diff options
Diffstat (limited to 'data/CVE/list')
| -rw-r--r-- | data/CVE/list | 587 |
1 files changed, 294 insertions, 293 deletions
diff --git a/data/CVE/list b/data/CVE/list index ffe43d8..28ea497 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -89394,11 +89394,11 @@ CVE-2010-1801 (Heap-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5 CVE-2010-1802 (libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly ...) NOT-FOR-US: apple mac_os_x_server CVE-2010-1803 (Time Machine in Apple Mac OS X 10.6.x before 10.6.5 does not verify ...) - TODO: check + NOT-FOR-US: apple mac_os_x_server CVE-2010-1804 (Unspecified vulnerability in the network bridge functionality on the ...) - TODO: check + NOT-FOR-US: apple time_capsule CVE-2010-1805 (Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 ...) - TODO: check + NOT-FOR-US: apple safari CVE-2010-1806 (Use-after-free vulnerability in Apple Safari 4.x before 4.1.2 and 5.x ...) TODO: check CVE-2010-1807 (WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2, and ...) @@ -89406,11 +89406,11 @@ CVE-2010-1807 (WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2, and CVE-2010-1808 (Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac ...) NOT-FOR-US: apple mac_os_x_server CVE-2010-1809 (The Accessibility component in Apple iOS before 4.1 on the iPhone and ...) - TODO: check + NOT-FOR-US: apple iphone_os CVE-2010-1810 (FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not ...) - TODO: check + NOT-FOR-US: apple iphone_os CVE-2010-1811 (ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows ...) - TODO: check + NOT-FOR-US: apple iphone_os CVE-2010-1812 (Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the ...) TODO: check CVE-2010-1813 (WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows ...) @@ -89422,7 +89422,7 @@ CVE-2010-1815 (Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on CVE-2010-1816 RESERVED CVE-2010-1817 (Buffer overflow in ImageIO in Apple iOS before 4.1 on the iPhone and ...) - TODO: check + NOT-FOR-US: apple iphone_os CVE-2010-1818 (The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple ...) NOT-FOR-US: apple quicktime CVE-2010-1819 @@ -90930,7 +90930,7 @@ CVE-2010-2567 (The RPC client implementation in Microsoft Windows XP SP2 and SP3 CVE-2010-2568 (Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 ...) NOT-FOR-US: microsoft windows_xp CVE-2010-2569 (pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher ...) - TODO: check + NOT-FOR-US: microsoft publisher CVE-2010-2570 (Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter ...) NOT-FOR-US: microsoft publisher CVE-2010-2571 (Array index error in pubconv.dll (aka the Publisher Converter DLL) in ...) @@ -91276,9 +91276,9 @@ CVE-2010-2740 (The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 CVE-2010-2741 (The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and ...) NOT-FOR-US: microsoft windows_xp CVE-2010-2742 (The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and ...) - TODO: check -CVE-2010-2743 - RESERVED + NOT-FOR-US: microsoft windows_server_2008 +CVE-2010-2743 (The kernel-mode drivers in Microsoft Windows XP SP3 do not properly ...) + NOT-FOR-US: wild in July CVE-2010-2744 (The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows ...) NOT-FOR-US: microsoft windows_xp CVE-2010-2745 (Microsoft Windows Media Player (WMP) 9 through 12 does not properly ...) @@ -91787,11 +91787,11 @@ CVE-2010-2995 (The SigComp Universal Decompressor Virtual Machine (UDVM) in Wire CVE-2010-2996 (Array index error in RealNetworks RealPlayer 11.0 through 11.1 on ...) NOT-FOR-US: realnetworks realplayer CVE-2010-2997 (Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-2998 (Array index error in RealNetworks RealPlayer 11.0 through 11.1 and ...) NOT-FOR-US: realnetworks realplayer_sp CVE-2010-2999 (Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-3000 (Multiple integer overflows in the ParseKnownType function in ...) NOT-FOR-US: realnetworks realplayer_sp CVE-2010-3001 (Unspecified vulnerability in an ActiveX control in the Internet ...) @@ -91866,7 +91866,7 @@ CVE-2010-3034 (Cisco Wireless LAN Controller (WLC) software, possibly 6.0.x or . CVE-2010-3035 (Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not ...) NOT-FOR-US: cisco ios_xr CVE-2010-3036 (Multiple buffer overflows in the authentication functionality in the ...) - TODO: check + NOT-FOR-US: cisco unified_service_monitor CVE-2010-3037 (goform/websXMLAdminRequestCgi.cgi in Cisco Unified Videoconferencing ...) NOT-FOR-US: cisco unified_videoconferencing_system_5230 CVE-2010-3038 (Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the ...) @@ -91946,7 +91946,7 @@ CVE-2010-3074 (SSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combination CVE-2010-3075 (EncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher ...) TODO: check CVE-2010-3076 (The filter function in php/src/include.php in Simple Management for ...) - TODO: check + NOT-FOR-US: blentz smbind CVE-2010-3077 (Cross-site scripting (XSS) vulnerability in util/icon_browser.php in ...) TODO: check CVE-2010-3078 (The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the ...) @@ -92196,7 +92196,7 @@ CVE-2010-3199 (Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build CVE-2010-3200 (MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote ...) NOT-FOR-US: microsoft word CVE-2010-3201 (Cross-site scripting (XSS) vulnerability in NetWin Surgemail before ...) - TODO: check + NOT-FOR-US: netwin surgemail CVE-2010-3202 (Cross-site scripting (XSS) vulnerability in Flock Browser 3.0.0.3989 ...) NOT-FOR-US: flock CVE-2010-3203 (Directory traversal vulnerability in the PicSell (com_picsell) ...) @@ -92471,27 +92471,27 @@ CVE-2010-3336 (Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for CVE-2010-3337 (Untrusted search path vulnerability in Microsoft Office 2007 SP2 and ...) NOT-FOR-US: microsoft office CVE-2010-3338 (The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, ...) - TODO: check + NOT-FOR-US: microsoft windows_vista CVE-2010-3339 RESERVED CVE-2010-3340 (Microsoft Internet Explorer 6 and 7 does not properly handle objects ...) - TODO: check + NOT-FOR-US: microsoft ie CVE-2010-3341 RESERVED CVE-2010-3342 (Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of ...) - TODO: check + NOT-FOR-US: microsoft ie CVE-2010-3343 (Microsoft Internet Explorer 6 does not properly handle objects in ...) - TODO: check + NOT-FOR-US: microsoft ie CVE-2010-3344 RESERVED CVE-2010-3345 (Microsoft Internet Explorer 8 does not properly handle objects in ...) - TODO: check + NOT-FOR-US: microsoft ie CVE-2010-3346 (Microsoft Internet Explorer 6, 7, and 8 does not properly handle ...) - TODO: check + NOT-FOR-US: microsoft ie CVE-2010-3347 RESERVED CVE-2010-3348 (Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of ...) - TODO: check + NOT-FOR-US: microsoft ie CVE-2010-3349 (Ardour 2.8.11 places a zero-length directory name in the ...) TODO: check CVE-2010-3350 (bareFTP 0.3.4 places a zero-length directory name in the ...) @@ -92503,7 +92503,7 @@ CVE-2010-3352 CVE-2010-3353 (Cowbell 0.2.7.1 places a zero-length directory name in the ...) TODO: check CVE-2010-3354 (dropboxd in Dropbox 0.7.110 places a zero-length directory name in the ...) - TODO: check + NOT-FOR-US: dropbox CVE-2010-3355 (Ember 0.5.7 places a zero-length directory name in the ...) NOT-FOR-US: ember CVE-2010-3356 @@ -92686,7 +92686,7 @@ CVE-2010-3442 (Multiple integer overflows in the snd_ctl_new function in ...) CVE-2010-3443 RESERVED CVE-2010-3444 (Buffer overflow in the log2vis_utf8 function in pyfribidi.c in GNU ...) - TODO: check + NOT-FOR-US: kobi_zamir pyfribidi CVE-2010-3445 (Stack consumption vulnerability in the dissect_ber_unknown function in ...) TODO: check CVE-2010-3446 @@ -92786,7 +92786,7 @@ CVE-2010-3492 (The asyncore module in Python before 3.2 does not properly handle CVE-2010-3493 (Multiple race conditions in smtpd.py in the smtpd module in Python ...) TODO: check CVE-2010-3494 (Race condition in the FTPHandler class in ftpserver.py in pyftpdlib ...) - TODO: check + NOT-FOR-US: g rodola pyftpdlib CVE-2010-3495 (Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) ...) TODO: check CVE-2010-3496 @@ -92808,7 +92808,7 @@ CVE-2010-3503 (Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris al CVE-2010-3504 (Unspecified vulnerability in the Oracle Applications Technology Stack ...) NOT-FOR-US: oracle e business_suite CVE-2010-3505 (Unspecified vulnerability in the Agile Core component in Oracle Supply ...) - TODO: check + NOT-FOR-US: oracle supply_chain_products_suite CVE-2010-3506 (Unspecified vulnerability in the Oracle Explorer (Sun Explorer) ...) NOT-FOR-US: oracle sun_products_suite CVE-2010-3507 (Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local ...) @@ -92818,7 +92818,7 @@ CVE-2010-3508 (Unspecified vulnerability in Oracle Solaris 10 allows local users CVE-2010-3509 (Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote ...) NOT-FOR-US: oracle solaris CVE-2010-3510 (Unspecified vulnerability in the Oracle WebLogic Server component in ...) - TODO: check + NOT-FOR-US: oracle fusion_middleware CVE-2010-3511 (Unspecified vulnerability in Oracle OpenSolaris allows local users to ...) NOT-FOR-US: oracle opensolaris CVE-2010-3512 (Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java ...) @@ -92972,33 +92972,33 @@ CVE-2010-3585 (Unspecified vulnerability in the OracleVM component in Oracle VM CVE-2010-3586 (Unspecified vulnerability in Oracle Solaris 9 allows local users to ...) TODO: check CVE-2010-3587 (Unspecified vulnerability in the Oracle Common Applications component ...) - TODO: check + NOT-FOR-US: oracle e business_suite CVE-2010-3588 (Unspecified vulnerability in the Oracle Discoverer component in Oracle ...) - TODO: check + NOT-FOR-US: oracle fusion_middleware CVE-2010-3589 (Unspecified vulnerability in the Oracle Application Object Library ...) - TODO: check + NOT-FOR-US: oracle e business_suite CVE-2010-3590 (Unspecified vulnerability in the Oracle Spatial component in Oracle ...) - TODO: check + NOT-FOR-US: oracle database_server CVE-2010-3591 (Unspecified vulnerability in the Oracle Document Capture component in ...) - TODO: check + NOT-FOR-US: oracle fusion_middleware CVE-2010-3592 (Unspecified vulnerability in the Oracle Document Capture component in ...) - TODO: check + NOT-FOR-US: oracle fusion_middleware CVE-2010-3593 (Unspecified vulnerability in the Health Sciences - Oracle Argus Safety ...) - TODO: check + NOT-FOR-US: oracle industry_applications CVE-2010-3594 (Unspecified vulnerability in the Real User Experience Insight ...) - TODO: check + NOT-FOR-US: oracle enterprise_manager_grid_control CVE-2010-3595 (Unspecified vulnerability in the Oracle Document Capture component in ...) - TODO: check + NOT-FOR-US: oracle fusion_middleware CVE-2010-3596 (Unspecified vulnerability in the mod_ssl component in Oracle Secure ...) - TODO: check + NOT-FOR-US: oracle secure_backup CVE-2010-3597 (Unspecified vulnerability in the Oracle Outside In Technology ...) - TODO: check + NOT-FOR-US: oracle fusion_middleware CVE-2010-3598 (Unspecified vulnerability in the Oracle Document Capture component in ...) - TODO: check + NOT-FOR-US: oracle fusion_middleware CVE-2010-3599 (Unspecified vulnerability in the Oracle Document Capture component in ...) - TODO: check + NOT-FOR-US: oracle fusion_middleware CVE-2010-3600 (Unspecified vulnerability in the Client System Analyzer component in ...) - TODO: check + NOT-FOR-US: oracle enterprise_manager_grid_control CVE-2010-3601 (SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows ...) NOT-FOR-US: invisionpower ibphotohost CVE-2010-3602 (Cross-site scripting (XSS) vulnerability in ProfileView.aspx in ...) @@ -93104,7 +93104,7 @@ CVE-2010-3651 CVE-2010-3652 (Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and ...) TODO: check CVE-2010-3653 (The Director module (dirapi.dll) in Adobe Shockwave Player before ...) - TODO: check + NOT-FOR-US: adobe shockwave_player CVE-2010-3654 (Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on ...) TODO: check CVE-2010-3655 (Stack-based buffer overflow in dirapi.dll in Adobe Shockwave Player ...) @@ -93452,17 +93452,17 @@ CVE-2010-3825 CVE-2010-3826 (WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and ...) TODO: check CVE-2010-3827 (Apple iOS before 4.2 does not properly validate signatures before ...) - TODO: check + NOT-FOR-US: apple iphone_os CVE-2010-3828 (iAd Content Display in Apple iOS before 4.2 allows man-in-the-middle ...) - TODO: check + NOT-FOR-US: apple iphone_os CVE-2010-3829 (WebKit in Apple iOS before 4.2 allows remote attackers to bypass the ...) TODO: check CVE-2010-3830 (Networking in Apple iOS before 4.2 accesses an invalid pointer during ...) - TODO: check + NOT-FOR-US: apple iphone_os CVE-2010-3831 (Photos in Apple iOS before 4.2 enables support for HTTP Basic ...) - TODO: check + NOT-FOR-US: apple iphone_os CVE-2010-3832 (Heap-based buffer overflow in the GSM mobility management ...) - TODO: check + NOT-FOR-US: apple iphone_os CVE-2010-3833 (MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does ...) TODO: check CVE-2010-3834 (Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before ...) @@ -93542,7 +93542,7 @@ CVE-2010-3870 (The utf8_decode function in PHP before 5.3.4 does not properly ha CVE-2010-3871 (Cross-site scripting (XSS) vulnerability in ...) NOT-FOR-US: mahara CVE-2010-3872 (The apr_status_t fcgid_header_bucket_read function in fcgid_bucket.c ...) - TODO: check + BUG: 344685 CVE-2010-3873 (The X.25 implementation in the Linux kernel before 2.6.36.2 does not ...) TODO: check CVE-2010-3874 (Heap-based buffer overflow in the bcm_connect function in ...) @@ -93569,7 +93569,7 @@ CVE-2010-3884 (Cross-site request forgery (CSRF) vulnerability in CMS Made Simpl NOT-FOR-US: cmsmadesimple cms_made_simple CVE-2010-3885 REJECTED - TODO: check + NOT-FOR-US: this CVE-2010-3886 (The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft ...) NOT-FOR-US: microsoft ie CVE-2010-3887 (The Limit Mail feature in the Parental Controls functionality in Mail ...) @@ -93609,7 +93609,7 @@ CVE-2010-3903 (Unspecified vulnerability in OpenConnect before 2.23 allows remot CVE-2010-3904 (The rds_page_copy_user function in net/rds/page.c in the Reliable ...) TODO: check CVE-2010-3905 (The password reset feature in the administrator interface for ...) - TODO: check + NOT-FOR-US: eucalyptus CVE-2010-3906 (Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier ...) TODO: check CVE-2010-3907 (Multiple integer overflows in real.c in the Real demuxer plugin in ...) @@ -93645,25 +93645,26 @@ CVE-2010-3921 (Cross-site scripting (XSS) vulnerability in Movable Type 4.x befo CVE-2010-3922 (SQL injection vulnerability in Movable Type 4.x before 4.35 and 5.x ...) NOT-FOR-US: sixapart movabletype CVE-2010-3923 (Untrusted search path vulnerability in AttacheCase before 2.70 allows ...) - TODO: check + NOT-FOR-US: mitsu_hiro_hi_rose attachecase CVE-2010-3924 (SQL injection vulnerability in Aimluck Aipo before 5.1.0.1 allows ...) - TODO: check + NOT-FOR-US: aimluck aipo CVE-2010-3925 (Contents-Mall before 15 does not properly handle passwords, which ...) - TODO: check + NOT-FOR-US: wb i contents mall CVE-2010-3926 (Multiple cross-site scripting (XSS) vulnerabilities in Shop.cgi in ...) - TODO: check + NOT-FOR-US: wb i sgx sp_final_ne CVE-2010-3927 RESERVED CVE-2010-3928 (Ruby Version Manager (RVM) before 1.2.1 writes file contents to a ...) - TODO: check + NOT-FOR-US: Ruby CVE-2010-3929 RESERVED CVE-2010-3930 RESERVED CVE-2010-3931 (Cross-site scripting (XSS) vulnerability in multiple Rocomotion ...) - TODO: check + NOT-FOR-US: multiple Rocomotion products including P board CVE-2010-3932 RESERVED + REJECTED CVE-2010-3933 (Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested ...) TODO: check CVE-2010-3934 (The browser in Research In Motion (RIM) BlackBerry Device Software ...) @@ -93673,79 +93674,79 @@ CVE-2010-3935 CVE-2010-3936 (Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft ...) NOT-FOR-US: microsoft forefront_unified_access_gateway CVE-2010-3937 (Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote ...) - TODO: check + NOT-FOR-US: microsoft exchange_server CVE-2010-3938 RESERVED CVE-2010-3939 (Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft ...) - TODO: check + NOT-FOR-US: microsoft windows_xp CVE-2010-3940 (Double free vulnerability in win32k.sys in the kernel-mode drivers in ...) - TODO: check + NOT-FOR-US: microsoft windows_xp CVE-2010-3941 (Double free vulnerability in win32k.sys in the kernel-mode drivers in ...) - TODO: check + NOT-FOR-US: microsoft windows_xp CVE-2010-3942 (win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and ...) - TODO: check + NOT-FOR-US: microsoft windows_xp CVE-2010-3943 (win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and ...) - TODO: check + NOT-FOR-US: microsoft windows_xp CVE-2010-3944 (win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 ...) - TODO: check + NOT-FOR-US: microsoft windows_server_2008 CVE-2010-3945 (Buffer overflow in the CGM image converter in the graphics filters in ...) - TODO: check + NOT-FOR-US: microsoft office_converter_pack CVE-2010-3946 (Integer overflow in the PICT image converter in the graphics filters ...) - TODO: check + NOT-FOR-US: microsoft office_converter_pack CVE-2010-3947 (Heap-based buffer overflow in the TIFF image converter in the graphics ...) - TODO: check + NOT-FOR-US: microsoft works CVE-2010-3948 RESERVED CVE-2010-3949 (Buffer overflow in the TIFF image converter in the graphics filters in ...) - TODO: check + NOT-FOR-US: microsoft office_converter_pack CVE-2010-3950 (The TIFF image converter in the graphics filters in Microsoft Office ...) - TODO: check + NOT-FOR-US: microsoft works CVE-2010-3951 (Buffer overflow in the FlashPix image converter in the graphics ...) - TODO: check + NOT-FOR-US: microsoft office_converter_pack CVE-2010-3952 (The FlashPix image converter in the graphics filters in Microsoft ...) - TODO: check + NOT-FOR-US: microsoft office_converter_pack CVE-2010-3953 RESERVED CVE-2010-3954 (Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote ...) - TODO: check + NOT-FOR-US: microsoft publisher CVE-2010-3955 (pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher ...) - TODO: check + NOT-FOR-US: microsoft publisher CVE-2010-3956 (The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, ...) - TODO: check + NOT-FOR-US: microsoft windows_xp CVE-2010-3957 (Double free vulnerability in the OpenType Font (OTF) driver in ...) - TODO: check + NOT-FOR-US: microsoft windows_xp CVE-2010-3958 RESERVED CVE-2010-3959 (The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, ...) - TODO: check + NOT-FOR-US: microsoft windows_xp CVE-2010-3960 (Hyper-V in Microsoft Windows Server 2008 Gold, SP2, and R2 allows ...) - TODO: check + NOT-FOR-US: microsoft windows_server_2008 CVE-2010-3961 (The Consent User Interface (UI) in Microsoft Windows Vista SP1 and ...) - TODO: check + NOT-FOR-US: microsoft windows_vista CVE-2010-3962 (Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and ...) NOT-FOR-US: microsoft ie CVE-2010-3963 (Buffer overflow in the Routing and Remote Access NDProxy component in ...) - TODO: check + NOT-FOR-US: microsoft windows_xp CVE-2010-3964 (Unrestricted file upload vulnerability in the Document Conversions ...) - TODO: check + NOT-FOR-US: microsoft sharepoint_server CVE-2010-3965 (Untrusted search path vulnerability in Windows Media Encoder 9 on ...) - TODO: check + NOT-FOR-US: microsoft windows_media_encoder CVE-2010-3966 (Untrusted search path vulnerability in Microsoft Windows Server 2008 ...) - TODO: check + NOT-FOR-US: microsoft windows_server_2008 CVE-2010-3967 (Untrusted search path vulnerability in Microsoft Windows Movie Maker ...) - TODO: check + NOT-FOR-US: microsoft windows_movie_maker CVE-2010-3968 RESERVED CVE-2010-3969 RESERVED CVE-2010-3970 (Stack-based buffer overflow in the CreateSizedDIBSECTION function in ...) - TODO: check + NOT-FOR-US: microsoft windows_xp CVE-2010-3971 (Use-after-free vulnerability in the CSharedStyleSheet::Notify function ...) - TODO: check + NOT-FOR-US: microsoft ie CVE-2010-3972 (The TELNET_STREAM_CONTEXT::OnSendData function in the FTP protocol ...) - TODO: check + NOT-FOR-US: microsoft iis CVE-2010-3973 (The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI ...) - TODO: check + NOT-FOR-US: microsoft wmi_administrative_tools CVE-2010-3974 RESERVED CVE-2010-3975 (Untrusted search path vulnerability in Adobe Flash Player 9 allows ...) @@ -93823,9 +93824,9 @@ CVE-2010-4010 (Integer signedness error in Apple Type Services (ATS) in Apple Ma CVE-2010-4011 (Dovecot in Apple Mac OS X 10.6.5 10H574 does not properly manage ...) NOT-FOR-US: apple mac_os_x_server CVE-2010-4012 (Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later ...) - TODO: check + NOT-FOR-US: apple iphone_os CVE-2010-4013 (Format string vulnerability in PackageKit in Apple Mac OS X 10.6.x ...) - TODO: check + NOT-FOR-US: apple mac_os_x_server CVE-2010-4014 RESERVED CVE-2010-4015 @@ -93989,7 +93990,7 @@ CVE-2010-4093 CVE-2010-4094 (The Tomcat server in IBM Rational Quality Manager and Rational Test ...) NOT-FOR-US: ibm rational_test_lab_manager CVE-2010-4095 (Directory traversal vulnerability in the FTP client in Serengeti ...) - TODO: check + NOT-FOR-US: robo ftp CVE-2010-4096 (share/ma/keys_for_user in Monkeysphere 0.31 and 0.32 allows local ...) NOT-FOR-US: monkeysphere_project monkeysphere CVE-2010-4097 (Multiple cross-site scripting (XSS) vulnerabilities in index.php in ...) @@ -94019,19 +94020,19 @@ CVE-2010-4108 (HP HP-UX B.11.11, B.11.23, and B.11.31 does not properly support CVE-2010-4109 (Cross-site scripting (XSS) vulnerability in the Contacts Application ...) NOT-FOR-US: hp palm_webos CVE-2010-4110 (Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the ...) - TODO: check + NOT-FOR-US: hp openvms CVE-2010-4111 (Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics ...) - TODO: check + NOT-FOR-US: hp insight_diagnostics CVE-2010-4112 (HP Insight Management Agents before 8.6 allows remote attackers to ...) - TODO: check + NOT-FOR-US: hp insight_management_agents CVE-2010-4113 (Stack-based buffer overflow in HP Power Manager (HPPM) before 4.3.2 ...) - TODO: check + NOT-FOR-US: hp power_manager CVE-2010-4114 (Cross-site scripting (XSS) vulnerability in HP Discovery & Dependency ...) - TODO: check + NOT-FOR-US: hp discovery dependency_mapping_inventory CVE-2010-4115 (HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, ...) - TODO: check + NOT-FOR-US: hp storageworks_modular_smart_array_p2000_g3_firmware CVE-2010-4116 (Unspecified vulnerability in HP StorageWorks Storage Mirroring 5.x ...) - TODO: check + NOT-FOR-US: hp storageworks_storage_mirroring CVE-2010-4117 RESERVED CVE-2010-4118 @@ -94143,7 +94144,7 @@ CVE-2010-4170 (The staprun runtime tool in SystemTap 1.3 does not properly clear CVE-2010-4171 (The staprun runtime tool in SystemTap 1.3 does not verify that a ...) TODO: check CVE-2010-4172 (Multiple cross-site scripting (XSS) vulnerabilities in the Manager ...) - TODO: check + BUG: 329937 CVE-2010-4173 (The default configuration of libsdp.conf in libsdp 1.1.104 and earlier ...) NOT-FOR-US: openfabrics libsdp CVE-2010-4174 @@ -94151,13 +94152,13 @@ CVE-2010-4174 CVE-2010-4175 (Integer overflow in the rds_cmsg_rdma_args function (net/rds/rdma.c) ...) TODO: check CVE-2010-4176 (plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 ...) - TODO: check + NOT-FOR-US: Fedora only CVE-2010-4177 RESERVED CVE-2010-4178 RESERVED CVE-2010-4179 (The installation documentation for Red Hat Enterprise Messaging, ...) - TODO: check + NOT-FOR-US: redhat enterprise_mrg CVE-2010-4180 (OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when ...) TODO: check CVE-2010-4181 (Directory traversal vulnerability in Yaws 1.89 allows remote attackers ...) @@ -94200,7 +94201,7 @@ CVE-2010-4199 (Google Chrome before 7.0.517.44 does not properly perform a cast TODO: check CVE-2010-4200 REJECTED - TODO: check + NOT-FOR-US: this CVE-2010-4201 (Use-after-free vulnerability in Google Chrome before 7.0.517.44 allows ...) TODO: check CVE-2010-4202 (Multiple integer overflows in Google Chrome before 7.0.517.44 on Linux ...) @@ -94324,7 +94325,7 @@ CVE-2010-4260 (Multiple unspecified vulnerabilities in pdf.c in libclamav in Cla CVE-2010-4261 (Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ...) TODO: check CVE-2010-4262 (Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote ...) - TODO: check + BUG: 348344 CVE-2010-4263 (The igb_receive_skb function in drivers/net/igb/igb_main.c in the ...) TODO: check CVE-2010-4264 @@ -94334,7 +94335,7 @@ CVE-2010-4265 (The ...) CVE-2010-4266 RESERVED CVE-2010-4267 (Stack-based buffer overflow in the hpmud_get_pml function in ...) - TODO: check + BUG: 352085 CVE-2010-4268 (SQL injection vulnerability in the Pulse Infotech Flip Wall ...) NOT-FOR-US: pulseinfotech com_flipwall CVE-2010-4269 (SQL injection vulnerability in managechat.php in Collabtive 0.65 ...) @@ -94350,11 +94351,11 @@ CVE-2010-4273 (SQL injection vulnerability in imoveis.php in DescargarVista ACC CVE-2010-4274 (reset_diragent_keys in the Common agent in IBM Systems Director 6.2.0 ...) NOT-FOR-US: ibm director_agent CVE-2010-4275 (Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager ...) - TODO: check + NOT-FOR-US: dmasoftlab radius_manager CVE-2010-4276 (Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid ...) - TODO: check + NOT-FOR-US: livezilla CVE-2010-4277 (Cross-site scripting (XSS) vulnerability in lembedded-video.php in the ...) - TODO: check + NOT-FOR-US: jovelstefan embedded video CVE-2010-4278 (operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows ...) NOT-FOR-US: pandora CVE-2010-4279 (The default configuration of Pandora FMS 3.1 and earlier specifies an ...) @@ -94442,13 +94443,13 @@ CVE-2010-4319 CVE-2010-4320 RESERVED CVE-2010-4321 (Stack-based buffer overflow in an ActiveX control in ienipp.ocx in ...) - TODO: check + NOT-FOR-US: novell iprint_client CVE-2010-4322 (Cross-site scripting (XSS) vulnerability in gwtTeaming.rpc in Novell ...) - TODO: check + NOT-FOR-US: novell vibe_onprem CVE-2010-4323 RESERVED CVE-2010-4324 (Cross-site scripting (XSS) vulnerability in the Approval Form in the ...) - TODO: check + NOT-FOR-US: novell identity_manager_roles_based_provisioning_module CVE-2010-4325 RESERVED CVE-2010-4326 @@ -94462,11 +94463,11 @@ CVE-2010-4329 (Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton CVE-2010-4330 (Directory traversal vulnerability in includes/controller.php in Pulse ...) NOT-FOR-US: pulsecms pulse_cms CVE-2010-4331 (Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 ...) - TODO: check + NOT-FOR-US: Seo Panel CVE-2010-4332 (Pointter PHP Content Management System 1.0 allows remote attackers to ...) - TODO: check + NOT-FOR-US: pangramsoft pointter_php_content_management_system CVE-2010-4333 (Pointter PHP Micro-Blogging Social Network 1.8 allows remote attackers ...) - TODO: check + NOT-FOR-US: pangramsoft pointter_php_micro blogging_social_network CVE-2010-4334 (IO::Socket::SSL Perl module 1.35, when verify_mode is not VERIFY_NONE, ...) TODO: check CVE-2010-4335 (The _validatePost function in libs/controller/components/security.php ...) @@ -94474,11 +94475,11 @@ CVE-2010-4335 (The _validatePost function in libs/controller/components/security CVE-2010-4336 (The cu_rrd_create_file function (src/utils_rrdcreate.c) in collectd ...) TODO: check CVE-2010-4337 (The configure script in gnash 0.8.8 allows local users to overwrite ...) - TODO: check + BUG: 351724 CVE-2010-4338 (ocrodjvu 0.4.6-1 on Debian GNU/Linux, when using Cuneiform as the OCR ...) - TODO: check + NOT-FOR-US: ocrodjvu CVE-2010-4339 (Cross-site scripting (XSS) vulnerability in Hypermail 2.2.0 allows ...) - TODO: check + NOT-FOR-US: hypermail project hypermail CVE-2010-4340 TODO: check CVE-2010-4341 @@ -94502,7 +94503,7 @@ CVE-2010-4349 (admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remo CVE-2010-4350 (Directory traversal vulnerability in admin/upgrade_unattended.php in ...) TODO: check CVE-2010-4351 (The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 ...) - TODO: check + BUG: 352035 CVE-2010-4352 (Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 ...) TODO: check CVE-2010-4353 @@ -94550,51 +94551,51 @@ CVE-2010-4373 (The in_mp4 plugin in Winamp before 5.6 allows remote attackers to CVE-2010-4374 (The in_mkv plugin in Winamp before 5.6 allows remote attackers to ...) NOT-FOR-US: nullsoft winamp CVE-2010-4375 (Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through ...) - TODO: check + NOT-FOR-US: realnetworks realplayer CVE-2010-4376 (Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4377 (Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4378 (The drv2.dll (aka RV20 decompression) module in RealNetworks ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4379 (Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4380 (Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4381 (Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4382 (Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4383 (Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4384 (Array index error in RealNetworks RealPlayer 11.0 through 11.1, ...) - TODO: check + NOT-FOR-US: realnetworks realplayer CVE-2010-4385 (Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4386 (RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4387 (The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4388 (The (1) Upsell.htm, (2) Main.html, and (3) Custsupport.html components ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4389 (Heap-based buffer overflow in the cook codec in RealNetworks ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4390 (Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4391 (Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4392 (Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4393 RESERVED CVE-2010-4394 (Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4395 (Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4396 (Cross-zone scripting vulnerability in the HandleAction method in a ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4397 (Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer ...) - TODO: check + NOT-FOR-US: realnetworks realplayer_sp CVE-2010-4398 (Stack-based buffer overflow in the RtlQueryRegistryValues function in ...) NOT-FOR-US: microsoft windows_xp CVE-2010-4399 (Directory traversal vulnerability in languages.inc.php in DynPG CMS ...) @@ -94626,79 +94627,79 @@ CVE-2010-4411 (Unspecified vulnerability in CGI.pm 3.50 and earlier allows remot CVE-2010-4412 (Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta ...) NOT-FOR-US: bsdperimeter pfsense CVE-2010-4413 (Unspecified vulnerability in the Scheduler Agent component in Oracle ...) - TODO: check + NOT-FOR-US: oracle database_server CVE-2010-4414 (Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local ...) TODO: check CVE-2010-4415 (Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local ...) - TODO: check + NOT-FOR-US: sunos CVE-2010-4416 (Unspecified vulnerability in the Oracle GoldenGate Veridata component ...) - TODO: check + NOT-FOR-US: oracle fusion_middleware CVE-2010-4417 (Unspecified vulnerability in the Services for Beehive component in ...) - TODO: check + NOT-FOR-US: oracle beehive CVE-2010-4418 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...) - TODO: check + NOT-FOR-US: oracle peoplesoft_enterprise CVE-2010-4419 (Unspecified vulnerability in the PeopleSoft Enterprise CRM component ...) - TODO: check + NOT-FOR-US: oracle peoplesoft_and_jdedwards_product_suite CVE-2010-4420 (Unspecified vulnerability in the Database Vault component in Oracle ...) - TODO: check + NOT-FOR-US: oracle database_server CVE-2010-4421 (Unspecified vulnerability in the Database Vault component in Oracle ...) - TODO: check + NOT-FOR-US: oracle database_server CVE-2010-4422 RESERVED CVE-2010-4423 (Unspecified vulnerability in the Cluster Verify Utility component in ...) - TODO: check + NOT-FOR-US: oracle database_server CVE-2010-4424 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...) - TODO: check + NOT-FOR-US: oracle peoplesoft_enterprise CVE-2010-4425 (Unspecified vulnerability in the Oracle BI Publisher component in ...) - TODO: check + NOT-FOR-US: oracle fusion_middleware CVE-2010-4426 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...) - TODO: check + NOT-FOR-US: oracle peoplesoft_enterprise CVE-2010-4427 (Unspecified vulnerability in the Oracle BI Publisher component in ...) - TODO: check + NOT-FOR-US: oracle fusion_middleware CVE-2010-4428 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...) - TODO: check + NOT-FOR-US: oracle peoplesoft_and_jdedwards_product_suite CVE-2010-4429 (Unspecified vulnerability in the Agile Core component in Oracle Supply ...) - TODO: check + NOT-FOR-US: oracle supply_chain_products_suite CVE-2010-4430 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...) - TODO: check + NOT-FOR-US: oracle peoplesoft_and_jdedwards_product_suite CVE-2010-4431 (Unspecified vulnerability in Oracle Sun Java System Portal Server 7.1 ...) - TODO: check + NOT-FOR-US: sun java_system_portal_server CVE-2010-4432 (Unspecified vulnerability in the Oracle Transportation Manager ...) - TODO: check + NOT-FOR-US: oracle supply_chain_products_suite CVE-2010-4433 (Unspecified vulnerability in Oracle Solaris 10 allows remote attackers ...) - TODO: check + NOT-FOR-US: sunos CVE-2010-4434 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...) - TODO: check + NOT-FOR-US: oracle peoplesoft_enterprise CVE-2010-4435 (Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote ...) - TODO: check + NOT-FOR-US: sunos CVE-2010-4436 (Unspecified vulnerability in Oracle Sun Management Center (SunMC) 4.0 ...) - TODO: check + NOT-FOR-US: oracle sunmc CVE-2010-4437 (Unspecified vulnerability in the Oracle WebLogic Server component in ...) - TODO: check + NOT-FOR-US: oracle fusion_middleware CVE-2010-4438 (Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, ...) - TODO: check + NOT-FOR-US: oracle sun_glassfish_enterprise_server CVE-2010-4439 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...) - TODO: check + NOT-FOR-US: oracle peoplesoft_and_jdedwards_product_suite