Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1908?


Explain the CVE ID: What does the identifier CVE-2010-1909 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1909.

Buffer overflow in the RunCmd method in the SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to execute arbitrary code via vectors involving "CreateProcess params." NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-1909?

{'name': '39751', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39751'}, {'name': 'VU#602801', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/602801'}, {'tags': ['x_refsource_MISC'], 'url': 'http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.wintercore.com/downloads/rootedcon_0day.pdf'}, {'name': '20100507 [Wintercore Research] Consona Products - Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511176/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1909?


Explain the CVE ID: What does the identifier CVE-2010-1910 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1910.

The Forgot Password implementation in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to reset passwords of accounts with blank Hint questions and Hint answers by sending an empty value for each of these two Hint fields.


Provide references for further information: Can you share references or external links related to CVE-2010-1910?

{'name': 'VU#602801', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/602801'}, {'tags': ['x_refsource_MISC'], 'url': 'http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html'}, {'name': '20100507 [Wintercore Research] Consona Products - Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511176/100/0/threaded'}, {'name': '40003', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40003'}, {'name': '39740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39740'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1910?


Explain the CVE ID: What does the identifier CVE-2010-1911 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1911.

The site-locking implementation in the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance relies on a list of server domain names to restrict execution of ActiveX controls, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a DNS hijacking attack.


Provide references for further information: Can you share references or external links related to CVE-2010-1911?

{'name': 'VU#602801', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/602801'}, {'tags': ['x_refsource_MISC'], 'url': 'http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.wintercore.com/downloads/rootedcon_0day.pdf'}, {'name': 'consona-sdcwebsecurebase-code-exec(58608)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58608'}, {'name': '20100507 [Wintercore Research] Consona Products - Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511176/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1911?


Explain the CVE ID: What does the identifier CVE-2010-1912 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1912.

The SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to bypass intended restrictions on ActiveX execution via "instantiation/free attacks."


Provide references for further information: Can you share references or external links related to CVE-2010-1912?

{'name': 'VU#602801', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/602801'}, {'tags': ['x_refsource_MISC'], 'url': 'http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.wintercore.com/downloads/rootedcon_0day.pdf'}, {'name': '20100507 [Wintercore Research] Consona Products - Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511176/100/0/threaded'}, {'name': 'consona-sdcwebsecurebase-sec-bypass(58607)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58607'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1912?


Explain the CVE ID: What does the identifier CVE-2010-1913 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1913.

The default configuration of pluginlicense.ini for the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance, when downloaded from a server operated by Telefonica or possibly other companies, contains an incorrect DNS whitelist that includes the DNS hostnames of home computers of many persons, which allows remote attackers to bypass intended restrictions on ActiveX execution by hosting an ActiveX control on an applicable home web server.


Provide references for further information: Can you share references or external links related to CVE-2010-1913?

{'name': 'VU#602801', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/602801'}, {'tags': ['x_refsource_MISC'], 'url': 'http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.wintercore.com/downloads/rootedcon_0day.pdf'}, {'name': '20100507 [Wintercore Research] Consona Products - Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511176/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1913?


Explain the CVE ID: What does the identifier CVE-2010-1914 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1914.

The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the (1) ZEND_BW_XOR opcode (shift_left_function), (2) ZEND_SL opcode (bitwise_xor_function), or (3) ZEND_SR opcode (shift_right_function), related to the convert_to_long_base function.


Provide references for further information: Can you share references or external links related to CVE-2010-1914?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.php-security.org/2010/05/08/mops-2010-016-php-zend_sr-opcode-interruption-address-information-leak-vulnerability/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.php-security.org/2010/05/08/mops-2010-014-php-zend_bw_xor-opcode-interruption-address-information-leak-vulnerability/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.php-security.org/2010/05/08/mops-2010-015-php-zend_sl-opcode-interruption-address-information-leak-vulnerability/index.html'}, {'name': 'php-zendengine-info-disclosure(58587)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58587'}, {'name': 'SUSE-SR:2010:017', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html'}, {'name': 'SUSE-SR:2010:018', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1914?


Explain the CVE ID: What does the identifier CVE-2010-1915 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1915.

The preg_quote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature, modification of ZVALs whose values are not updated in the associated local variables, and access of previously-freed memory.


Provide references for further information: Can you share references or external links related to CVE-2010-1915?

{'name': 'php-pregquote-information-disclosure(58586)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58586'}, {'name': 'SUSE-SR:2010:017', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.php-security.org/2010/05/09/mops-2010-017-php-preg_quote-interruption-information-leak-vulnerability/index.html'}, {'name': 'SUSE-SR:2010:018', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1915?


Explain the CVE ID: What does the identifier CVE-2010-1916 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1916.

