Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4309 State: PUBLISHED Published: 2012-07-11T10:00:00Z Last Updated: 2024-08-07T00:01:51.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to a URL. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=188323 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=5eb1cec34f013fdcb559b66bc401f2845ce0bbb7 - https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE ID: CVE-2011-4310 State: PUBLISHED Published: 2019-11-26T22:57:43 Last Updated: 2024-08-07T00:01:51.566Z Vendors: The CMS Made Simple Foundation Products: CMSMS Problem Types: Other Description: The news module in CMSMS before 1.9.4.3 allows remote attackers to corrupt new articles. Additional Analyst Notes: - CVE Program Container: References: - https://www.cmsmadesimple.org/2011/08/Announcing-CMSMS-1-9-4-3---Security-Release/
CVE ID: CVE-2011-4311 State: PUBLISHED Published: 2011-11-19T02:00:00Z Last Updated: 2024-09-16T17:33:42.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: ResourceSpace before 4.2.2833 does not properly validate access keys, which allows remote attackers to bypass intended resource restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/3 - http://www.resourcespace.org/download.php - http://openwall.com/lists/oss-security/2011/11/13/2
CVE ID: CVE-2011-4312 State: PUBLISHED Published: 2011-11-24T02:00:00 Last Updated: 2024-08-07T00:01:51.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) diff viewer or (2) screenshot component. Additional Analyst Notes: - CVE Program Container: References: - http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.6.3/ - https://bugzilla.redhat.com/show_bug.cgi?id=754126 - http://secunia.com/advisories/46840 - https://github.com/reviewboard/reviewboard/c
a.redhat.com/show_bug.cgi?id=754126 - http://secunia.com/advisories/46840 - https://github.com/reviewboard/reviewboard/commit/7a0a9d94555502278534dedcf2d75e9fccce8c3d - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/070176.html - http://www.openwall.com/lists/oss-security/2011/11/15/9 - http://www.openwall.com/lists/oss-security/2011/11/15/8 - http://www.securityfocus.com/bid/50681 - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/070091.html
CVE ID: CVE-2011-4313 State: PUBLISHED Published: 2011-11-29T17:00:00 Last Updated: 2024-08-07T00:01:51.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=133978480208466&w=2 - http://www.redhat.com/support/errata/
ogram Container: References: - http://marc.info/?l=bugtraq&m=133978480208466&w=2 - http://www.redhat.com/support/errata/RHSA-2011-1459.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:176 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14343 - http://marc.info/?l=bugtraq&m=141879471518471&w=2 - http://secunia.com/advisories/47075 - http://secunia.com/advisories/48308 - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069463.html - http://marc.info/?l=bugtraq&m=141879471518471&w=2 - http://www.debian.org/security/2011/dsa-2347 - http://www.redhat.com/support/errata/RHSA-2011-1496.html - http://osvdb.org/77159 -
debian.org/security/2011/dsa-2347 - http://www.redhat.com/support/errata/RHSA-2011-1496.html - http://osvdb.org/77159 - http://marc.info/?l=bugtraq&m=132310123002302&w=2 - http://security.freebsd.org/advisories/FreeBSD-SA-11:06.bind.asc - http://www.kb.cert.org/vuls/id/606539 - http://secunia.com/advisories/46943 - http://secunia.com/advisories/46829 - http://secunia.com/advisories/47043 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00029.html - http://secunia.com/advisories/46906 - http://secunia.com/advisories/46536 - http://marc.info/?l=bugtraq&m=132310123002302&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069975.html - http://lists.app
10123002302&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069975.html - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://secunia.com/advisories/46890 - http://support.apple.com/kb/HT5501 - http://www.ibm.com/support/docview.wss?uid=isg1IV11248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71332 - http://secunia.com/advisories/46887 - http://secunia.com/advisories/46984 - http://www.isc.org/software/bind/advisories/cve-2011-4313 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00027.html - http://www.ubuntu.com/usn/USN-1264-1 - http://secunia.com/advisories/46905 - http://lists.fedoraproject.org/piperma
ml - http://www.ubuntu.com/usn/USN-1264-1 - http://secunia.com/advisories/46905 - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069970.html - http://www.redhat.com/support/errata/RHSA-2011-1458.html - http://www.securityfocus.com/bid/50690 - http://marc.info/?l=bugtraq&m=133978480208466&w=2 - http://www-01.ibm.com/support/docview.wss?uid=isg1IV11106 - http://www.securitytracker.com/id?1026335 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00028.html - http://blogs.oracle.com/sunsecurity/entry/cve_2011_4313_denial_of
CVE ID: CVE-2011-4314 State: PUBLISHED Published: 2012-01-27T15:00:00 Last Updated: 2024-08-07T00:01:51.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-1804.html - http://secunia.
Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-1804.html - http://secunia.com/advisories/44496 - http://openid.net/2011/05/05/attribute-exchange-security-alert/ - http://rhn.redhat.com/errata/RHSA-2012-0519.html - http://secunia.com/advisories/48954 - http://rhn.redhat.com/errata/RHSA-2012-0441.html - http://www.openwall.com/lists/oss-security/2011/11/16/1 - https://issues.jboss.org/browse/SOA-3597 - https://issues.jboss.org/browse/JBEPP-1368 - http://securitytracker.com/id?1026400 - http://www.openwall.com/lists/oss-security/2011/11/17/1 - http://secunia.com/advisories/48697
CVE ID: CVE-2011-4315 State: PUBLISHED Published: 2011-12-08T20:00:00 Last Updated: 2024-08-07T00:01:51.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/17/10 - http://lists.fedoraproject.org/pipermail/package-announce/2011-December/070569.html - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00005.html - http://www.
nce/2011-December/070569.html - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00005.html - http://www.nginx.org/en/CHANGES-1.0 - http://trac.nginx.org/nginx/changeset/4268/nginx - http://openwall.com/lists/oss-security/2011/11/17/8 - http://secunia.com/advisories/48577 - http://secunia.com/advisories/47097 - http://security.gentoo.org/glsa/glsa-201203-22.xml - http://www.securityfocus.com/bid/50710
CVE ID: CVE-2011-4316 State: PUBLISHED Published: 2013-01-04T22:00:00Z Last Updated: 2024-08-07T00:01:51.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions, does not lock the desktop screen between SPICE sessions, which allows local users with access to a virtual machine to gain access to other users' desktop sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1508.html - http://www.securityfocus.com/bid/56825 - http://rhn.redhat.com/errata/RHSA-2012-1506.html - https://bugzilla.redhat.com/show_bug.
w.securityfocus.com/bid/56825 - http://rhn.redhat.com/errata/RHSA-2012-1506.html - https://bugzilla.redhat.com/show_bug.cgi?id=754876 - http://www.securitytracker.com/id?1027838
CVE ID: CVE-2011-4317 State: PUBLISHED Published: 2011-11-30T02:00:00 Last Updated: 2024-08-07T00:01:51.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions. NOTE: this vulnerability exists because of an incomplete fix for CV
cter and a : (colon) character in invalid positions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368. Additional Analyst Notes: - CVE Program Container: References: - https://community.qualys.com/blogs/securitylabs/2011/11/23/apache-reverse-proxy-bypass-issue - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://marc.info/?l=bugtraq&m=134987041210674&w=2 - http://marc.info/?l=bugtraq&m=134987041210674&w=2 - http://marc.info/?l=bugtraq&m=133294460209056&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0128.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://marc.info/?l=bugtraq&m=13329446020
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://marc.info/?l=bugtraq&m=133294460209056&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=756483 - http://thread.gmane.org/gmane.comp.apache.devel/46440 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://support.apple.com/kb/HT5501 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00012.html - http://www.securitytracker.com/id?1026353 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html - http://www.m
p://www.securitytracker.com/id?1026353 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://secunia.com/advisories/48551 - http://www.debian.org/security/2012/dsa-2405 - http://kb.juniper.net/JSA10585 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:003 - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201
3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5
a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.o
