Provide references for further information: Can you share references or external links related to CVE-2010-0712?

{'tags': ['x_refsource_MISC'], 'url': 'http://dev.zenoss.org/trac/changeset/15257'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngenuity.org/wordpress/2010/01/14/ngenuity-2010-001-zenoss-getjsoneventsinfo-sql-injection/'}, {'name': '61804', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/61804'}, {'name': '37802', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/37802'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenoss.com/news/SQL-Injection-and-Cross-Site-Forgery-in-Zenoss-Core-Corrected.html'}, {'name': 'zenoss-getjsoneventsinfo-sql-injection(55670)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/55670'}, {'name': '38195', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38195'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0712?


Explain the CVE ID: What does the identifier CVE-2010-0713 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0713.

Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss 2.3.3, and other versions before 2.5, allow remote attackers to hijack the authentication of an administrator for (1) requests that reset user passwords via zport/dmd/ZenUsers/admin, and (2) requests that change user commands, which allows for remote execution of system commands via zport/dmd/userCommands/.


Provide references for further information: Can you share references or external links related to CVE-2010-0713?

{'name': '37843', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/37843'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngenuity.org/wordpress/2010/01/14/ngenuity-2010-002-zenoss-multiple-admin-csrf/'}, {'name': '61805', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/61805'}, {'name': '20100116 Zenoss Multiple Admin CSRF', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/508982/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenoss.com/news/SQL-Injection-and-Cross-Site-Forgery-in-Zenoss-Core-Corrected.html'}, {'name': '38195', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38195'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0713?


Explain the CVE ID: What does the identifier CVE-2010-0714 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0714.

Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to inject arbitrary web script or HTML via the query string.


Provide references for further information: Can you share references or external links related to CVE-2010-0714?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.hacktics.com/content/advisories/AdvIBM20100224.html'}, {'name': 'ibm-login-xss(56508)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56508'}, {'name': '1023660', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1023660'}, {'name': '20100225 Hacktics Advisory Feb10: XSS in IBM WebSphere Portal & Lotus WCM', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/509744/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21421469'}, {'name': 'PM03233', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1PM03233'}, {'name': '38412', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38412'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0714?


Explain the CVE ID: What does the identifier CVE-2010-0715 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0715.

Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the query string.


Provide references for further information: Can you share references or external links related to CVE-2010-0715?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.hacktics.com/content/advisories/AdvIBM20100224.html'}, {'name': 'ibm-login-phishing(56602)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56602'}, {'name': '20100225 Hacktics Advisory Feb10: XSS in IBM WebSphere Portal & Lotus WCM', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/509744/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21421469'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0715?


Explain the CVE ID: What does the identifier CVE-2010-0716 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0716.

_layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading TXT files, a related issue to CVE-2008-5026. NOTE: the vendor disputes the significance of this issue, because cross-domain isolation can be implemented when needed.


Provide references for further information: Can you share references or external links related to CVE-2010-0716?

{'name': 'sharepoint-aspx-xss(56597)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56597'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hacktics.com/content/advisories/AdvMS20100222.html'}, {'name': '20100222 Hacktics Advisory Feb10: Persistent XSS in Microsoft SharePoint Portal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/509683/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0716?


Explain the CVE ID: What does the identifier CVE-2010-0717 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0717.

The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-0717?

{'name': 'moinmoin-cfgpackagepages-unspecified(56595)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56595'}, {'name': '[oss-security] 20100215 CVE Request -- MoinMoin -- 1.8.7', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/02/15/2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://moinmo.in/MoinMoinRelease1.8'}, {'name': 'DSA-2014', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2010/dsa-2014'}, {'name': '38903', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38903'}, {'name': 'ADV-2010-0600', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0600'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0717?


Explain the CVE ID: What does the identifier CVE-2010-0718 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0718.

Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted .mpg file.


Provide references for further information: Can you share references or external links related to CVE-2010-0718?

{'name': '11531', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11531'}, {'name': 'win-mediaplayer-mpg-bo(56435)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56435'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0718?


Explain the CVE ID: What does the identifier CVE-2010-0719 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0719.

An unspecified API in Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 does not validate arguments, which allows local users to cause a denial of service (system crash) via a crafted application.


Provide references for further information: Can you share references or external links related to CVE-2010-0719?

{'name': 'ms-win-api-dos(56591)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56591'}, {'name': '1023656', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023656'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.scmagazineus.com/malta-researchers-find-windows-bug-that-crashes-pcs/article/164439/'}, {'name': '62660', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62660'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0719?


Explain the CVE ID: What does the identifier CVE-2010-0720 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0720.

SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-0720?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/erotik-sql.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://4004securityproject.wordpress.com/2009/10/21/erotik-auktionshaus-sql-injection-news-php/'}, {'name': '62369', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/62369'}, {'name': '38614', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38614'}, {'name': 'erotikauktionshaus-news-sql-injection(56330)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56330'}, {'name': '11489', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11489'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0720?


Explain the CVE ID: What does the identifier CVE-2010-0721 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0721.

SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-0721?

