Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4532 State: PUBLISHED Published: 2012-01-08T20:00:00Z Last Updated: 2024-09-17T02:11:52.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method. Additional Analyst Notes: - CVE Program Container: References: - http://support.automation.siemens.com/WW/view/en/114358 - http://aluigi.altervista.org/adv/almsrvx_1-adv.txt - http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll&objId=5725
.altervista.org/adv/almsrvx_1-adv.txt - http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll&objId=57252401&objAction=csView&nodeid0=17323948&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&load=content - http://www.us-cert.gov/control_systems/pdf/ICSA-11-361-01.pdf
CVE ID: CVE-2011-4533 State: PUBLISHED Published: 2012-02-10T19:00:00Z Last Updated: 2024-09-17T01:15:54.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: zenAdminSrv.exe in Ing. Punzenberger COPA-DATA zenon 6.51 SP0 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted packet to TCP port 50777, aka Reference Number 25240. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-013-01.pdf - http://secunia.com/advisories/47892
CVE ID: CVE-2011-4534 State: PUBLISHED Published: 2012-02-10T19:00:00Z Last Updated: 2024-09-17T04:04:22.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZenSysSrv.exe in Ing. Punzenberger COPA-DATA zenon 6.51 SP0 allows remote attackers to cause a denial of service (service crash) or possibly execute arbitrary code via a series of connections and disconnections on TCP port 1101, aka Reference Number 25212. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-013-01.pdf - http://secunia.com/advisories/47892
CVE ID: CVE-2011-4535 State: PUBLISHED Published: 2012-04-03T01:00:00Z Last Updated: 2024-09-17T00:50:42.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and earlier, ScadaTEC ModbusTagServer 4.1.1.81 and earlier, and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ZIP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-362-01.pdf - http://sourceforge.net/projects/tpabbrevia/files/Abbrevia%204.0.zip/download
CVE ID: CVE-2011-4536 State: PUBLISHED Published: 2011-12-27T02:00:00Z Last Updated: 2024-09-16T23:20:33.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in nettransdll.dll in HistorySvr.exe (aka HistoryServer.exe) in WellinTech KingView 6.53 and 65.30.2010.18018 allows remote attackers to execute arbitrary code via a crafted op-code 3 packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-11-351/ - http://www.osvdb.org/77992 - http://secunia.com/advisories/47339 - http://en.wellintech.com/news/detail.aspx?contentid=166 - http://www.kingview.com/news/detail.aspx?contentid=587 - http://
tp://en.wellintech.com/news/detail.aspx?contentid=166 - http://www.kingview.com/news/detail.aspx?contentid=587 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-355-02.pdf
CVE ID: CVE-2011-4537 State: PUBLISHED Published: 2011-12-27T02:00:00 Last Updated: 2024-08-07T00:09:18.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11355 and earlier allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet to TCP port (1) 12397 or (2) 12399. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-355-01-7.pdf - http://www.osvdb.org/77977 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71931
CVE ID: CVE-2011-4538 State: PUBLISHED Published: 2020-03-09T18:09:51 Last Updated: 2024-08-07T00:09:18.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings. Additional Analyst Notes: - CVE Program Container: References: - http://contentdelivery.lexmark.com/webcontent/CVE-2011-4538.pdf
CVE ID: CVE-2011-4539 State: PUBLISHED Published: 2011-12-08T11:00:00 Last Updated: 2024-08-07T00:09:18.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:182 - http://secunia.com/advisories/47153 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071549.html - http://www.ubuntu.com/usn/USN-1309-1 - http://
s.fedoraproject.org/pipermail/package-announce/2012-January/071549.html - http://www.ubuntu.com/usn/USN-1309-1 - http://lists.opensuse.org/opensuse-updates/2011-12/msg00006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/71680 - http://secunia.com/advisories/47178 - https://www.isc.org/software/dhcp/advisories/cve-2011-4539 - http://lists.fedoraproject.org/pipermail/package-announce/2011-December/070980.html - http://www.debian.org/security/2012/dsa-2519 - http://www.securitytracker.com/id?1026393 - http://security.gentoo.org/glsa/glsa-201301-06.xml - http://www.securityfocus.com/bid/50971