CVE-2010-4440 (Unspecified vulnerability in Oracle 10 and 11 Express allows local ...) - TODO: check + NOT-FOR-US: sunos CVE-2010-4441 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...) - TODO: check + NOT-FOR-US: oracle peoplesoft_and_jdedwards_product_suite CVE-2010-4442 (Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows ...) - TODO: check + NOT-FOR-US: sunos CVE-2010-4443 (Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows ...) - TODO: check + NOT-FOR-US: sunos CVE-2010-4444 (Unspecified vulnerability in Oracle Sun Java System Access Manager and ...) - TODO: check + NOT-FOR-US: sun java_system_access_manager CVE-2010-4445 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...) - TODO: check + NOT-FOR-US: oracle peoplesoft_and_jdedwards_product_suite CVE-2010-4446 (Unspecified vulnerability in Oracle Solaris 11 Express allows local ...) - TODO: check + NOT-FOR-US: sunos CVE-2010-4447 RESERVED CVE-2010-4448 RESERVED CVE-2010-4449 (Unspecified vulnerability in the Audit Vault component in Oracle Audit ...) - TODO: check + NOT-FOR-US: oracle audit_vault CVE-2010-4450 RESERVED CVE-2010-4451 @@ -94706,29 +94707,29 @@ CVE-2010-4451 CVE-2010-4452 RESERVED CVE-2010-4453 (Unspecified vulnerability in the Oracle WebLogic Server component in ...) - TODO: check + NOT-FOR-US: oracle weblogic_server CVE-2010-4454 RESERVED CVE-2010-4455 (Unspecified vulnerability in the Oracle HTTP Server component in ...) - TODO: check + NOT-FOR-US: oracle fusion_middleware CVE-2010-4456 (Unspecified vulnerability in Oracle Sun Java System Communications ...) TODO: check CVE-2010-4457 (Unspecified vulnerability in Oracle Solaris 11 Express allows remote ...) - TODO: check + NOT-FOR-US: sunos CVE-2010-4458 (Unspecified vulnerability in Oracle Solaris 11 Express allows local ...) - TODO: check + NOT-FOR-US: sunos CVE-2010-4459 (Unspecified vulnerability in Oracle Solaris 11 Express allows local ...) - TODO: check + NOT-FOR-US: sunos CVE-2010-4460 (Unspecified vulnerability in Oracle Solaris 10 allows local users to ...) - TODO: check + NOT-FOR-US: sunos CVE-2010-4461 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...) - TODO: check + NOT-FOR-US: oracle peoplesoft_and_jdedwards_product_suite CVE-2010-4462 RESERVED CVE-2010-4463 RESERVED CVE-2010-4464 (Unspecified vulnerability in Oracle Sun Convergence 1.0 allows remote ...) - TODO: check + NOT-FOR-US: oracle sun_convergence CVE-2010-4465 RESERVED CVE-2010-4466 @@ -94792,18 +94793,18 @@ CVE-2010-4494 (Double free vulnerability in libxml2 2.7.8 and other versions, as CVE-2010-4495 (Unspecified vulnerability in the ActiveMatrix Runtime component in ...) TODO: check CVE-2010-4496 (Multiple SQL injection vulnerabilities in Collaborative Information ...) - TODO: check + NOT-FOR-US: tibco collaborative_information_manager CVE-2010-4497 (Cross-site scripting (XSS) vulnerability in Collaborative Information ...) - TODO: check + NOT-FOR-US: tibco collaborative_information_manager CVE-2010-4498 (Unspecified vulnerability in Collaborative Information Manager server, ...) - TODO: check + NOT-FOR-US: tibco collaborative_information_manager CVE-2010-4499 (Session fixation vulnerability in Collaborative Information Manager ...) - TODO: check + NOT-FOR-US: tibco collaborative_information_manager CVE-2010-4500 (Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY ...) NOT-FOR-US: mrcgiguy freeticket CVE-2010-4501 REJECTED - TODO: check + NOT-FOR-US: this CVE-2010-4502 (Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite ...) NOT-FOR-US: ca internet_security_suite_plus_2010 CVE-2010-4503 (SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows ...) @@ -94815,14 +94816,14 @@ CVE-2010-4505 (Multiple SQL injection vulnerabilities in login.php in Injader 2. CVE-2010-4506 RESERVED CVE-2010-4507 (Multiple cross-site request forgery (CSRF) vulnerabilities on the ...) - TODO: check + NOT-FOR-US: clear ispot CVE-2010-4508 (The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 ...) TODO: check CVE-2010-4509 (Multiple unspecified vulnerabilities in Movable Type 4.x before 4.35 ...) NOT-FOR-US: sixapart movabletype CVE-2010-4510 REJECTED - TODO: check + NOT-FOR-US: this CVE-2010-4511 (Unspecified vulnerability in Movable Type 4.x before 4.35 and 5.x ...) NOT-FOR-US: sixapart movabletype CVE-2010-4512 (Cobbler before 2.0.4 uses an incorrect umask value, which allows local ...) @@ -94840,17 +94841,17 @@ CVE-2010-4517 (SQL injection vulnerability in the JExtensions JE Auto (com_jeaut CVE-2010-4518 (Cross-site scripting (XSS) vulnerability in ...) NOT-FOR-US: wobeo wp safe search CVE-2010-4519 (Multiple cross-site request forgery (CSRF) vulnerabilities in the ...) - TODO: check + NOT-FOR-US: earl_miles views CVE-2010-4520 (Multiple cross-site scripting (XSS) vulnerabilities in the Views ...) - TODO: check + NOT-FOR-US: earl_miles views CVE-2010-4521 (Cross-site scripting (XSS) vulnerability in the Views module 6.x ...) - TODO: check + NOT-FOR-US: earl_miles views CVE-2010-4522 (Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka ...) - TODO: check + NOT-FOR-US: mybb CVE-2010-4523 (Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 ...) - TODO: check + BUG: 349567 CVE-2010-4524 (Cross-site scripting (XSS) vulnerability in lib/mhtxthtml.pl in ...) - TODO: check + BUG: 349563 CVE-2010-4525 (Linux kernel 2.6.33 and 2.6.34.y does not initialize the ...) TODO: check CVE-2010-4526 (Race condition in the sctp_icmp_proto_unreachable function in ...) @@ -94862,9 +94863,9 @@ CVE-2010-4528 (directconn.c in the MSN protocol plugin in libpurple 2.7.6 throug CVE-2010-4529 (Integer underflow in the irda_getsockopt function in ...) TODO: check CVE-2010-4530 (Signedness error in ccid_serial.c in libccid in the USB Chip/Smart ...) - TODO: check + BUG: 349559 CVE-2010-4531 (Stack-based buffer overflow in the ATRDecodeAtr function in the ...) - TODO: check + BUG: 349561 CVE-2010-4532 RESERVED CVE-2010-4533 @@ -94876,7 +94877,7 @@ CVE-2010-4535 (The password reset functionality in django.contrib.auth in Django CVE-2010-4536 (Multiple cross-site scripting (XSS) vulnerabilities in KSES, as used ...) TODO: check CVE-2010-4537 (Unspecified vulnerability in CrawlTrack before 3.2.7, when a public ...) - TODO: check + NOT-FOR-US: crawltrack CVE-2010-4538 (Buffer overflow in the sect_enttec_dmx_da function in ...) TODO: check CVE-2010-4539 (The walk function in repos.c in the mod_dav_svn module for the Apache ...) @@ -94890,35 +94891,35 @@ CVE-2010-4542 (Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb . CVE-2010-4543 (Heap-based buffer overflow in the read_channel_data function in ...) TODO: check CVE-2010-4544 (Cross-site scripting (XSS) vulnerability in the servlet in IBM Lotus ...) - TODO: check + NOT-FOR-US: ibm lotus_notes_traveler CVE-2010-4545 (IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated ...) - TODO: check + NOT-FOR-US: ibm lotus_notes_traveler CVE-2010-4546 (IBM Lotus Notes Traveler before 8.5.1.2 does not reject an attachment ...) - TODO: check + NOT-FOR-US: ibm lotus_notes_traveler CVE-2010-4547 (IBM Lotus Notes Traveler before 8.5.1.3, when a multidomain ...) - TODO: check + NOT-FOR-US: ibm lotus_notes_traveler CVE-2010-4548 (IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated ...) - TODO: check + NOT-FOR-US: ibm lotus_notes_traveler CVE-2010-4549 (IBM Lotus Notes Traveler before 8.5.1.3 on the Nokia s60 device ...) - TODO: check + NOT-FOR-US: ibm lotus_notes_traveler CVE-2010-4550 (IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to ...) - TODO: check + NOT-FOR-US: ibm lotus_notes_traveler CVE-2010-4551 (IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated ...) - TODO: check + NOT-FOR-US: ibm lotus_notes_traveler CVE-2010-4552 (Memory leak in IBM Lotus Notes Traveler before 8.5.1.1 allows remote ...) - TODO: check + NOT-FOR-US: ibm lotus_notes_traveler CVE-2010-4553 (An unspecified Domino API in IBM Lotus Notes Traveler before 8.5.1.1 ...) - TODO: check + NOT-FOR-US: ibm lotus_notes_traveler CVE-2010-4554 RESERVED CVE-2010-4555 RESERVED CVE-2010-4556 (Stack-based buffer overflow in the SapThemeRepository ActiveX control ...) - TODO: check + NOT-FOR-US: sap netweaver_business_client CVE-2010-4557 (Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch ...) - TODO: check + NOT-FOR-US: invensys wonderware_inbatch CVE-2010-4558 (phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and ...) - TODO: check + NOT-FOR-US: phpmyfaq CVE-2010-4559 RESERVED CVE-2010-4560 @@ -94934,7 +94935,7 @@ CVE-2010-4564 CVE-2010-4565 (The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) ...) TODO: check CVE-2010-4566 (Unspecified vulnerability in the NT4 authentication component in ...) - TODO: check + NOT-FOR-US: citrix access_gateway CVE-2010-4567 RESERVED CVE-2010-4568 @@ -94948,7 +94949,7 @@ CVE-2010-4571 CVE-2010-4572 RESERVED CVE-2010-4573 (The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is ...) - TODO: check + NOT-FOR-US: vmware esxi CVE-2010-4574 (The Pickle::Pickle function in base/pickle.cc in Google Chrome before ...) TODO: check CVE-2010-4575 (The ThemeInstalledInfoBarDelegate::Observe function in ...) @@ -94978,115 +94979,115 @@ CVE-2010-4586 (The default configuration of Opera before 11.00 enables WebSocket CVE-2010-4587 (Opera before 11.00 on Windows does not properly implement the Insecure ...) TODO: check CVE-2010-4588 (The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI ...) - TODO: check + NOT-FOR-US: microsoft wmi_administrative_tools CVE-2010-4589 (Cross-site scripting (XSS) vulnerability in IBM ENOVIA 6 allows remote ...) - TODO: check + NOT-FOR-US: ibm enovia CVE-2010-4590 (Cross-site scripting (XSS) vulnerability in HTTP Access Services ...) - TODO: check + NOT-FOR-US: ibm lotus_mobile_connect CVE-2010-4591 (The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, ...) - TODO: check + NOT-FOR-US: ibm lotus_mobile_connect CVE-2010-4592 (The Mobile Network Connections functionality in the Connection Manager ...) - TODO: check + NOT-FOR-US: ibm lotus_mobile_connect CVE-2010-4593 (The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does ...) - TODO: check + NOT-FOR-US: ibm lotus_mobile_connect CVE-2010-4594 (The Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when ...) - TODO: check + NOT-FOR-US: ibm lotus_mobile_connect CVE-2010-4595 (The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 ...) - TODO: check + NOT-FOR-US: ibm lotus_mobile_connect CVE-2010-4596 RESERVED CVE-2010-4597 (Stack-based buffer overflow in the save method in the ...) - TODO: check + NOT-FOR-US: ecava integraxor CVE-2010-4598 (Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and ...) - TODO: check + NOT-FOR-US: ecava integraxor CVE-2010-4599 (Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 ...) - TODO: check + NOT-FOR-US: ecava integraxor CVE-2010-4600 (Dojo Toolkit, as used in the Web client in IBM Rational ClearQuest ...) - TODO: check + NOT-FOR-US: ibm rational_clearquest CVE-2010-4601 (Multiple unspecified vulnerabilities in IBM Rational ClearQuest 7.0.x ...) - TODO: check + NOT-FOR-US: ibm rational_clearquest CVE-2010-4602 (The Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and ...) - TODO: check + NOT-FOR-US: ibm rational_clearquest CVE-2010-4603 (IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, ...) - TODO: check + NOT-FOR-US: ibm rational_clearquest CVE-2010-4604 (Stack-based buffer overflow in the GeneratePassword function in dsmtca ...) - TODO: check + NOT-FOR-US: ibm tivoli_storage_manager CVE-2010-4605 (Unspecified vulnerability in the backup-archive client in IBM Tivoli ...) - TODO: check + NOT-FOR-US: ibm tivoli_storage_manager CVE-2010-4606 (Unspecified vulnerability in the Space Management client in the ...) - TODO: check + NOT-FOR-US: ibm tivoli_storage_manager CVE-2010-4607 (Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, ...) - TODO: check + NOT-FOR-US: habariproject habari CVE-2010-4608 (Habari 0.6.5 allows remote attackers to obtain sensitive information ...) - TODO: check + NOT-FOR-US: habariproject habari CVE-2010-4609 (SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows ...) - TODO: check + NOT-FOR-US: html edit_cms CVE-2010-4610 (Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS ...) - TODO: check + NOT-FOR-US: html edit_cms CVE-2010-4611 (Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive ...) - TODO: check + NOT-FOR-US: html edit_cms CVE-2010-4612 (Multiple SQL injection vulnerabilities in index.php in Hycus CMS ...) - TODO: check + NOT-FOR-US: hycus_cms CVE-2010-4613 (Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow ...) - TODO: check + NOT-FOR-US: hycus_cms CVE-2010-4614 (SQL injection vulnerability in item.php in Ero Auktion 2010 allows ...) - TODO: check + NOT-FOR-US: mhproducts ero_auktion CVE-2010-4615 (Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow ...) - TODO: check + NOT-FOR-US: iskenderaltuntas oto_galeri_sistemi CVE-2010-4616 (Cross-site scripting (XSS) vulnerability in ...) - TODO: check + NOT-FOR-US: impresscms CVE-2010-4617 (Directory traversal vulnerability in the JotLoader (com_jotloader) ...) - TODO: check + NOT-FOR-US: kanich com_jotloader CVE-2010-4618 (Cross-site scripting (XSS) vulnerability in the Algis Info ...) - TODO: check + NOT-FOR-US: algisinfo aicontactsafe CVE-2010-4619 (SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka ...) - TODO: check + NOT-FOR-US: webscripti mafya_oyun_scrpti CVE-2010-4620 RESERVED CVE-2010-4621 RESERVED CVE-2010-4622 (Directory traversal vulnerability in WebSEAL in IBM Tivoli Access ...) - TODO: check + NOT-FOR-US: ibm tivoli_access_manager_for_e business CVE-2010-4623 (WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before ...) - TODO: check + NOT-FOR-US: ibm