- https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2011-4318 State: PUBLISHED Published: 2013-03-07T01:00:00Z Last Updated: 2024-08-07T00:01:51.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dovecot 2.0.x before 2.0.16, when ssl or starttls is enabled and hostname is used to define the proxy destination, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate for a different hostname. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46886 - http://rhn.redhat.com/errata/RHSA-2013-0520.html - https://bugs.gentoo.org/sho
: - http://secunia.com/advisories/46886 - http://rhn.redhat.com/errata/RHSA-2013-0520.html - https://bugs.gentoo.org/show_bug.cgi?id=390887 - https://bugzilla.redhat.com/show_bug.cgi?id=754980 - http://secunia.com/advisories/52311 - http://hg.dovecot.org/dovecot-2.0/rev/5e9eaf63a6b1 - http://www.dovecot.org/list/dovecot-news/2011-November/000200.html - http://www.openwall.com/lists/oss-security/2011/11/18/7 - http://www.openwall.com/lists/oss-security/2011/11/18/5
CVE ID: CVE-2011-4319 State: PUBLISHED Published: 2011-11-28T11:00:00 Last Updated: 2024-08-07T00:01:51.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the rails_xss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string whose name ends with an "html" substring. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/77199 - http://openwall.com/lists/oss-security/2011/11/18/8 - http://weblog.rubyonrails.org/2011/11/18/rails-3
osvdb.org/77199 - http://openwall.com/lists/oss-security/2011/11/18/8 - http://weblog.rubyonrails.org/2011/11/18/rails-3-0-11-has-been-released - http://groups.google.com/group/rubyonrails-security/browse_thread/thread/2b61d70fb73c7cc5?pli=1 - http://groups.google.com/group/rubyonrails-security/msg/c65c24fbc4b6dd82?dmode=source&output=gplain - http://weblog.rubyonrails.org/2011/11/18/rails-3-1-2-has-been-released - http://www.securitytracker.com/id?1026342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71364 - http://www.securityfocus.com/bid/50722
CVE ID: CVE-2011-4320 State: PUBLISHED Published: 2012-02-18T00:00:00Z Last Updated: 2024-08-07T00:01:51.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_pubsub module (mod_pubsub.erl) in ejabberd 2.1.8 and 3.0.0-alpha-3 allows remote authenticated users to cause a denial of service (infinite loop) via a stanza with a publish tag that lacks a node attribute. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46915 - http://www.openwall.com/lists/oss-security/2011/11/19/1 - http://www.osvdb.org/77302 - https://support.process-one.net/browse/EJAB-1498 - http://www.openwall.com/lists/oss-security/2011/11/19/2 - http://www.proces
//support.process-one.net/browse/EJAB-1498 - http://www.openwall.com/lists/oss-security/2011/11/19/2 - http://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_2.1.9
CVE ID: CVE-2011-4321 State: PUBLISHED Published: 2011-11-23T18:00:00Z Last Updated: 2024-09-16T18:44:47.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password reset functionality in Joomla! 1.5.x through 1.5.24 uses weak random numbers, which makes it easier for remote attackers to change the passwords of arbitrary users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/news/9-security/10-core-security/375-20111103-core-password-change - http://www.openwall.com/lists/oss-security/2011/11/21/1
CVE ID: CVE-2011-4322 State: PUBLISHED Published: 2020-01-21T14:57:47 Last Updated: 2024-08-07T00:01:51.597Z Vendors: websitebaker Products: websitebaker Problem Types: authentication error Description: websitebaker prior to and including 2.8.1 has an authentication error in backup module. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/11/21/2
CVE ID: CVE-2011-4323 State: REJECTED Published: 2011-12-12T18:00:00Z Last Updated: 2024-09-16T20:52:19.022Z Description: No description available.
