Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1216.

PHP remote file inclusion vulnerability in templates/template.php in notsoPureEdit 1.4.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content parameter.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-1216?

{'tags': ['x_refsource_MISC'], 'url': 'http://inj3ct0r.com/exploits/11393'}, {'name': '39070', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39070'}, {'name': '11832', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11832'}, {'name': 'ADV-2010-0673', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0673'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1216?


Explain the CVE ID: What does the identifier CVE-2010-1217 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1217.

Directory traversal vulnerability in the JE Form Creator (com_jeformcr) component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE: the original researcher states that the affected product is JE Tooltip, not Form Creator; however, the exploit URL suggests that Form Creator is affected.


Provide references for further information: Can you share references or external links related to CVE-2010-1217?

{'name': '38866', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38866'}, {'name': '39063', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39063'}, {'name': '63120', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/63120'}, {'name': '11814', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11814'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.packetstormsecurity.org/1003-exploits/joomlajetooltip-lfi.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1217?


Explain the CVE ID: What does the identifier CVE-2010-1218 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1218.

Cross-site scripting (XSS) vulnerability in the mm_forum extension 1.8.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1218?

{'name': '38825', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38825'}, {'name': 'mmforum-unspecified-xss(57037)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57037'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://typo3.org/extensions/repository/view/mm_forum/1.8.3/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-007/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1218?


Explain the CVE ID: What does the identifier CVE-2010-1219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1219.

Directory traversal vulnerability in the JA News (com_janews) component 1.0 for Joomla! allows remote attackers to read arbitrary local files via a .. (dot dot) in the controller parameter to index.php.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-1219?

{'name': '38746', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38746'}, {'name': '11757', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11757'}, {'name': 'janews-index-file-include(56901)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56901'}, {'name': '38952', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38952'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1219?


Explain the CVE ID: What does the identifier CVE-2010-1221 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1221.

CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request.


Provide references for further information: Can you share references or external links related to CVE-2010-1221?

{'name': '20100406 CA20100406-01: Security Notice for CA XOsoft', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510564/100/0/threaded'}, {'name': '39244', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39244'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=232869'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1221?


Explain the CVE ID: What does the identifier CVE-2010-1222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1222.

CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request.


Provide references for further information: Can you share references or external links related to CVE-2010-1222?

{'name': '20100406 CA20100406-01: Security Notice for CA XOsoft', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510564/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=232869'}, {'name': '39249', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39249'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1222?


Explain the CVE ID: What does the identifier CVE-2010-1223 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1223.

Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the ws_man/xosoapapi.asmx SOAP endpoint or (2) a long string to the entry_point.aspx service.


Provide references for further information: Can you share references or external links related to CVE-2010-1223?

{'name': '39238', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39238'}, {'name': '20100406 CA20100406-01: Security Notice for CA XOsoft', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510564/100/0/threaded'}, {'name': '20100406 ZDI-10-065: CA XOsoft xosoapapi.asmx Multiple Remote Code Execution Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510565/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=232869'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-10-065/'}, {'name': '20100406 ZDI-10-066: CA XOsoft Control Service entry_point.aspx Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510567/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-10-066/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1223?


Explain the CVE ID: What does the identifier CVE-2010-1224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1224.

main/acl.c in Asterisk Open Source 1.6.0.x before 1.6.0.25, 1.6.1.x before 1.6.1.17, and 1.6.2.x before 1.6.2.5 does not properly enforce remote host access controls when CIDR notation "/0" is used in permit= and deny= configuration rules, which causes an improper arithmetic shift and might allow remote attackers to bypass ACL rules and access services from unauthorized hosts.


Provide references for further information: Can you share references or external links related to CVE-2010-1224?

{'name': '20100225 AST-2010-003: Invalid parsing of ACL rules can compromise security', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/509757/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.asterisk.org/pub/security/AST-2010-003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.asterisk.org/pub/security/AST-2010-003-1.6.2.diff'}, {'name': '39096', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39096'}, {'name': 'FEDORA-2010-3724', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037679.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.asterisk.org/pub/security/AST-2010-003-1.6.0.diff'}, {'name': 'ADV-2010-0475', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0475'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.asterisk.org/pub/security/AST-2010-003-1.6.1.diff'}, {'name': '62588', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62588'}, {'name': 'asterisk-cidr-security-bypass(56552)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56552'}, {'name': '38424', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38424'}, {'name': '38752', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38752'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1224?


