Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4811 State: PUBLISHED Published: 2011-12-14T00:00:00Z Last Updated: 2024-09-16T17:14:08.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pokaz_podkat.php in BestShopPro allows remote attackers to execute arbitrary SQL commands via the str parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18063
CVE ID: CVE-2011-4812 State: PUBLISHED Published: 2011-12-14T00:00:00Z Last Updated: 2024-09-16T20:11:14.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web script or HTML via the str parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18063 - http://www.osvdb.org/76880 - http://secunia.com/advisories/46662
CVE ID: CVE-2011-4813 State: PUBLISHED Published: 2011-12-14T00:00:00Z Last Updated: 2024-09-16T18:43:30.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in clientarea.php in WHMCompleteSolution (WHMCS) 3.x.x allows remote attackers to read arbitrary files via an invalid action and a ../ (dot dot slash) in the templatefile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18081
CVE ID: CVE-2011-4814 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-07T00:16:34.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) admin/boxes.php, (3) comm/clients.php, (4) commande/index.php; and the optioncss parameter to (5) admin/ihm.php and (6) user/home.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520619/100/0/threaded - https://github.com/Dolibarr/dolibarr/commit/d08d28c0cda1f762a47cc205d4363
ityfocus.com/archive/1/520619/100/0/threaded - https://github.com/Dolibarr/dolibarr/commit/d08d28c0cda1f762a47cc205d4363de03df16675 - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_dolibarr.html - https://github.com/Dolibarr/dolibarr/commit/63820ab37537fdff842539425b2bf2881f0d8e91 - https://github.com/Dolibarr/dolibarr/commit/762f98ab4137749d0993612b4e3544a4207e78a1 - https://github.com/Dolibarr/dolibarr/commit/c539155d6ac2f5b6ea75b87a16f298c0090e535a - http://www.osvdb.org/77339 - http://www.securityfocus.com/bid/50777
CVE ID: CVE-2011-4815 State: PUBLISHED Published: 2011-12-30T01:00:00 Last Updated: 2024-08-07T00:16:35.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47405 - http://www.securitytracker.com/id?1026474 - http://www.nruns.com/_downloads/advisory28122011.pdf - http://secunia.com/advisories/47822 - http://rhn.
om/id?1026474 - http://www.nruns.com/_downloads/advisory28122011.pdf - http://secunia.com/advisories/47822 - http://rhn.redhat.com/errata/RHSA-2012-0070.html - http://jvn.jp/en/jp/JVN90615481/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72020 - http://www.kb.cert.org/vuls/id/903934 - http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-talk/391606 - http://www.ruby-lang.org/en/news/2011/12/28/denial-of-service-attack-was-found-for-rubys-hash-algorithm/ - http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html - http://rhn.redhat.com/errata/RHSA-2012-0069.html - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archives/security-announce/2012/May/msg0
SA-2012-0069.html - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000066.html - http://www.ocert.org/advisories/ocert-2011-003.html
CVE ID: CVE-2011-4816 State: PUBLISHED Published: 2012-03-13T01:00:00 Last Updated: 2024-08-07T00:16:35.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ib
nds via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72001 - http://www.ibm.com/support/docview.wss?uid=swg21584666 - http://secunia.com/advisories/48299 - http://secunia.com/advisories/48305 - http://www.securityfocus.com/bid/52333 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV09194
CVE ID: CVE-2011-4817 State: PUBLISHED Published: 2012-03-13T01:00:00 Last Updated: 2024-08-07T00:16:34.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The About option on the Help menu in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 shows the username, which might allow remote authenticated users to have an unspecified impact via a targeted attack against the corresponding user account. Additional Analyst Notes: - CVE Program Co
pecified impact via a targeted attack against the corresponding user account. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21584666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72004 - http://secunia.com/advisories/48299 - http://secunia.com/advisories/48305 - http://www.securityfocus.com/bid/52333 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV09197
CVE ID: CVE-2011-4818 State: PUBLISHED Published: 2012-03-13T01:00:00 Last Updated: 2024-08-07T00:16:35.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the uisessionid parameter to an unspecified component. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72006 - http://www.ibm.com/support/docview.wss?uid=swg21584666 - http://secunia.com/advisories/48299 - http://www-01.ibm.com/support/docview.w
.com/support/docview.wss?uid=swg21584666 - http://secunia.com/advisories/48299 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV09200 - http://www.securityfocus.com/bid/52333
CVE ID: CVE-2011-4819 State: PUBLISHED Published: 2012-03-13T01:00:00 Last Updated: 2024-08-07T00:16:35.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allow remote attackers to inject arbitrary web script or HTML via the uisesionid parameter to (1) maximo.jsp or (2) the default URI under ui/. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21584666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72008 - http://secunia.com/advisories/48299 - http://www.securityfocus.com/bid/52
ge.xforce.ibmcloud.com/vulnerabilities/72008 - http://secunia.com/advisories/48299 - http://www.securityfocus.com/bid/52333 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV09202
