Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-0502 State: PUBLISHED Published: 2011-01-20T18:00:00Z Last Updated: 2024-09-16T19:37:02.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a long line in a MIDI (.mid) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15897
CVE ID: CVE-2011-0503 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:24.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in VaM Shop 1.6, 1.6.1, and probably earlier versions allows remote attackers to hijack the authentication of administrators for requests that (1) change user status via admin/customers.php or (2) change user permissions via admin/accounting.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70431 - http://secunia.com/advisories/42869 - http://www.htbridge.ch/advisory/xsrf_c
ner: References: - http://osvdb.org/70431 - http://secunia.com/advisories/42869 - http://www.htbridge.ch/advisory/xsrf_csrf_in_vam_shop.html - http://www.securityfocus.com/archive/1/515613/100/0/threaded - http://www.exploit-db.com/exploits/15968
CVE ID: CVE-2011-0504 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:25.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in VaM Shop 1.6, 1.6.1, and probably earlier versions llow remote attackers to inject arbitrary web script or HTML via the (1) status parameter to admin/orders.php, (2) search parameter to admin/customers.php, or (3) STORE_NAME parameter to admin/configuration.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/xss_vulnerability_in_vam_shop_2.html - http://osvdb.org/70429 - http://www.htbridge.ch/advisory/xss_vulnerability_in_
ry/xss_vulnerability_in_vam_shop_2.html - http://osvdb.org/70429 - http://www.htbridge.ch/advisory/xss_vulnerability_in_vam_shop_1.html - http://secunia.com/advisories/42869 - http://osvdb.org/70430 - http://www.securityfocus.com/archive/1/515615/100/0/threaded - http://www.htbridge.ch/advisory/xss_vulnerability_in_vam_shop.html - http://www.securityfocus.com/archive/1/515619/100/0/threaded - http://www.securityfocus.com/archive/1/515620/100/0/threaded - http://www.exploit-db.com/exploits/15968
CVE ID: CVE-2011-0505 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:24.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the set[template][value] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15945 - http://www.vupen.com/english/advisories/2011/0072 - http://secunia.com/advisories/42858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64
ish/advisories/2011/0072 - http://secunia.com/advisories/42858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64557 - http://www.securityfocus.com/bid/45736 - http://www.osvdb.org/70395
CVE ID: CVE-2011-0506 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:25.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules/profile/user.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attackers to execute arbitrary code via a .. (dot dot) in the aXconf[default_language] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0071 - http://www.exploit-db.com/exploits/15938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64547 - http://www.securityfocus.com/bid/45735
CVE ID: CVE-2011-0507 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:25.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other versions before 3.1.8.1737, allows remote attackers to cause a denial of service (crash) via a large number of PORT commands with long arguments, which triggers a NULL pointer dereference. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64696 - http://www.securityfocus.com/bid/45814 - http://osv
nces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64696 - http://www.securityfocus.com/bid/45814 - http://osvdb.org/70452 - http://secunia.com/advisories/42933 - http://www.exploit-db.com/exploits/15986
CVE ID: CVE-2011-0508 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:24.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in system/modules/comments/Comments.php in Contao CMS 2.9.2, and possibly other versions before 2.9.3, allows remote attackers to inject arbitrary web script or HTML via the HTTP X_FORWARDED_FOR header, which is stored by system/libraries/Environment.php but not properly handled by a comments action to main.php. Additional Analyst Notes: - CVE Program Container: References: - http://dev.contao.org/issues/2751 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64679 - http://www.osvd
nces: - http://dev.contao.org/issues/2751 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64679 - http://www.osvdb.org/70440 - http://secunia.com/advisories/42899 - http://www.contao.org/news/items/contao-2_9_3.html - http://www.securityfocus.com/archive/1/515691/100/0/threaded - http://www.contao.org/changelog.html
CVE ID: CVE-2011-0509 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:25.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Vaadin before 6.4.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the index page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45779 - http://vaadin.com/download/release/6.4/6.4.9/release-notes.html - http://dev.vaadin.com/ticket/6257 - http://osvdb.org/70398 - http://secunia.com/advisories/42879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64626
CVE ID: CVE-2011-0510 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:24.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the oid parameter in an add_other action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64726 - http://www.exploit-db.com/exploits/16003 - http://secunia.com/advisories/42944
CVE ID: CVE-2011-0511 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:25.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the allCineVid component (com_allcinevid) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64823 - http://adv.salvatorefresta.net/allCineVid_Joomla_Component_1.0.0_Blind_SQL_Injection_Vulnerability-18012011.txt - http://www.exploit-db.com/exploits/16010 - http://secunia.com/advisories/42967 - http://www.securityfocus.co
