Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ileges by modifying the PATH environment variable to reference a malicious command, as demonstrated via uname. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/%2Bsource/pam/%2Bbug/610125 - http://www.ubuntu.com/usn/USN-1237-1
CVE ID: CVE-2011-3629 State: PUBLISHED Published: 2020-02-04T12:21:19 Last Updated: 2024-08-06T23:37:48.695Z Vendors: Joomla! Products: Joomla! core Problem Types: information disclosure Description: Joomla! core 1.7.1 allows information disclosure due to weak encryption Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/02/4 - http://www.openwall.com/lists/oss-security/2012/03/02/8 - http://www.openwall.com/lists/oss-security/2012/03/28/6 - https://developer.joomla.org/security/news/370-20111001-core-information-disclosure
CVE ID: CVE-2011-3630 State: PUBLISHED Published: 2019-11-26T03:08:52 Last Updated: 2024-08-06T23:37:48.651Z Vendors: hardlink Products: hardlink Problem Types: Buffer Overflow Description: Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink executable crash, or, potentially arbitrary code execution with the privileges of the user running the hardlink executable. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.de
ng the hardlink executable. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-3630 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3630 - https://access.redhat.com/security/cve/cve-2011-3630 - https://www.openwall.com/lists/oss-security/2011/10/20/6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516
CVE ID: CVE-2011-3631 State: PUBLISHED Published: 2019-11-26T03:22:40 Last Updated: 2024-08-06T23:37:48.560Z Vendors: hardlink Products: hardlink Problem Types: Integer Overflow Description: Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used. A remote attacker could provide a specially-crafted directory tree and trick the local user into consolidating it, leading to hardlink executable crash or potentially arbitrary code execution with user privileges. Additional Analyst Notes: - CVE Program Container: References: - https://security-track
execution with user privileges. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-3631 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3631 - https://access.redhat.com/security/cve/cve-2011-3631 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516
CVE ID: CVE-2011-3632 State: PUBLISHED Published: 2019-11-26T03:34:46 Last Updated: 2024-08-06T23:37:48.685Z Vendors: hardlink Products: hardlink Problem Types: Symbolic Link Following Description: Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-3632 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3632 - https://access.redhat.com/security/cve/cve-2011-3632 - https://www.openwall.com/lists/oss-security/2011/10/20/6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=64551
632 - https://www.openwall.com/lists/oss-security/2011/10/20/6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516 - https://www.openwall.com/lists/oss-security/2011/10/15/2
CVE ID: CVE-2011-3633 State: REJECTED Published: 2011-12-12T16:00:00Z Last Updated: 2024-09-16T20:43:05.264Z Description: No description available.
CVE ID: CVE-2011-3634 State: PUBLISHED Published: 2014-02-28T18:00:00 Last Updated: 2024-08-06T23:37:48.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails validation and Verify-Host is enabled, which allows man-in-the-middle attackers to obtain repository credentials via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1283-1 - https://alioth.debian.org/plugins/scmgit/cgi-bin/gitweb.cgi?p=apt/apt.git%3Ba=blob%3Bf=debian/changelog%3Bhb=HEAD - http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3634.html - http
Ba=blob%3Bf=debian/changelog%3Bhb=HEAD - http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3634.html - https://bugs.launchpad.net/ubuntu/+source/apt/+bug/868353
CVE ID: CVE-2011-3635 State: PUBLISHED Published: 2011-10-23T10:00:00 Last Updated: 2024-08-06T23:37:48.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias (aka nickname). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46510 - https://bugzilla.redhat.com/show_bug.cgi?id=747599 - http://www.securityfocus.com/bid/50323 - http://osvdb.org/76485 - https://bugzilla.gnome.org/show_bug.