Explain the CVE ID: What does the identifier CVE-2010-1225 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1225.

The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM work area, which allows context-dependent attackers to bypass certain anti-exploitation protection mechanisms on the guest OS via crafted input to a vulnerable application.  NOTE: the vendor reportedly found that only systems with an otherwise vulnerable application are affected, because "the memory areas accessible from the guest cannot be leveraged to achieve either remote code execution or elevation of privilege and ... no data from the host is exposed to the guest OS."


Provide references for further information: Can you share references or external links related to CVE-2010-1225?

{'name': '20100316 CORE-2009-0803: Virtual PC Hypervisor Memory Protection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510154/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/content/virtual-pc-2007-hypervisor-memory-protection-bug'}, {'name': '1023720', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023720'}, {'name': '38764', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38764'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1225?


Explain the CVE ID: What does the identifier CVE-2010-1226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1226.

The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service (Safari, Mail, or Springboard crash) via a crafted innerHTML property of a DIV element, related to a "malformed character" issue.


Provide references for further information: Can you share references or external links related to CVE-2010-1226?

{'name': '38758', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38758'}, {'name': '11769', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11769'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1226?


Explain the CVE ID: What does the identifier CVE-2010-1227 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1227.

Cross-site scripting (XSS) vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via the subject field of a message, as demonstrated by a subject containing an IMG element with a SRC attribute that performs a cross-site request forgery (CSRF) attack involving the cmd and argv parameters to cmd.msc.


Provide references for further information: Can you share references or external links related to CVE-2010-1227?

{'name': '20100313 Sun Java System Communication Express CSRF via HPP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510154/100/0/threaded'}, {'name': 'ADV-2011-0157', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0157'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html'}, {'name': '42990', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42990'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1227?


Explain the CVE ID: What does the identifier CVE-2010-1228 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1228.

Multiple race conditions in the sandbox infrastructure in Google Chrome before 4.1.249.1036 have unspecified impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1228?

{'name': 'oval:org.mitre.oval:def:13829', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13829'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=28804'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=31880'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1228?


Explain the CVE ID: What does the identifier CVE-2010-1229 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1229.

The sandbox infrastructure in Google Chrome before 4.1.249.1036 does not properly use pointers, which has unspecified impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1229?

{'name': 'oval:org.mitre.oval:def:14220', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14220'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=28804'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=31880'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1229?


Explain the CVE ID: What does the identifier CVE-2010-1230 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1230.

Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1230?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=30801'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html'}, {'name': 'oval:org.mitre.oval:def:14292', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14292'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=33445'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1230?


Explain the CVE ID: What does the identifier CVE-2010-1231 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1231.

Google Chrome before 4.1.249.1036 processes HTTP headers before invoking the SafeBrowsing feature, which allows remote attackers to have an unspecified impact via crafted headers.


Provide references for further information: Can you share references or external links related to CVE-2010-1231?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=33572'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html'}, {'name': 'oval:org.mitre.oval:def:14332', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14332'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1231?


Explain the CVE ID: What does the identifier CVE-2010-1232 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1232.

Google Chrome before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via a malformed SVG document.


Provide references for further information: Can you share references or external links related to CVE-2010-1232?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=34978'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html'}, {'name': 'oval:org.mitre.oval:def:14000', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14000'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1232?


Explain the CVE ID: What does the identifier CVE-2010-1233 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1233.

Multiple integer overflows in Google Chrome before 4.1.249.1036 allow remote attackers to have an unspecified impact via vectors involving WebKit JavaScript objects.


Provide references for further information: Can you share references or external links related to CVE-2010-1233?

{'name': 'oval:org.mitre.oval:def:14023', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14023'}, {'name': '43068', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43068'}, {'name': 'ADV-2011-0212', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0212'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html'}, {'name': 'SUSE-SR:2011:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=35724'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1233?


Explain the CVE ID: What does the identifier CVE-2010-1234 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1234.

Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to truncate the URL shown in the HTTP Basic Authentication dialog via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1234?

{'name': 'oval:org.mitre.oval:def:14275', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14275'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=36772'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1234?


Explain the CVE ID: What does the identifier CVE-2010-1235 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1235.

Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to trigger the omission of a download warning dialog via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1235?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=37007'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html'}, {'name': 'oval:org.mitre.oval:def:14297', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14297'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1235?