12011.txt - http://www.exploit-db.com/exploits/16010 - http://secunia.com/advisories/42967 - http://www.securityfocus.com/bid/45840
CVE ID: CVE-2011-0512 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:25.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in team.php in the Teams Structure module 3.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the team_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45826 - http://osvdb.org/70451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64727 - http://secunia.com/advisories/42943 - http://www.exploit-db.com/exploits/16004
CVE ID: CVE-2011-0513 State: PUBLISHED Published: 2011-01-20T18:00:00Z Last Updated: 2024-09-17T02:58:17.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: DCR.sys driver in SecurStar DriveCrypt 5.4, 5.3, and earlier allows local users to execute arbitrary code via a crafted argument to the 0x00073800 IOCTL. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70426 - http://www.securityfocus.com/bid/45750 - http://www.exploit-db.com/exploits/15972 - http://www.vupen.com/english/advisories/2011/0084 - http://secunia.com/advisories/42881
CVE ID: CVE-2011-0514 State: PUBLISHED Published: 2011-01-20T18:00:00Z Last Updated: 2024-09-16T17:58:06.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service (crash) via a packet with a large data size to TCP port 1530. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15940 - http://www.vupen.com/english/advisories/2011/0064
CVE ID: CVE-2011-0515 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:25.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: KisKrnl.sys 2011.1.13.89 and earlier in Kingsoft AntiVirus 2011 SP5.2 allows local users to cause a denial of service (crash) via a crafted request that is not properly handled by the KiFastCallEntry hook. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/515767/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/64723 - http://secunia.com/advisories/42937 - http://www.exploit-db.com/exploits/15998 - http://www.securityfocus.com/bid/45821
CVE ID: CVE-2011-0516 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:25.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mainx_a.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0 allows remote attackers to execute arbitrary SQL commands via the bid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64724 - http://www.securityfocus.com/bid/45820 - http://www.exploit-db.com/exploits/15999 - http://epromptc.com/media/nwsatcl/betmore-4-2-1-software-update.html - http://secunia.com/advisories/42945
CVE ID: CVE-2011-0517 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:25.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8280 - http://aluigi.org/adv/winlog_1-adv.txt - http://www.vupen.com/english/advisories/2011/0126 - http://secunia.com/advisories/42894 - http://osvdb.org/70418 - http://www.kb.cert
pen.com/english/advisories/2011/0126 - http://secunia.com/advisories/42894 - http://osvdb.org/70418 - http://www.kb.cert.org/vuls/id/496040 - http://www.securityfocus.com/bid/45813 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf - http://www.exploit-db.com/exploits/15992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64716
CVE ID: CVE-2011-0518 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:25.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via the system parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15964 - http://osvdb.org/70409 - http://www.vupen.com/english/advisories/2011/0073 - http://secunia.com/advisories/42835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64736
CVE ID: CVE-2011-0519 State: PUBLISHED Published: 2011-01-20T18:00:00Z Last Updated: 2024-09-17T01:06:13.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15891 - http://secunia.com/advisories/42792
CVE ID: CVE-2011-0520 State: PUBLISHED Published: 2011-01-28T15:00:00 Last Updated: 2024-08-06T21:58:25.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long DNS hostname with a large number of labels, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0699 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=610834 - http://www.openwall.com/lists/oss-
lish/advisories/2011/0699 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=610834 - http://www.openwall.com/lists/oss-security/2011/01/24/1 - http://www.openwall.com/lists/oss-security/2011/01/24/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64885 - http://www.debian.org/security/2011/dsa-2196 - http://secunia.com/advisories/43107 - http://secunia.com/advisories/43027 - http://osvdb.org/70630 - http://www.securityfocus.com/bid/45966
CVE ID: CVE-2011-0521 State: PUBLISHED Published: 2011-02-02T22:00:00 Last Updated: 2024-08-06T21:58:25.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dvb_ca_ioctl function in drivers/media/dvb/ttpci/av7110_ca.c in the Linux kernel before 2.6.38-rc2 does not check the sign of a certain integer field, which allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a negative value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45986 - http://www.securitytracker.com/id?1025195 - http://openwall.com/lists/oss-security/2011/01/24/2 - http://www.securityfocus.com/archiv
curitytracker.com/id?1025195 - http://openwall.com/lists/oss-security/2011/01/24/2 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64988 - http://secunia.com/advisories/43009 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc2 - http://openwall.com/lists/oss-security/2011/01/25/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb26a24ee9706473f31d34cc259f4dcf45cd0644