The dynamic configuration feature in Xinha WYSIWYG editor 0.96 Beta 2 and earlier, as used in Serendipity 1.5.2 and earlier, allows remote attackers to bypass intended access restrictions and modify the configuration of arbitrary plugins via (1) crafted backend_config_secret_key_location and backend_config_hash parameters that are used in a SHA1 hash of a shared secret that can be known or externally influenced, which are not properly handled by the "Deprecated config passing" feature; or (2) crafted backend_data and backend_data[key_location] variables, which are not properly handled by the xinha_read_passed_data function.  NOTE: this can be leveraged to upload and possibly execute arbitrary files via config.inc.php in the ImageManager plugin.


Provide references for further information: Can you share references or external links related to CVE-2010-1916?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=591701'}, {'name': 'ADV-2010-1401', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1401'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.php-security.org/2010/05/10/mops-2010-020-xinha-wysiwyg-plugin-configuration-injection-vulnerability/index.html'}, {'name': '40124', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40124'}, {'name': '39782', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39782'}, {'name': '40033', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40033'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.xinha.org/ticket/1518'}, {'name': 'FEDORA-2010-9320', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042577.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.php-security.org/2010/05/10/mops-2010-019-serendipity-wysiwyg-editor-plugin-configuration-injection-vulnerability/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1916?


Explain the CVE ID: What does the identifier CVE-2010-1917 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1917.

Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service (PHP crash) via a crafted first argument to the fnmatch function, as demonstrated using a long string.


Provide references for further information: Can you share references or external links related to CVE-2010-1917?

{'name': '40860', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40860'}, {'name': 'HPSBMA02662', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130331363227777&w=2'}, {'name': 'DSA-2089', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2010/dsa-2089'}, {'name': 'RHSA-2010:0919', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0919.html'}, {'name': '42410', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42410'}, {'name': 'SUSE-SR:2010:017', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html'}, {'name': 'SSRT100409', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130331363227777&w=2'}, {'name': 'php-fnmatchfunction-dos(58585)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58585'}, {'name': 'SUSE-SR:2010:018', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.php-security.org/2010/05/11/mops-2010-021-php-fnmatch-stack-exhaustion-vulnerability/index.html'}, {'name': 'ADV-2010-3081', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/3081'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1917?


Explain the CVE ID: What does the identifier CVE-2010-1918 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1918.

SQL injection vulnerability in ask_chat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the chatrooms_ID parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-1918?

{'name': '39728', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39728'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1005-exploits/MOPS-2010-018.pdf'}, {'name': '40032', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40032'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.php-security.org/2010/05/09/mops-2010-018-efront-ask_chat-chatrooms_id-sql-injection-vulnerability/index.html'}, {'name': '64506', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/64506'}, {'name': 'ADV-2010-1101', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1101'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1918?


Explain the CVE ID: What does the identifier CVE-2010-1919 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1919.

Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 allows remote attackers to cause a denial of service (gsan service hang) by sending a crafted message using TCP.


Provide references for further information: Can you share references or external links related to CVE-2010-1919?

{'name': '39919', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39919'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.packetstormsecurity.org/1005-advisories/ESA-2010-007.txt'}, {'name': '1024036', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024036'}, {'name': 'ADV-2010-1253', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1253'}, {'name': '40390', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40390'}, {'name': '20100526 ESA-2010-007: EMC Avamar Denial Of Service Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2010-05/0254.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1919?


Explain the CVE ID: What does the identifier CVE-2010-1920 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1920.

Directory traversal vulnerability in scr/soustab.php in OpenMairie openAnnuaire 2.00, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.


Provide references for further information: Can you share references or external links related to CVE-2010-1920?

{'name': '39673', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39673'}, {'name': 'ADV-2010-1059', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1059'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1005-exploits/openmairie-rfilfi.txt'}, {'name': '12486', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12486'}, {'name': '39887', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39887'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1920?


Explain the CVE ID: What does the identifier CVE-2010-1921 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1921.

Multiple PHP remote file inclusion vulnerabilities in OpenMairie openAnnuaire 2.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) annuaire.class.php, (2) droit.class.php, (3) collectivite.class.php, (4) profil.class.php, (5) direction.class.php, (6) service.class.php, (7) directiongenerale.class.php, and (8) utilisateur.class.php in obj/.


Provide references for further information: Can you share references or external links related to CVE-2010-1921?

{'name': '64180', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64180'}, {'name': '64179', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64179'}, {'name': '64181', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64181'}, {'name': '39673', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39673'}, {'name': 'ADV-2010-1059', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1059'}, {'name': '64184', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64184'}, {'name': '64176', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64176'}, {'name': '64178', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64178'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1005-exploits/openmairie-rfilfi.txt'}, {'name': '12486', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12486'}, {'name': '39887', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39887'}, {'name': '64182', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64182'}, {'name': '64177', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64177'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1921?


Explain the CVE ID: What does the identifier CVE-2010-1922 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1922.

Multiple PHP remote file inclusion vulnerabilities in 29o3 CMS 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the LibDir parameter to (1) lib/page/pageDescriptionObject.php, and (2) layoutHeaderFuncs.php, (3) layoutManager.php, and (4) layoutParser.php in lib/layout/.


