Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2011-1661
The Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node titles, which allows remote attackers to bypass intended access restrictions and read potentially sensitive node titles via the autocomplete feature.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/files/issues/db_rewrite_sql_12.patch'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1118408'}, {'name': '44046', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44046'}, {'name': '47238', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47238'}, {'name': 'nodequickfind-dbrewritesql-info-disc(66604)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66604'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1080114'}]
CVE State: PUBLISHED
Explain CVE-2011-1662
Cross-site scripting (XSS) vulnerability in Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Products: n/a
References: [{'name': 'transalation-unspecified-xss(66475)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66475'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1111174'}, {'name': '43950', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43950'}, {'name': '47098', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47098'}]
CVE State: PUBLISHED
Explain CVE-2011-1663
SQL injection vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Products: n/a
References: [{'name': 'translation-unspecified-sql-injection(66476)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66476'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1111174'}, {'name': '43950', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43950'}, {'name': '47098', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47098'}]
CVE State: PUBLISHED
Explain CVE-2011-1664
Cross-site request forgery (CSRF) vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1111174'}, {'name': '43950', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43950'}, {'name': 'translation-unspecified-csrf(66477)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66477'}]
CVE State: PUBLISHED
Explain CVE-2011-1665
PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain backup SQL files via a direct request for predictable filenames in cache/backup/.
Affected Products: n/a
References: [{'name': 'phpboost-backup-info-disclosure(66474)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66474'}, {'name': '43949', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43949'}, {'name': '17085', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17085'}]
CVE State: PUBLISHED
Explain CVE-2011-1666
Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in (1) Crm/Controller.php, (2) Crm/Export/Csv.php, or (3) Calendar/Model/Attender.php, which reveal the full installation path.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.htbridge.ch/advisory/path_disclosure_in_tine_2_0.html'}, {'name': '47102', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47102'}, {'name': 'tine-multiple-info-disc(66558)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66558'}, {'name': '8191', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8191'}, {'name': '20110331 HTB22909: Path disclosure in Tine 2.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517269/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2011-1667
SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/view/100006/anzeigenmarkt-sql.txt'}, {'name': '17102', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17102'}, {'name': '71463', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71463'}, {'name': 'anzeigenmarkt-index-sql-injection(66551)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66551'}, {'name': '8192', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8192'}, {'name': '47136', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47136'}, {'name': '44005', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44005'}]
CVE State: PUBLISHED
Explain CVE-2011-1668
Cross-site scripting (XSS) vulnerability in search.php in AR Web Content Manager (AWCM) 2.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/advisories/SECPOD_AWCM_XSS.txt'}, {'name': 'arwebcontentmanager-search-xss(66536)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66536'}, {'name': '47126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47126'}, {'name': '8193', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8193'}, {'name': '20110401 AR Web Content Manager (AWCM) Cross-Site scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517294/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2011-1669
Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F (encoded dot dot) sequences in the url parameter.
Affected Products: n/a
References: [{'name': '71707', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71707'}, {'name': '17119', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17119'}, {'name': '47146', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47146'}, {'name': 'wpcustompages-wp-dir-traversal(66559)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66559'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.autosectools.com/Advisories/WordPress.WP.Custom.Pages.0.5.0.1_Local.File.Inclusion_169.html'}, {'name': '43963', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43963'}]
CVE State: PUBLISHED
Explain CVE-2011-1670
Cross-site scripting (XSS) vulnerability in actions/add.php in InTerra Blog Machine 1.84, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the subject parameter to post_url/edit.
Affected Products: n/a
References: [{'name': '47104', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47104'}, {'name': 'interrablogmachine-subject-xss(66562)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66562'}, {'name': '20110331 HTB22931: XSS vulnerability in InTerra Blog Machine', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517271/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.htbridge.ch/advisory/xss_vulnerability_in_interra_blog_machine.html'}, {'name': '17098', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17098'}, {'name': '8195', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8195'}]
CVE State: PUBLISHED
Explain CVE-2011-1671
Cross-site scripting (XSS) vulnerability in app/controllers/todos_controller.rb in Tracks 1.7.2, 2.0RC2, and 2.0devel allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to todos/tag/.  NOTE: some of these details are obtained from third party information.
