Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1913 State: PUBLISHED Published: 2011-09-22T10:00:00 Last Updated: 2024-08-06T22:46:00.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login form in the web interface in Mercator SENTINEL 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/69847 - http://www.kb.cert.org/vuls/id/122142 - http://cert.netpeas.org/2011/06/cert-nps2011005-vulnerabilite-potentielle-dans-la-solution-de-gestion-de-la-securite-operationnelle-des-compagnies-aeriennes-%C2%AB-sentinel-safety-information
le-dans-la-solution-de-gestion-de-la-securite-operationnelle-des-compagnies-aeriennes-%C2%AB-sentinel-safety-information-management-system-%C2%BB/ - http://www.securityfocus.com/bid/49638 - http://secunia.com/advisories/46014 - http://cert.netpeas.org/2011/06/cert-nps2011005-vulnerabilite-potentielle-dans-la-solution-de-gestion-de-la-securite-operationnelle-des-compagnies-aeriennes-suite/
CVE ID: CVE-2011-1914 State: PUBLISHED Published: 2012-02-21T11:00:00Z Last Updated: 2024-09-16T19:41:49.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Advantech ADAM OLE for Process Control (OPC) Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-279-01.pdf
CVE ID: CVE-2011-1915 State: PUBLISHED Published: 2011-11-01T19:00:00Z Last Updated: 2024-09-17T01:21:05.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46638 - http://www.kb.cert.org/vuls/id/402731
CVE ID: CVE-2011-1918 State: PUBLISHED Published: 2011-11-02T17:00:00 Last Updated: 2024-08-06T22:46:00.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-243-03.pdf - http://www.securityfocus.com/bid/50475 - http://ics-cert.us-cert.gov/advisories/ICSA-11-243-03A
CVE ID: CVE-2011-1919 State: PUBLISHED Published: 2011-11-02T17:00:00Z Last Updated: 2024-09-16T16:59:04.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message traffic to (1) PRProficyMgr.exe in Proficy Server Manager, (2) PRGateway.exe in Proficy Server Gateway, (3) PRRDS.exe in Proficy Remote Data Service, or (4) PRLicenseMgr.exe in Proficy Server License Manager. Additional Analyst Notes: - CVE Program Container: References:
r (4) PRLicenseMgr.exe in Proficy Server License Manager. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50474 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-243-01.pdf
CVE ID: CVE-2011-1920 State: PUBLISHED Published: 2011-05-23T22:00:00 Last Updated: 2024-08-06T22:46:00.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626673 - http://www.securityfocus.com/bid/47878 - http://openwall.com/lists/oss-security/2011/05/16/2 - http://openwall.com/lists/oss-security/2011/05/16/8 - https://bugzilla
://openwall.com/lists/oss-security/2011/05/16/2 - http://openwall.com/lists/oss-security/2011/05/16/8 - https://bugzilla.redhat.com/show_bug.cgi?id=705100 - https://bugzilla.redhat.com/show_bug.cgi?id=705090 - http://cvsweb.netbsd.org/bsdweb.cgi/src/share/mk/bsd.lib.mk.diff?r1=1.239&r2=1.240&f=h - http://cvsweb.netbsd.org/bsdweb.cgi/src/share/mk/bsd.prog.mk.diff?r1=1.192&r2=1.193&f=h - https://exchange.xforce.ibmcloud.com/vulnerabilities/67495
CVE ID: CVE-2011-1921 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:45:59.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2251 - http://www.ubuntu.com/usn/USN-1144-1 - http://support.apple.