CVE ID: CVE-2011-4540 State: PUBLISHED Published: 2011-12-01T21:00:00 Last Updated: 2024-08-07T00:09:18.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AtMail Open (aka AtMail Open-Source edition) 1.04 allow remote attackers to inject arbitrary web script or HTML via the func parameter to (1) ldap.php or (2) search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50792 - http://osvdb.org/77330 - http://secunia.com/advisories/48308 - https://www.dognaedis.com/vulns/DGS-SEC-1.html - http://www.securityfocus.com/bid/50877 - http://secunia.com/advisories/47012
CVE ID: CVE-2011-4541 State: PUBLISHED Published: 2011-11-29T00:00:00 Last Updated: 2024-08-07T00:09:18.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48308 - https://www.dognaedis.com/vulns/DGS-SEC-2.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/71520
CVE ID: CVE-2011-4542 State: PUBLISHED Published: 2011-11-30T02:00:00 Last Updated: 2024-08-07T00:09:18.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] parameter in a mailbox Drafts action to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48308 - https://www.dognaedis.com/vulns/DGS-SEC-3.html
CVE ID: CVE-2011-4543 State: PUBLISHED Published: 2011-12-05T11:00:00 Last Updated: 2024-08-07T00:09:18.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in osCommerce 3.0.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) set or (2) module parameter to (a) OM/Core/Site/Admin/Application/templates_modules/pages/info.php, (b) OM/Core/Site/Admin/Application/templates_modules/pages/edit.php, or (c) OM/Core/Site/Admin/Application/templates_modules/pages/uninstall.php; the (3) set parameter to OM/Core/Site/Admin/Application/templates_modules/pages/main.php; the module parameter to (4) OM/Co
(3) set parameter to OM/Core/Site/Admin/Application/templates_modules/pages/main.php; the module parameter to (4) OM/Core/Site/Admin/Application/modules_order_total/pages/edit.php, (5) OM/Core/Site/Admin/Application/modules_order_total/pages/uninstall.php, (6) OM/Core/Site/Admin/Application/modules_order_total/pages/info.php, (7) OM/Core/Site/Admin/Application/modules_geoip/pages/edit.php, (8) OM/Core/Site/Admin/Application/modules_geoip/pages/uninstall.php, (9) OM/Core/Site/Admin/Application/images/pages/main.php, (10) OM/Core/Site/Admin/Application/modules_shipping/pages/edit.php, or (11) OM/Core/Site/Admin/Application/modules_shipping/pages/uninstall.php; the filter parameter to (12) OM/
/edit.php, or (11) OM/Core/Site/Admin/Application/modules_shipping/pages/uninstall.php; the filter parameter to (12) OM/Core/Site/Admin/Application/templates_modules_layout/pages/main.php, (13) OM/Core/Site/Admin/Application/templates_modules_layout/pages/new.php, or (14) OM/Core/Site/Admin/Application/templates_modules_layout/pages/edit.php; or the template parameter to (15) OM/Core/Site/Admin/Application/templates/pages/info.php, (16) OM/Core/Site/Admin/Application/templates/pages/edit.php, or (17) OM/Core/Site/Admin/Application/templates/pages/uninstall.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48308 - http://www.securityfocus.com/
nalyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48308 - http://www.securityfocus.com/bid/50793 - https://www.dognaedis.com/vulns/DGS-SEC-4.html
CVE ID: CVE-2011-4544 State: PUBLISHED Published: 2011-12-01T21:00:00 Last Updated: 2024-08-07T00:09:18.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Prestashop before 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) address or (2) relativ_base_dir parameter to modules/mondialrelay/googlemap.php; the (3) relativ_base_dir, (4) Pays, (5) Ville, (6) CP, (7) Poids, (8) Action, or (9) num parameter to prestashop/modules/mondialrelay/googlemap.php; (10) the num_mode parameter to modules/mondialrelay/kit_mondialrelay/RechercheDetailPointRelais_ajax.php; (11) the Expedition parameter to modules/mond
modules/mondialrelay/kit_mondialrelay/RechercheDetailPointRelais_ajax.php; (11) the Expedition parameter to modules/mondialrelay/kit_mondialrelay/SuiviExpedition_ajax.php; or the (12) folder or (13) name parameter to admin/ajaxfilemanager/ajax_save_text.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.dognaedis.com/vulns/DGS-SEC-6.html - http://www.securityfocus.com/bid/50784 - https://www.dognaedis.com/vulns/DGS-SEC-5.html
CVE ID: CVE-2011-4545 State: PUBLISHED Published: 2011-12-02T11:00:00 Last Updated: 2024-08-07T00:09:18.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in admin/displayImage.php in Prestashop 1.4.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dognaedis.com/vulns/DGS-SEC-7.html - http://www.securityfocus.com/bid/50785