{'name': '11488', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11488'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/auktionshausgelb-sql.txt'}, {'name': 'auktionshausgelb-news-sql-injection(56332)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56332'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0721?


Explain the CVE ID: What does the identifier CVE-2010-0722 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0722.

SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-0722?

{'name': 'phpauktionpro-news-sql-injection(56478)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56478'}, {'tags': ['x_refsource_MISC'], 'url': 'http://4004securityproject.wordpress.com/2010/02/22/php-auktion-pro-sql-injection-news-php/'}, {'name': '38371', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38371'}, {'name': '11547', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11547'}, {'name': '38679', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38679'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0722?


Explain the CVE ID: What does the identifier CVE-2010-0723 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0723.

SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-0723?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/eroauktion2010-sql.txt'}, {'name': '11521', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11521'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/eroauktion20-sql.txt'}, {'name': 'eroauktion-news-sql-injection(56446)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56446'}, {'tags': ['x_refsource_MISC'], 'url': 'http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-2010-sql-injection-news-php/'}, {'name': '11522', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11522'}, {'name': '38666', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38666'}, {'tags': ['x_refsource_MISC'], 'url': 'http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-v-2-0-sql-injection-news-php/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0723?


Explain the CVE ID: What does the identifier CVE-2010-0724 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0724.

SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-0724?

{'name': 'ADV-2010-0443', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0443'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/arabcart-sqlxss.txt'}, {'name': '11524', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11524'}, {'name': '38426', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38426'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0724?


Explain the CVE ID: What does the identifier CVE-2010-0725 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0725.

Cross-site scripting (XSS) vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-0725?


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0725?


Explain the CVE ID: What does the identifier CVE-2010-0726 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0726.

Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly related to the (1) plugin_tb_url and (2) plugin_tb_excerpt parameters.


Provide references for further information: Can you share references or external links related to CVE-2010-0726?

{'name': '62562', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62562'}, {'name': 'JVN#73331060', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN73331060/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://tdiary.svn.sourceforge.net/viewvc/tdiary/branches/Stable-2_2/plugin/tb-send.rb?r1=3238&r2=3573'}, {'name': '38742', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38742'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.tdiary.org/20100225.html'}, {'name': '38413', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38413'}, {'name': 'JVNDB-2010-000005', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2010-000005'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0726?


Explain the CVE ID: What does the identifier CVE-2010-0727 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0727.

The gfs2_lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfs_lock function in the Linux kernel on Red Hat Enterprise Linux (RHEL) 5 and 6, does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a denial of service (BUG and system crash) by locking a file on a (1) GFS or (2) GFS2 filesystem, and then changing this file's permissions.


Provide references for further information: Can you share references or external links related to CVE-2010-0727?

{'name': 'RHSA-2010:0330', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0330.html'}, {'name': '[oss-security] 20100312 CVE-2010-0727 kernel: gfs/gfs2 locking code DoS flaw', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/03/12/1'}, {'name': 'RHSA-2010:0380', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0380.html'}, {'name': '[linux-kernel] 20100311 [PATCH 3/3] GFS2: Skip check for mandatory locks when unlocking', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lkml.org/lkml/2010/3/11/269'}, {'name': 'oval:org.mitre.oval:def:11392', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11392'}, {'name': '1023809', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023809'}, {'name': 'MDVSA-2010:066', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2010:066'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.34-rc1-next-20100312.bz2'}, {'name': 'DSA-2053', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2010/dsa-2053'}, {'name': 'RHSA-2010:0521', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0521.html'}, {'name': '39830', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39830'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=570863'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0727?


Explain the CVE ID: What does the identifier CVE-2010-0728 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0728.

smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client.


Provide references for further information: Can you share references or external links related to CVE-2010-0728?

{'name': '[samba-announce] 20100308 Security problem with Samba on Linux - affects 3.5.0, 3.4.6 and 3.3.11', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.samba.org/archive/samba-announce/2010/000211.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.samba.org/samba/security/CVE-2010-0728'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.samba.org/samba/history/samba-3.4.7.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.samba.org/show_bug.cgi?id=7222'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.samba.org/samba/history/samba-3.3.12.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.samba.org/samba/history/samba-3.5.1.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0728?


Explain the CVE ID: What does the identifier CVE-2010-0729 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0729.

A certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 4 on the ia64 platform allows local users to use ptrace on an arbitrary process, and consequently gain privileges, via vectors related to a missing ptrace_check_attach call.


Provide references for further information: Can you share references or external links related to CVE-2010-0729?

{'name': '[oss-security] 20100312 CVE-2010-0729 kernel: ia64: ptrace: peek_or_poke requests miss ptrace_check_attach()', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/03/12/2'}, {'name': '38702', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38702'}, {'name': 'RHSA-2010:0394', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0394.html'}, {'name': 'oval:org.mitre.oval:def:8687', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8687'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=572007'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/css/P8/documents/100090459'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0729?


Explain the CVE ID: What does the identifier CVE-2010-0730 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0730.