Affected Products: n/a
References: [{'name': '71352', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71352'}, {'name': '20110329 XSS Vulnerability in Tracks 1.7.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517223/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.mavitunasecurity.com/XSS-vulnerability-in-Tracks/'}, {'name': '8196', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8196'}, {'name': '47078', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47078'}, {'name': '43909', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43909'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.getontracks.org/downloads/comments/tracks-173'}, {'name': 'tracks-todoscontroller-xss(66561)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66561'}]
CVE State: PUBLISHED
Explain CVE-2011-1672
The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the (1) unattend.xml or (2) sysprep.inf file, as demonstrated by reading a password.
Affected Products: n/a
References: [{'name': '47172', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47172'}, {'name': 'VU#598700', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/598700'}, {'name': 'ADV-2011-0883', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0883'}, {'name': 'dell-kacek2000-peinst-info-disclosure(66630)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66630'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kace.com/support/kb/index.php?action=artikel&cat=1&id=1104'}]
CVE State: PUBLISHED
Explain CVE-2011-1673
BackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the administrator password by reading the configuration file.
Affected Products: n/a
References: [{'name': 'prosafe-backupconfig-info-disc(66817)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66817'}, {'name': 'VU#644812', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/644812'}, {'name': 'ADV-2011-0884', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0884'}, {'name': '44045', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44045'}]
CVE State: PUBLISHED
Explain CVE-2011-1674
The NetGear ProSafe WNAP210 with firmware 2.0.12 allows remote attackers to bypass authentication and obtain access to the configuration page by visiting recreate.php and then visiting index.php.
Affected Products: n/a
References: [{'name': 'prosafe-recreate-security-bypass(66723)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66723'}, {'name': 'VU#644812', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/644812'}, {'name': 'ADV-2011-0884', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0884'}, {'name': '44045', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44045'}]
CVE State: PUBLISHED
Explain CVE-2011-1682
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create a list or (2) insert cross-site scripting (XSS) sequences.  NOTE: this issue exists because of an incomplete fix for CVE-2011-0748.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Products: n/a
References: [{'name': 'phplist-list-csrf(66666)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66666'}, {'name': '44041', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44041'}, {'name': 'phplist-xss-sequences-csrf(66816)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66816'}]
CVE State: PUBLISHED
Explain CVE-2011-1683
IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21473989'}, {'name': 'PM35611', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1PM35611'}, {'name': 'PM35609', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1PM35609'}, {'name': '43965', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43965'}, {'name': 'PM35545', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1PM35545'}, {'name': 'PM35480', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1PM35480'}, {'name': 'PM35478', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1PM35478'}, {'name': '47122', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47122'}, {'name': 'ADV-2011-0833', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0833'}]
CVE State: PUBLISHED
Explain CVE-2011-1684
Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted MP4 file.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:14741', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14741'}, {'name': 'ADV-2011-0954', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0954'}, {'name': '43890', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43890'}, {'name': '[oss-security] 20110412 CVE id request: vlc', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/11/17'}, {'name': '44022', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44022'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=5637ca8141bf39f263ecdb62035d2cb45c740821'}, {'name': 'ADV-2011-0916', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0916'}, {'name': 'DSA-2218', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2218'}, {'name': '[oss-security] 20110413 Re: CVE id request: vlc', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/13/17'}, {'name': 'vlcmediaplayer-mp4readboxskcr-bo(66664)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66664'}, {'name': '47293', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47293'}, {'name': '1025373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025373'}, {'name': '[oss-security] 20110413 Re: CVE id request: vlc', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/13/14'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.videolan.org/security/sa1103.html'}]
CVE State: PUBLISHED
Explain CVE-2011-1685
Best Practical Solutions RT 3.8.0 through 3.8.9 and 4.0.0rc through 4.0.0rc7, when the CustomFieldValuesSources (aka external custom field) option is enabled, allows remote authenticated users to execute arbitrary code via unspecified vectors, as demonstrated by a cross-site request forgery (CSRF) attack.