CVE ID: CVE-2011-4547 State: PUBLISHED Published: 2011-11-29T00:00:00 Last Updated: 2024-08-07T00:09:18.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in includes/templates/template_default/common/tpl_header_test_info.php in Zen Cart 1.3.9h, when debugging is enabled, might allow remote attackers to inject arbitrary web script or HTML via the (1) main_page parameter or (2) PATH_INFO, a different vulnerability than CVE-2011-4567. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71519 - https://www.dognaedis.com/vulns/DGS-SEC-9.html - http://www.securityfocu
nge.xforce.ibmcloud.com/vulnerabilities/71519 - https://www.dognaedis.com/vulns/DGS-SEC-9.html - http://www.securityfocus.com/bid/50787
CVE ID: CVE-2011-4548 State: PUBLISHED Published: 2011-11-24T02:00:00 Last Updated: 2024-08-07T00:09:18.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 16.0.912.44 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/11/beta-channel-update-for-chromebooks_22.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/71613 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14107
CVE ID: CVE-2011-4551 State: PUBLISHED Published: 2012-10-01T00:00:00Z Last Updated: 2024-09-17T04:10:00.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware before 8.2 and LTS before 6.5 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47278 - http://info.tiki.org/article183-Tiki-Wiki-CMS-Groupware-8-2-and-6-5LTS-Security-Patches-Available - http://www.infoserve.de/system/files/advisories/INFOSERVE-ADV2011-07.txt - http://www.osvdb.org/77966
CVE ID: CVE-2011-4552 State: PUBLISHED Published: 2011-12-06T11:00:00Z Last Updated: 2024-09-16T21:02:54.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in One Click Orgs before 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the description field of (1) a new vote or (2) the eject member proposal feature. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/group/oneclickorgs-devspace/msg/26c40a4cc9e127d2?hl=en&dmode=source&output=gplain - http://dmcdonald.net/?page_id=43
CVE ID: CVE-2011-4553 State: PUBLISHED Published: 2011-12-06T11:00:00Z Last Updated: 2024-09-16T23:41:03.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in One Click Orgs before 1.2.3 allow (1) remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the return_to parameter, and allow (2) remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via crafted characters in the domain name of a subdomain. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/group/oneclickorgs-devspace/msg/26c40a4cc9e127d2?hl=en&dmode=source&output=
ner: References: - https://groups.google.com/group/oneclickorgs-devspace/msg/26c40a4cc9e127d2?hl=en&dmode=source&output=gplain - http://dmcdonald.net/?page_id=43
CVE ID: CVE-2011-4554 State: PUBLISHED Published: 2011-12-06T11:00:00Z Last Updated: 2024-09-17T02:42:29.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) and newline characters in an org name or (2) " (double quote) characters in an e-mail address, related to a "2nd Order SMTP Injection" issue. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/group/oneclickorgs-devspace/msg/26c40a4cc9e127d2?hl=en&dmode=source&output=gplain - http://dmcdonald.net/?page_id=43
CVE ID: CVE-2011-4555 State: PUBLISHED Published: 2011-12-06T11:00:00Z Last Updated: 2024-09-16T17:27:53.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote authenticated users to cause a denial of service (login disruption) or spoof votes or comments by selecting a conflicting e-mail address. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/group/oneclickorgs-devspace/msg/26c40a4cc9e127d2?hl=en&dmode=source&output=gplain - http://dmcdonald.net/?page_id=43
CVE ID: CVE-2011-4558 State: PUBLISHED Published: 2020-01-27T14:40:58 Last Updated: 2024-08-07T00:09:18.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and regex parameters. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/108111/Tiki-Wiki-CMS-Groupware-8.2-Code-Injection.html
CVE ID: CVE-2011-4559 State: PUBLISHED Published: 2011-11-28T21:00:00 Last Updated: 2024-08-07T00:09:18.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Calendar module in vTiger CRM 5.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the onlyforuser parameter in an index action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520006/100/0/threaded - http://seclists.org/fulldisclosure/2011/Oct/224 - http://www.securityfocus.com/bid/49948 - http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_blind_sqlin - http://osvdb.org/76138 - https://exchan