Provide references for further information: Can you share references or external links related to CVE-2010-1922?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1005-exploits/29o3cms-rfi.txt'}, {'name': 'ADV-2010-1120', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1120'}, {'name': '40049', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40049'}, {'name': '20100511 29o3 CMS (LibDir) Multiple Remote File Inclusion Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511222/100/0/threaded'}, {'name': '12558', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12558'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1922?


Explain the CVE ID: What does the identifier CVE-2010-1923 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1923.

SQL injection vulnerability in user.php in Hi Web Wiesbaden Web 2.0 Social Network Freunde Community System allows remote attackers to execute arbitrary SQL commands via the id parameter in a showgallery action.


Provide references for further information: Can you share references or external links related to CVE-2010-1923?

{'name': 'socialnetworking-user-sql-injection(58583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58583'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1005-exploits/web20snfcs-sql.txt'}, {'name': '39761', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39761'}, {'name': '64513', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/64513'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1923?


Explain the CVE ID: What does the identifier CVE-2010-1924 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1924.

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-1924?

{'name': '39718', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39718'}, {'name': 'liveshopping-index-sql-injection(58392)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58392'}, {'name': '12545', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12545'}, {'name': '40040', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40040'}, {'name': '64512', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/64512'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1924?


Explain the CVE ID: What does the identifier CVE-2010-1925 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1925.

SQL injection vulnerability in makale.php in tekno.Portal 0.1b allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-2817.


Provide references for further information: Can you share references or external links related to CVE-2010-1925?

{'name': '20464', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20464'}, {'name': 'ADV-2010-1117', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1117'}, {'name': '40030', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40030'}, {'name': '12552', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12552'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1005-exploits/teknoportal-sql.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1925?


Explain the CVE ID: What does the identifier CVE-2010-1926 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1926.

Directory traversal vulnerability in scr/soustab.php in openMairie openCourrier 2.02 and 2.03 beta, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-1926?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/opencourrier-rfilfi.txt'}, {'name': '12398', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12398'}, {'name': '64201', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64201'}, {'name': 'ADV-2010-1003', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1003'}, {'name': '39624', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39624'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1926?


Explain the CVE ID: What does the identifier CVE-2010-1927 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1927.

Multiple PHP remote file inclusion vulnerabilities in openMairie openCourrier 2.02 and 2.03 beta, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) bible.class.php, (2) dossier.class.php, (3) service.class.php, (4) collectivite.class.php, (5) droit.class.php, (6) tache.class.php, (7) emetteur.class.php, (8) utilisateur.class.php, (9) courrier.recherche.tab.class.php, and (10) profil.class.php in obj/.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-1927?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/opencourrier-rfilfi.txt'}, {'name': '64207', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64207'}, {'name': '12398', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12398'}, {'name': 'ADV-2010-1003', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1003'}, {'name': '64206', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64206'}, {'name': '64204', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64204'}, {'name': '64205', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64205'}, {'name': '64208', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64208'}, {'name': '64202', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64202'}, {'name': '64210', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64210'}, {'name': '64203', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64203'}, {'name': '39624', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39624'}, {'name': '64209', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64209'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1927?


Explain the CVE ID: What does the identifier CVE-2010-1928 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1928.

Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.


Provide references for further information: Can you share references or external links related to CVE-2010-1928?

{'name': '64185', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64185'}, {'name': 'openpresse-soustab-file-include(58090)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58090'}, {'name': '39606', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39606'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/openplanning-rfilfi.txt'}, {'name': '12365', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12365'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1928?


Explain the CVE ID: What does the identifier CVE-2010-1929 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1929.

Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allow remote authenticated users to execute arbitrary code via the (1) EnteredClassID or (2) NewClassName parameter to nps/servlet/webacc.


Provide references for further information: Can you share references or external links related to CVE-2010-1929?

{'name': '40480', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40480'}, {'name': 'ADV-2010-1575', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1575'}, {'name': 'imanager-class-bo(59694)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/59694'}, {'name': '1024152', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024152'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities'}, {'name': '14010', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/14010'}, {'name': '40281', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40281'}, {'name': '65737', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/65737'}, {'name': '20100623 CORE-2010-0316 - Novell iManager Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511983/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1929?


Explain the CVE ID: What does the identifier CVE-2010-1930 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1930.

Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (daemon crash) via a long tree parameter in a login request to nps/servlet/webacc.


Provide references for further information: Can you share references or external links related to CVE-2010-1930?

{'name': '40485', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40485'}, {'name': 'ADV-2010-1575', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1575'}, {'name': '1024152', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024152'}, {'name': '65738', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/65738'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities'}, {'name': 'imanager-tree-dos(59695)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/59695'}, {'name': '14010', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/14010'}, {'name': '40281', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40281'}, {'name': '20100623 CORE-2010-0316 - Novell iManager Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511983/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1930?


Explain the CVE ID: What does the identifier CVE-2010-1931 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1931.

SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbitrary SQL commands via the shipKey parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2010-1931?

