From 15e8eb406f7d21c157fb3c11ce6bac06d783cc89 Mon Sep 17 00:00:00 2001 From: security tracker role Date: Mon, 28 Oct 2019 20:10:27 +0000 Subject: automatic update --- data/CVE/2010.list | 15 +++++---------- 1 file changed, 5 insertions(+), 10 deletions(-) (limited to 'data/CVE/2010.list') diff --git a/data/CVE/2010.list b/data/CVE/2010.list index adb25dcb17..8f67ea5078 100644 --- a/data/CVE/2010.list +++ b/data/CVE/2010.list @@ -2659,8 +2659,7 @@ CVE-2010-4247 (The do_block_io_op function in (1) drivers/xen/blkback/blkback.c - linux-2.6 (changes included since introduction of dom0 support) CVE-2010-4246 (Multiple cross-site scripting (XSS) vulnerabilities in graph.php in pf ...) NOT-FOR-US: pfSense -CVE-2010-4245 - RESERVED +CVE-2010-4245 (pootle 2.0.5-0.2 has XSS via 'match_names' parameter ...) - pootle 2.0.5-0.3 (low; bug #604060) [lenny] - pootle (Vulnerable code not present) CVE-2010-4244 @@ -2671,14 +2670,11 @@ CVE-2010-4243 (fs/exec.c in the Linux kernel before 2.6.37 does not enable the O CVE-2010-4242 (The hci_uart_tty_open function in the HCI UART driver (drivers/bluetoo ...) {DSA-2153-1} - linux-2.6 2.6.32-28 -CVE-2010-4241 - RESERVED +CVE-2010-4241 (Tiki Wiki CMS Groupware 5.2 has CSRF ...) - tikiwiki -CVE-2010-4240 - RESERVED +CVE-2010-4240 (Tiki Wiki CMS Groupware 5.2 has XSS ...) - tikiwiki -CVE-2010-4239 - RESERVED +CVE-2010-4239 (Tiki Wiki CMS Groupware 5.2 has Local File Inclusion ...) - tikiwiki CVE-2010-4238 (The vbd_create function in Xen 3.1.2, when the Linux kernel 2.6.18 on ...) - linux-2.6 (RedHat-specific issue, does not affect Xen-upstream/Debian) @@ -5199,8 +5195,7 @@ CVE-2010-3294 (Cross-site scripting (XSS) vulnerability in apc.php in the Altern - php-apc (unimportant) NOTE: vulnerable script is, mainly, for debugging purposes NOTE: and is distributed gzip-compressed -CVE-2010-3293 [mailscanner virus updates DoS] - RESERVED +CVE-2010-3293 (mailscanner can allow local users to prevent virus signatures from bei ...) - mailscanner (bug #596397; unimportant) NOTE: or even unimportant, the script is not used by default CVE-2010-3292 [mailscanner may use spoofed data] -- cgit v1.2.3