Explain the CVE ID: What does the identifier CVE-2010-1236 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1236.

The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Flock Browser 3.x before 3.0.0.4112, does not properly handle whitespace at the beginning of a URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted javascript: URL, as demonstrated by a \x00javascript:alert sequence.


Provide references for further information: Can you share references or external links related to CVE-2010-1236?

{'name': '43068', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43068'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://src.chromium.org/viewvc/chrome?view=rev&revision=41244'}, {'name': 'ADV-2011-0212', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0212'}, {'name': 'oval:org.mitre.oval:def:14067', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14067'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.webkit.org/show_bug.cgi?id=35948'}, {'name': 'SUSE-SR:2011:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://flock.com/security/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=37383'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://codereview.chromium.org/858001'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1236?


Explain the CVE ID: What does the identifier CVE-2010-1237 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1237.

Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via an empty SVG element.


Provide references for further information: Can you share references or external links related to CVE-2010-1237?

{'name': 'oval:org.mitre.oval:def:14374', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14374'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=37061'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1237?


Explain the CVE ID: What does the identifier CVE-2010-1238 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1238.

MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer fields to have empty values.


Provide references for further information: Can you share references or external links related to CVE-2010-1238?

{'name': 'DSA-2024', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2010/dsa-2024'}, {'name': '39284', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39284'}, {'name': 'ADV-2010-0831', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0831'}, {'name': 'USN-925-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-925-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1238?


Explain the CVE ID: What does the identifier CVE-2010-1239 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1239.

Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and (2) execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" sequence, a related issue to CVE-2009-0836.


Provide references for further information: Can you share references or external links related to CVE-2010-1239?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.f-secure.com/weblog/archives/00001923.html'}, {'name': 'VU#570177', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/570177'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.didierstevens.com/2010/03/29/escape-from-pdf/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.didierstevens.com/2010/03/31/escape-from-foxit-reader/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.foxitsoftware.com/pdf/reader/security.htm#0401'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.foxitsoftware.com/announcements/2010420408.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1239?


Explain the CVE ID: What does the identifier CVE-2010-1240 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1240.

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was specified in a PDF document, as demonstrated by a text field that claims that the Open button will enable the user to read an encrypted message.


Provide references for further information: Can you share references or external links related to CVE-2010-1240?

{'name': 'ADV-2010-1636', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1636'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb10-15.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.didierstevens.com/2010/03/29/escape-from-pdf/'}, {'name': 'TA10-231A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-231A.html'}, {'name': '1024159', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1024159'}, {'name': '[dailydave] 20100401 0day, it may not be', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.immunitysec.com/pipermail/dailydave/2010-April/006075.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.didierstevens.com/2010/06/29/quickpost-no-escape-from-pdf/'}, {'name': 'oval:org.mitre.oval:def:7466', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7466'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1240?


Explain the CVE ID: What does the identifier CVE-2010-1241 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1241.

Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.


Provide references for further information: Can you share references or external links related to CVE-2010-1241?

{'name': 'reader-customheap-code-execution(57589)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57589'}, {'name': '39227', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39227'}, {'name': '[dailydave] 20100401 0day, it may not be', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.immunitysec.com/pipermail/dailydave/2010-April/006077.html'}, {'name': 'ADV-2010-0873', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0873'}, {'name': 'TA10-103C', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-103C.html'}, {'name': 'oval:org.mitre.oval:def:6940', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6940'}, {'name': '39329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39329'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb10-09.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.youtube.com/watch?v=9EVHtY1-0q8'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.blackhat.com/html/bh-eu-10/bh-eu-10-briefings.html#Li'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1241?


Explain the CVE ID: What does the identifier CVE-2010-1242 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1242.

Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1242?

{'name': 'ADV-2011-0834', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0834'}, {'name': '39186', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39186'}, {'name': 'ADV-2010-0733', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0733'}, {'name': 'IO11274', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IO11274'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg24025662'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1242?


Explain the CVE ID: What does the identifier CVE-2010-1243 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1243.

The IBM Web Interface for Content Management (aka WEBi) before 1.0.4 creates persistent cookies on client workstations, which has unspecified impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1243?

{'name': 'ADV-2011-0834', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0834'}, {'name': '39186', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39186'}, {'name': 'ADV-2010-0733', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0733'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg24025662'}, {'name': 'IO11279', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IO11279'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1243?