{'name': '40102', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40102'}, {'name': '20100608 [CORE-2010-0415] SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511735/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forums.cubecart.com/index.php?showtopic=41469'}, {'name': '40641', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40641'}, {'name': 'cubecart-shipkey-sql-injection(59245)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/59245'}, {'name': '65250', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/65250'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/content/cubecart-php-shopping-cart-sql-injection'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1931?


Explain the CVE ID: What does the identifier CVE-2010-1932 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1932.

Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap (MBM) file with a Paint Data Section that contains a malformed Encoding field.


Provide references for further information: Can you share references or external links related to CVE-2010-1932?

{'name': 'xnview-mbm-bo(59421)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/59421'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/content/XnView-MBM-Processing-Heap-Overflow'}, {'name': 'ADV-2010-1468', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1468'}, {'name': '40141', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40141'}, {'name': '40852', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40852'}, {'name': '1024100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1024100'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1932?


Explain the CVE ID: What does the identifier CVE-2010-1934 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1934.

Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) categorie.class.php, (2) profil.class.php, (3) collectivite.class.php, (4) ressource.class.php, (5) droit.class.php, (6) utilisateur.class.php, and (7) planning.class.php in obj/.


Provide references for further information: Can you share references or external links related to CVE-2010-1934?

{'name': '64191', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64191'}, {'name': '64187', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64187'}, {'name': '64186', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64186'}, {'name': '39606', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39606'}, {'name': '64188', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64188'}, {'name': '64192', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64192'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/openplanning-rfilfi.txt'}, {'name': '12365', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12365'}, {'name': '64189', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64189'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1934?


Explain the CVE ID: What does the identifier CVE-2010-1935 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1935.

Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.


Provide references for further information: Can you share references or external links related to CVE-2010-1935?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/openpresse-lfi.txt'}, {'name': '64194', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64194'}, {'name': 'openpresse-soustab-file-include(58090)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58090'}, {'name': '39605', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39605'}, {'name': '12364', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12364'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1935?


Explain the CVE ID: What does the identifier CVE-2010-1936 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1936.

Directory traversal vulnerability in scr/soustab.php in openMairie openComInterne 1.01, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.


Provide references for further information: Can you share references or external links related to CVE-2010-1936?

{'name': '64211', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64211'}, {'name': 'opencominterne-soustab-file-include(58129)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58129'}, {'name': '39623', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39623'}, {'name': '12396', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12396'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/opencominterne-lfi.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1936?


Explain the CVE ID: What does the identifier CVE-2010-1937 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1937.

Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow remote attackers to execute arbitrary code via a Content-Length HTTP header that specifies a value too small for the amount of POST data, aka bug #3001896.


Provide references for further information: Can you share references or external links related to CVE-2010-1937?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sblim.cvs.sourceforge.net/viewvc/sblim/sfcb/httpAdapter.c?r1=1.84&r2=1.85'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/tracker/index.php?func=detail&aid=3001896&group_id=128809&atid=712784'}, {'name': '40018', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40018'}, {'name': 'ADV-2010-1312', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1312'}, {'name': '[oss-security] 20100601 SFCB vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=bugtraq&m=127549079109192&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1937?


Explain the CVE ID: What does the identifier CVE-2010-1938 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1938.

Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd.


Provide references for further information: Can you share references or external links related to CVE-2010-1938?

{'tags': ['x_refsource_MISC'], 'url': 'http://blog.pi3.com.pl/?p=111'}, {'name': '7450', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/7450'}, {'name': '40403', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40403'}, {'tags': ['x_refsource_MISC'], 'url': 'http://site.pi3.com.pl/adv/libopie-adv.txt'}, {'name': '1024040', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024040'}, {'name': 'DSA-2281', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2281'}, {'name': 'FreeBSD-SA-10:05', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://security.FreeBSD.org/advisories/FreeBSD-SA-10:05.opie.asc'}, {'name': '39966', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39966'}, {'name': '12762', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12762'}, {'name': '20100527 libopie __readrec() off-by one (FreeBSD ftpd remote PoC)', 'tags': ['third-party-advisory', 'x_refsource_SREASONRES'], 'url': 'http://securityreason.com/achievement_securityalert/87'}, {'name': '1025709', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025709'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584932'}, {'name': '39963', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39963'}, {'name': '45136', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45136'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1938?


Explain the CVE ID: What does the identifier CVE-2010-1939 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1939.

Use-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote attackers to execute arbitrary code by using window.open to create a popup window for a crafted HTML document, and then calling the parent window's close method, which triggers improper handling of a deleted window object.


Provide references for further information: Can you share references or external links related to CVE-2010-1939?

{'name': '39670', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39670'}, {'name': 'oval:org.mitre.oval:def:6748', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6748'}, {'tags': ['x_refsource_MISC'], 'url': 'http://reviews.cnet.com/8301-13727_7-20004709-263.html'}, {'name': 'ADV-2010-1097', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1097'}, {'name': '39990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39990'}, {'tags': ['x_refsource_MISC'], 'url': 'http://h07.w.interia.pl/Safari.rar'}, {'name': '64482', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64482'}, {'name': '1023958', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023958'}, {'name': 'VU#943165', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/943165'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1939?