Affected Products: n/a
References: [{'name': 'ADV-2011-1071', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1071'}, {'name': '[rt-announce] 20110414 RT 3.8.10 Released - Security Release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=696795'}, {'name': 'rt-externalcustomfield-code-exec(66791)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66791'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html'}, {'name': '47383', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47383'}, {'name': '[rt-announce] 20110414 Security vulnerabilities in RT', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html'}, {'name': 'DSA-2220', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2220'}, {'name': '44189', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44189'}]
CVE State: PUBLISHED
Explain CVE-2011-1686
Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, as demonstrated by reading data.
Affected Products: n/a
References: [{'name': 'ADV-2011-1071', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1071'}, {'name': '[rt-announce] 20110414 RT 3.8.10 Released - Security Release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=696795'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html'}, {'name': '47383', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47383'}, {'name': '[rt-announce] 20110414 Security vulnerabilities in RT', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html'}, {'name': '[rt-announce] 20110414 RT 3.6.11 Released - Security Release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html'}, {'name': 'DSA-2220', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2220'}, {'name': '44189', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44189'}, {'name': 'rt-unspec-sql-injection(66792)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66792'}]
CVE State: PUBLISHED
Explain CVE-2011-1687
Best Practical Solutions RT 3.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote authenticated users to obtain sensitive information by using the search interface, as demonstrated by retrieving encrypted passwords.
Affected Products: n/a
References: [{'name': 'ADV-2011-1071', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1071'}, {'name': '[rt-announce] 20110414 RT 3.8.10 Released - Security Release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=696795'}, {'name': 'rt-search-interface-info-disclosure(66793)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66793'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html'}, {'name': '47383', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47383'}, {'name': '[rt-announce] 20110414 Security vulnerabilities in RT', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html'}, {'name': '[rt-announce] 20110414 RT 3.6.11 Released - Security Release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html'}, {'name': 'DSA-2220', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2220'}, {'name': '44189', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44189'}]
CVE State: PUBLISHED
Explain CVE-2011-1688
Directory traversal vulnerability in Best Practical Solutions RT 3.2.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote attackers to read arbitrary files via a crafted HTTP request.
Affected Products: n/a
References: [{'name': 'rt-unspecified-dir-traversal(66795)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66795'}, {'name': 'ADV-2011-1071', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1071'}, {'name': '[rt-announce] 20110414 RT 3.8.10 Released - Security Release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=696795'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html'}, {'name': '47383', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47383'}, {'name': '[rt-announce] 20110414 Security vulnerabilities in RT', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html'}, {'name': '[rt-announce] 20110414 RT 3.6.11 Released - Security Release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html'}, {'name': 'DSA-2220', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2220'}, {'name': '44189', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44189'}]
CVE State: PUBLISHED
Explain CVE-2011-1689
Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Products: n/a
References: [{'name': 'ADV-2011-1071', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1071'}, {'name': 'rt-unspec-xss(66796)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66796'}, {'name': '[rt-announce] 20110414 RT 3.8.10 Released - Security Release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=696795'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html'}, {'name': '47383', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47383'}, {'name': '[rt-announce] 20110414 Security vulnerabilities in RT', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html'}, {'name': '[rt-announce] 20110414 RT 3.6.11 Released - Security Release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html'}, {'name': 'DSA-2220', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2220'}, {'name': '44189', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44189'}]
CVE State: PUBLISHED
Explain CVE-2011-1690
Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers to trick users into sending credentials to an arbitrary server via unspecified vectors.