g.cgi?id=747599 - http://www.securityfocus.com/bid/50323 - http://osvdb.org/76485 - https://bugzilla.gnome.org/show_bug.cgi?id=662035 - http://secunia.com/advisories/46939 - http://git.gnome.org/browse/empathy/commit/?id=739aca418457de752be13721218aaebc74bd9d36
CVE ID: CVE-2011-3636 State: PUBLISHED Published: 2011-12-08T11:00:00Z Last Updated: 2024-08-06T23:37:48.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes. Additional Analyst Notes: - CVE Program Container: References: - http://freeipa.org/page/IPAv2_214
CVE ID: CVE-2011-3637 State: PUBLISHED Published: 2012-05-17T10:00:00Z Last Updated: 2024-08-06T23:37:48.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: The m_stop function in fs/proc/task_mmu.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (OOPS) via vectors that trigger an m_start error. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=747848 - http://www.openwall.com/lists/oss-security/2012/02/06/1 - https://github.com/torvalds/linux/commit/76597cd31470fa130784c78fadb4dab2e624a723 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://git.kernel.org/?p=linux/ker
c78fadb4dab2e624a723 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=76597cd31470fa130784c78fadb4dab2e624a723
CVE ID: CVE-2011-3638 State: PUBLISHED Published: 2013-03-01T11:00:00Z Last Updated: 2024-08-06T23:37:48.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/ext4/extents.c in the Linux kernel before 3.0 does not mark a modified extent as dirty in certain cases of extent splitting, which allows local users to cause a denial of service (system crash) via vectors involving ext4 umount and mount operations. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/667eff35a1f56fa74ce98a0c7c29a40adc1ba4e3 - http://www.openwall.com/lists/oss-security/2011/10/24/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=co
w.openwall.com/lists/oss-security/2011/10/24/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=667eff35a1f56fa74ce98a0c7c29a40adc1ba4e3 - http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0 - https://bugzilla.redhat.com/show_bug.cgi?id=747942
CVE ID: CVE-2011-3639 State: PUBLISHED Published: 2011-11-30T02:00:00 Last Updated: 2024-08-06T23:37:48.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers by using the HTTP/0.9 protocol with a malformed URI containing an initial @ (at sign) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368. Additional Analyst
(at sign) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=752080 - http://rhn.redhat.com/errata/RHSA-2012-0128.html - http://svn.apache.org/viewvc?view=revision&revision=1188745 - http://www.debian.org/security/2012/dsa-2405
CVE ID: CVE-2011-3640 State: PUBLISHED Published: 2011-10-28T00:00:00 Last Updated: 2024-08-06T23:37:48.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but we're not treating this as a security bug." Additional Analyst Notes: - CVE Program Container: References: - https://hermes.opensuse.org/messages/13155432 - https://hermes.opensuse.org/messages/13154861 - http://securityreason.com/se
s://hermes.opensuse.org/messages/13155432 - https://hermes.opensuse.org/messages/13154861 - http://securityreason.com/securityalert/8483 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13414 - http://blog.acrossecurity.com/2011/10/google-chrome-pkcs11txt-file-planting.html - http://code.google.com/p/chromium/issues/detail?id=97426 - https://bugzilla.mozilla.org/show_bug.cgi?id=641052
CVE ID: CVE-2011-3642 State: PUBLISHED Published: 2020-02-08T15:46:36 Last Updated: 2024-08-06T23:37:48.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system (news) extension for TYPO3 and Mahara, allows remote attackers to inject arbitrary web script or HTML via the plugin configuration directive in a reference to an external domain plugin. Additional Analyst Notes: - CVE Program Container: References: - http://web.appsec.ws/FlashExploitDatabase.php - http://appsec.ws/Presentations/FlashFlooding.pdf - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo
p://appsec.ws/Presentations/FlashFlooding.pdf - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-009 - https://code.google.com/p/flowplayer-core/issues/detail?id=441 - https://mahara.org/interaction/forum/topic.php?id=5237 - http://secunia.com/advisories/52074 - http://secunia.com/advisories/54206 - http://secunia.com/advisories/58854 - https://www.securityfocus.com/bid/48651 - https://bugs.launchpad.net/mahara/+bug/1103748