tivoli_access_manager_for_e business CVE-2010-4624 (MyBB (aka MyBulletinBoard) before 1.4.12 allows remote authenticated ...) - TODO: check + NOT-FOR-US: mybb CVE-2010-4625 (MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a ...) - TODO: check + NOT-FOR-US: mybb CVE-2010-4626 (The my_rand function in functions.php in MyBB (aka MyBulletinBoard) ...) - TODO: check + NOT-FOR-US: mybb CVE-2010-4627 (Cross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB ...) - TODO: check + NOT-FOR-US: mybb CVE-2010-4628 (member.php in MyBB (aka MyBulletinBoard) before 1.4.12 makes a certain ...) - TODO: check + NOT-FOR-US: mybb CVE-2010-4629 (MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict ...) - TODO: check + NOT-FOR-US: mybb CVE-2010-4630 (Cross-site scripting (XSS) vulnerability in ...) - TODO: check + NOT-FOR-US: fubra wp survey and quiz tool CVE-2010-4631 (Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot ...) - TODO: check + NOT-FOR-US: pilotcart pilot_cart CVE-2010-4632 (Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow ...) - TODO: check + NOT-FOR-US: pilotcart pilot_cart CVE-2010-4633 (SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows ...) - TODO: check + NOT-FOR-US: sumeffect digishop CVE-2010-4634 (** DISPUTED ** ...) - TODO: check + NOT-FOR-US: osticket CVE-2010-4635 (SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental ...) - TODO: check + NOT-FOR-US: site2nite vacation_rental_listings CVE-2010-4636 (SQL injection vulnerability in detail.asp in Site2Nite Business ...) - TODO: check + NOT-FOR-US: site2nite business_e listings CVE-2010-4637 (Cross-site scripting (XSS) vulnerability in feedlist/handler_image.php ...) - TODO: check + NOT-FOR-US: finalcut feedlist CVE-2010-4638 (SQL injection vulnerability in the submitSurvey function in ...) - TODO: check + NOT-FOR-US: iptechinside com_jquarks4s CVE-2010-4639 (SQL injection vulnerability in index.php in MySource Matrix allows ...) - TODO: check + NOT-FOR-US: intendance mysource_matrix CVE-2010-4640 (Multiple cross-site scripting (XSS) vulnerabilities in XWiki Watch 1.0 ...) - TODO: check + NOT-FOR-US: xwiki_watch CVE-2010-4641 (SQL injection vulnerability in XWiki Enterprise before 2.5 allows ...) - TODO: check + NOT-FOR-US: xwiki CVE-2010-4642 (Cross-site scripting (XSS) vulnerability in XWiki Enterprise before ...) - TODO: check + NOT-FOR-US: xwiki CVE-2010-4643 RESERVED CVE-2010-4644 (Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 ...) @@ -95094,7 +95095,7 @@ CVE-2010-4644 (Multiple memory leaks in rev_hunt.c in Apache Subversion before 1 CVE-2010-4645 (strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 ...) TODO: check CVE-2010-4646 (Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 ...) - TODO: check + NOT-FOR-US: hastymail2 CVE-2010-4647 (Multiple cross-site scripting (XSS) vulnerabilities in the Help ...) TODO: check CVE-2010-4648 @@ -95140,59 +95141,59 @@ CVE-2010-4667 CVE-2010-4668 (The blk_rq_map_user_iov function in block/blk-map.c in the Linux ...) TODO: check CVE-2010-4669 (The Neighbor Discovery (ND) protocol implementation in the IPv6 stack ...) - TODO: check + NOT-FOR-US: microsoft windows_xp CVE-2010-4670 (The Neighbor Discovery (ND) protocol implementation in the IPv6 stack ...) - TODO: check + NOT-FOR-US: cisco pix_security_appliance CVE-2010-4671 (The Neighbor Discovery (ND) protocol implementation in the IPv6 stack ...) - TODO: check + NOT-FOR-US: cisco ios CVE-2010-4672 (Cisco Adaptive Security Appliances (ASA) 5500 series devices with ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4673 (Cisco Adaptive Security Appliances (ASA) 5500 series devices with ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4674 (Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4675 (Cisco Adaptive Security Appliances (ASA) 5500 series devices with ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4676 (Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4677 (emWEB on Cisco Adaptive Security Appliances (ASA) 5500 series devices ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4678 (Cisco Adaptive Security Appliances (ASA) 5500 series devices with ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4679 (Cisco Adaptive Security Appliances (ASA) 5500 series devices with ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4680 (The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4681 (Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4682 (Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4683 (Memory leak in Cisco IOS before 15.0(1)XA5 might allow remote ...) - TODO: check + NOT-FOR-US: cisco ios CVE-2010-4684 (Cisco IOS before 15.0(1)XA1, when certain TFTP debugging is enabled, ...) - TODO: check + NOT-FOR-US: cisco ios CVE-2010-4685 (Cisco IOS before 15.0(1)XA1 does not clear the public key cache upon a ...) - TODO: check + NOT-FOR-US: cisco ios CVE-2010-4686 (CallManager Express (CME) on Cisco IOS before 15.0(1)XA1 does not ...) - TODO: check + NOT-FOR-US: cisco ios CVE-2010-4687 (STCAPP (aka the SCCP telephony control application) on Cisco IOS ...) - TODO: check + NOT-FOR-US: cisco ios CVE-2010-4688 (Unspecified vulnerability in the SIP inspection feature on Cisco ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4689 (Cisco Adaptive Security Appliances (ASA) 5500 series devices with ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4690 (The Mobile User Security (MUS) service on Cisco Adaptive Security ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4691 (Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4692 (Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) ...) - TODO: check + NOT-FOR-US: cisco asa_5500 CVE-2010-4693 (Multiple cross-site scripting (XSS) vulnerabilities in Coppermine ...) - TODO: check + NOT-FOR-US: coppermine gallery coppermine_photo_gallery CVE-2010-4694 (Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow ...) - TODO: check + BUG: 351698 CVE-2010-4695 (A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as ...) - TODO: check + BUG: 351698 CVE-2010-4696 (Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 ...) TODO: check CVE-2010-4697 (Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 ...) @@ -95204,11 +95205,11 @@ CVE-2010-4699 (The iconv_mime_decode_headers function in the Iconv extension in CVE-2010-4700 (The set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3, when the ...) TODO: check CVE-2010-4701 (Heap-based buffer overflow in the CDrawPoly::Serialize function in ...) - TODO: check + NOT-FOR-US: Microsoft Windows Fax Services Cover Page Editor CVE-2010-4702 (SQL injection vulnerability in JRadio (com_jradio) component before ...) - TODO: check + NOT-FOR-US: JRadio com_jradio component CVE-2010-4703 (SQL injection vulnerability in default.asp in HotWebScripts HotWeb ...) - TODO: check + NOT-FOR-US: HotWebScripts CVE-2011-0001 RESERVED CVE-2011-0002 |