Affected Products: n/a
References: [{'name': 'ADV-2011-1071', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1071'}, {'name': '[rt-announce] 20110414 RT 3.8.10 Released - Security Release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=696795'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html'}, {'name': 'rt-unspecified-sec-bypass(66794)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66794'}, {'name': '47383', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47383'}, {'name': '[rt-announce] 20110414 Security vulnerabilities in RT', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html'}, {'name': '[rt-announce] 20110414 RT 3.6.11 Released - Security Release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html'}, {'name': 'DSA-2220', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2220'}, {'name': '44189', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44189'}]
CVE State: PUBLISHED
Explain CVE-2011-1691
The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and other products, does not properly handle access to the (1) counterIncrement and (2) counterReset attributes of CSSStyleDeclaration data provided by a getComputedStyle method call, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.webkit.org/show_bug.cgi?id=57266'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=77665'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.webkit.org/changeset/82222'}, {'name': 'oval:org.mitre.oval:def:14365', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14365'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/04/beta-channel-update_12.html'}, {'name': 'google-countertocssvalue-dos(66818)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66818'}]
CVE State: PUBLISHED
Explain CVE-2011-1696
Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity Manager Roles Based Provisioning Module 3.6.0, 3.6.1, 3.7.0, and 4.0.0, allows remote attackers to inject arbitrary web script or HTML via the apwaDetail (aka apwaDetailId) parameter, aka Bug 692972.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5111710.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5112271.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=692972'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5112230.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5111711.html'}, {'name': '1026138', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026138'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5112250.html'}, {'name': '49935', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/49935'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5112270.html'}]
CVE State: PUBLISHED
Explain CVE-2011-1699
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted uri parameter in a printer-url.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-172/'}, {'name': '1025606', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025606'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.novell.com/Download?buildid=6_bNby38ERg~'}, {'name': '20110606 ZDI-11-172: Novell iPrint nipplib.dll uri Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/518266/100/0/threaded'}, {'name': '44811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44811'}, {'name': '48124', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48124'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008720'}]
CVE State: PUBLISHED
Explain CVE-2011-1700
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-time parameter in a printer-url.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-173/'}, {'name': '1025606', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025606'}, {'name': '20110606 ZDI-11-173: Novell iPrint nipplib.dll profile-time Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/518267/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.novell.com/Download?buildid=6_bNby38ERg~'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008722'}, {'name': '44811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44811'}, {'name': '48124', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48124'}]
CVE State: PUBLISHED
Explain CVE-2011-1701
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-name parameter in a printer-url.
Affected Products: n/a
References: [{'name': '1025606', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025606'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.novell.com/Download?buildid=6_bNby38ERg~'}, {'name': '44811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44811'}, {'name': '48124', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48124'}, {'name': 'novell-iprint-profilename-bo(67876)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67876'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008723'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-174/'}, {'name': '20110606 ZDI-11-174: Novell iPrint nipplib.dll profile-name Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/518269/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2011-1702
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted file-date-time parameter in a printer-url.
Affected Products: n/a
References: [{'name': '20110606 ZDI-11-175: Novell iPrint nipplib.dll file-date-time Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/518270/100/0/threaded'}, {'name': '1025606', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025606'}, {'name': 'novell-iprint-filedatetime-bo(67877)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67877'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.novell.com/Download?buildid=6_bNby38ERg~'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-175/'}, {'name': '44811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44811'}, {'name': '48124', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48124'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008724'}]
CVE State: PUBLISHED
Explain CVE-2011-1703
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted driver-version parameter in a printer-url.
Affected Products: n/a
References: [{'name': '1025606', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025606'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008727'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.novell.com/Download?buildid=6_bNby38ERg~'}, {'name': 'novell-iprint-driverversion-bo(67878)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67878'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-176/'}, {'name': '44811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44811'}, {'name': '48124', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48124'}, {'name': '20110606 ZDI-11-176: Novell iPrint nipplib.dll driver-version Remote Code Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/518271/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2011-1704
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted core-package parameter in a printer-url.
Affected Products: n/a
References: [{'name': '1025606', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025606'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.novell.com/Download?buildid=6_bNby38ERg~'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008728'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-177/'}, {'name': '44811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44811'}, {'name': '48124', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48124'}, {'name': '20110606 ZDI-11-177: Novell iPrint nipplib.dll core-package Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/518268/100/0/threaded'}, {'name': 'novell-iprint-corepackage-bo(67879)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67879'}]
CVE State: PUBLISHED
Explain CVE-2011-1705
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url.
