs_save action, related to the Fetchmail configuration, a different issue than CVE-2010-3695.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-01T21:00:00.000Z
CVE-2010-4779 
Cross-site scripting (XSS) vulnerability in lib/includes/auth.inc.php in the WPtouch plugin 1.9.19.4 and 1.9.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wptouch_settings parameter to include/adsense-new.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-07T14:00:00.000Z
CVE-2010-4780 
SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbitrary SQL commands via the email parameter to index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-07T14:00:00.000Z
CVE-2010-4781 
index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitive information via a crafted title parameter, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-07T14:00:00.000Z
CVE-2010-4782 
Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) city, (2) state, (3) country, (4) minprice, (5) maxprice, (6) bed, and (7) bath parameters, different vectors than CVE-2006-6807.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-07T14:00:00.000Z
CVE-2010-4783 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_gpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the (1) siteurl and (2) urlbanner parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-07T14:00:00.000Z
CVE-2010-4784 
Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-07T14:00:00.000Z
CVE-2010-4785 
The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service (ABEND) via a malformed LDAP extended operation that triggers certain comparisons involving the NULL operation OID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-21T10:00:00.000Z
CVE-2010-4786 
IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005) allows remote authenticated users to cause a denial of service (daemon crash or hang) via a paged search, as demonstrated by a certain idsldapsearch command, related to an improper ibm-slapdIdleTimeOut configuration setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-21T10:00:00.000Z
CVE-2010-4787 
IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005) allows remote authenticated users to cause a denial of service (daemon hang) via a paged search that triggers improper mutex processing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-21T10:00:00.000Z
CVE-2010-4788 
IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) does not perform certain locking of linked-list access, which allows remote authenticated users to cause a denial of service (daemon crash) via a paged search.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-21T10:00:00.000Z
CVE-2010-4789 
Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.65 (aka 6.0.0.8-TIV-ITDS-IF0007) and 6.3 before 6.3.0.1 (aka 6.3.0.0-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (daemon crash) via a paged search that is interrupted by an LDAP Unbind operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-21T10:00:00.000Z
CVE-2010-4790 
Directory traversal vulnerability in FilterFTP 2.0.3, 2.0.5, and probably earlier versions, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-27T00:00:00.000Z
CVE-2010-4791 
SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG User-Fotoalbum (mg_user_fotoalbum_panel) module 1.0.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the album_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-27T00:00:00.000Z
CVE-2010-4792 
Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrary web script or HTML via the frame parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-27T00:00:00.000Z
CVE-2010-4793 
SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL commands via the ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-27T00:00:00.000Z
CVE-2010-4794 
Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameters in a jscalendar action to index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-27T00:00:00.000Z
CVE-2010-4795 
SQL injection vulnerability in the JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ev_id parameter in a details action to index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-27T00:00:00.000Z
CVE-2010-4796 
Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) provinceid parameter to search.php and the (2) e parameter to resumeview.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-27T00:00:00.000Z
CVE-2010-4797 
Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-27T00:00:00.000Z
CVE-2010-4798 
Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uri parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-27T00:00:00.000Z
CVE-2010-4799 
Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to authenticate.php and the (3) ID parameter to pwn.php. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-27T00:00:00.000Z
CVE-2010-4800 
SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute arbitrary SQL commands via the type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-27T00:00:00.000Z
CVE-2010-4801 
Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the filepath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-27T00:00:00.000Z
CVE-2010-4802 
Commands.pm in Mojolicious before 0.999928 does not properly perform CGI environment detection, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T00:03:00.000Z
CVE-2010-4803 
Mojolicious before 0.999927 does not properly implement HMAC-MD5 checksums, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T00:03:00.000Z
CVE-2010-4804 
The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-09T10:00:00.000Z
CVE-2010-4805 
The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service by sending a large amount of network traffic, related to the sk_add_backlog function and the sk_rmem_alloc socket field.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4251.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-26T16:00:00.000Z
CVE-2010-4806 