eferences: - http://www.debian.org/security/2011/dsa-2251 - http://www.ubuntu.com/usn/USN-1144-1 - http://support.apple.com/kb/HT5130 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:106 - http://secunia.com/advisories/44849 - http://www.redhat.com/support/errata/RHSA-2011-0862.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062211.html - https://bugzilla.redhat.com/show_bug.cgi?id=709114 - http://secunia.com/advisories/44888 - http://subversion.apache.org/security/CVE-2011-1921-advisory.txt - http://www.securitytracker.com/id?1025619 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18999 - http://lists.apple.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18999 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://secunia.com/advisories/45162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67804 - http://secunia.com/advisories/44681 - http://www.securityfocus.com/bid/48091 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061913.html - http://secunia.com/advisories/44633 - http://svn.apache.org/repos/asf/subversion/tags/1.6.17/CHANGES
CVE ID: CVE-2011-1922 State: PUBLISHED Published: 2011-05-31T20:00:00 Last Updated: 2024-08-06T22:46:00.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DNS request that triggers improper error handling. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061243.html - http://www.securityfocus.com/bid/47986 - http://secunia.com/advisories/44865 - http://osvdb.org/72750 - http
1243.html - http://www.securityfocus.com/bid/47986 - http://secunia.com/advisories/44865 - http://osvdb.org/72750 - http://www.kb.cert.org/vuls/id/531342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67645 - http://unbound.nlnetlabs.nl/downloads/CVE-2011-1922.txt
CVE ID: CVE-2011-1923 State: PUBLISHED Published: 2012-06-20T17:00:00 Last Updated: 2024-08-06T22:46:00.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095. Additional Analyst Notes: - CVE Program Container: References: - http://www.cl.cam.ac.uk/~rja14/Papers/psandqs.pdf - http://polarssl.org/trac/wiki/SecurityAdvisory201101 - http://www.nessus.org/plugins/index.php?view=single&id=53360 - http://www.securit
org/trac/wiki/SecurityAdvisory201101 - http://www.nessus.org/plugins/index.php?view=single&id=53360 - http://www.securityfocus.com/bid/46670
CVE ID: CVE-2011-1924 State: PUBLISHED Published: 2011-06-14T17:00:00Z Last Updated: 2024-08-06T22:46:00.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service (directory authority crash) via a crafted policy that triggers creation of a long port list. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43548 - https://bugzilla.redhat.com/show_bug.cgi?id=705194 - http://secunia.com/advisories/44862 - http://www.securityfocus.com/bid/46618 - https://gitweb.torproject.org/tor.git/commit/43414eb98821d3b5
dvisories/44862 - http://www.securityfocus.com/bid/46618 - https://gitweb.torproject.org/tor.git/commit/43414eb98821d3b5c6c65181d7545ce938f82c8e - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061258.html - https://bugzilla.redhat.com/show_bug.cgi?id=705192 - https://lists.torproject.org/pipermail/tor-announce/2011-February/000000.html
CVE ID: CVE-2011-1925 State: PUBLISHED Published: 2011-05-31T20:00:00 Last Updated: 2024-08-06T22:46:00.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: nbd-server.c in Network Block Device (nbd-server) 2.9.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by causing a negotiation failure, as demonstrated by specifying a name for a non-existent export. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627042. - http://security.gentoo.org/glsa/glsa-201206-35.xml - http://nbd.git.sourceforge.net/git/gitweb.cgi?p=nbd/nbd%3Ba=commitdiff%3Bh=ebbbe0b3ce5393fa42a259f5e03d5495085
-35.xml - http://nbd.git.sourceforge.net/git/gitweb.cgi?p=nbd/nbd%3Ba=commitdiff%3Bh=ebbbe0b3ce5393fa42a259f5e03d549508586aaa - http://www.openwall.com/lists/oss-security/2011/05/17/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67502 - http://www.securityfocus.com/bid/47884
CVE ID: CVE-2011-1926 State: PUBLISHED Published: 2011-05-23T22:00:00 Last Updated: 2024-08-06T22:46:00.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-0859.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-
tp://www.redhat.com/support/errata/RHSA-2011-0859.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061374.html - http://www.debian.org/security/2011/dsa-2258 - http://www.cyrusimap.org/docs/cyrus-imapd/2.4.7/changes.php - http://www.mandriva.com/security/advisories?name=MDVSA-2011:100 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061415.html - http://www.securitytracker.com/id?1025625 - http://bugzilla.cyrusimap.org/show_bug.cgi?id=3423 - http://www.debian.org/security/2011/dsa-2242 - http://secunia.com/advisories/44876 - http://openwall.com/lists/oss-security/2011/05/17/2 - http://www.kb.cert.org/vuls/id/555316 - http://secunia.com/advisorie