Explain the CVE ID: What does the identifier CVE-2010-1244 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1244.

Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.


Provide references for further information: Can you share references or external links related to CVE-2010-1244?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.apache.org/activemq/browse/AMQ-2613'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://activemq.apache.org/activemq-531-release.html'}, {'name': '39223', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39223'}, {'name': 'activemq-web-console-csrf(57398)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57398'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.apache.org/activemq/browse/AMQ-2625'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1244?


Explain the CVE ID: What does the identifier CVE-2010-1245 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1245.

Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed SxView (0xB0) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0824 and CVE-2010-0821.


Provide references for further information: Can you share references or external links related to CVE-2010-1245?

{'name': 'MS10-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038'}, {'name': '20100608 VUPEN Security Research - Microsoft Office Excel SxView Memory Corruption Vulnerability (CVE-2010-1245)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511753/100/0/threaded'}, {'name': 'oval:org.mitre.oval:def:6877', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6877'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1245?


Explain the CVE ID: What does the identifier CVE-2010-1246 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1246.

Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record, aka "Excel RTD Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1246?

{'name': 'oval:org.mitre.oval:def:6839', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6839'}, {'name': '20100608 VUPEN Security Research - Microsoft Office Excel RTD Stack Overflow Vulnerability (CVE-2010-1246)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511755/100/0/threaded'}, {'name': 'MS10-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1246?


Explain the CVE ID: What does the identifier CVE-2010-1247 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1247.

Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers heap corruption, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1249.


Provide references for further information: Can you share references or external links related to CVE-2010-1247?

{'name': '65237', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/65237'}, {'name': 'MS10-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038'}, {'name': 'oval:org.mitre.oval:def:6630', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6630'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}, {'name': '20100608 VUPEN Security Research - Microsoft Office Excel RTD Heap Corruption Vulnerability (CVE-2010-1247)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511754/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1247?


Explain the CVE ID: What does the identifier CVE-2010-1248 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1248.

Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture (0x866) record, aka "Excel HFPicture Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1248?

{'name': '20100608 VUPEN Security Research - Microsoft Office Excel HFPicture Buffer Overflow Vulnerability (CVE-2010-1248)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511765/100/0/threaded'}, {'name': 'MS10-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038'}, {'name': 'oval:org.mitre.oval:def:7223', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7223'}, {'name': '40526', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40526'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}, {'name': '65235', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/65235'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1248?


Explain the CVE ID: What does the identifier CVE-2010-1249 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1249.

Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed ExternName (0x23) record, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1247.


Provide references for further information: Can you share references or external links related to CVE-2010-1249?

{'name': '40527', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40527'}, {'name': '20100608 VUPEN Security Research - Microsoft Office Excel ExternName Buffer Overflow Vulnerability (CVE-2010-1249)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511767/100/0/threaded'}, {'name': '65232', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/65232'}, {'name': 'MS10-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038'}, {'name': 'oval:org.mitre.oval:def:6634', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6634'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1249?


Explain the CVE ID: What does the identifier CVE-2010-1250 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1250.

Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed (1) EDG (0x88) and (2) Publisher (0x89) records, aka "Excel EDG Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1250?

{'name': '20100608 VUPEN Security Research - Microsoft Office Excel EDG Heap Overflow Vulnerability (CVE-2010-1250)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511756/100/0/threaded'}, {'name': 'MS10-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038'}, {'name': 'oval:org.mitre.oval:def:7593', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7593'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}, {'name': '40528', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40528'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1250?


Explain the CVE ID: What does the identifier CVE-2010-1251 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1251.

Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Record Stack Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1251?

{'name': '40529', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40529'}, {'name': 'oval:org.mitre.oval:def:6761', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6761'}, {'name': 'MS10-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1251?


Explain the CVE ID: What does the identifier CVE-2010-1252 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1252.

Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel String Variable Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1252?

{'name': '40530', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40530'}, {'name': 'oval:org.mitre.oval:def:7369', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7369'}, {'name': 'MS10-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1252?


Explain the CVE ID: What does the identifier CVE-2010-1253 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1253.

Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file with crafted DBQueryExt records that allow a function call to a "user-controlled pointer," aka "Excel ADO Object Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1253?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-10-103'}, {'name': 'oval:org.mitre.oval:def:6842', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6842'}, {'name': 'MS10-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038'}, {'name': '65228', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/65228'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}, {'name': '20100608 ZDI-10-103: Microsoft Office Excel DBQueryExt Record Unspecified ADO Object Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511728/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1253?