The MMIO instruction decoder in the Xen hypervisor in the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows guest OS users to cause a denial of service (32-bit guest OS crash) via vectors that trigger an unspecified instruction emulation.


Provide references for further information: Can you share references or external links related to CVE-2010-0730?

{'name': '[oss-security] 20100507 CVE-2010-0730 xen: emulator instruction decoding inconsistency', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/05/07/1'}, {'name': '39979', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39979'}, {'name': 'oval:org.mitre.oval:def:11430', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11430'}, {'name': '39649', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39649'}, {'name': '43315', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43315'}, {'name': 'RHSA-2010:0398', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0398.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2011-0003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/css/P8/documents/100088287'}, {'name': '20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/516397/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=572971'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0730?


Explain the CVE ID: What does the identifier CVE-2010-0731 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0731.

The gnutls_x509_crt_get_serial function in the GnuTLS library before 1.2.1, when running on big-endian, 64-bit platforms, calls the asn1_read_value with a pointer to the wrong data type and the wrong length value, which allows remote attackers to bypass the certificate revocation list (CRL) check and cause a stack-based buffer overflow via a crafted X.509 certificate, related to extraction of a serial number.


Provide references for further information: Can you share references or external links related to CVE-2010-0731?

{'name': 'RHSA-2010:0167', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0167.html'}, {'name': '39127', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39127'}, {'name': 'MDVSA-2010:089', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2010:089'}, {'name': '38959', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38959'}, {'name': 'ADV-2010-0713', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0713'}, {'name': 'oval:org.mitre.oval:def:9759', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9759'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/4230'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=573028'}, {'name': 'SUSE-SR:2010:014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html'}, {'name': 'ADV-2010-1054', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1054'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0731?


Explain the CVE ID: What does the identifier CVE-2010-0732 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0732.

gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.


Provide references for further information: Can you share references or external links related to CVE-2010-0732?

{'name': '39317', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39317'}, {'name': '[oss-security] 20100212 CVE Request: gnome-screensaver termination by pressing "Enter"', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/02/12/1'}, {'name': '[oss-security] 20100316 Re: Re: CVE Request: gnome-screensaver termination by pressing "Enter"', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/03/16/9'}, {'name': '38211', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38211'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=565527'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.gnome.org/browse/gnome-screensaver/commit/?id=ab08cc93f2dc6223c8c00bfa1ca4f2d89069dbe0'}, {'name': 'SUSE-SR:2010:008', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news'}, {'name': 'MDVSA-2010:109', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2010:109'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.gnome.org/browse/gnome-screensaver/commit/?h=gnome-2-28&id=98f8a22412cf388217fd5b88915eadd274d68520'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.edge.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/446395'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.gnome.org/show_bug.cgi?id=598476'}, {'name': '[oss-security] 20100305 Re: CVE Request: gnome-screensaver termination by pressing "Enter"', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/03/05/2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.gnome.org/browse/gtk+/commit/?id=0748cf563d0d0d03001a62589f13be16a8ec06c1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0732?


Explain the CVE ID: What does the identifier CVE-2010-0733 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0733.

Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations.


Provide references for further information: Can you share references or external links related to CVE-2010-0733?

{'name': '[pgsql-bugs] 20091028 BUG #5145: Complex query with lots of LEFT JOIN causes segfault', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-bugs/2009-10/msg00277.php'}, {'name': 'RHSA-2010:0427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0427.html'}, {'name': 'RHSA-2010:0428', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0428.html'}, {'name': 'oval:org.mitre.oval:def:10691', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10691'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.postgresql.org/gitweb?p=postgresql.git%3Ba=commit%3Bh=64b057e6823655fb6c5d1f24a28f236b94dd6c54'}, {'name': '39820', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39820'}, {'name': '38619', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38619'}, {'name': '[oss-security] 20100316 Re: CVE Request: postgresql integer overflow in hash table size calculation', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/03/16/10'}, {'name': 'SUSE-SR:2010:014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html'}, {'name': '[pgsql-bugs] 20091030 Re: BUG #5145: Complex query with lots of LEFT JOIN causes segfault', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-bugs/2009-10/msg00310.php'}, {'name': '[pgsql-bugs] 20091029 Re: BUG #5145: Complex query with lots of LEFT JOIN causes segfault', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-bugs/2009-10/msg00289.php'}, {'name': '[oss-security] 20100309 CVE Request: postgresql integer overflow in hash table size calculation', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/03/09/2'}, {'name': '[pgsql-bugs] 20091029 Re: BUG #5145: Complex query with lots of LEFT JOIN causes segfault', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-bugs/2009-10/msg00287.php'}, {'name': 'RHSA-2010:0429', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0429.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=546621'}, {'name': 'ADV-2010-1197', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1197'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0733?


Explain the CVE ID: What does the identifier CVE-2010-0734 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0734.

content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit.


Provide references for further information: Can you share references or external links related to CVE-2010-0734?