The authoring tool in IBM Web Content Manager (WCM) 6.1.5, and 7.0.0.1 before CF003, allows remote authenticated users to bypass intended access restrictions on draft creation by leveraging certain resource editor privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-26T16:00:00.000Z
CVE-2010-4807 
Race condition in IBM Web Content Manager (WCM) 7.0.0.1 before CF003 allows remote authenticated users to cause a denial of service (infinite recursive query) via unspecified vectors, related to a StackOverflowError exception.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-26T16:00:00.000Z
CVE-2010-4808 
SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-08T22:00:00.000Z
CVE-2010-4809 
SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-08T22:00:00.000Z
CVE-2010-4810 
Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to execute arbitrary PHP code via a URL in the theme_file parameter to (1) includes/window_top.php and (2) header.php, and the (3) lang_file parameter to control/common.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-08T22:00:00.000Z
CVE-2010-4811 
Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary web script or HTML via the (1) user[msn], (2) user[email], and (3) user[phone] parameters in a modifyDetails action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-08T22:00:00.000Z
CVE-2010-4812 
Multiple SQL injection vulnerabilities in 6kbbs 8.0 build 20100901 allow remote attackers to execute arbitrary SQL commands via the (1) tids[] parameter to ajaxadmin.php and the (2) msgids[] parameter to ajaxmember.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-08T22:00:00.000Z
CVE-2010-4813 
Cross-site scripting (XSS) vulnerability in the Category Tokens module 6.x before 6.x-1.1 for Drupal allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML by editing or creating vocabulary names, which are not properly handled in token help.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-08T22:00:00.000Z
CVE-2010-4814 
SQL injection vulnerability in index1.php in Best Soft Inc. (BSI) Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-08T22:00:00.000Z
CVE-2010-4815 
Coppermine gallery before 1.4.26 has an input validation vulnerability that allows for code execution.
Problem types: description: Other
Affected products: vendor: coppermine gallery
product: coppermine gallery
Published: 2020-02-05T18:54:09.000Z
CVE-2010-4816 
It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to remote denial of service of the ftpd service.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: FreeBSD and OpenBSD ftpd service
Published: 2021-06-22T13:44:58.000Z
CVE-2010-4817 
pithos before 0.3.5 allows overwrite of arbitrary files via symlinks.
Problem types: description: of arbitrary file via symlinks
Affected products: vendor: pithos
product: pithos
Published: 2019-11-13T21:54:03.000Z
CVE-2010-4818 
The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary code via (1) a crafted request that triggers a client swap in glx/glxcmdsswap.c; or (2) a crafted length or (3) a negative value in the screen field in a request to glx/glxcmds.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-05T23:00:00.000Z
CVE-2010-4819 
The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service (server crash) via unspecified vectors related to an "input sanitization flaw."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-05T23:00:00.000Z
CVE-2010-4820 
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-27T01:00:00.000Z
CVE-2010-4821 
Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-22T23:00:00.000Z
CVE-2010-4822 
core/model/MySQLDatabase.php in SilverStripe 2.4.x before 2.4.4, when the site is running in "live mode," allows remote attackers to obtain the SQL queries for a page via the showqueries and ajax parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-17T17:00:00.000Z
CVE-2010-4823 
Cross-site scripting (XSS) vulnerability in the httpError method in sapphire/core/control/RequestHandler.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when custom error handling is not used, allows remote attackers to inject arbitrary web script or HTML via "missing URL actions."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-17T17:00:00.000Z
CVE-2010-4824 
SQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when the Translatable extension is enabled, allows remote attackers to execute arbitrary SQL commands via the locale parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-17T17:00:00.000Z
CVE-2010-4825 
Cross-site scripting (XSS) vulnerability in magpie_debug.php in the Twitter Feed plugin (wp-twitter-feed) 0.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-24T10:00:00.000Z
CVE-2010-4826 
SQL injection vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to execute arbitrary SQL commands via the M_NAME parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-24T10:00:00.000Z
CVE-2010-4827 
Cross-site scripting (XSS) vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to inject arbitrary web script or HTML via the M_NAME parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-24T10:00:00.000Z
CVE-2010-4828 
Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to MapView.aspx; NetObject parameter to (2) NodeDetails.aspx and (3) InterfaceDetails.aspx; and the (4) ChartName parameter to CustomChart.aspx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-24T10:00:00.000Z
CVE-2010-4829 
SQL injection vulnerability in processview.asp in Techno Dreams (T-Dreams) Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-24T10:00:00.000Z
CVE-2010-4830 
SQL injection vulnerability in Resumes/TD_RESUME_Indlist.asp in Techno Dreams (T-Dreams) Job Career Package 3.0 allows remote attackers to execute arbitrary SQL commands via the z_Residency parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-24T10:00:00.000Z
CVE-2010-4831 
Untrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows local users to gain privileges via a Trojan horse Wintab32.dll file in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-06T15:00:00.000Z