Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
3861ab16352d49af89e048ba6339d6df8 - http://secunia.com/advisories/43610 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054071.html - http://www.vupen.com/english/advisories/2011/0403 - https://bugzilla.redhat.com/show_bug.cgi?id=673562 - http://openwall.com/lists/oss-security/2011/01/28/3 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65720 - http://openwall.com/lists/oss-security/2011/01/31/7 - http://www.vupen.com/english/advisories/2011/0582 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611187 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054083.
n.org/cgi-bin/bugreport.cgi?bug=611187 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054083.html - http://www.securityfocus.com/bid/46572 - https://hermes.opensuse.org/messages/8086846 - http://www.debian.org/security/2011/dsa-2183 - http://secunia.com/advisories/43353
CVE ID: CVE-2011-0531 State: PUBLISHED Published: 2011-02-07T20:19:00 Last Updated: 2024-08-06T21:58:25.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70698 - http://www.vupen.com/english/advisories/2011/0363 - http://secunia.com/advisories/43242 - https://oval.cisecurity.org/reposito
/www.vupen.com/english/advisories/2011/0363 - http://secunia.com/advisories/43242 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12415 - http://www.debian.org/security/2011/dsa-2159 - http://www.videolan.org/security/sa1102.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65045 - http://secunia.com/advisories/43131 - http://www.openwall.com/lists/oss-security/2011/01/31/4 - http://www.securitytracker.com/id?1025018 - http://www.securityfocus.com/bid/46060 - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=59491dcedffbf97612d2c572943b56ee4289dd07 - http://www.openwall.com/lists/oss-security/2011/01/31/8
CVE ID: CVE-2011-0532 State: PUBLISHED Published: 2011-02-23T18:00:00 Last Updated: 2024-08-06T21:58:25.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent script in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x) place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025102 - https://bugzilla.redhat.com/show_bug.cgi?id=672468 - http://www.redhat.com/support/errata/R
ritytracker.com/id?1025102 - https://bugzilla.redhat.com/show_bug.cgi?id=672468 - http://www.redhat.com/support/errata/RHSA-2011-0293.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65637 - http://www.securityfocus.com/bid/46489
CVE ID: CVE-2011-0533 State: PUBLISHED Published: 2011-02-17T17:00:00 Last Updated: 2024-08-06T21:58:25.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to the autoIncludeParameters setting for the extremecomponents table. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70925 - http://svn.apache.org/viewvc?view=revision&revision=1066056 - http://www.securityfocus.com/bid/46311 - http://secunia.
- http://svn.apache.org/viewvc?view=revision&revision=1066056 - http://www.securityfocus.com/bid/46311 - http://secunia.com/advisories/43261 - http://jira.codehaus.org/browse/CONTINUUM-2604 - http://mail-archives.apache.org/mod_mbox/continuum-users/201102.mbox/%3C981C0A79-5B7B-4053-84CC-3217870BE360%40apache.org%3E - http://www.vupen.com/english/advisories/2011/0373 - http://securitytracker.com/id?1025065 - http://www.securityfocus.com/archive/1/516474/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12581 - http://securityreason.com/securityalert/8091 - http://svn.apache.org/viewvc?view=revision&revision=1066053 - http://www.vupen.com/e
rityreason.com/securityalert/8091 - http://svn.apache.org/viewvc?view=revision&revision=1066053 - http://www.vupen.com/english/advisories/2011/0426 - http://secunia.com/advisories/43334 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65343 - http://www.securityfocus.com/archive/1/516342/100/0/threaded - http://continuum.apache.org/security.html - http://seclists.org/fulldisclosure/2011/Feb/236
CVE ID: CVE-2011-0534 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-06T21:58:24.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8074 - http://www.securitytracker.com/id?1025027 - http://secunia.com/advisories/45022 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://os
://secunia.com/advisories/45022 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://osvdb.org/70809 - http://www.securityfocus.com/archive/1/516214/100/0/threaded - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.vupen.com/english/advisories/2011/0293 - http://secunia.com/advisories/57126 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65162 - http://www.securityfocus.com/bid/46164 - http://secunia.com/advisories/43192 - http://www.debian.org/security/2011/dsa-2160 - http://support.apple.com/kb/HT5002 - http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.8_%28released_5_Feb_2011%29 - http://marc.i