id/49948 - http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_blind_sqlin - http://osvdb.org/76138 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70344
CVE ID: CVE-2011-4560 State: PUBLISHED Published: 2011-11-28T21:00:00 Last Updated: 2024-08-07T00:09:18.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to signing a petition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49982 - http://osvdb.org/76094 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70342 - http://drupal.org/node/1300238 - http://secunia.com/advisories/46333
CVE ID: CVE-2011-4561 State: PUBLISHED Published: 2011-11-28T21:00:00 Last Updated: 2024-08-07T00:09:18.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in Phorum 5.2.18 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin/index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49920 - http://osvdb.org/76026 - http://www.rul3z.de/advisories/SSCHADV2011-023.txt - http://www.securityfocus.com/archive/1/519991/100/0/threaded - http://secunia.com/advisories/46282
CVE ID: CVE-2011-4562 State: PUBLISHED Published: 2011-11-28T21:00:00 Last Updated: 2024-08-07T00:09:18.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) view/admin/log_item.php and (2) view/admin/log_item_details.php in the Redirection plugin 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header in a request to a post that does not exist. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/redirection/changelog/ - http://plugins.trac.wordpress.org/changeset?reponame=&new=447262%40redirection&old=421721%40redirection
ion/changelog/ - http://plugins.trac.wordpress.org/changeset?reponame=&new=447262%40redirection&old=421721%40redirection - http://www.securityfocus.com/bid/49985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70373 - http://dotxed.net/2011/websicherheit/lazy-xss-wenn-statistiken-und-loggs-zur-gefahr-werden.html - http://osvdb.org/76092 - http://packetstormsecurity.org/files/view/105573/wpredirection229-xss.txt - http://secunia.com/advisories/46310
CVE ID: CVE-2011-4563 State: PUBLISHED Published: 2011-11-28T21:00:00Z Last Updated: 2024-09-17T03:58:49.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in JAKCMS 2.0.4.1, and possibly other versions before 2.2.6 2011-09-23, allows remote attackers to inject arbitrary web script or HTML via the userpost parameter in a PM request, related to tinymce. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50034 - http://www.jakcms.com/tracker/t/62/cross-site-scripting-flaw - http://secunia.com/advisories/46378
CVE ID: CVE-2011-4564 State: PUBLISHED Published: 2011-11-28T21:00:00 Last Updated: 2024-08-07T00:09:18.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the admin script in Active CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter in a module action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70376 - http://www.rul3z.de/advisories/SSCHADV2011-020.txt - http://www.securityfocus.com/archive/1/520029/100/0/threaded
CVE ID: CVE-2011-4565 State: PUBLISHED Published: 2011-11-28T21:00:00 Last Updated: 2024-08-07T00:09:19.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.5.1.a, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to include/formdhtmltextarea_preview.php or (2) img BBCODE tag within the message parameter to pmlite.php (aka Private Message). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70377 - http://secunia.c
es: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70377 - http://secunia.com/advisories/46238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70378 - https://www.htbridge.ch/advisory/multiple_xss_in_xoops_web_application_platform.html - http://www.securityfocus.com/bid/49995 - http://xoops.org/modules/news/article.php?storyid=6094
CVE ID: CVE-2011-4566 State: PUBLISHED Published: 2011-11-29T00:00:00 Last Updated: 2024-08-07T00:09:18.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset_val value in an EXIF header in a JPEG file, a different vulnerability than CVE-2011-0708. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47253 - http://www.securityfocus.com/bid/50907 - http://www.debian.org/security/2012/dsa-2399 - ht
ecunia.com/advisories/47253 - http://www.securityfocus.com/bid/50907 - http://www.debian.org/security/2012/dsa-2399 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:197 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/71612 - http://secunia.com/advisories/48668 - http://www.redhat.com/support/errata/RHSA-2012-0019.html - https://bugs.php.net/bug.php?id=60150 - http://rhn.redhat.com/errata/RHSA-2012-0071.html - https://www.ubuntu.com/usn/USN-1307-1/ - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html