{'name': 'APPLE-SA-2010-06-15-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html'}, {'name': 'ADV-2010-0571', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0571'}, {'name': 'ADV-2010-0602', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0602'}, {'name': '20101027 rPSA-2010-0072-1 curl', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/514490/100/0/threaded'}, {'name': '38843', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38843'}, {'name': '[oss-security] 20100309 Re: CVE Request -- cURL/libCURL 7.20.0', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/03/09/1'}, {'name': '38981', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38981'}, {'name': 'ADV-2010-1481', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1481'}, {'name': 'USN-1158-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1158-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://curl.haxx.se/docs/adv_20100209.html'}, {'name': 'ADV-2010-0725', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0725'}, {'name': 'DSA-2023', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2010/dsa-2023'}, {'name': 'RHSA-2010:0329', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0329.html'}, {'name': 'oval:org.mitre.oval:def:10760', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10760'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4188'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=563220'}, {'name': 'MDVSA-2010:062', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2010:062'}, {'name': '40220', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40220'}, {'name': 'GLSA-201203-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201203-02.xml'}, {'name': 'FEDORA-2010-2720', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037143.html'}, {'name': 'FEDORA-2010-2762', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036744.html'}, {'name': '48256', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48256'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/css/P8/documents/100081819'}, {'name': '[oss-security] 20100316 Re: CVE Request -- cURL/libCURL 7.20.0', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/03/16/11'}, {'name': '39087', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39087'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2011-0003.html'}, {'name': '45047', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45047'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wiki.rpath.com/Advisories:rPSA-2010-0072'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://curl.haxx.se/libcurl-contentencoding.patch'}, {'name': '20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/516397/100/0/threaded'}, {'name': 'oval:org.mitre.oval:def:6756', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6756'}, {'name': '39734', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39734'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://curl.haxx.se/docs/security.html#20100209'}, {'name': 'ADV-2010-0660', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0660'}, {'name': '[oss-security] 20100209 CVE Request -- cURL/libCURL 7.20.0', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/02/09/5'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0734?


Explain the CVE ID: What does the identifier CVE-2010-0735 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0735.


Provide references for further information: Can you share references or external links related to CVE-2010-0735?


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0735?


Explain the CVE ID: What does the identifier CVE-2010-0736 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0736.

Cross-site scripting (XSS) vulnerability in the view_queryform function in lib/viewvc.py in ViewVC before 1.0.10, and 1.1.x before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via "user-provided input."


Provide references for further information: Can you share references or external links related to CVE-2010-0736?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2326'}, {'name': '[oss-security] 20100316 Re: CVE Request: ViewVC 1.1.4 / 1.0.10 -- XSS via user-provided query form input', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/03/16/14'}, {'name': '[oss-security] 20100310 CVE Request: ViewVC 1.1.4 / 1.0.10 -- XSS via user-provided query form input', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/03/10/8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2313&r2=2342&pathrev=HEAD'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0736?


Explain the CVE ID: What does the identifier CVE-2010-0737 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0737.

A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON users to perform management tasks and configuration changes with the privileges of the administrator user.


Provide references for further information: Can you share references or external links related to CVE-2010-0737?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0737'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0737?


Explain the CVE ID: What does the identifier CVE-2010-0738 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0738.

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.


Provide references for further information: Can you share references or external links related to CVE-2010-0738?

{'name': 'RHSA-2010:0379', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2010-0379.html'}, {'name': 'RHSA-2010:0378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2010-0378.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=574105'}, {'name': 'RHSA-2010:0376', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2010-0376.html'}, {'name': '8408', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8408'}, {'name': 'RHSA-2010:0377', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2010-0377.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35'}, {'name': 'ADV-2010-0992', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0992'}, {'name': 'HPSBMU02714', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=132129312609324&w=2'}, {'name': 'jboss-jmxconsole-security-bypass(58147)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58147'}, {'name': 'SSRT100244', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=132129312609324&w=2'}, {'name': '39710', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39710'}, {'name': '39563', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39563'}, {'name': '1023918', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023918'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0738?


Explain the CVE ID: What does the identifier CVE-2010-0739 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0739.

Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-0739?

{'name': '39500', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39500'}, {'name': 'GLSA-201206-28', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201206-28.xml'}, {'name': 'oval:org.mitre.oval:def:11468', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11468'}, {'name': 'SUSE-SR:2010:013', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html'}, {'name': 'SUSE-SR:2010:012', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html'}, {'name': 'FEDORA-2010-8273', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041573.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-stable.git%3Ba=blob%3Bf=source/xapps-extra/tetex/texlive-CVE-2010-0739-int-overflow.patch'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=572941'}, {'name': 'USN-937-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-937-1'}, {'name': '39390', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39390'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0739?


Explain the CVE ID: What does the identifier CVE-2010-0740 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0740.

The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-0740?