CVE ID: CVE-2011-0522 State: PUBLISHED Published: 2011-02-07T20:19:00 Last Updated: 2024-08-06T21:58:24.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "<" without a closing ">" in an MKV file, which triggers heap memory corruption, as demonstrated using refined-australia-blu720p-sample.mkv. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46008 - https://exch
. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65029 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12414 - http://securityreason.com/securityalert/8064 - http://www.openwall.com/lists/oss-security/2011/01/25/9 - http://www.exploit-db.com/exploits/16108 - http://www.openwall.com/lists/oss-security/2011/01/25/7 - http://mailman.videolan.org/pipermail/vlc-devel/2011-January/078614.html - http://www.vupen.com/english/advisories/2011/0225 - http://git.videolan.org/gitweb.cgi?p=vlc/vlc-1.1.git%3Ba=tag%3Bh=bb16813ddb61a53113c71bccc5255594057854
ries/2011/0225 - http://git.videolan.org/gitweb.cgi?p=vlc/vlc-1.1.git%3Ba=tag%3Bh=bb16813ddb61a53113c71bccc525559405785452 - http://mailman.videolan.org/pipermail/vlc-devel/2011-January/078607.html
CVE ID: CVE-2011-0523 State: PUBLISHED Published: 2012-08-13T20:00:00 Last Updated: 2024-08-06T21:58:25.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwise restricted files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/01/25/10 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107020.html - http://lists.opensuse.org/opensuse-updates/2012-07/msg00034.html - https://bugs.freedesktop.org/show_bug.cgi?id=33431 - http://lists.fedorapro
org/opensuse-updates/2012-07/msg00034.html - https://bugs.freedesktop.org/show_bug.cgi?id=33431 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106919.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106927.html - http://www.openwall.com/lists/oss-security/2011/01/24/10 - http://secunia.com/advisories/49991 - https://bugs.launchpad.net/ubuntu/+source/gypsy/+bug/690323 - http://cgit.freedesktop.org/gypsy/commit/?id=40101707cddb319481133b2a137294b6b669bd16
CVE ID: CVE-2011-0524 State: PUBLISHED Published: 2012-08-13T20:00:00 Last Updated: 2024-08-06T21:58:25.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecified vectors related to the sprintf function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/01/25/10 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107020.html - http://lists.opensuse.org/opensuse-updates/2012-07/msg00034.html - https://bugs.freedesktop.org/show_bug.cgi?id=33431 - http://lists.fedoraproje
g/opensuse-updates/2012-07/msg00034.html - https://bugs.freedesktop.org/show_bug.cgi?id=33431 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106919.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106927.html - http://www.openwall.com/lists/oss-security/2011/01/24/10 - http://secunia.com/advisories/49991 - https://bugs.launchpad.net/ubuntu/+source/gypsy/+bug/690323
CVE ID: CVE-2011-0525 State: PUBLISHED Published: 2020-02-05T20:18:18 Last Updated: 2024-08-06T21:58:25.188Z Vendors: Batavi Products: Batavi Problem Types: Cross-Site Request Forgery Description: Batavi before 1.0 has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/cve/CVE-2011-0525 - https://www.openwall.com/lists/oss-security/2011/01/27/3
CVE ID: CVE-2011-0526 State: PUBLISHED Published: 2011-02-08T20:00:00Z Last Updated: 2024-09-16T18:29:14.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a /entry/signin action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43074 - http://www.osvdb.org/70677 - http://www.vanillaforums.org/discussion/14397/vanilla-2.0.17-released - http://yehg.net/lab/pr0js/advisories/%5Bvanilla_forums-2.0.16%5D_cross_site_scripting - http://openwall.com/lists/oss-security
/yehg.net/lab/pr0js/advisories/%5Bvanilla_forums-2.0.16%5D_cross_site_scripting - http://openwall.com/lists/oss-security/2011/01/27/2 - http://openwall.com/lists/oss-security/2011/01/27/5
CVE ID: CVE-2011-0527 State: PUBLISHED Published: 2011-08-15T19:00:00 Last Updated: 2024-08-06T21:58:25.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before 2.1.2.RELEASE accepts obfuscated passwords during JMX authentication, which makes it easier for context-dependent attackers to obtain access by leveraging an ability to read stored passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.springsource.com/security/cve-2011-0527 - http://www.securityfocus.com/bid/49122 - http://securitytracker.com/id?1025923 - http://archives.neohapsis.com/archives/full
://www.securityfocus.com/bid/49122 - http://securitytracker.com/id?1025923 - http://archives.neohapsis.com/archives/fulldisclosure/2011-08/0122.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69156
CVE ID: CVE-2011-0528 State: PUBLISHED Published: 2014-02-17T16:00:00 Last Updated: 2024-08-06T21:58:24.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1365-1 - http://www.openwall.com/lists/oss-security/2011/01/27/6 - http://www.mail-archive.com/puppet-users%40googlegroups.com/msg16429.html - http://www.openwall.com/lists/oss-security/2011/01/31/5
CVE ID: CVE-2011-0529 State: PUBLISHED Published: 2019-11-20T15:17:43 Last Updated: 2024-08-06T21:58:25.167Z Vendors: weborf Products: weborf Problem Types: UNKNOWN_TYPE Description: Weborf before 0.12.5 is affected by a Denial of Service (DOS) due to malformed fields in HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-0529 - https://www.openwall.com/lists/oss-security/2011/01/31/6
CVE ID: CVE-2011-0530 State: PUBLISHED Published: 2011-02-22T18:00:00 Last Updated: 2024-08-06T21:58:25.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201206-35.xml - https://github.com/yoe/nbd/commit/3ef52043861ab16352d49af89e048ba6339d6df8 - http://secunia.com/advisories/43610 - http://lists.fedoraproject.org/pipermail/packa