CVE ID: CVE-2011-4324 State: PUBLISHED Published: 2012-06-21T23:00:00Z Last Updated: 2024-08-07T00:01:51.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The encode_share_access function in fs/nfs/nfs4xdr.c in the Linux kernel before 2.6.29 allows local users to cause a denial of service (BUG and system crash) by using the mknod system call with a pathname on an NFSv4 filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dc0b027dfadfcb8a5504f7d8052754bf8d501ab9 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29 - http://www.openwall.com/lists/oss-security/2012/02/
ab9 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29 - http://www.openwall.com/lists/oss-security/2012/02/06/3 - https://bugzilla.redhat.com/show_bug.cgi?id=755440 - https://github.com/torvalds/linux/commit/dc0b027dfadfcb8a5504f7d8052754bf8d501ab9
CVE ID: CVE-2011-4325 State: PUBLISHED Published: 2012-01-27T15:00:00 Last Updated: 2024-08-07T00:01:51.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NFS implementation in Linux kernel before 2.6.31-rc6 calls certain functions without properly initializing certain data, which allows local users to cause a denial of service (NULL pointer dereference and O_DIRECT oops), as demonstrated using diotest4 from LTP. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72297 - https://bugzilla.redhat.com/show_bug.cgi?id=755455 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=1ae
hat.com/show_bug.cgi?id=755455 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=1ae88b2e4 - http://www.securityfocus.com/bid/51366
CVE ID: CVE-2011-4326 State: PUBLISHED Published: 2012-05-17T10:00:00 Last Updated: 2024-08-07T00:01:51.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50751 - http://downloads.avaya.com/css/P8/documents/100156038 - http://www.openwall.com/lists/oss-security/2011/11/21/10 - https://github.com/torvalds
.com/css/P8/documents/100156038 - http://www.openwall.com/lists/oss-security/2011/11/21/10 - https://github.com/torvalds/linux/commit/a9cf73ea7ff78f52662c8658d93c226effbbedde - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - https://bugzilla.redhat.com/show_bug.cgi?id=682066 - https://bugzilla.redhat.com/show_bug.cgi?id=755584 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a9cf73ea7ff78f52662c8658d93c226effbbedde
CVE ID: CVE-2011-4327 State: PUBLISHED Published: 2014-02-03T02:00:00 Last Updated: 2024-08-07T00:01:51.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand-helper with unintended open file descriptors, which allows local users to obtain sensitive key information via the ptrace system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openssh.com/txt/portable-keysign-rand-helper.adv - https://bugzilla.redhat.com/show_bug.cgi?id=755640
CVE ID: CVE-2011-4328 State: PUBLISHED Published: 2012-06-16T00:00:00 Last Updated: 2024-08-07T00:01:51.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/11/21/12 - http://lists.opensuse.org/opensuse-updates/2012-03/msg00003.html - http://git.savannah.gnu.org/gitweb/?p=gnash.git%3Ba=commitdiff%3Bh=fa481c116e65ccf9137c7ddc8abc3cf05dc12f55 - http://www.openwall.com/lists/oss-secu
gitweb/?p=gnash.git%3Ba=commitdiff%3Bh=fa481c116e65ccf9137c7ddc8abc3cf05dc12f55 - http://www.openwall.com/lists/oss-security/2011/11/21/7 - http://secunia.com/advisories/48325 - http://www.securityfocus.com/bid/50747 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=649384 - http://lists.opensuse.org/opensuse-updates/2012-03/msg00026.html - http://www.debian.org/security/2012/dsa-2435 - http://www.osvdb.org/77243 - https://bugzilla.redhat.com/show_bug.cgi?id=755518 - http://secunia.com/advisories/48466
CVE ID: CVE-2011-4329 State: PUBLISHED Published: 2011-11-28T11:00:00 Last Updated: 2024-08-07T00:01:51.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter in a setup action to admin/company.php, or the PATH_INFO to (2) admin/security_other.php, (3) admin/events.php, or (4) admin/user.php. Additional Analyst Notes: - CVE Program Container: References: - https://doliforge.org/tracker/?func=detail&aid=232&group_id=144 - http://www.securityfocus.com/bid/50617 - https://github.com/Dolibarr/dolibarr/commit/762f98ab4137749d09
2&group_id=144 - http://www.securityfocus.com/bid/50617 - https://github.com/Dolibarr/dolibarr/commit/762f98ab4137749d0993612b4e3544a4207e78a1 - http://archives.neohapsis.com/archives/bugtraq/2011-11/0138.html - http://archives.neohapsis.com/archives/bugtraq/2011-11/0052.html