tp://openwall.com/lists/oss-security/2011/05/17/2 - http://www.kb.cert.org/vuls/id/555316 - http://secunia.com/advisories/44928 - http://secunia.com/advisories/44913 - http://bugzilla.cyrusimap.org/show_bug.cgi?id=3424 - http://secunia.com/advisories/44670 - https://bugzilla.redhat.com/show_bug.cgi?id=705288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67867 - http://git.cyrusimap.org/cyrus-imapd/patch/?id=523a91a5e86c8b9a27a138f04a3e3f2d8786f162 - http://openwall.com/lists/oss-security/2011/05/17/15
CVE ID: CVE-2011-1927 State: PUBLISHED Published: 2012-06-13T10:00:00Z Last Updated: 2024-08-06T22:46:00.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ip_expire function in net/ipv4/ip_fragment.c in the Linux kernel before 2.6.39 does not properly construct ICMP_TIME_EXCEEDED packets after a timeout, which allows remote attackers to cause a denial of service (invalid pointer dereference) via crafted fragmented packets. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/64f3b9e203bd06855072e295557dca1485a2ecba - http://www.openwall.com/lists/oss-security/2011/05/18/2 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/Chan
a1485a2ecba - http://www.openwall.com/lists/oss-security/2011/05/18/2 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=64f3b9e203bd06855072e295557dca1485a2ecba
CVE ID: CVE-2011-1928 State: PUBLISHED Published: 2011-05-24T23:00:00 Last Updated: 2024-08-06T22:46:00.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419. Additional Analyst Notes: - CVE Program Container: References: - http://w
because of an incorrect fix for CVE-2011-0419. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-0844.html - http://secunia.com/advisories/44661 - http://marc.info/?l=bugtraq&m=134987041210674&w=2 - http://secunia.com/advisories/48308 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:095 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627182 - http://www.vupen.com/english/advisories/2011/1289 - http://marc.info/?l=bugtraq&m=134987041210674&w=2 - http://secunia.com/advisories/44613 - http://mail-archives.apache.org/mod_mbox/www-announce/201105.mbox/%3c4DD55076.1060005%40apache.org%3e - http://openwall.com/lists/oss-s
hives.apache.org/mod_mbox/www-announce/201105.mbox/%3c4DD55076.1060005%40apache.org%3e - http://openwall.com/lists/oss-security/2011/05/19/5 - http://secunia.com/advisories/44780 - http://www.vupen.com/english/advisories/2011/1290 - http://secunia.com/advisories/44558 - http://openwall.com/lists/oss-security/2011/05/19/10 - http://mail-archives.apache.org/mod_mbox/httpd-announce/201105.mbox/%3C4DD55092.3030403%40apache.org%3E - https://issues.apache.org/bugzilla/show_bug.cgi?id=51219 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html
CVE ID: CVE-2011-1929 State: PUBLISHED Published: 2011-05-24T23:00:00 Last Updated: 2024-08-06T22:46:00.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061384.html - http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c - http://secunia.com/advisories/44771 - http://dovecot.org/pip
html - http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c - http://secunia.com/advisories/44771 - http://dovecot.org/pipermail/dovecot/2011-May/059086.html - http://www.debian.org/security/2011/dsa-2252 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:101 - http://www.dovecot.org/doc/NEWS-2.0 - https://bugzilla.redhat.com/show_bug.cgi?id=706286 - http://dovecot.org/pipermail/dovecot/2011-May/059085.html - http://www.redhat.com/support/errata/RHSA-2011-1187.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060825.html - http://osvdb.org/72495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67589 - https://hermes.opensuse.org/messages/8581790 - http:
2495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67589 - https://hermes.opensuse.org/messages/8581790 - http://www.securityfocus.com/bid/47930 - http://openwall.com/lists/oss-security/2011/05/19/6 - http://secunia.com/advisories/44756 - http://secunia.com/advisories/44827 - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060815.html - http://secunia.com/advisories/44683 - http://secunia.com/advisories/44712 - http://www.ubuntu.com/usn/USN-1143-1 - http://openwall.com/lists/oss-security/2011/05/19/3 - http://www.dovecot.org/doc/NEWS-1.2 - http://openwall.com/lists/oss-security/2011/05/18/4
CVE ID: CVE-2011-1930 State: PUBLISHED Published: 2019-11-14T02:01:32 Last Updated: 2024-08-06T22:46:00.615Z Vendors: klibc Products: klibc Problem Types: Other Description: In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a remote attacker to send a specially crafted DHCP reply which could execute arbitrary code with the privileges of any process which sources DHCP options. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-1930 - https://access.redhat.com/security/cve/cve-2011-1930 - http://security.gentoo.org/glsa/glsa-201309-21.xml - http://