Explain the CVE ID: What does the identifier CVE-2010-1254 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1254.

The installation for Microsoft Open XML File Format Converter for Mac sets insecure ACLs for the /Applications folder, which allows local users to execute arbitrary code by replacing the executable with a Trojan Horse, aka "Mac Office Open XML Permissions Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1254?

{'name': 'MS10-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}, {'name': '40533', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40533'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1254?


Explain the CVE ID: What does the identifier CVE-2010-1255 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1255.

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to "glyph outline information" and TrueType fonts, aka "Win32k TrueType Font Parsing Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1255?

{'name': 'oval:org.mitre.oval:def:7283', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7283'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/support/kb/view/954/'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}, {'name': 'MS10-032', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1255?


Explain the CVE ID: What does the identifier CVE-2010-1256 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1256.

Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to execute arbitrary code via unknown vectors related to "token checking" that trigger memory corruption, aka "IIS Authentication Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1256?

{'name': 'oval:org.mitre.oval:def:7149', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7149'}, {'name': 'MS10-040', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-040'}, {'name': '40573', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40573'}, {'name': 'ms-iis-authentication-code-execution(58864)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58864'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1256?


Explain the CVE ID: What does the identifier CVE-2010-1257 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1257.

Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint Server 2007 SP1 and SP2; SharePoint Services 3.0 SP1 and SP2; and Internet Explorer 8 allows remote attackers to inject arbitrary web script or HTML via vectors related to sanitization.


Provide references for further information: Can you share references or external links related to CVE-2010-1257?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/css/P8/documents/100089747'}, {'name': 'ie-tostatichtml-information-disclosure(58866)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58866'}, {'name': 'MS10-039', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-039'}, {'name': '40409', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40409'}, {'name': 'oval:org.mitre.oval:def:6677', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6677'}, {'name': 'MS10-035', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1257?


Explain the CVE ID: What does the identifier CVE-2010-1258 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1258.

Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute script in an unintended domain or security zone, and obtain sensitive information, via unspecified vectors, aka "Event Handler Cross-Domain Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1258?

{'name': 'oval:org.mitre.oval:def:11954', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11954'}, {'name': 'TA10-222A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-222A.html'}, {'name': 'MS10-053', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-053'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1258?


Explain the CVE ID: What does the identifier CVE-2010-1259 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1259.

Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1259?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/css/P8/documents/100089747'}, {'name': 'MS10-035', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035'}, {'name': 'oval:org.mitre.oval:def:7324', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7324'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}, {'name': '65215', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/65215'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1259?


Explain the CVE ID: What does the identifier CVE-2010-1260 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1260.

The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1260?

{'name': 'oval:org.mitre.oval:def:6686', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6686'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/css/P8/documents/100089747'}, {'name': '65213', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/65213'}, {'name': 'MS10-035', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1260?


Explain the CVE ID: What does the identifier CVE-2010-1261 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1261.

The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1261?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/css/P8/documents/100089747'}, {'name': 'oval:org.mitre.oval:def:7124', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7124'}, {'name': '65214', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/65214'}, {'name': 'MS10-035', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1261?


Explain the CVE ID: What does the identifier CVE-2010-1262 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1262.

Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, related to the CStyleSheet object and a free of the root container, aka "Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1262?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/css/P8/documents/100089747'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-10-102/'}, {'name': '40417', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40417'}, {'name': '20100608 ZDI-10-102: Microsoft Internet Explorer Stylesheet Array Removal Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511727/100/0/threaded'}, {'name': 'MS10-035', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}, {'name': 'oval:org.mitre.oval:def:7406', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7406'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1262?


Explain the CVE ID: What does the identifier CVE-2010-1263 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1263.

Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; Microsoft Office XP SP3; Office 2003 SP3; and Office System 2007 SP1 and SP2 do not properly validate COM objects during instantiation, which allows remote attackers to execute arbitrary code via a crafted file, aka "COM Validation Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1263?

{'name': 'MS10-083', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-083'}, {'name': '40574', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40574'}, {'name': 'MS10-036', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-036'}, {'name': 'oval:org.mitre.oval:def:7286', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7286'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}, {'name': 'TA10-285A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-285A.html'}, {'name': '1024555', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1024555'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1263?