Affected Products: n/a
References: [{'name': '1025606', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025606'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.novell.com/Download?buildid=6_bNby38ERg~'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-178/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008729'}, {'name': '44811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44811'}, {'name': '48124', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48124'}, {'name': '20110606 ZDI-11-178: Novell iPrint nipplib.dll client-file-name Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/518272/100/0/threaded'}, {'name': 'novell-iprint-clientfilename-bo(67880)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67880'}]
CVE State: PUBLISHED
Explain CVE-2011-1706
Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted iprint-client-config-info parameter in a printer-url.
Affected Products: n/a
References: [{'name': '1025606', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025606'}, {'name': 'novell-iprint-iprintclientconfiginfo-bo(67881)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67881'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008730'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.novell.com/Download?buildid=6_bNby38ERg~'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-179/'}, {'name': '20110606 ZDI-11-179: Novell iPrint nipplib.dll iprint-client-config-info Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/518273/100/0/threaded'}, {'name': '44811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44811'}, {'name': '48124', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48124'}]
CVE State: PUBLISHED
Explain CVE-2011-1707
Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs parameter in a printer-url.
Affected Products: n/a
References: [{'name': 'novell-iprint-opprinterlistalljobs-bo(67883)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67883'}, {'name': '1025606', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025606'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-181/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.novell.com/Download?buildid=6_bNby38ERg~'}, {'name': '44811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44811'}, {'name': '48124', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48124'}, {'name': '20110606 ZDI-11-181: Novell iPrint op-printer-list-all-jobs url Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/518275/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2011-1708
Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs cookie.
Affected Products: n/a
References: [{'name': '1025606', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025606'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-180/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.novell.com/Download?buildid=6_bNby38ERg~'}, {'name': 'novell-iprint-opprinterlistalljobs-cookie-bo(67882)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67882'}, {'name': '44811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44811'}, {'name': '48124', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48124'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008731'}, {'name': '20110606 ZDI-11-180: Novell iPrint op-printer-list-all-jobs cookie Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/518274/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2011-1709
GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.2.news'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.gnome.org/browse/gdm/commit/?id=d13dd72531599ab7e4c747db3b58a8c17753e08d'}, {'name': '44797', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44797'}, {'name': 'FEDORA-2011-7822', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061264.html'}, {'name': 'USN-1142-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1142-1'}, {'name': '48084', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48084'}, {'name': 'openSUSE-SU-2011:0581', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/8643655'}, {'name': '44808', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44808'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=709139'}]
CVE State: PUBLISHED
Explain CVE-2011-1710
Multiple integer overflows in the HTTP server in the Novell XTier framework 3.1.8 allow remote attackers to cause a denial of service (service crash) or possibly execute arbitrary code via crafted header length variables.
Affected Products: n/a
References: [{'name': 'SUSE-SU-2011:1185', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00012.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/security/cve/CVE-2011-1710.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.novell.com/patch/finder/?keywords=b8833ce91ca8c8d2a478a8a32a2e2efb'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/585440'}]
CVE State: PUBLISHED
Explain CVE-2011-1711
Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote authenticated users to access the accounts of other users via unknown vectors.
Affected Products: n/a
References: [{'name': 'novell-mobility-pack-unauth-access(67840)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67840'}, {'name': '48117', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48117'}, {'name': '1025608', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025608'}, {'name': '72759', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72759'}, {'name': '44864', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44864'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/viewContent.do?externalId=7008690'}]
CVE State: PUBLISHED
Explain CVE-2011-1712
The txXPathNodeUtils::getXSLTId function in txMozillaXPathTreeWalker.cpp and txStandaloneXPathTreeWalker.cpp in Mozilla Firefox before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1, and SeaMonkey before 2.0.14, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2011/mfsa2011-18.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=640339'}, {'name': 'firefox-txxpathnodeutils-info-disclosure(66836)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66836'}, {'tags': ['x_refsource_MISC'], 'url': 'http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html'}, {'name': 'oval:org.mitre.oval:def:14467', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14467'}]
CVE State: PUBLISHED