Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-0410 State: PUBLISHED Published: 2011-01-24T17:00:00 Last Updated: 2024-08-06T21:51:09.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70601 - http://www.kb.cert.org/vuls/id/547167 - http://osvdb.org/70602 - http://secunia.com/advisories/43010 - https://exchange.xforce.ibmcloud.com/vulnerabilit
47167 - http://osvdb.org/70602 - http://secunia.com/advisories/43010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64883
CVE ID: CVE-2011-0411 State: PUBLISHED Published: 2011-03-16T22:00:00 Last Updated: 2024-08-06T21:51:08.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html - https://exchan
ogram Container: References: - http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65932 - http://www.postfix.org/CVE-2011-0411.html - http://secunia.com/advisories/43646 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://www.osvdb.org/71021 - http://www.vupen.com/english/advisories/2011/0752 - http://www.vupen.com/english/advisories/2011/0891 - http://security.gentoo.org/glsa/glsa-201206-33.xml - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056560.html - http://secunia.com/advisories/43874 - http://lists.fedoraproject.org/pipermail/package-announce/2011-Marc
/056560.html - http://secunia.com/advisories/43874 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056559.html - http://www.kb.cert.org/vuls/id/MORO-8ELH6Z - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.vupen.com/english/advisories/2011/0611 - http://www.securityfocus.com/bid/46767 - http://www.redhat.com/support/errata/RHSA-2011-0423.html - http://www.kb.cert.org/vuls/id/555316 - http://securitytracker.com/id?1025179 - http://www.redhat.com/support/errata/RHSA-2011-0422.html - http://support.apple.com/kb/HT5002 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.debian.org/security/2011/dsa-2233 - ht
02 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.debian.org/security/2011/dsa-2233 - http://www.openwall.com/lists/oss-security/2021/08/10/2
CVE ID: CVE-2011-0412 State: PUBLISHED Published: 2011-04-19T19:00:00 Last Updated: 2024-08-06T21:51:09.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Solaris 8, 9, and 10 stores back-out patch files (undo.Z) unencrypted with world-readable permissions under /var/sadm/pkg/, which allows local users to obtain password hashes and conduct brute force password guessing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html - http://secunia.com/advisories/44047 - http://www.kb.cert.org/vuls/id/648244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66579 - http://www.securityf
ttp://www.kb.cert.org/vuls/id/648244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66579 - http://www.securityfocus.com/bid/47171 - http://osvdb.org/71646 - http://www.vupen.com/english/advisories/2011/0882
CVE ID: CVE-2011-0413 State: PUBLISHED Published: 2011-01-31T20:00:00 Last Updated: 2024-08-06T21:51:09.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a declined and abandoned address. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0266 - http://secunia.com/advisories/43006 - http://www.vupen.com/english/advisories/2011/0235 - http://secunia.com/advisories/43354 - h
cunia.com/advisories/43006 - http://www.vupen.com/english/advisories/2011/0235 - http://secunia.com/advisories/43354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64959 - http://www.osvdb.org/70680 - http://secunia.com/advisories/43104 - https://kb.isc.org/article/AA-00456 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:022 - http://www.vupen.com/english/advisories/2011/0583 - http://www.vupen.com/english/advisories/2011/0300 - http://secunia.com/advisories/43613 - http://securitytracker.com/id?1024999 - http://secunia.com/advisories/43167 - http://www.redhat.com/support/errata/RHSA-2011-0256.html - http://www.securityfocus.com/bid/46035 - http://lists.fedoraproject.or
w.redhat.com/support/errata/RHSA-2011-0256.html - http://www.securityfocus.com/bid/46035 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053644.html - http://www.isc.org/software/dhcp/advisories/cve-2011-0413 - http://www.vupen.com/english/advisories/2011/0400 - http://www.debian.org/security/2011/dsa-2184 - http://www.kb.cert.org/vuls/id/686084
CVE ID: CVE-2011-0414 State: PUBLISHED Published: 2011-02-23T18:00:00 Last Updated: 2024-08-06T21:51:08.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service (deadlock and daemon hang) by sending a query at the time of (1) an IXFR transfer or (2) a DDNS update. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449980 - http://www.vupen.com/english/advisories/2011/0489 - http://www.isc.org/software/bind/advisories/cve-2011-0414 - http://www.securitytracker.com/id?1025110 - https://bugzilla.redhat.com/show_bug.
ftware/bind/advisories/cve-2011-0414 - http://www.securitytracker.com/id?1025110 - https://bugzilla.redhat.com/show_bug.cgi?id=679496 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://www.kb.cert.org/vuls/id/559980 - http://secunia.com/advisories/43443 - http://www.debian.org/security/2011/dsa-2208 - http://www.vupen.com/english/advisories/2011/0466 - http://secunia.com/advisories/43439 - http://www.ubuntu.com/usn/USN-1070-1
CVE ID: CVE-2011-0418 State: PUBLISHED Published: 2011-05-24T23:00:00 Last Updated: 2024-08-06T21:51:08.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory consumption) via a crafted FTP STAT command. Additional Analyst Notes: - CVE Program Container: References: - http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/glob.c#rev1.28 - http://www.vupen.com/english/advisories/2011/1273 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:094 - http://cvsweb.