Explain the CVE ID: What does the identifier CVE-2010-1940 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1940.

Apple Safari 4.0.5 on Windows sends the "Authorization: Basic" header appropriate for one web site to a different web site named in a Location header received from the first site, which allows remote web servers to obtain sensitive information by logging HTTP requests. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-1940?

{'name': '39670', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39670'}, {'name': 'safari-http-request-information-disclosure(58620)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58620'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1940?


Explain the CVE ID: What does the identifier CVE-2010-1941 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1941.

Unspecified vulnerability in NEC WebSAM DeploymentManager 5.13 and earlier, as used in SigmaSystemCenter 2.1 Update2 and earlier, BladeSystemCenter, ExpressSystemCenter, and VirtualPCCenter 2.2 and earlier, allows remote attackers to cause a denial of service (OS shutdown or restart) via unknown vectors related to Client Service for DPM and crafted packets to port 56010.


Provide references for further information: Can you share references or external links related to CVE-2010-1941?

{'name': 'JVN#90872372', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN90872372/index.html'}, {'name': '39802', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39802'}, {'name': '64700', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/64700'}, {'name': 'JVNDB-2010-000019', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000019.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.nec.co.jp/security-info/secinfo/nv10-004.html'}, {'name': '40196', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40196'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1941?


Explain the CVE ID: What does the identifier CVE-2010-1942 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1942.

Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage Business Application Server, and Interstage List Manager, allows attackers to obtain sensitive information or force invalid requests to be processed via unknown vectors related to unspecified invalid requests and settings on the load balancing device.


Provide references for further information: Can you share references or external links related to CVE-2010-1942?

{'name': 'JVNDB-2010-000018', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000018.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://software.fujitsu.com/jp/security/vulnerabilities/jvn-90248889.html'}, {'name': '64703', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/64703'}, {'name': 'interstage-servlet-information-disclosure(58634)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58634'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.fujitsu.com/global/support/software/security/products-f/interstage-201001e.html'}, {'name': '40189', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40189'}, {'name': 'ADV-2010-1165', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1165'}, {'name': '39803', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39803'}, {'name': 'JVN#90248889', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN90248889/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1942?


Explain the CVE ID: What does the identifier CVE-2010-1943 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1943.

Unspecified vulnerability in NEC CapsSuite Small Edition PatchMeister 2.0 Update2 and earlier allows remote attackers to cause a denial of service (OS shutdown or restart) via vectors related to Client Service for PTM and crafted packets to port 56015.


Provide references for further information: Can you share references or external links related to CVE-2010-1943?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.nec.co.jp/security-info/secinfo/nv10-005.html'}, {'name': '40190', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40190'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ipa.go.jp/about/press/20100517_2.html'}, {'name': 'JVNDB-2010-000020', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000020.html'}, {'name': 'ADV-2010-1166', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1166'}, {'name': '64701', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/64701'}, {'name': '39800', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39800'}, {'name': 'JVN#82749282', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN82749282/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1943?


Explain the CVE ID: What does the identifier CVE-2010-1944 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1944.

Multiple PHP remote file inclusion vulnerabilities in openMairie openCimetiere 2.01, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) autorisation.class.php, (2) courrierautorisation.class.php, (3) droit.class.php, (4) profil.class.php, (5) temp_defunt_sansemplacement.class.php, (6) utils.class.php, (7) cimetiere.class.php, (8) defunt.class.php, (9) emplacement.class.php, (10) tab_emplacement.class.php, (11) temp_emplacement.class.php, (12) voie.class.php, (13) collectivite.class.php, (14) defunttransfert.class.php, (15) entreprise.class.php, (16) temp_autorisation.class.php, (17) travaux.class.php, (18) zone.class.php, (19) courrier.class.php, (20) dossier.class.php, (21) plans.class.php, (22) temp_defunt.class.php, and (23) utilisateur.class.php in obj/.


Provide references for further information: Can you share references or external links related to CVE-2010-1944?

{'name': '64238', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64238'}, {'name': '64231', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64231'}, {'name': '64223', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64223'}, {'name': '64237', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64237'}, {'name': '64228', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64228'}, {'name': '64230', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64230'}, {'name': '64244', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64244'}, {'name': 'opencimetiere-pathom-file-include(58267)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58267'}, {'name': '64239', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64239'}, {'name': '64225', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64225'}, {'name': '12476', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12476'}, {'name': '64227', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64227'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1005-exploits/opencimetiere-rfi.txt'}, {'name': '39883', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39883'}, {'name': '64245', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64245'}, {'name': '64242', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64242'}, {'name': '64234', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64234'}, {'name': '64232', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64232'}, {'name': '39687', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39687'}, {'name': '64229', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64229'}, {'name': '64235', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64235'}, {'name': '64233', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64233'}, {'name': '64241', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64241'}, {'name': '64240', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64240'}, {'name': '64236', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64236'}, {'name': 'ADV-2010-1050', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1050'}, {'name': '64226', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64226'}, {'name': '64243', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64243'}, {'name': '64224', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64224'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1944?


