Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2011-0451
Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Products: n/a
References: [{'name': 'JVN#84393059', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN84393059/index.html'}, {'name': '43153', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43153'}, {'name': '46100', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46100'}, {'name': 'ec-cube-list-xss(65079)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65079'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.ec-cube.net/open_trac/changeset/18742'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ec-cube.net/info/weakness/weakness.php?id=36'}, {'name': 'JVNDB-2011-000011', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000011.html'}]
CVE State: PUBLISHED
Explain CVE-2011-0452
Untrusted search path vulnerability in the script function in Lunascape before 6.4.3 allows local users to gain privileges via a Trojan horse executable file in the current working directory.
Affected Products: n/a
References: [{'name': 'JVN#38362957', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN38362957/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lunapedia.lunascape.jp/index.php?title=Lunascape6#2011.2F02.2F18_ver_6.4.3'}, {'name': '43441', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43441'}, {'name': 'lunascape-dll-code-execution(65592)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65592'}, {'name': 'JVNDB-2011-000012', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000012.html'}]
CVE State: PUBLISHED
Explain CVE-2011-0453
F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI port.
Affected Products: n/a
References: [{'name': '43326', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43326'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2011-1.html'}, {'name': 'ADV-2011-0393', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0393'}, {'name': '70898', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70898'}, {'name': 'JVNDB-2011-000013', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000013'}, {'name': 'JVN#71542734', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN71542734/index.html'}]
CVE State: PUBLISHED
Explain CVE-2011-0454
Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware 1.00 through 1.61, SEIL/B1 with firmware 1.00 through 3.11, SEIL/X1 with firmware 1.00 through 3.11, SEIL/X2 with firmware 1.00 through 3.11, SEIL/Turbo with firmware 1.80 through 2.10, and SEIL/neu 2FE Plus with firmware 1.80 through 2.10 might allow remote attackers to execute arbitrary code via a PPPoE packet.
Affected Products: n/a
References: [{'name': 'JVNDB-2011-000014', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000014'}, {'name': 'JVN#88991166', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN88991166/index.html'}, {'name': '46598', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46598'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.seil.jp/support/security/a01001.html'}, {'name': '43494', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43494'}, {'name': 'seil-pppac-bo(65672)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65672'}]
CVE State: PUBLISHED
Explain CVE-2011-0455
Cross-site scripting (XSS) vulnerability in Things BBS before 2.0.3 and BBS Thread before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Products: n/a
References: [{'name': 'bbs-bbsthread-unspecified-xss(65852)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65852'}, {'name': '43524', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43524'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.thingslabo.com/cgi/bbs_thread/download.html'}, {'name': 'JVNDB-2011-000015', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000015'}, {'name': 'JVN#20982938', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN20982938/index.html'}, {'name': '46638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46638'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.thingslabo.com/cgi/bbs/download.html'}]
CVE State: PUBLISHED
Explain CVE-2011-0456
webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."
Affected Products: n/a
References: [{'name': 'JVN#73162541', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN73162541/index.html'}, {'name': 'JVNDB-2011-000019', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000019'}, {'name': 'openSUSE-SU-2011:0278', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/7797670'}, {'name': '43960', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43960'}]
CVE State: PUBLISHED
Explain CVE-2011-0457
Cross-site scripting (XSS) vulnerability in e107 0.7.22 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://e107.org/comment.php?comment.news.872'}, {'name': 'JVN#01635457', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN01635457/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://e107.org/svn_changelog.php?version=0.7.23'}]
CVE State: PUBLISHED
Explain CVE-2011-0458
Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows local users to gain privileges via a Trojan horse executable file in the current working directory.
Affected Products: n/a
References: [{'name': 'google-picasa-dll-code-execution(66295)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66295'}, {'name': '43853', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43853'}, {'name': '47031', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47031'}, {'name': 'ADV-2011-0766', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0766'}, {'name': 'JVN#99977321', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN99977321/index.html'}, {'name': '71281', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71281'}, {'name': 'JVNDB-2011-000022', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000022'}]
CVE State: PUBLISHED
Explain CVE-2011-0459
Cross-site scripting (XSS) vulnerability in Cyber-Ark Password Vault Web Access (PVWA) 5.0 and earlier, 5.5 through 5.5 patch 4, and 6.0 through 6.0 patch 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Products: n/a
References: [{'name': 'JVNDB-2011-000023', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000023'}, {'name': '44058', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44058'}, {'name': '47271', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47271'}, {'name': 'JVN#11424086', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN11424086/index.html'}]
CVE State: PUBLISHED
Explain CVE-2011-0460
The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map.