{'name': '42724', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42724'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4723'}, {'name': 'HPSBUX02531', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127557640302499&w=2'}, {'name': 'APPLE-SA-2011-06-23-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openssl.org/news/secadv_20100324.txt'}, {'name': '[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html'}, {'name': 'ADV-2010-0710', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0710'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html'}, {'name': 'ADV-2010-0839', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0839'}, {'name': 'SSRT100108', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127557640302499&w=2'}, {'name': 'MDVSA-2010:076', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2010:076'}, {'name': 'HPSBUX02517', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127128920008563&w=2'}, {'name': '[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html'}, {'name': '1023748', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1023748'}, {'name': '39932', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39932'}, {'name': 'ADV-2010-0933', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0933'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2011-0003.html'}, {'name': 'SSRT100058', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=127128920008563&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.bluecoat.com/index?page=content&id=SA50'}, {'name': 'oval:org.mitre.oval:def:11731', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11731'}, {'name': '20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/516397/100/0/threaded'}, {'name': '43311', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43311'}, {'name': 'ADV-2010-1216', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1216'}, {'name': '42733', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42733'}, {'name': 'FEDORA-2010-5744', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0740?


Explain the CVE ID: What does the identifier CVE-2010-0741 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0741.

The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO).


Provide references for further information: Can you share references or external links related to CVE-2010-0741?

{'name': '1023798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023798'}, {'name': 'RHSA-2010:0476', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2010-0476.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.edge.launchpad.net/ubuntu/+source/qemu-kvm/+bug/458521'}, {'name': 'ADV-2010-0760', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0760'}, {'name': '[qemu-devel] 20091029 Re: qemu-kvm-0.11 regression, crashes on older guests with virtio network', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.gnu.org/archive/html/qemu-devel/2009-10/msg02480.html'}, {'name': 'oval:org.mitre.oval:def:11143', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11143'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://patchwork.kernel.org/patch/56479/'}, {'name': '[qemu-devel] 20091029 [PATCH] whitelist host virtio networking features [was Re: qemu-kvm-0.11 regression, crashes on older ...]', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.gnu.org/archive/html/qemu-devel/2009-10/msg02495.html'}, {'name': 'RHSA-2010:0271', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0271.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commit%3Bh=184bd0484533b725194fa517ddc271ffd74da7c9'}, {'name': '[oss-security] 20100329 CVE-2010-0741 qemu: Improper handling of erroneous data provided by Linux virtio-net driver', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2010/03/29/4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=577218'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0741?


Explain the CVE ID: What does the identifier CVE-2010-0742 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0742.

The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-0742?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://rt.openssl.org/Ticket/Display.html?id=2211&user=guest&pass=guest'}, {'name': 'ADV-2010-1313', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1313'}, {'name': '40024', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40024'}, {'name': '42724', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42724'}, {'name': 'oval:org.mitre.oval:def:12395', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12395'}, {'name': '40502', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40502'}, {'name': 'HPSBUX02610', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=129138643405740&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564'}, {'name': 'ADV-2010-3105', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/3105'}, {'name': '[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.openssl.org/filediff?f=openssl/crypto/cms/cms_asn1.c&v1=1.8&v2=1.8.6.1'}, {'name': '57353', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57353'}, {'name': '[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=598738'}, {'name': 'SSRT100341', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=129138643405740&w=2'}, {'name': '40000', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40000'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.bluecoat.com/index?page=content&id=SA50'}, {'name': '42733', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42733'}, {'name': '42457', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42457'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.openssl.org/chngview?cn=19693'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openssl.org/news/secadv_20100601.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0742?


Explain the CVE ID: What does the identifier CVE-2010-0743 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0743.

Multiple format string vulnerabilities in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) 1.0.3, 0.9.5, and earlier and (2) iSCSI Enterprise Target (aka iscsitarget) 0.4.16 allow remote attackers to cause a denial of service (tgtd daemon crash) or possibly have unspecified other impact via vectors that involve the isns_attr_query and qry_rsp_handle functions, and are related to (a) client appearance and (b) client disappearance messages.


Provide references for further information: Can you share references or external links related to CVE-2010-0743?

{'name': 'lstf-isns-format-string(57496)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57496'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=576359'}, {'name': 'MDVSA-2010:131', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2010:131'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=574935'}, {'name': 'oval:org.mitre.oval:def:11248', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11248'}, {'name': '39142', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39142'}, {'name': '[oss-security] 20100331 iscsitarget/scsi-target-tuils format string CVE assignment', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=oss-security&m=127005132403189&w=2'}, {'name': '39127', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39127'}, {'name': 'SUSE-SR:2010:017', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/tomo/tgt.git%3Ba=commit%3Bh=107d922706cd36f3bb79bcca9bc4678c32f22e59'}, {'name': 'DSA-2042', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2010/dsa-2042'}, {'name': 'ADV-2010-1786', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1786'}, {'name': '39726', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39726'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0743?


Explain the CVE ID: What does the identifier CVE-2010-0744 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0744.

aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via an arbitrary certificate.


Provide references for further information: Can you share references or external links related to CVE-2010-0744?