upen.com/english/advisories/2011/1273 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:094 - http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/glob.c.diff?r1=1.27&r2=1.28&f=h - https://bugzilla.redhat.com/show_bug.cgi?id=704283 - http://www.securityfocus.com/bid/47671 - http://securityreason.com/achievement_securityalert/97 - http://securityreason.com/securityalert/8228 - http://www.pureftpd.org/project/pure-ftpd/news
CVE ID: CVE-2011-0419 State: PUBLISHED Published: 2011-05-16T17:00:00 Last Updated: 2024-08-06T21:51:08.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd. Additional Analyst Notes: - CVE Program Contai
irst argument, as demonstrated by attacks against mod_autoindex in httpd. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44574 - http://marc.info/?l=bugtraq&m=131731002122529&w=2 - http://marc.info/?l=bugtraq&m=134987041210674&w=2 - http://www.mail-archive.com/dev%40apr.apache.org/msg23976.html - http://secunia.com/advisories/48308 - http://securityreason.com/achievement_securityalert/98 - http://marc.info/?l=bugtraq&m=131551295528105&w=2 - http://marc.info/?l=bugtraq&m=134987041210674&w=2 - http://marc.info/?l=bugtraq&m=132033751509019&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14804 - http://w
3751509019&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14804 - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html - http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/fnmatch.c#rev1.22 - http://cxib.net/stuff/apr_fnmatch.txts - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14638 - http://securitytracker.com/id?1025527 - http://svn.apache.org/viewvc?view=revision&revision=1098188 - http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fnmatch.c#rev1.15 - http://www.apache.org/dist/apr/CHANGES-APR-1.4 - http://www.apache.org/dist/apr/Announcement1.x.html - http://svn.apache.org/
//www.apache.org/dist/apr/CHANGES-APR-1.4 - http://www.apache.org/dist/apr/Announcement1.x.html - http://svn.apache.org/viewvc?view=revision&revision=1098799 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://httpd.apache.org/security/vulnerabilities_22.html - http://svn.apache.org/viewvc/apr/apr/branches/1.4.x/strings/apr_fnmatch.c?r1=731029&r2=1098902 - http://securityreason.com/securityalert/8246 - http://www.debian.org/security/2011/dsa-2237 - http://www.redhat.com/support/errata/RHSA-2011-0897.html - https://bugzilla.redhat.com/show_bug.cgi?id=703390 - http://secunia.com/advisories/44564 - http://www.apache.org/dist/httpd/Announcement2.2.html - http://m
g.cgi?id=703390 - http://secunia.com/advisories/44564 - http://www.apache.org/dist/httpd/Announcement2.2.html - http://marc.info/?l=bugtraq&m=131731002122529&w=2 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://secunia.com/advisories/44490 - http://cxib.net/stuff/apache.fnmatch.phps - http://www.redhat.com/support/errata/RHSA-2011-0896.html - http://support.apple.com/kb/HT5002 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:084 - http://www.mail-archive.com/dev%40apr.apache.org/msg23961.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://www.redhat.com/support/errata/RHSA-2011-0507.html - http://lists.opensuse.org/o
/advisories?name=MDVSA-2013:150 - http://www.redhat.com/support/errata/RHSA-2011-0507.html - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html - http://marc.info/?l=bugtraq&m=132033751509019&w=2 - http://marc.info/?l=bugtraq&m=131551295528105&w=2 - http://www.mail-archive.com/dev%40apr.apache.org/msg23960.html - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.ap
org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a093
26128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists
e.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708b
40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2011-0420 State: PUBLISHED Published: 2011-02-18T23:00:00 Last Updated: 2024-08-06T21:51:08.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/516504/100/0/threaded - http://www.debian.org/security/2011/dsa-2266 - http://www.kb.cert.org/vuls/id/210829 - http://www.securityfocus.com/bid/46429 - http://securityreason.com/security
66 - http://www.kb.cert.org/vuls/id/210829 - http://www.securityfocus.com/bid/46429 - http://securityreason.com/securityalert/8087 - http://www.exploit-db.com/exploits/16182 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65437 - http://www.securityfocus.com/archive/1/516518/100/0/threaded - http://securityreason.com/achievement_securityalert/94 - http://support.apple.com/kb/HT5002 - http://svn.php.net/viewvc/php/php-src/trunk/ext/intl/grapheme/grapheme_string.c?r1=306449&r2=306448&pathrev=306449
CVE ID: CVE-2011-0421 State: PUBLISHED Published: 2011-03-20T01:00:00 Last Updated: 2024-08-06T21:51:09.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:099 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - h
http://www.mandriva.com/security/advisories?name=MDVSA-2011:099 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057709.html - http://www.vupen.com/english/advisories/2011/0764 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056642.html - http://securityreason.com/securityalert/8146 - https://bugzilla.redhat.com/show_bug.cgi?id=688735 - http://secunia.com/advisories/43621 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:053 - http://www.debian.org/security/2011/dsa-2266 - http://www.vupen.com/english/adviso