Affected Products: n/a
References: [{'name': 'openSUSE-SU-2011:0357', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2011-04/msg00053.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=663898'}]
CVE State: PUBLISHED
Explain CVE-2011-0461
/etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab.
Affected Products: n/a
References: [{'name': 'SUSE-SR:2011:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/665479'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/security/cve/CVE-2011-0461.html'}, {'name': 'SUSE-SR:2011:005', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html'}, {'name': '[opensuse-updates] 20110314 openSUSE-SU-2011:0171-1 (moderate): aaa_base security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.opensuse.org/opensuse-updates/2011-03/msg00007.html'}]
CVE State: PUBLISHED
Explain CVE-2011-0462
Multiple cross-site scripting (XSS) vulnerabilities in the login page in the webui component in SUSE openSUSE Build Service (OBS) before 2.1.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://news.opensuse.org/2011/03/02/build-service-team-releases-new-versions-fixing-security-problems/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=669909'}]
CVE State: PUBLISHED
Explain CVE-2011-0463
The ocfs2_prepare_page_for_write function in fs/ocfs2/aops.c in the Oracle Cluster File System 2 (OCFS2) subsystem in the Linux kernel before 2.6.39-rc1 does not properly handle holes that cross page boundaries, which allows local users to obtain potentially sensitive information from uninitialized disk locations by reading a file.
Affected Products: n/a
References: [{'name': 'USN-1146-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1146-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=272b62c1f0f6f742046e45b50b6fec98860208a0'}, {'name': '43966', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43966'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=673037'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.39-rc1'}, {'name': '[ocfs2-devel] 20110217 [PATCH] Treat writes as new when holes span across page boundaries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://oss.oracle.com/pipermail/ocfs2-devel/2011-February/007846.html'}]
CVE State: PUBLISHED
Explain CVE-2011-0464
Unspecified vulnerability in Novell Vibe OnPrem 3.0 before Hot Patch 1 allows remote attackers to execute arbitrary code via unknown vectors.
Affected Products: n/a
References: [{'name': '43606', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43606'}, {'name': '1025163', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025163'}, {'name': '70956', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/70956'}, {'name': 'novell-vibeonprem-unspec-code-exec(65865)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65865'}, {'name': '46672', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46672'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5088845.html'}, {'name': 'ADV-2011-0592', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0592'}]
CVE State: PUBLISHED
Explain CVE-2011-0466
The API in SUSE openSUSE Build Service (OBS) 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access restrictions and modify a (1) package or (2) project via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://news.opensuse.org/2011/03/02/build-service-team-releases-new-versions-fixing-security-problems/'}]
CVE State: PUBLISHED
Explain CVE-2011-0467
A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL injection. Affected releases are SUSE Studio Onsite: versions prior to 1.0.3-0.18.1, SUSE Studio Onsite 1.1 Appliance: versions prior to 1.1.2-0.25.1.
Affected Products: SUSE Studio Onsite
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.suse.com/show_bug.cgi?id=675039'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.suse.com/security/cve/CVE-2011-0467/'}]
CVE State: PUBLISHED
Explain CVE-2011-0468
The aaa_base package before 11.3-8.9.1 in SUSE openSUSE 11.3, and before 11.4-54.62.1 in openSUSE 11.4, allows local users to gain privileges via shell metacharacters in a filename, related to tab expansion.
Affected Products: n/a
References: [{'name': '46983', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46983'}, {'name': '43825', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43825'}, {'name': '71253', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/71253'}, {'name': 'SUSE-SR:2011:005', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/678827'}, {'name': '[opensuse-updates] 20110322 openSUSE-SU-2011:0207-1 (moderate): aaa_base security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.opensuse.org/opensuse-updates/2011-03/msg00010.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/security/cve/CVE-2011-0468.html'}, {'name': 'aaabase-filename-privilege-escalation(66245)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66245'}]
CVE State: PUBLISHED
Explain CVE-2011-0469
Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011.