CVE ID: CVE-2011-4820 State: PUBLISHED Published: 2020-08-26T20:48:20 Last Updated: 2024-08-07T00:16:35.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Asset Manager 7.5 could allow a remote attacker to bypass security restrictions. An attacker could exploit this vulnerability using the UID parameter to modify another user's preferences. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71161
CVE ID: CVE-2011-4821 State: PUBLISHED Published: 2014-06-20T14:00:00 Last Updated: 2024-08-07T00:16:34.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the TFTP server in D-Link DIR-601 Wireless N150 Home Router with firmware 1.02NA allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.solutionary.com/research/vulnerability-disclosures/2012/01/d-link-dir-601-tftp-directory-traversal-vulnerability - http://www.securityfocus.com/bid/51659 - http://secunia.com/advisories/47762 - http://www.securityfocus.com/archive/1/521369
CVE ID: CVE-2011-4822 State: PUBLISHED Published: 2011-12-15T02:00:00 Last Updated: 2024-08-07T00:16:34.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the user profile feature in Atlassian FishEye before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via (1) snippets in a user comment, which is not properly handled in a Confluence page, or (2) the user profile display name, which is not properly handled in a FishEye page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71426 - https://jira.atlassian.com/browse/FE-3797 - https://exc
: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71426 - https://jira.atlassian.com/browse/FE-3797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71427 - https://jira.atlassian.com/browse/FE-3798 - http://osvdb.org/77264 - http://confluence.atlassian.com/display/FISHEYE/FishEye+and+Crucible+Security+Advisory+2011-11-22 - http://secunia.com/advisories/46975 - http://www.securityfocus.com/bid/50762 - http://osvdb.org/77263
CVE ID: CVE-2011-4823 State: PUBLISHED Published: 2011-12-15T02:00:00Z Last Updated: 2024-09-17T03:02:05.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Vik Real Estate (com_vikrealestate) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) contract parameter in a results action and (2) imm parameter in a show action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://docs.joomla.org/Vulnerable_Extensions_List#Vik_Real_Estate_1.0 - http://www.exploit-db.com/exploits/18048
CVE ID: CVE-2011-4824 State: PUBLISHED Published: 2011-12-15T02:00:00 Last Updated: 2024-08-07T00:16:34.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the login_username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.cacti.net/view.php?id=2062 - http://secunia.com/advisories/46876 - http://forums.cacti.net/viewtopic.php?f=21&t=44116 - http://www.securityfocus.com/bid/50671 - http://www.cacti.net/release_notes_0_8_7h.php - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069141.html -
cti.net/release_notes_0_8_7h.php - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069141.html - http://svn.cacti.net/viewvc?view=rev&revision=6807 - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069137.html - http://secunia.com/advisories/44133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71326 - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069126.html
CVE ID: CVE-2011-4825 State: PUBLISHED Published: 2011-12-15T02:00:00Z Last Updated: 2024-09-17T00:46:26.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.zenphoto.org/trac/ticket/2005 - http://www.phpmyfaq.de/advisory_2011-10-25.php - http://www.phpletter.com/en/DOWNLOAD/1/ - http://www.securityfocus.c
- http://www.phpmyfaq.de/advisory_2011-10-25.php - http://www.phpletter.com/en/DOWNLOAD/1/ - http://www.securityfocus.com/bid/50523 - http://www.exploit-db.com/exploits/18075
CVE ID: CVE-2011-4826 State: PUBLISHED Published: 2011-12-15T02:00:00Z Last Updated: 2024-09-16T18:43:51.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in session.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to process.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50706 - http://www.autosectools.com/Advisory/V-CMS-1.0-SQL-Injection-235 - http://secunia.com/advisories/46861
CVE ID: CVE-2011-4827 State: PUBLISHED Published: 2011-12-15T02:00:00Z Last Updated: 2024-09-16T17:59:47.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AutoSec Tools V-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) p parameter to redirect.php and (2) box parameter to includes/TrueColorPicker/index.php, which is not properly handled in includes/TrueColorPicker/class.TrueColorPicker.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50706 - http://www.autosectools.com/Advisory/V-CMS-1.0-Reflected-Cross-site-Scripting-234 - http://secunia
focus.com/bid/50706 - http://www.autosectools.com/Advisory/V-CMS-1.0-Reflected-Cross-site-Scripting-234 - http://secunia.com/advisories/46861
CVE ID: CVE-2011-4828 State: PUBLISHED Published: 2011-12-15T02:00:00Z Last Updated: 2024-09-17T02:47:38.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in temp/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50706 - http://bugs.v-cms.org/view.php?id=53 - http://www.autosectools.com/Advisory/V-CMS-1.0-Arbitrary-Upload-236 - http://bugs.v-cms.org/changelog_page.php - http://sec
p://www.autosectools.com/Advisory/V-CMS-1.0-Arbitrary-Upload-236 - http://bugs.v-cms.org/changelog_page.php - http://secunia.com/advisories/46861