HT5002 - http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.8_%28released_5_Feb_2011%29 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html - http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.32
CVE ID: CVE-2011-0535 State: PUBLISHED Published: 2011-02-08T21:00:00 Last Updated: 2024-08-06T21:58:25.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change account privileges via an edit access_permissions action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/02/03/1 - http://community.zikula.org/index.php?module=News&func=display&sid=3041&title=zikula-1.2.5-released - http://code.zikula.org/core12/browser/tags/Zikula-1.2
hp?module=News&func=display&sid=3041&title=zikula-1.2.5-released - http://code.zikula.org/core12/browser/tags/Zikula-1.2.5/src/docs/CHANGELOG - http://www.osvdb.org/70751 - http://secunia.com/advisories/43114 - http://securityreason.com/securityalert/8067 - http://openwall.com/lists/oss-security/2011/02/01/1 - http://seclists.org/fulldisclosure/2011/Feb/0 - http://bl0g.yehg.net/2011/02/zikula-cms-124-cross-site-request.html
CVE ID: CVE-2011-0536 State: PUBLISHED Published: 2011-04-08T15:00:00 Last Updated: 2024-08-06T21:58:25.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of the GNU C Library (aka glibc or libc6), including glibc-2.5-49.el5_5.6 and glibc-2.12-1.7.el6_0.3 in Red Hat Enterprise Linux, allow local users to gain privileges via a crafted dynamic shared object (DSO) in a subdirectory of the current working directory during execution of a (1) setuid or (2) setgid program that has $ORIGIN in (a) RPATH or (b) RUNPATH within the program itself or a referenced library. NOTE: this issue exists be
at has $ORIGIN in (a) RPATH or (b) RUNPATH within the program itself or a referenced library. NOTE: this issue exists because of an incorrect fix for CVE-2010-3847. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.redhat.com/support/errata/RHSA-2011-0412.html - http://www.vupen.com/english/advisories/2011/0863 - http://openwall.com/lists/oss-security/2011/02/03/2 - https://bugzilla.redhat.com/show_bug.cgi?id=667974 - http://secunia.com/advisories/43989 - http://www.ubuntu.com/usn/USN-1009-2 - http://securitytracker.com/id?1025289 - http://lists.debian.org/debian-sec
3989 - http://www.ubuntu.com/usn/USN-1009-2 - http://securitytracker.com/id?1025289 - http://lists.debian.org/debian-security-announce/2011/msg00005.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:178 - http://secunia.com/advisories/43830 - http://www.redhat.com/support/errata/RHSA-2011-0413.html - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13086 - https://launchpad.net/bugs/701783 - http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=96611391ad8823ba58405325d78cefeae5cdf699 - http://openwall.com/lists/oss-security/2011/02/01/3
CVE ID: CVE-2011-0537 State: PUBLISHED Published: 2011-02-04T00:00:00 Last Updated: 2024-08-06T21:58:25.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in (1) languages/Language.php and (2) includes/StubObject.php in MediaWiki 1.8.0 and other versions before 1.16.2, when running on Windows and possibly Novell Netware, allow remote attackers to include and execute arbitrary local PHP files via vectors related to a crafted language file and the Language::factory function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0273 - http://osvdb.org/70799 - https://bugzilla.wikim
ainer: References: - http://www.vupen.com/english/advisories/2011/0273 - http://osvdb.org/70799 - https://bugzilla.wikimedia.org/show_bug.cgi?id=27094 - http://www.openwall.com/lists/oss-security/2011/02/03/3 - http://download.wikimedia.org/mediawiki/1.16/mediawiki-1.16.2.patch.gz - http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-February/000095.html - http://www.openwall.com/lists/oss-security/2011/02/01/4 - http://osvdb.org/70798
CVE ID: CVE-2011-0538 State: PUBLISHED Published: 2011-02-08T21:00:00 Last Updated: 2024-08-06T21:58:25.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43759 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html - http://lists.fedoraproject.org/pipermail/package-ann