Affected Products: openSUSE
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.suse.com/show_bug.cgi?id=679325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/openSUSE/open-build-service/commit/23c8d21c75242999e29379e6ca8418a14c8725c6'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/openSUSE/open-build-service/commit/76b0ab003f34435ca90d943e02dd22279cdeec2a'}]
CVE State: PUBLISHED
Explain CVE-2011-0470
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle extensions notification, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:14366', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14366'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'name': '70453', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70453'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'name': 'unspecified(64661)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64661'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=58053'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}]
CVE State: PUBLISHED
Explain CVE-2011-0471
The node-iteration implementation in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 does not properly handle pointers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=65764'}, {'name': '70454', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70454'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'name': 'chrome-iteration-unspecified(64662)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64662'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}, {'name': 'oval:org.mitre.oval:def:13710', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13710'}]
CVE State: PUBLISHED
Explain CVE-2011-0472
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the printing of PDF documents, which allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a multi-page document.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:14622', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14622'}, {'name': 'chrome-pdf-files-unspecified(64663)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64663'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=66334'}, {'name': '70455', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70455'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}]
CVE State: PUBLISHED
Explain CVE-2011-0473
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with CANVAS elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'name': 'chrome-css-canvas-unspecified(64664)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64664'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'name': '70456', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70456'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=66560'}, {'name': 'oval:org.mitre.oval:def:14460', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14460'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}]
CVE State: PUBLISHED
Explain CVE-2011-0474
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=66748'}, {'name': 'oval:org.mitre.oval:def:14443', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14443'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'name': '70457', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70457'}, {'name': 'chrome-css-cursors-unspecified(64665)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64665'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'name': 'DSA-2188', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2188'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}]
CVE State: PUBLISHED
Explain CVE-2011-0475
Use-after-free vulnerability in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a PDF document.
Affected Products: n/a
References: [{'name': 'chrome-pdf-pages-code-execution(64666)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64666'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': '70458', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70458'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=67100'}, {'name': 'oval:org.mitre.oval:def:14606', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14606'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}]
CVE State: PUBLISHED
Explain CVE-2011-0476
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a PDF document that triggers an out-of-memory error.
Affected Products: n/a
References: [{'name': 'chrome-pdf-files-ce(64667)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64667'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=67208'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'name': 'oval:org.mitre.oval:def:14102', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14102'}, {'name': '70459', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70459'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}]
CVE State: PUBLISHED
Explain CVE-2011-0477
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes, which allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via unknown vectors.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:14390', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14390'}, {'name': 'chrome-video-frame-code-execution(64668)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64668'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'name': '70460', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70460'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=67303'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}]
CVE State: PUBLISHED
Explain CVE-2011-0478
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=67363'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'name': '70461', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70461'}, {'name': 'oval:org.mitre.oval:def:14191', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14191'}, {'name': 'chrome-use-code-execution(64669)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64669'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}]
CVE State: PUBLISHED
Explain CVE-2011-0479
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with extensions, which allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'name': 'oval:org.mitre.oval:def:14746', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14746'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'name': 'chrome-rouge-code-execution(64670)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64670'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=67393'}, {'name': '70462', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70462'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}]
CVE State: PUBLISHED
Explain CVE-2011-0480
Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://roundup.ffmpeg.org/issue2548'}, {'name': 'DSA-2306', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2306'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': '[ffmpeg-devel] 20101229 [PATCH] Fix a couple of errors with bad Vorbis headers', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://article.gmane.org/gmane.comp.video.ffmpeg.devel/122703'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=610550'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://codereview.chromium.org/6069005'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.ffmpeg.org/?p=ffmpeg.git%3Ba=commit%3Bh=13184036a6b1b1d4b61c91118c0896e9ad4634c3'}, {'name': 'MDVSA-2011:061', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:061'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://src.chromium.org/viewvc/chrome?view=rev&revision=70200'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://codereview.chromium.org/5964011'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'name': 'USN-1104-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-1104-1/'}, {'name': '70463', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70463'}, {'name': 'chrome-vorbis-bo(64671)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64671'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ffmpeg.mplayerhq.hu/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=68115'}, {'name': 'oval:org.mitre.oval:def:14380', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14380'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://roundup.ffmpeg.org/issue2550'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}]
CVE State: PUBLISHED
Explain CVE-2011-0481
Buffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF shading.
Affected Products: n/a
References: [{'name': '70464', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70464'}, {'name': 'chrome-pdf-shading-bo(64672)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64672'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'name': 'oval:org.mitre.oval:def:14418', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14418'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=68170'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}]
CVE State: PUBLISHED
Explain CVE-2011-0482
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document.
Affected Products: n/a
References: [{'name': 'SUSE-SR:2011:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': 'chrome-anchors-dos(64673)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64673'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'name': 'oval:org.mitre.oval:def:14662', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=68178'}, {'name': '70465', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70465'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'name': 'DSA-2188', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2188'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}]
CVE State: PUBLISHED
Explain CVE-2011-0483
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Affected Products: n/a
References: [{'name': '70466', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70466'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'name': 'chrome-type-cast-dos(64674)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64674'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'name': 'oval:org.mitre.oval:def:14706', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14706'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=68181'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}]
CVE State: PUBLISHED
Explain CVE-2011-0484
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale rendering node."
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:14131', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14131'}, {'name': '70467', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70467'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'name': 'chrome-dom-node-dos(64675)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64675'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=68439'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}]
CVE State: PUBLISHED
Explain CVE-2011-0485
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle speech data, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "stale pointer."