{'name': 'FEDORA-2010-7373', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041046.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/?view=log&pathrev=11991'}, {'name': '[oss-security] 20100310 CVE Request -- aMSN -- improper SSL certificate validation (MITM)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/03/10/4'}, {'name': '39796', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39796'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/sip.tcl?r1=11953&r2=11991&pathrev=11991'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/proxy.tcl?r1=11886&r2=11991&pathrev=11991'}, {'name': '35507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/35507'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=572818'}, {'name': '[oss-security] 20100401 Re: CVE Request -- aMSN -- improper SSL certificate validation (MITM)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/04/01/4'}, {'name': '20090626 aMSN SSL Certificate Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2009/Jun/239'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opensource-archive.org/showthread.php?p=183821'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/soap.tcl?r1=11891&r2=11991&pathrev=11991'}, {'name': '35621', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35621'}, {'name': 'ADV-2010-1109', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1109'}, {'name': 'FEDORA-2010-7378', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041079.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0744?


Explain the CVE ID: What does the identifier CVE-2010-0745 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0745.

Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service (CPU consumption) via long headers in an e-mail message.


Provide references for further information: Can you share references or external links related to CVE-2010-0745?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://security-tracker.debian.org/tracker/CVE-2010-0745'}, {'name': 'ADV-2010-1107', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1107'}, {'name': '[dovecot] 20100227 Possible CPU Denial-Of-Service attack to dovecot IMAP.', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://dovecot.org/pipermail/dovecot/2010-February/047190.html'}, {'name': 'SUSE-SR:2010:011', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html'}, {'name': 'MDVSA-2010:104', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2010:104'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=572268'}, {'name': 'ADV-2010-1226', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1226'}, {'name': '[oss-security] 20100310 CVE Request -- Dovecot v1.2.11 -- DoS (excessive CPU use) by processing email with huge header', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/03/10/6'}, {'name': '[dovecot-news] 20100308 v1.2.11 released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://dovecot.org/list/dovecot-news/2010-March/000152.html'}, {'name': '[oss-security] 20100401 Re: CVE Request -- Dovecot v1.2.11 -- DoS (excessive CPU use) by processing email with huge header', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=oss-security&m=127013715227551&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0745?


Explain the CVE ID: What does the identifier CVE-2010-0746 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0746.

Directory traversal vulnerability in DeviceKit-disks in DeviceKit, as used in Fedora 11 and 12 and possibly other operating systems, allows local users to gain privileges via .. (dot dot) sequences in the label for a pluggable storage device.


Provide references for further information: Can you share references or external links related to CVE-2010-0746?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.freedesktop.org/show_bug.cgi?id=23235'}, {'tags': ['x_refsource_MISC'], 'url': 'http://stealth.openwall.net/xSports/devshit.pl'}, {'name': '[oss-security] 20100401 Re: CVE Request: DeviceKit privilege escalation via pluggable storage device labels', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2010/q2/5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=523178'}, {'tags': ['x_refsource_MISC'], 'url': 'http://xorl.wordpress.com/2010/04/06/cve-2010-0746-devicekit-local-privilege-escalation/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0746?


Explain the CVE ID: What does the identifier CVE-2010-0747 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0747.

drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725.


Provide references for further information: Can you share references or external links related to CVE-2010-0747?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2010-0747'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.debian.org/security/2010/dsa-2015'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0747?


Explain the CVE ID: What does the identifier CVE-2010-0748 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0748.

Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.


Provide references for further information: Can you share references or external links related to CVE-2010-0748?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2010-0748'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0748'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://trac.transmissionbt.com/ticket/2965'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/transmission/transmission/wiki/Release-Notes#transmission-192-20100314'}, {'name': '[oss-security] 20100401 Re: CVE Request -- Transmission v1.92', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://www.openwall.com/lists/oss-security/2010/04/01/9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0748?


Explain the CVE ID: What does the identifier CVE-2010-0749 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0749.

Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame.


Provide references for further information: Can you share references or external links related to CVE-2010-0749?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2010-0749'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0749'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/transmission/transmission/wiki/Release-Notes#transmission-192-20100314'}, {'name': '[oss-security] 20100401 Re: CVE Request -- Transmission v1.92', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://www.openwall.com/lists/oss-security/2010/04/01/9'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://trac.transmissionbt.com/ticket/1242'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0749?


Explain the CVE ID: What does the identifier CVE-2010-0750 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0750.

pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument.


Provide references for further information: Can you share references or external links related to CVE-2010-0750?

{'name': 'policykit-pkexec-info-disc(57543)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57543'}, {'name': '[oss-security] 20100401 CVE Request: policykit (minor)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=oss-security&m=127014095301235&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cgit.freedesktop.org/PolicyKit/commit/?id=14bdfd816512a82b1ad258fa143ae5faa945df8a'}, {'name': '39149', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39149'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.freedesktop.org/show_bug.cgi?id=26982'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.net/bugs/532852'}, {'name': 'GLSA-201204-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201204-06.xml'}, {'name': '48817', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48817'}, {'name': '[oss-security] 20100401 Re: CVE Request: policykit (minor)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=oss-security&m=127014999113790&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0750?


Explain the CVE ID: What does the identifier CVE-2010-0751 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0751.

The ip_evictor function in ip_fragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via crafted fragmented packets.


Provide references for further information: Can you share references or external links related to CVE-2010-0751?