Explain the CVE ID: What does the identifier CVE-2010-1945 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1945.

Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) action.class.php, (2) architecte.class.php, (3) avis.class.php, (4) bible.class.php, and (5) blocnote.class.php in obj/.


Provide references for further information: Can you share references or external links related to CVE-2010-1945?

{'name': '64197', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64197'}, {'name': '12366', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12366'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/openfoncier-rfilfi.txt'}, {'name': '39607', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39607'}, {'name': '64196', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64196'}, {'name': '64200', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64200'}, {'name': '64199', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64199'}, {'name': '64198', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64198'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1945?


Explain the CVE ID: What does the identifier CVE-2010-1946 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1946.

Multiple PHP remote file inclusion vulnerabilities in openMairie Openregistrecil 1.02, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) autorisation_normale.class.php, (2) collectivite.class.php, (3) dossier.class.php, (4) norme_simplifiee.class.php, (5) registre.class.php, (6) autorisation_unique.class.php, (7) demande_avis.class.php, (8) droit.class.php, (9) organisme.class.php, (10) service.class.php, (11) categorie_donnee.class.php, (12) destinataire.class.php, (13) profil.class.php, (14) tabdyn_visu.class.php, (15) categorie_personne.class.php, (16) dispense.class.php, (17) modificatif.class.php, (18) reference.class.php, and (19) utilisateur.class.php in obj/.


Provide references for further information: Can you share references or external links related to CVE-2010-1946?

{'name': '63955', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63955'}, {'name': '63954', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63954'}, {'name': '63959', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63959'}, {'name': '63947', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63947'}, {'name': '63949', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63949'}, {'name': '63953', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63953'}, {'name': '63962', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63962'}, {'name': '63951', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63951'}, {'name': '63961', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63961'}, {'name': '63946', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63946'}, {'name': '63945', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63945'}, {'name': '39534', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39534'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/openregistrecil-rfilfi.txt'}, {'name': '39611', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39611'}, {'name': '63956', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63956'}, {'name': '63950', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63950'}, {'name': '63960', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63960'}, {'name': '63957', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63957'}, {'name': '63952', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63952'}, {'name': '63963', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63963'}, {'name': '63958', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63958'}, {'name': '12313', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12313'}, {'name': '63948', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63948'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1946?


Explain the CVE ID: What does the identifier CVE-2010-1947 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1947.

Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter.  NOTE: this may be related to CVE-2007-2069.


Provide references for further information: Can you share references or external links related to CVE-2010-1947?

{'name': '39534', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39534'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/openregistrecil-rfilfi.txt'}, {'name': '39611', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39611'}, {'name': '63964', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63964'}, {'name': '12313', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12313'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1947?


Explain the CVE ID: What does the identifier CVE-2010-1948 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1948.

Directory traversal vulnerability in scr/soustab.php in openMairie Openfoncier 2.00, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.


Provide references for further information: Can you share references or external links related to CVE-2010-1948?

{'name': '12366', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12366'}, {'name': '64195', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64195'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/openfoncier-rfilfi.txt'}, {'name': '39607', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39607'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1948?


Explain the CVE ID: What does the identifier CVE-2010-1949 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1949.

SQL injection vulnerability in the Online News Paper Manager (com_jnewspaper) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php. NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-1949?

{'name': '39536', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39536'}, {'name': '12305', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12305'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1949?


Explain the CVE ID: What does the identifier CVE-2010-1950 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1950.

SQL injection vulnerability in the Online News Paper Manager (com_jnewspaper) component 1.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the date_info parameter to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-1950?

{'name': '39536', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39536'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1950?


Explain the CVE ID: What does the identifier CVE-2010-1951 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1951.

Multiple directory traversal vulnerabilities in 60cycleCMS allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the DOCUMENT_ROOT parameter to (1) news.php, (2) submitComment.php, and (3) sqlConnect.php.


Provide references for further information: Can you share references or external links related to CVE-2010-1951?

{'name': '39473', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39473'}, {'name': '12249', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12249'}, {'name': '20100414 60cycleCMS (DOCUMENT_ROOT) Multiple Local File Inclusion Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510721/100/0/threaded'}, {'name': '60cyclecms-documentroot-file-include(57873)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57873'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1951?


Explain the CVE ID: What does the identifier CVE-2010-1952 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1952.

Directory traversal vulnerability in the BeeHeard (com_beeheard) and BeeHeard Lite (com_beeheardlite) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2010-1952?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlabeeheardlite-lfi.txt'}, {'name': '39506', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39506'}, {'name': '12239', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12239'}, {'name': 'combeeheard-index-file-inlclude(57845)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57845'}, {'name': '39475', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39475'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1952?