Affected Products: n/a
References: [{'name': '70468', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70468'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html'}, {'name': '45788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45788'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.srware.net/forum/viewtopic.php?f=18&t=2054'}, {'name': 'oval:org.mitre.oval:def:14381', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14381'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=68666'}, {'name': '42951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42951'}, {'name': 'chrome-speech-code-exec(64676)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64676'}]
CVE State: PUBLISHED
Explain CVE-2011-0486
Cross-site scripting (XSS) vulnerability in cognos.cgi in IBM Cognos 8 Business Intelligence (BI) 8.4.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via the pathinfo parameter.
Affected Products: n/a
References: [{'name': '45781', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45781'}, {'name': '1024954', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024954'}, {'name': 'ibm-cognos-pathinfo-xss(64660)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64660'}, {'name': 'ADV-2011-0090', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0090'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg24026110'}, {'name': '20110112 SECURITY ADVISORY IBM Cognos 8 Business Intelligence 8.4.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/515643/100/0/threaded'}, {'name': '70485', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70485'}]
CVE State: PUBLISHED
Explain CVE-2011-0487
ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a crafted file that is fetched through an automatic-update mechanism.
Affected Products: n/a
References: [{'name': 'VU#680540', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/680540'}, {'name': '20110114 Remote Code Execution in ICQ 7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/515724/100/0/threaded'}, {'name': '45805', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45805'}, {'name': 'icq-updates-code-execution(64711)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64711'}, {'name': '70486', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70486'}]
CVE State: PUBLISHED
Explain CVE-2011-0488
Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long request to TCP port 80.
Affected Products: n/a
References: [{'name': '42903', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42903'}, {'name': '70396', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/70396'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.indusoft.com/blog/?p=337'}, {'name': 'VU#506864', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/506864'}, {'name': 'ADV-2011-0093', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0093'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloadt.advantech.com/download/downloadsr.aspx?File_Id=1-I1D7QD'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICSA-10-337-01.pdf'}, {'name': 'ADV-2011-0092', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0092'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.advantechdirect.com/emarketingprograms/AStudio_Patch/AStudio_Patch.htm'}, {'name': '42883', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42883'}, {'name': '45783', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45783'}, {'name': 'indusoft-ntwebserver-bo(64678)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64678'}]
CVE State: PUBLISHED
Explain CVE-2011-0489
The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to modify data, obtain sensitive information, or cause a denial of service by sending requests over TCP to (1) the Lock Server or (2) the Advanced Multithreaded Server, as demonstrated by commands that are ordinarily sent by the (a) ookillls and (b) oostopams applications.  NOTE: some of these details are obtained from third party information.
Affected Products: n/a
References: [{'name': '42901', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42901'}, {'name': '15988', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/15988'}, {'name': 'objectivity-operations-sec-bypass(64699)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64699'}, {'name': '70424', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70424'}, {'name': 'VU#782567', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/782567'}, {'name': '45803', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45803'}, {'name': 'ADV-2011-0127', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0127'}]
CVE State: PUBLISHED
Explain CVE-2011-0490
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote attackers to cause a denial of service (daemon crash) via vectors that trigger certain log messages.
Affected Products: n/a
References: [{'name': '[or-announce] 20110117 Tor 0.2.1.29 is released (security patches)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.seul.org/or/announce/Jan-2011/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.torproject.org/blog/tor-02129-released-security-patches'}, {'name': 'tor-libevent-dos(64889)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64889'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://trac.torproject.org/projects/tor/ticket/2190'}, {'name': '45953', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45953'}]
CVE State: PUBLISHED
Explain CVE-2011-0491
The tor_realloc function in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not validate a certain size value during memory allocation, which might allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors, related to "underflow errors."
Affected Products: n/a
References: [{'name': '[or-announce] 20110117 Tor 0.2.1.29 is released (security patches)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.seul.org/or/announce/Jan-2011/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://trac.torproject.org/projects/tor/ticket/2324'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.torproject.org/blog/tor-02129-released-security-patches'}, {'name': 'tor-torrealloc-dos(64888)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64888'}, {'name': '45953', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45953'}]
CVE State: PUBLISHED
Explain CVE-2011-0492
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (assertion failure and daemon exit) via blobs that trigger a certain file size, as demonstrated by the cached-descriptors.new file.
Affected Products: n/a
References: [{'name': '[or-announce] 20110117 Tor 0.2.1.29 is released (security patches)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.seul.org/or/announce/Jan-2011/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.torproject.org/blog/tor-02129-released-security-patches'}, {'name': 'tor-blobs-dos(64867)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64867'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://trac.torproject.org/projects/tor/ticket/2326'}, {'name': '45953', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45953'}]
CVE State: PUBLISHED