doraproject.org/pipermail/package-announce/2011-March/055364.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14605 - http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html - http://www.vupen.com/english/advisories/2011/0747 - http://www.vupen.com/english/advisories/2011/0626 - http://secunia.com/advisories/43795 - http://www.kb.cert.org/vuls/id/215900 - http://openwall.com/lists/oss-security/2011/02/04/1 - http://www.redhat.com/support/errata/RHSA-2011-0370.html - http://www.vupen.com/english/advisories/2011/0719 - http://www.wireshark.org/docs/relnotes/wires
a/RHSA-2011-0370.html - http://www.vupen.com/english/advisories/2011/0719 - http://www.wireshark.org/docs/relnotes/wireshark-1.4.4.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5652 - http://www.wireshark.org/security/wnpa-sec-2011-04.html - http://www.vupen.com/english/advisories/2011/0622 - http://www.wireshark.org/security/wnpa-sec-2011-03.html - http://www.redhat.com/support/errata/RHSA-2011-0369.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65182 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:044 - http://www.securitytracker.com/id?1025148 - https://bugzilla.redha
andriva.com/security/advisories?name=MDVSA-2011:044 - http://www.securitytracker.com/id?1025148 - https://bugzilla.redhat.com/show_bug.cgi?id=676232 - http://www.securityfocus.com/bid/46167 - http://www.debian.org/security/2011/dsa-2201 - http://secunia.com/advisories/43821
CVE ID: CVE-2011-0539 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-06T21:58:25.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct hash collision attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/02/04/2 - http://www.securitytracker.com/id?1025028 - http://www.securityfocus.com/bid/46155 - htt
sts/oss-security/2011/02/04/2 - http://www.securitytracker.com/id?1025028 - http://www.securityfocus.com/bid/46155 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673 - http://www.vupen.com/english/advisories/2011/0284 - http://secunia.com/advisories/43181 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 - http://secunia.com/advisories/44269 - http://www.openssh.com/txt/legacy-cert.adv - https://exchange.xforce.ibmcloud.com/vulnerabilities/65163
CVE ID: CVE-2011-0540 State: REJECTED Published: 2017-05-16T20:00:00 Last Updated: 2017-05-16T19:57:01 Description: No description available.
CVE ID: CVE-2011-0541 State: PUBLISHED Published: 2011-09-02T23:00:00 Last Updated: 2024-08-06T21:58:24.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=bf5ffb5fd8558bd799791834def431c0cee5a11f - http://www.openwall.com/lists/oss-security/2011/02/02/2 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://www.openwall.com/lists/oss-security/2011/02/03
ts.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://www.openwall.com/lists/oss-security/2011/02/03/5 - http://www.openwall.com/lists/oss-security/2011/02/08/4
CVE ID: CVE-2011-0542 State: PUBLISHED Published: 2011-09-02T23:00:00Z Last Updated: 2024-08-06T21:58:25.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: fusermount in fuse 2.8.5 and earlier does not perform a chdir to / before performing a mount or umount, which allows local users to unmount arbitrary directories via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=1e7607ff89c65b005f69e27aeb1649d624099873 - http://www.openwall.com/lists/oss-security/2011/02/02/2 - http://www.openwall.com/lists/oss-security/2011/02/03/5 - http://www.openwall.com/lists/oss-security/201
/2011/02/02/2 - http://www.openwall.com/lists/oss-security/2011/02/03/5 - http://www.openwall.com/lists/oss-security/2011/02/08/4
CVE ID: CVE-2011-0543 State: PUBLISHED Published: 2011-09-02T23:00:00 Last Updated: 2024-08-06T21:58:24.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-linux does not support the --no-canonicalize option, allows local users to bypass intended access restrictions and unmount arbitrary directories via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/02/02/2 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://www.openwall.com/lists/oss-security/2011/02/03/5 - http://fuse.git.sourceforge
y-announce/2011-04/msg00000.html - http://www.openwall.com/lists/oss-security/2011/02/03/5 - http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=cbd3a2a84068aae6e3fe32939d88470d712dbf47 - http://www.openwall.com/lists/oss-security/2011/02/08/4
CVE ID: CVE-2011-0544 State: PUBLISHED Published: 2019-11-13T23:05:17 Last Updated: 2024-08-06T21:58:24.950Z Vendors: phpbb3 Products: phpbb3 Problem Types: Cross-Site Scripting Description: phpbb 3.0.x-3.0.6 has an XSS vulnerability via the [flash] BB tag. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-0544 - https://access.redhat.com/security/cve/cve-2011-0544