{'name': 'FEDORA-2010-5562', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038410.html'}, {'name': 'FEDORA-2010-5535', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038375.html'}, {'name': '39225', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39225'}, {'name': 'ADV-2010-0791', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0791'}, {'name': 'FEDORA-2010-5545', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038388.html'}, {'name': '39142', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39142'}, {'name': 'ADV-2010-0777', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0777'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://freefr.dl.sourceforge.net/project/libnids/libnids/1.24/libnids-1.24.releasenotes.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://xorl.wordpress.com/2010/04/04/libnids-ip-fragmentation-remote-null-pointer-dereference/'}, {'name': 'libnids-ipfragment-dos(57428)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57428'}, {'name': '39249', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39249'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0751?


Explain the CVE ID: What does the identifier CVE-2010-0752 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0752.

The week_post_page function in the Weekly Archive by Node Type module 6.x before 6.x-2.7 for Drupal does not properly implement node access restrictions when constructing SQL queries, which allows remote attackers to read restricted node listings via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2010-0752?

{'name': 'weeklyarchive-nodetype-info-disclosure(56504)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56504'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/723776'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/724286'}, {'name': '38717', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38717'}, {'name': '62565', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62565'}, {'name': '38397', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38397'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0752?


Explain the CVE ID: What does the identifier CVE-2010-0753 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0753.

SQL injection vulnerability in the SQL Reports (com_sqlreport) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter to ajax/print.php.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-0753?

{'name': 'sqlreport-userid-sql-injection(56476)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56476'}, {'name': '38361', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38361'}, {'name': '38678', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38678'}, {'name': '62534', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62534'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.packetstormsecurity.com/1002-exploits/joomlasqlreport-sql.txt'}, {'name': '11549', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11549'}, {'name': 'sql-reports-print-sql-injection(56541)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56541'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0753?


Explain the CVE ID: What does the identifier CVE-2010-0754 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0754.

Cross-site scripting (XSS) vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remote attackers to inject arbitrary web script or HTML via the which parameter in a copy action.


Provide references for further information: Can you share references or external links related to CVE-2010-0754?

{'name': 'ADV-2010-0468', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0468'}, {'name': '38386', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38386'}, {'name': '20120315 WikyBlog 1.7.3RC2 XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-03/0067.html'}, {'name': '62558', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62558'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.darksecurity.de/advisories/2012/SSCHADV2012-006.txt'}, {'name': '38699', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38699'}, {'name': 'wikyblog-which-xss(56518)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56518'}, {'name': '11560', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11560'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0754?


Explain the CVE ID: What does the identifier CVE-2010-0755 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0755.

PHP remote file inclusion vulnerability in include/WBmap.php in WikyBlog 1.7.3 rc2 allows remote attackers to execute arbitrary PHP code via a URL in the langFile parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-0755?

{'name': '38386', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38386'}, {'name': 'wikyblog-langfile-file-include(56519)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56519'}, {'name': '62647', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62647'}, {'name': '11560', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11560'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0755?


Explain the CVE ID: What does the identifier CVE-2010-0756 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0756.

Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to (1) index.php/Comment/Main, (2) index.php/Comment/Main/Home_Wiky, or (3) index.php/Edit/Main.


Provide references for further information: Can you share references or external links related to CVE-2010-0756?

{'name': 'wikyblog-multiple-session-hijacking(56594)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56594'}, {'name': '38386', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38386'}, {'name': '11560', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11560'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0756?


Explain the CVE ID: What does the identifier CVE-2010-0757 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0757.

Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension using the uploadform action, then accessing it via a direct request to the file in userfiles/[username]/uploaded/.


Provide references for further information: Can you share references or external links related to CVE-2010-0757?

{'name': '38386', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38386'}, {'name': 'wikyblog-index-file-upload(56517)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56517'}, {'name': '62648', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62648'}, {'name': '11560', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11560'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0757?


Explain the CVE ID: What does the identifier CVE-2010-0758 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0758.

SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2010-0758?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/softbizjobs-sql.txt'}, {'name': '11518', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11518'}, {'name': 'jobboard-newsdesc-sql-injection(56453)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56453'}, {'name': '38344', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38344'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0758?


Explain the CVE ID: What does the identifier CVE-2010-0759 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0759.

Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files[] parameter, a different vector than CVE-2010-0760.


Provide references for further information: Can you share references or external links related to CVE-2010-0759?

{'name': '38637', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38637'}, {'name': '62486', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/62486'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/joomlascriptegrator-lfi.txt'}, {'name': '11498', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11498'}, {'name': '38296', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38296'}, {'name': 'scriptegrator-jsloader-file-include(56380)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0759?


Explain the CVE ID: What does the identifier CVE-2010-0760 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0760.

Multiple directory traversal vulnerabilities in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) file parameter to libraries/jquery/js/ui/jsloader.php and the (2) files[] parameter to libraries/jquery/js/jsloader.php, a different vector than CVE-2010-0759.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2010-0760?

{'name': '38637', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38637'}, {'name': '62484', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/62484'}, {'name': '62485', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/62485'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0760?


Explain the CVE ID: What does the identifier CVE-2010-0761 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0761.