Explain the CVE ID: What does the identifier CVE-2010-1953 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1953.

Directory traversal vulnerability in the iNetLanka Multiple Map (com_multimap) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2010-1953?

{'name': '39551', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39551'}, {'name': '12288', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12288'}, {'name': '39530', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39530'}, {'name': 'ADV-2010-0927', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0927'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1953?


Explain the CVE ID: What does the identifier CVE-2010-1954 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1954.

Directory traversal vulnerability in the iNetLanka Multiple root (com_multiroot) component 1.0 and 1.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-1954?

{'name': '12287', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12287'}, {'name': 'ADV-2010-0928', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0928'}, {'name': '39531', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39531'}, {'name': '39552', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39552'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1954?


Explain the CVE ID: What does the identifier CVE-2010-1955 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1955.

Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) component 1.1.2 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2010-1955?

{'name': '39508', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39508'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomladeluxeblog-lfi.txt'}, {'name': '12238', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12238'}, {'name': '39473', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39473'}, {'name': 'comblogfactory-index-file-inlclude(57846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57846'}, {'name': '63801', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/63801'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1955?


Explain the CVE ID: What does the identifier CVE-2010-1956 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1956.

Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-1956?

{'name': 'comgadgetfactory-controller-file-include(57895)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57895'}, {'name': '39547', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39547'}, {'name': '63917', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/63917'}, {'name': '12285', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12285'}, {'name': '39522', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39522'}, {'name': 'ADV-2010-0930', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0930'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.thefactory.ro/all-thefactory-products/gadget-factory-for-joomla-1.5.x/detailed-product-flyer.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlagadgetfactory-lfi.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1956?


Explain the CVE ID: What does the identifier CVE-2010-1957 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1957.

Directory traversal vulnerability in the Love Factory (com_lovefactory) component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2010-1957?

{'name': '39512', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39512'}, {'name': '63803', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/63803'}, {'name': 'comlovefactory-index-file-inlclude(57849)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57849'}, {'name': '12235', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12235'}, {'name': '39471', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39471'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlalovefactory-lfi.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1957?


Explain the CVE ID: What does the identifier CVE-2010-1958 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1958.

Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with create or edit permissions and 'Path to File' or 'URL to File' display enabled, to inject arbitrary web script or HTML via the file name (filepath parameter).


Provide references for further information: Can you share references or external links related to CVE-2010-1958?

{'name': '65611', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/65611'}, {'name': 'filefieldmodule-filepath-xss(59500)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/59500'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/829808'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.madirish.net/?article=461'}, {'name': '40186', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40186'}, {'name': '40923', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40923'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1958?


Explain the CVE ID: What does the identifier CVE-2010-1959 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1959.

Unspecified vulnerability in HP TestDirector for Quality Center 9.2 before Patch8 allows remote attackers to modify data via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1959?

{'name': 'HPSBGN02315', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01373684'}, {'name': '39943', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39943'}, {'name': 'SSRT071487', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01373684'}, {'name': '1024025', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024025'}, {'name': '64917', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/64917'}, {'name': '40371', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40371'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1959?


Explain the CVE ID: What does the identifier CVE-2010-1960 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1960.

Buffer overflow in the error handling functionality in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long, invalid option to jovgraph.exe.


Provide references for further information: Can you share references or external links related to CVE-2010-1960?

{'name': '20100608 ZDI-10-105: Hewlett-Packard OpenView NNM ovwebsnmpsrv.exe Bad Option Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511734/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-10-105/'}, {'name': 'HPSBMA02537', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127602909915281&w=2'}, {'name': '40101', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40101'}, {'name': '40637', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40637'}, {'name': 'SSRT010027', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127602909915281&w=2'}, {'name': 'ovnnm-ovwebsnmpsrv-bo(59249)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/59249'}, {'name': '1024071', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1024071'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1960?


Explain the CVE ID: What does the identifier CVE-2010-1961 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1961.

Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function.


Provide references for further information: Can you share references or external links related to CVE-2010-1961?

{'name': '40638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40638'}, {'name': 'HPSBMA02537', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127602909915281&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-10-106/'}, {'name': '20100608 ZDI-10-106: Hewlett-Packard OpenView NNM ovutil.dll getProxiedStorageAddress Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511731/100/0/threaded'}, {'name': '40101', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40101'}, {'name': 'SSRT010027', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127602909915281&w=2'}, {'name': 'ovnnm-getproxiedstorageaddress-bo(59250)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/59250'}, {'name': '1024071', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1024071'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1961?


Explain the CVE ID: What does the identifier CVE-2010-1962 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1962.

Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.2.1.870.0 allows remote attackers to execute arbitrary code via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1962?

{'name': 'HPSBST02536', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127557820805729&w=2'}, {'name': 'hp-storageworks-mirroring-unauth-access(59099)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/59099'}, {'name': '1024054', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1024054'}, {'name': 'HPSBMA02537', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127602909915281&w=2'}, {'name': '40044', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40044'}, {'name': 'SSRT100057', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127557820805729&w=2'}, {'name': '40539', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40539'}, {'name': 'ADV-2010-1319', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1319'}, {'name': '65142', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/65142'}, {'name': 'SSRT010027', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127602909915281&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1962?