Explain the CVE ID: What does the identifier CVE-2010-1264 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1264.

Unspecified vulnerability in Microsoft Windows SharePoint Services 3.0 SP1 and SP2 allows remote attackers to cause a denial of service (hang) via crafted requests to the Help page that cause repeated restarts of the application pool, aka "Sharepoint Help Page Denial of Service Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2010-1264?

{'name': 'MS10-039', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-039'}, {'name': 'oval:org.mitre.oval:def:7241', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7241'}, {'name': '40559', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40559'}, {'name': 'TA10-159B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA10-159B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1264?


Explain the CVE ID: What does the identifier CVE-2010-1265 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1265.

SQL injection vulnerability in Adam Corley dcsFlashGames (com_dcs_flashgames) allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2010-1265?

{'name': '39161', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39161'}, {'name': '11884', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11884'}, {'name': '38981', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38981'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1003-exploits/joomladcsflashgames-sql.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1265?


Explain the CVE ID: What does the identifier CVE-2010-1266 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1266.

Multiple PHP remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) template, (2) menu, (3) events, and (4) SITEROOT parameters to template/babyweb/index.php; the (5) modules and (6) copyright parameters to template/calm/footer.php; the (7) menu parameter to template/calm/top.php; and the (8) modules, (9) copyright, and (10) menu parameters to template/wm025/footer.php.


Provide references for further information: Can you share references or external links related to CVE-2010-1266?

{'name': 'ADV-2010-0674', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0674'}, {'name': 'webmaidcms-index-file-include(57059)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57059'}, {'name': '11831', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11831'}, {'name': '38993', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38993'}, {'tags': ['x_refsource_MISC'], 'url': 'http://inj3ct0r.com/exploits/11394'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1003-exploits/webmaid-rfilfi.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1266?


Explain the CVE ID: What does the identifier CVE-2010-1267 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1267.

Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the com parameter to (1) cContactus.php, (2) cGuestbook.php, and (3) cArticle.php.


Provide references for further information: Can you share references or external links related to CVE-2010-1267?

{'name': 'ADV-2010-0674', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0674'}, {'name': '11831', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11831'}, {'name': '38993', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38993'}, {'tags': ['x_refsource_MISC'], 'url': 'http://inj3ct0r.com/exploits/11394'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1003-exploits/webmaid-rfilfi.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1267?


Explain the CVE ID: What does the identifier CVE-2010-1268 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1268.

Directory traversal vulnerability in index.php in justVisual CMS 2.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files directory traversal sequences in the p parameter.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-1268?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1003-exploits/justvisual-lfi.txt'}, {'name': '11876', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11876'}, {'name': '38970', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38970'}, {'name': '39093', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39093'}, {'name': '63156', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/63156'}, {'name': 'justvisualcms-index-file-include(57174)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57174'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1268?


Explain the CVE ID: What does the identifier CVE-2010-1269 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1269.

SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers to execute arbitrary SQL commands via the id_auk parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-1269?

{'name': 'niedrig-auktion-sql-injection(57020)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57020'}, {'tags': ['x_refsource_MISC'], 'url': 'http://4004securityproject.wordpress.com/2010/03/18/phpscripte24-niedrig-gebote-pro-auktions-system-ii-blind-sql-injection-auktion-php/'}, {'name': '11805', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11805'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1003-exploits/phpscripte24-sql.txt'}, {'name': '38971', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38971'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1269?


Explain the CVE ID: What does the identifier CVE-2010-1270 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1270.

SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the id_auk parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-1270?

{'tags': ['x_refsource_MISC'], 'url': 'http://4004securityproject.wordpress.com/2010/03/16/phpscripte24-auktionshaus-community-standart-system/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1003-exploits/multiauktions-sql.txt'}, {'name': '11776', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11776'}, {'name': '63048', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63048'}, {'name': 'auktionhaus-auktion-sql-injection(56935)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56935'}, {'name': '38971', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38971'}, {'name': '38793', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38793'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1270?


Explain the CVE ID: What does the identifier CVE-2010-1271 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1271.

SQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute arbitrary SQL commands via the domain parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-1271?

{'name': '38819', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38819'}, {'name': '11623', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11623'}, {'name': '38529', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38529'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1003-exploits/smartplugs-sql.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://4004securityproject.wordpress.com/2010/03/03/smartplugs-1-3-sql-injection-showplugs-php'}, {'name': 'smartplugs-showplugs-sql-injection(56676)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56676'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1271?