SQL injection vulnerability in index.php in CommodityRentals Books/eBooks Rentals Script allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a gamecatalog action.


Provide references for further information: Can you share references or external links related to CVE-2010-0761?

{'name': '38520', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38520'}, {'name': '38189', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38189'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/ebooksrental-sql.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.indonesiancoder.org/booksebooks-rental-software-sql-injection-vulnerability'}, {'name': '11402', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11402'}, {'name': 'booksebooks-index-sql-injection(56210)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56210'}, {'name': '62277', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62277'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0761?


Explain the CVE ID: What does the identifier CVE-2010-0762 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0762.

SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a catalog action.


Provide references for further information: Can you share references or external links related to CVE-2010-0762?

{'name': '11401', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11401'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.indonesiancoder.org/cd-rentals-script-sql-injection-vulnerability'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/cdrentals-sql.txt'}, {'name': 'cdrentals-index-sql-injection(56209)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56209'}, {'name': '62278', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/62278'}, {'name': '38184', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38184'}, {'name': '38519', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38519'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0762?


Explain the CVE ID: What does the identifier CVE-2010-0763 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0763.

SQL injection vulnerability in index.php in CommodityRentals Vacation Rental Software allows remote attackers to execute arbitrary SQL commands via the rental_id parameter in a CalendarView action.


Provide references for further information: Can you share references or external links related to CVE-2010-0763?

{'name': '11410', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11410'}, {'name': '38208', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38208'}, {'name': '38552', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38552'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0763?


Explain the CVE ID: What does the identifier CVE-2010-0764 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0764.

SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands via the cid parameter in a show action.


Provide references for further information: Can you share references or external links related to CVE-2010-0764?

{'name': '62272', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62272'}, {'name': '11382', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11382'}, {'name': 'esmile-index-sql-injection(56206)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56206'}, {'name': '38548', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38548'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/esmile-sql.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0764?


Explain the CVE ID: What does the identifier CVE-2010-0765 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0765.

fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for _database/forumFips.mdb.


Provide references for further information: Can you share references or external links related to CVE-2010-0765?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1001-exploits/fipsforum-disclose.txt'}, {'name': '11361', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11361'}, {'name': 'fipsforum-forumfips-information-disclosure(56183)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56183'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0765?


Explain the CVE ID: What does the identifier CVE-2010-0766 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0766.

Integer overflow in the Swap4 function in valet4.dll in Luxology Modo 401 allows user-assisted remote attackers to execute arbitrary code via a .LXO file containing a CHNL subchunk associated with an invalid length.


Provide references for further information: Can you share references or external links related to CVE-2010-0766?

{'name': '20100302 Luxology Modo 401 .LXO Integer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/509810/100/0/threaded'}, {'name': '20100303 CORRECTION: CORE-2009-0913 - Luxology Modo 401 .LXO Integer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/509843/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/content/luxology-modo-lxo-vulnerability'}, {'name': '38784', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38784'}, {'name': '62669', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62669'}, {'name': '38460', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38460'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0766?


Explain the CVE ID: What does the identifier CVE-2010-0768 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0768.

Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote attackers to inject arbitrary web script or HTML via the URI.


Provide references for further information: Can you share references or external links related to CVE-2010-0768?

{'name': '39140', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39140'}, {'name': 'PK97376', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PK97376'}, {'name': 'was-admin-console-xss(57164)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57164'}, {'name': '39051', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39051'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0768?


Explain the CVE ID: What does the identifier CVE-2010-0769 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0769.

IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by reading a cleartext field in the resources.xml file.


Provide references for further information: Can you share references or external links related to CVE-2010-0769?

{'name': 'was-wsadmin-info-disclosure(57185)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57185'}, {'name': 'PK95089', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PK95089'}, {'name': '39140', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39140'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0769?


Explain the CVE ID: What does the identifier CVE-2010-0770 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0770.

IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote authenticated users to cause a denial of service (ORB ListenerThread hang) by aborting an SSL handshake.


Provide references for further information: Can you share references or external links related to CVE-2010-0770?

{'name': '39140', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39140'}, {'name': '39056', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39056'}, {'name': 'was-orb-client-dos(57182)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57182'}, {'name': 'PK93653', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PK93653'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0770?


Explain the CVE ID: What does the identifier CVE-2010-0771 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0771.


Provide references for further information: Can you share references or external links related to CVE-2010-0771?


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0771?


Explain the CVE ID: What does the identifier CVE-2010-0772 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2010-0772.

Unspecified vulnerability in the channel process in IBM WebSphere MQ 7.0 before 7.0.1.2 allows remote authenticated users to cause a denial of service (daemon crash) via "incorrect channel control data."


Provide references for further information: Can you share references or external links related to CVE-2010-0772?

{'name': 'websphere-mq-ccd-dos(58039)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58039'}, {'name': '1023961', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023961'}, {'name': 'ADV-2010-1083', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1083'}, {'name': 'IZ68621', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IZ68621'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2010-0772?


Explain the CVE ID: What does the identifier CVE-2010-0774 mean in the context of cybersecurity?