rity/advisories?name=MDVSA-2011:053 - http://www.debian.org/security/2011/dsa-2266 - http://www.vupen.com/english/advisories/2011/0890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66173 - http://www.php.net/releases/5_3_6.php - http://svn.php.net/viewvc/?view=revision&revision=307867 - http://securityreason.com/achievement_securityalert/96 - http://www.php.net/ChangeLog-5.php - http://www.php.net/archive/2011.php - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.securityfocus.com/archive/1/517065/100/0/threaded - http://www.exploit-db.com/exploits/17004 - http://lists.fedoraproject.org/piperm
s.com/archive/1/517065/100/0/threaded - http://www.exploit-db.com/exploits/17004 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057710.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:052 - http://www.vupen.com/english/advisories/2011/0744 - http://www.securityfocus.com/bid/46354 - http://support.apple.com/kb/HT5002 - http://bugs.php.net/bug.php?id=53885
CVE ID: CVE-2011-0423 State: PUBLISHED Published: 2011-01-12T00:00:00 Last Updated: 2024-08-06T21:51:08.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PolyVision RoomWizard with firmware 3.2.3 has a default password of roomwizard for the administrator account, which makes it easier for remote attackers to obtain console access via an HTTP session, a different vulnerability than CVE-2010-0214. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/870601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64543 - http://www.vupen.com/english/advisories/2011/0059 - http://osvdb.org/70388 - http://packetstormsecurity.org/files/vie
- http://www.vupen.com/english/advisories/2011/0059 - http://osvdb.org/70388 - http://packetstormsecurity.org/files/view/97291/roomwizard-disclose.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/64642 - http://seclists.org/fulldisclosure/2011/Jan/58 - http://www.securityfocus.com/bid/45699
CVE ID: CVE-2011-0426 State: PUBLISHED Published: 2011-05-09T22:00:00Z Last Updated: 2024-09-17T01:05:33.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, and VMware VirtualCenter 2.5 before Update 6a, allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.vmware.com/pipermail/security-announce/2011/000137.html - http://securitytracker.com/id?1025502 - http://www.vmware.com/security/advisories/VMSA-2011-0008.html
CVE ID: CVE-2011-0427 State: PUBLISHED Published: 2011-01-19T11:00:00 Last Updated: 2024-08-06T21:51:08.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.seul.org/or/announce/Jan-2011/msg00000.html - http://www.vupen.com/english/advisories/2011/0131 - https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog - http://secunia.com/advisories/429
131 - https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog - http://secunia.com/advisories/42907 - http://blog.torproject.org/blog/tor-02129-released-security-patches - http://www.securitytracker.com/id?1024980 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64748 - http://www.vupen.com/english/advisories/2011/0132 - http://www.debian.org/security/2011/dsa-2148 - http://secunia.com/advisories/42905 - http://www.securityfocus.com/bid/45832
CVE ID: CVE-2011-0428 State: PUBLISHED Published: 2019-10-29T17:28:37 Last Updated: 2024-08-06T21:51:08.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in ikiwiki before 3.20110122 could allow remote attackers to insert arbitrary JavaScript due to insufficient checking in comments. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-0428 - https://ikiwiki.info/security/#index38h2
CVE ID: CVE-2011-0430 State: PUBLISHED Published: 2011-02-18T23:00:00 Last Updated: 2024-08-06T21:51:09.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to cause a denial of service and execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46428 - http://www.debian.org/security/2011/dsa-2168 - http://www.vupen.com/english/advisories/2011/0410 - http://secunia.com/advisories/43371 - http://www.securitytracker.com/id?1025095 - http://www.vupen.com/english/ad
0410 - http://secunia.com/advisories/43371 - http://www.securitytracker.com/id?1025095 - http://www.vupen.com/english/advisories/2011/0411 - http://secunia.com/advisories/43407
CVE ID: CVE-2011-0431 State: PUBLISHED Published: 2011-02-18T23:00:00 Last Updated: 2024-08-06T21:51:08.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in the kernel module in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions does not properly handle errors, which allows attackers to cause a denial of service via unknown vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46428 - http://www.debian.org/security/2011/dsa-2168 - http://www.vupen.com/english/advisories/2011/0410 - http://secu
d/46428 - http://www.debian.org/security/2011/dsa-2168 - http://www.vupen.com/english/advisories/2011/0410 - http://secunia.com/advisories/43371 - http://www.securitytracker.com/id?1025095 - http://www.vupen.com/english/advisories/2011/0411 - http://secunia.com/advisories/43407