Explain the CVE ID: What does the identifier CVE-2010-1272 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1272.

PHP remote file inclusion vulnerability in includes/tgpinc.php in Gnat-TGP 1.2.20 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-1272?

{'name': '11621', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11621'}, {'name': '38522', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38522'}, {'name': 'gnattgp-tgpinc-file-include(56675)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56675'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1003-exploits/gnattgp-rfi.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1272?


Explain the CVE ID: What does the identifier CVE-2010-1273 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1273.

Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of (1) form values and (2) JSignal arguments, which has unspecified impact and remote attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1273?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.webtoolkit.eu/wt/doc/reference/html/Releasenotes.html'}, {'name': '62717', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/62717'}, {'name': '38759', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38759'}, {'name': '38541', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38541'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1273?


Explain the CVE ID: What does the identifier CVE-2010-1274 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1274.

Cross-site scripting (XSS) vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to "insertions of the URL" that occur during a redirection.


Provide references for further information: Can you share references or external links related to CVE-2010-1274?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.webtoolkit.eu/wt/doc/reference/html/Releasenotes.html'}, {'name': '62716', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/62716'}, {'name': '38759', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38759'}, {'name': 'wt-unspecified-xss(56681)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56681'}, {'name': '38541', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38541'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1274?


Explain the CVE ID: What does the identifier CVE-2010-1275 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1275.

Cross-site scripting (XSS) vulnerability in ShowPost.asp in BBSXP 2008 allows remote attackers to inject arbitrary web script or HTML via the ThreadID parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-1275?

{'name': '38855', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38855'}, {'name': '20100304 [xss] a xss on "ThreadID" parameter in BBSXP 2008 from china', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/509860/100/0/threaded'}, {'name': '38542', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38542'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1275?


Explain the CVE ID: What does the identifier CVE-2010-1276 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1276.

Multiple cross-site scripting (XSS) vulnerabilities in BBSXP 2008 SP2 allow remote attackers to inject arbitrary web script or HTML via the URI in a request to (1) AddPost.asp, (2) AddTopic.asp, (3) Admin_Default.asp, (4) Bank.asp, (5) Manage.asp, and (6) ShowPost.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-1276?

{'name': '38855', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38855'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1276?


Explain the CVE ID: What does the identifier CVE-2010-1277 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1277.

SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to api_jsonrpc.php.


Provide references for further information: Can you share references or external links related to CVE-2010-1277?

{'name': 'ADV-2010-0799', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0799'}, {'tags': ['x_refsource_MISC'], 'url': 'http://legalhackers.com/advisories/zabbix181api-sql.txt'}, {'name': '63456', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63456'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zabbix.com/rn1.8.2.php'}, {'name': '20100401 Zabbix <= 1.8.1 SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510480/100/0/threaded'}, {'name': '39148', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39148'}, {'name': '20100401 Zabbix <= 1.8.1 SQL Injection', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0001.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://legalhackers.com/poc/zabbix181api.pl-poc'}, {'name': '39119', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39119'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1277?


Explain the CVE ID: What does the identifier CVE-2010-1278 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1278.

Buffer overflow in the Atlcom.get_atlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters.


Provide references for further information: Can you share references or external links related to CVE-2010-1278?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-10-077/'}, {'name': 'oval:org.mitre.oval:def:7500', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7500'}, {'name': '20100421 ZDI-10-077: Adobe Download Manager Atlcom.get_atlcom ActiveX Control Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510868/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb10-02.html'}, {'name': '1023908', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1023908'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1278?


Explain the CVE ID: What does the identifier CVE-2010-1279 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1279.

Multiple unspecified vulnerabilities in Adobe Photoshop CS4 11.x before 11.0.1 allow user-assisted remote attackers to execute arbitrary code via a crafted TIFF file.


Provide references for further information: Can you share references or external links related to CVE-2010-1279?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb10-10.html'}, {'name': '39849', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39849'}, {'name': '39711', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39711'}, {'name': 'ADV-2010-1049', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1049'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1279?


Explain the CVE ID: What does the identifier CVE-2010-1280 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1280.

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference and (2) a certain Shock.dir file.


Provide references for further information: Can you share references or external links related to CVE-2010-1280?