Explain the CVE ID: What does the identifier CVE-2010-1963 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1963.

Cross-site scripting (XSS) vulnerability in HP ServiceCenter allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1963?

{'name': 'HPSBMA02538', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127557884206863&w=2'}, {'name': 'SSRT100136', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127557884206863&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1963?


Explain the CVE ID: What does the identifier CVE-2010-1964 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1964.

Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified parameters to jovgraph.exe, aka ZDI-CAN-683.


Provide references for further information: Can you share references or external links related to CVE-2010-1964?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-10-108'}, {'name': 'SSRT010027', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://seclists.org/bugtraq/2010/Jun/152'}, {'name': '20100616 ZDI-10-108: HP OpenView NNM ovwebsnmpsrv.exe Command Line Argument Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511854/100/0/threaded'}, {'name': '65552', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/65552'}, {'name': '8155', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8155'}, {'name': '40873', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40873'}, {'name': 'HPSBMA02537', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://seclists.org/bugtraq/2010/Jun/152'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1964?


Explain the CVE ID: What does the identifier CVE-2010-1965 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1965.

Unspecified vulnerability in HP Insight Orchestration for Windows before 6.1 allows remote attackers to read or modify data via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1965?

{'name': 'ADV-2010-1794', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1794'}, {'name': '40549', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40549'}, {'name': 'SSRT100126', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02280158'}, {'name': 'HPSBMA02548', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02280158'}, {'name': '1024183', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024183'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1965?


Explain the CVE ID: What does the identifier CVE-2010-1966 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1966.

Unspecified vulnerability in HP Insight Control power management for Windows before 6.1 allows local users to read or modify data, or cause a denial of service, via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1966?

{'name': 'ADV-2010-1795', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1795'}, {'name': '1024184', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024184'}, {'name': 'SSRT090158', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282361'}, {'name': '40550', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40550'}, {'name': 'HPSBMA02549', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282361'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1966?


Explain the CVE ID: What does the identifier CVE-2010-1967 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1967.

Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify data via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1967?

{'name': 'ADV-2010-1792', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1792'}, {'name': '1024185', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024185'}, {'name': '40544', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40544'}, {'name': 'SSRT100170', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282377'}, {'name': 'HPSBMA02550', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282377'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1967?


Explain the CVE ID: What does the identifier CVE-2010-1968 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1968.

Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1971.


Provide references for further information: Can you share references or external links related to CVE-2010-1968?


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1968?


Explain the CVE ID: What does the identifier CVE-2010-1969 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1969.

Cross-site scripting (XSS) vulnerability in HP Virtual Connect Enterprise Manager for Windows before 6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1969?

{'name': '1024181', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1024181'}, {'name': '40552', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40552'}, {'name': 'ADV-2010-1797', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1797'}, {'name': 'SSRT100165', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02283465&admit=109447626+1279054975923+28353475'}, {'name': 'HPSBMA02551', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02283465&admit=109447626+1279054975923+28353475'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1969?


Explain the CVE ID: What does the identifier CVE-2010-1970 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1970.

Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify data, and consequently gain privileges, via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1970?

{'name': 'ADV-2010-1792', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1792'}, {'name': 'SSRT100184', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388'}, {'name': '1024186', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024186'}, {'name': '40553', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40553'}, {'name': 'HPSBMA02553', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1970?


Explain the CVE ID: What does the identifier CVE-2010-1971 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1971.

Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1968.


Provide references for further information: Can you share references or external links related to CVE-2010-1971?


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1971?


Explain the CVE ID: What does the identifier CVE-2010-1972 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1972.

The default configuration of HP Client Automation (HPCA) Enterprise Infrastructure (aka Radia) allows remote attackers to read log files, and consequently cause a denial of service or have unspecified other impact, via web requests.


Provide references for further information: Can you share references or external links related to CVE-2010-1972?

{'name': 'HPSBMA02555', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127905601332098&w=2'}, {'name': 'SSRT100064', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127905601332098&w=2'}, {'name': '40592', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40592'}, {'name': '1024191', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024191'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1972?


Explain the CVE ID: What does the identifier CVE-2010-1973 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1973.

Unspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, and 8.3-1H1, 8.3, 8.2-1, and earlier on the Itanium platform, allows local users to gain privileges or obtain sensitive information via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1973?

{'name': 'HPSBOV02539', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127905660900687&w=2'}, {'name': '1024190', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024190'}, {'name': 'SSRT090267', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127905660900687&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1973?


Explain the CVE ID: What does the identifier CVE-2010-1974 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1974.


Provide references for further information: Can you share references or external links related to CVE-2010-1974?


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1974?


Explain the CVE ID: What does the identifier CVE-2010-1975 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1975.

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a (1) ALTER USER or (2) ALTER DATABASE statement.