30 - https://access.redhat.com/security/cve/cve-2011-1930 - http://security.gentoo.org/glsa/glsa-201309-21.xml - http://www.openwall.com/lists/oss-security/2012/05/22/12 - http://www.securityfocus.com/bid/47924
CVE ID: CVE-2011-1931 State: PUBLISHED Published: 2011-07-07T21:00:00 Last Updated: 2024-08-06T22:46:00.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg before 0.6.3 and libav through 0.6.2, as used in VideoLAN VLC media player 1.1.9 and earlier and other products, performs a write operation outside the bounds of an unspecified array, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a malformed AMV file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624339 - http://www.securit
tes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624339 - http://www.securityfocus.com/archive/1/517706 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=89f903b3d5ec38c9c5d90fba7e626fa0eda61a32 - http://securityreason.com/securityalert/8299 - http://www.securityfocus.com/bid/47602
CVE ID: CVE-2011-1932 State: PUBLISHED Published: 2011-12-05T11:00:00Z Last Updated: 2024-08-06T22:46:00.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in io/filesystem/filesystem.cc in Widelands before 15.1 might allow remote attackers to overwrite arbitrary files via . (dot) characters in a pathname that is used for a file transfer in an Internet game. Additional Analyst Notes: - CVE Program Container: References: - http://bazaar.launchpad.net/~widelands-dev/widelands/build-15/revision/5021 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=617960
CVE ID: CVE-2011-1933 State: PUBLISHED Published: 2019-11-26T20:41:23 Last Updated: 2024-08-06T22:46:00.511Z Vendors: libjifty-dbi-perl Products: libjifty-dbi-perl Problem Types: UNKNOWN_TYPE Description: SQL injection vulnerability in Jifty::DBI before 0.68. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-1933 - https://access.redhat.com/security/cve/cve-2011-1933 - https://metacpan.org/changes/distribution/Jifty-DBI - https://seclists.org/oss-sec/2011/q2/464 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622919 - http://lists.jifty.org/pipermail/jifty-devel/2011-April/002426.html
CVE ID: CVE-2011-1934 State: PUBLISHED Published: 2019-11-26T21:03:19 Last Updated: 2024-08-06T22:46:00.641Z Vendors: lilo Products: lilo Problem Types: lilo.conf world-readable Description: lilo-uuid-diskid causes lilo.conf to be world-readable in lilo 23.1. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-1934 - https://access.redhat.com/security/cve/cve-2011-1934 - https://seclists.org/oss-sec/2011/q2/464 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615103
CVE ID: CVE-2011-1935 State: PUBLISHED Published: 2017-10-20T18:00:00 Last Updated: 2024-08-06T22:46:00.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://article.gmane.org/gmane.network.tcpdump.devel/4968 - http://www.openwall.com/lists/oss-security/2014/02/08/5 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=623868 - http://www.openwall.com/lists/oss-security/2011/05/19/11 -
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=623868 - http://www.openwall.com/lists/oss-security/2011/05/19/11 - http://thread.gmane.org/gmane.network.tcpdump.devel/5018 - https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1%3Bbug=623868%3Bfilename=0001-Fix-the-calculation-of-the-frame-size-in-memory-mapp.patch%3Bmsg=10 - https://security-tracker.debian.org/tracker/CVE-2011-1935/
CVE ID: CVE-2011-1936 State: PUBLISHED Published: 2014-01-07T19:00:00 Last Updated: 2024-08-06T22:46:00.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service (guest crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2011-0927.html - http://www.openwall.com/lists/oss-security/2011/07/07/3
CVE ID: CVE-2011-1937 State: PUBLISHED Published: 2011-05-31T20:00:00 Last Updated: 2024-08-06T22:46:00.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real (aka Full Name) field, related to useradmin/index.cgi and useradmin/user-lib.pl. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/05/24/7 - http://www.youtube.com/watch?v=CUO7JLIGUf0 - http://securitytracker.com/id?1025438 - http://www.securityfocus.com/archive/1/517658 - https://github.com/webmin/webmi
http://securitytracker.com/id?1025438 - http://www.securityfocus.com/archive/1/517658 - https://github.com/webmin/webmin/commit/46e3d3ad195dcdc1af1795c96b6e0dc778fb6881 - http://openwall.com/lists/oss-security/2011/05/22/1 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:109 - http://securityreason.com/securityalert/8264 - http://javierb.com.ar/2011/04/24/xss-webmin-1-540/ - http://www.securityfocus.com/bid/47558