CVE ID: CVE-2011-0545 State: PUBLISHED Published: 2011-03-28T16:00:00 Last Updated: 2024-08-06T21:58:26.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in adduser.do in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts, and possibly have unspecified other impact, via the userRole parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66213 - http://www.osvdb.org/71261 - http://sotiriu.de/adv/NSOA
0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66213 - http://www.osvdb.org/71261 - http://sotiriu.de/adv/NSOADV-2011-001.txt - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110321_00 - http://www.exploit-db.com/exploits/17026 - http://securityreason.com/securityalert/8160 - http://www.vupen.com/english/advisories/2011/0727 - http://securitytracker.com/id?1025242 - http://www.securityfocus.com/archive/1/517109/100/0/threaded
CVE ID: CVE-2011-0546 State: PUBLISHED Published: 2011-05-31T20:00:00 Last Updated: 2024-08-06T21:58:25.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote agent, which allows man-in-the-middle attackers to execute NDMP commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=131489365508507&w=2 - http://securityreason.com/securityalert/8300 - http://secunia.com/advisories/44698 - http://marc.info/?l=bugtraq&m=131489365508507&w=2 - http://www.securityfocus.com/bid/47824
cunia.com/advisories/44698 - http://marc.info/?l=bugtraq&m=131489365508507&w=2 - http://www.securityfocus.com/bid/47824 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110526_00
CVE ID: CVE-2011-0547 State: PUBLISHED Published: 2011-08-19T21:00:00 Last Updated: 2024-08-06T21:58:25.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in vxsvc.exe in the Veritas Enterprise Administrator service in Symantec Veritas Storage Foundation 5.1 and earlier, Veritas Storage Foundation Cluster File System (SFCFS) 5.1 and earlier, Veritas Storage Foundation Cluster File System Enterprise for Oracle RAC (SFCFSORAC) 5.1 and earlier, Veritas Dynamic Multi-Pathing (DMP) 5.1, and NetBackup PureDisk 6.5.x through 6.6.1.x allow remote attackers to execute arbitrary code via (1) a crafted Unicode string, related to the vxveautil.value_binary_unpack
mote attackers to execute arbitrary code via (1) a crafted Unicode string, related to the vxveautil.value_binary_unpack function; (2) a crafted ASCII string, related to the vxveautil.value_binary_unpack function; or (3) a crafted value, related to the vxveautil.kv_binary_unpack function, leading to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-11-264/ - http://marc.info/?l=bugtraq&m=131955939603667&w=2 - http://marc.info/?l=bugtraq&m=131955939603667&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14792 - http://zerodayinitiative.com/advisories/ZDI-11-263/ - http://ww
/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14792 - http://zerodayinitiative.com/advisories/ZDI-11-263/ - http://www.symantec.com/business/support/index?page=content&id=TECH165536 - http://www.securityfocus.com/bid/49014 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110815_00 - http://zerodayinitiative.com/advisories/ZDI-11-262/
CVE ID: CVE-2011-0548 State: PUBLISHED Published: 2011-07-18T22:00:00 Last Updated: 2024-08-06T21:58:25.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security (SMS) 6.x through 8.x, Symantec Brightmail and Messaging Gateway before 9.5.1, and Symantec Data Loss Prevention (DLP) before 10.5.3 and 11.x before 11.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .prz file. NOTE: this may overlap CVE-2011-1217. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/adv
this may overlap CVE-2011-1217. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44779 - http://securitytracker.com/id?1025595 - http://securitytracker.com/id?1025594 - http://securitytracker.com/id?1025596 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110531_00
CVE ID: CVE-2011-0549 State: PUBLISHED Published: 2011-07-11T20:00:00 Last Updated: 2024-08-06T21:58:26.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forget.php in the management GUI in Symantec Web Gateway 4.5.x allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45146 - http://www.zerodayinitiative.com/advisories/ZDI-11-233/ - http://securitytracker.com/id?1025753 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110707_00 - http://w
y_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110707_00 - http://www.securityfocus.com/bid/48318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68428