{'name': '38751', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38751'}, {'name': '20100511 [CAL-20100204-3]Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0139.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb10-12.html'}, {'name': '20100512 [CAL-20100204-3]Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511257/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zeroscience.mk/codes/shockwave_mem.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4937.php'}, {'name': 'ADV-2010-1128', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1128'}, {'name': 'oval:org.mitre.oval:def:7184', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7184'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1280?


Explain the CVE ID: What does the identifier CVE-2010-1281 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1281.

iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.


Provide references for further information: Can you share references or external links related to CVE-2010-1281?

{'name': '38751', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38751'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-10-087/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb10-12.html'}, {'name': 'ADV-2010-1128', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1128'}, {'name': 'oval:org.mitre.oval:def:7268', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7268'}, {'name': '20100511 ZDI-10-087: Adobe Shockwave Invalid Offset Memory Corruption Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511252/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1281?


Explain the CVE ID: What does the identifier CVE-2010-1282 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1282.

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted ATOM size in a .dir (aka Director) file.


Provide references for further information: Can you share references or external links related to CVE-2010-1282?

{'name': '40088', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40088'}, {'name': '20100512 [CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511254/100/0/threaded'}, {'name': 'oval:org.mitre.oval:def:7388', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7388'}, {'name': '20100511 [CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0137.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb10-12.html'}, {'name': 'ADV-2010-1128', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1128'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hi.baidu.com/fs_fx/blog/item/f8de1d18ba8c9b76dbb4bd56.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1282?


Explain the CVE ID: What does the identifier CVE-2010-1283 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1283.

Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a modified field in a 0xFFFFFF49 record.


Provide references for further information: Can you share references or external links related to CVE-2010-1283?

{'name': '38751', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38751'}, {'name': 'oval:org.mitre.oval:def:7262', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7262'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb10-12.html'}, {'name': 'ADV-2010-1128', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1128'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-10-088/'}, {'name': '20100511 ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511253/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1283?


Explain the CVE ID: What does the identifier CVE-2010-1284 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1284.

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.


Provide references for further information: Can you share references or external links related to CVE-2010-1284?

{'name': '38751', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38751'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb10-12.html'}, {'name': 'ADV-2010-1128', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1128'}, {'name': 'oval:org.mitre.oval:def:6638', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6638'}, {'name': '40091', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40091'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1284?


Explain the CVE ID: What does the identifier CVE-2010-1285 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1285.

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newclass (0x58) operator and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-2168 and CVE-2010-2201.


Provide references for further information: Can you share references or external links related to CVE-2010-1285?

{'name': 'ADV-2010-1636', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1636'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb10-15.html'}, {'name': '1024159', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1024159'}, {'name': '41232', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/41232'}, {'name': 'oval:org.mitre.oval:def:6725', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6725'}, {'name': '20100630 VUPEN Security Research - Adobe Acrobat and Reader "newclass" Memory Corruption Vulnerability (CVE-2010-1285)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/512099'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1285?


Explain the CVE ID: What does the identifier CVE-2010-1286 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1286.

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.


Provide references for further information: Can you share references or external links related to CVE-2010-1286?

{'name': '38751', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38751'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb10-12.html'}, {'name': 'ADV-2010-1128', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1128'}, {'name': 'oval:org.mitre.oval:def:7269', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7269'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1286?


Explain the CVE ID: What does the identifier CVE-2010-1287 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1287.

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.


Provide references for further information: Can you share references or external links related to CVE-2010-1287?

{'name': '38751', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38751'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb10-12.html'}, {'name': 'ADV-2010-1128', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1128'}, {'name': 'oval:org.mitre.oval:def:6803', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6803'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1287?


Explain the CVE ID: What does the identifier CVE-2010-1288 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1288.

Buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow attackers to execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-1288?

{'name': '38751', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38751'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb10-12.html'}, {'name': 'oval:org.mitre.oval:def:7543', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7543'}, {'name': 'ADV-2010-1128', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1128'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1288?


Explain the CVE ID: What does the identifier CVE-2010-1289 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-1289.

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1290, and CVE-2010-1291.


Provide references for further information: Can you share references or external links related to CVE-2010-1289?

{'name': '38751', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38751'}, {'name': 'oval:org.mitre.oval:def:6652', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6652'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb10-12.html'}, {'name': '40087', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40087'}, {'name': 'ADV-2010-1128', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1128'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-1289?