CVE ID: CVE-2011-4829 State: PUBLISHED Published: 2011-12-15T02:00:00Z Last Updated: 2024-09-17T01:10:56.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the com_listing component in Barter Sites component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the category_id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18046 - http://my.barter-sites.com/index.php?option=com_content&view=article&id=6&Itemid=25 - http://docs.joomla.org/Vulnerable_Extensions_List#Barter_Sites_1.3
CVE ID: CVE-2011-4830 State: PUBLISHED Published: 2011-12-15T02:00:00Z Last Updated: 2024-09-16T20:41:40.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the com_listing component in Barter Sites component 1.3 for Joomla! allow remote authenticated users to inject arbitrary web script or HTML via the (1) listing_title, (2) description, (3) homeurl (aka Website Address), (4) paystring (aka Payment types accepted), (5) sell_price, (6) shipping_cost, and (7) quantity parameters to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18046 - http://my.barter-sites.com/i
st Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18046 - http://my.barter-sites.com/index.php?option=com_content&view=article&id=6&Itemid=25 - http://docs.joomla.org/Vulnerable_Extensions_List#Barter_Sites_1.3
CVE ID: CVE-2011-4831 State: PUBLISHED Published: 2011-12-15T02:00:00Z Last Updated: 2024-09-17T00:51:01.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to read arbitrary files via a ..%2f (encoded dot dot) in the file parameter in a download action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18070
CVE ID: CVE-2011-4832 State: PUBLISHED Published: 2011-12-15T02:00:00 Last Updated: 2024-08-07T00:16:35.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in CaupoShop Pro 2.x, CaupoShop Classic 3.01, and CaupoShop Pro 3.70 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter in a template action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71136 - http://www.securityfocus.com/bid/50530 - http://www.exploit-db.com/exploits/18066 - http://www.osvdb.org/76871
CVE ID: CVE-2011-4833 State: PUBLISHED Published: 2011-12-15T02:00:00 Last Updated: 2024-08-07T00:16:35.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2 before 6.2.4, 6.3 before 6.3.0RC3, and 6.4 before 6.4.0beta1 allow remote attackers to execute arbitrary SQL commands via the (1) where and (2) order parameters in a get_full_list action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71586 - http://www.sugarcrm.com/crm/support/bugs.html#issue_47839 - https://www.htbridge.ch/advisory/sql_injection_in_su
71586 - http://www.sugarcrm.com/crm/support/bugs.html#issue_47839 - https://www.htbridge.ch/advisory/sql_injection_in_sugarcrm.html - http://www.osvdb.org/77459 - http://www.sugarcrm.com/crm/support/bugs.html#issue_47805 - http://secunia.com/advisories/47011 - http://securitytracker.com/id?1026369 - http://www.sugarcrm.com/crm/support/bugs.html#issue_47806 - http://www.sugarcrm.com/crm/support/bugs.html#issue_47800 - http://www.securityfocus.com/archive/1/520685/100/0/threaded
CVE ID: CVE-2011-4834 State: PUBLISHED Published: 2011-12-15T02:00:00 Last Updated: 2024-08-07T00:16:34.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2) a symlink attack on /tmp/tmp.txt. Additional Analyst Notes: - CVE Program Container: References: - http://0a29.blogspot.com/2011/12/0a29-11-2-privilege-escalation.html - http://secunia.com/advisories/47040 - http://www.securityfocus.com/archive/1/520783/100/0/threaded - https://exchange.xforce.ibmcloud.com/vul
visories/47040 - http://www.securityfocus.com/archive/1/520783/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/71698
CVE ID: CVE-2011-4835 State: PUBLISHED Published: 2011-12-15T02:00:00Z Last Updated: 2024-09-16T21:07:32.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/796883
CVE ID: CVE-2011-4836 State: PUBLISHED Published: 2011-12-15T02:00:00Z Last Updated: 2024-09-17T01:32:03.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/796883
CVE ID: CVE-2011-4837 State: PUBLISHED Published: 2011-12-15T02:00:00Z Last Updated: 2024-09-17T00:26:57.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/796883
CVE ID: CVE-2011-4838 State: PUBLISHED Published: 2011-12-30T01:00:00 Last Updated: 2024-08-07T00:16:34.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. Additional Analyst Notes: - CVE Program Container: References: - http://www.nruns.com/_downloads/advisory28122011.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/72019 - http://jruby.org/2011/12/27/jruby-1-6-5-1.html - http://secunia.com/advisories/50084
bmcloud.com/vulnerabilities/72019 - http://jruby.org/2011/12/27/jruby-1-6-5-1.html - http://secunia.com/advisories/50084 - http://secunia.com/advisories/47407 - http://www.kb.cert.org/vuls/id/903934 - http://rhn.redhat.com/errata/RHSA-2012-1232.html - http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html - http://security.gentoo.org/glsa/glsa-201207-06.xml - http://www.ocert.org/advisories/ocert-2011-003.html
CVE ID: CVE-2011-4847 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:35.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 allows remote attackers to execute arbitrary SQL commands via a certificateslist cookie to notification@/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72222 - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE ID: CVE-2011-4848 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:35.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 includes a submitted password within an HTTP response body, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by password handling in certain files under client@1/domain@1/backup/local-repository/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72223 - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2
oud.com/vulnerabilities/72223 - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html