CVE ID: CVE-2011-3645 State: PUBLISHED Published: 2011-09-27T19:00:00 Last Updated: 2024-08-06T23:37:48.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or (2) a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of an arbitrary user. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8394 - http://seclists.org/fulldisclosure/2011/Sep/283 - http://www.exploit-db.com/exploits/17897
CVE ID: CVE-2011-3646 State: PUBLISHED Published: 2011-11-17T19:00:00Z Last Updated: 2024-09-17T01:11:17.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed js_frame parameter to phpmyadmin.css.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2011-15.php - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069235.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069237.html - htt
ce/2011-November/069235.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069237.html - http://secunia.com/advisories/46874 - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069234.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:158
CVE ID: CVE-2011-3647 State: PUBLISHED Published: 2011-11-09T11:00:00 Last Updated: 2024-08-06T23:37:48.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a related issue to CVE-2011-3004. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=680880 - http://www.redhat.com/support/errata/RHSA-2011-1439.html - http://ww
tps://bugzilla.mozilla.org/show_bug.cgi?id=680880 - http://www.redhat.com/support/errata/RHSA-2011-1439.html - http://www.mozilla.org/security/announce/2011/mfsa2011-46.html - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13550
CVE ID: CVE-2011-3648 State: PUBLISHED Published: 2011-11-09T11:00:00 Last Updated: 2024-08-06T23:37:48.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 allows remote attackers to inject arbitrary web script or HTML via crafted text with Shift JIS encoding. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-1439.html - https://bugzilla.mozilla.org/show_bug.cgi?id=690225 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14212 - http://list
i?id=690225 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14212 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html - http://www.mozilla.org/security/announce/2011/mfsa2011-47.html
CVE ID: CVE-2011-3649 State: PUBLISHED Published: 2011-11-09T11:00:00 Last Updated: 2024-08-06T23:37:48.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D (aka D2D) API is used on Windows in conjunction with the Azure graphics back-end, allow remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas. NOTE: this issue exists because of a CVE-2011-2986 regression. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=655836 - https://oval.cisecurity.org/repository/search/definition/
ences: - https://bugzilla.mozilla.org/show_bug.cgi?id=655836 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14025 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html - http://www.mozilla.org/security/announce/2011/mfsa2011-50.html - http://www.securityfocus.com/bid/50591
CVE ID: CVE-2011-3650 State: PUBLISHED Published: 2011-11-09T11:00:00 Last Updated: 2024-08-06T23:46:01.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2011/mfsa2011-49.h
tional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2011/mfsa2011-49.html - http://www.redhat.com/support/errata/RHSA-2011-1439.html - https://bugzilla.mozilla.org/show_bug.cgi?id=674776 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13870 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html
CVE ID: CVE-2011-3651 State: PUBLISHED Published: 2011-11-09T11:00:00 Last Updated: 2024-08-06T23:46:01.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 7.0 and Thunderbird 7.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=677847 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14364 - https://bugzilla.mozilla.org/show_bug.cgi?id=686044 - https://bugz
arch/definition/oval%3Aorg.mitre.oval%3Adef%3A14364 - https://bugzilla.mozilla.org/show_bug.cgi?id=686044 - https://bugzilla.mozilla.org/show_bug.cgi?id=665070 - https://bugzilla.mozilla.org/show_bug.cgi?id=671160 - https://bugzilla.mozilla.org/show_bug.cgi?id=679593 - http://secunia.com/advisories/49055 - https://bugzilla.mozilla.org/show_bug.cgi?id=675515 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html - https://bugzilla.mozilla.org/show_bug.cgi?id=672892 - http://www.mozilla.org/security/announce/2011/mfsa2011-48.html - https://bugzilla.mozilla.org/show_bug.cgi?id=646968 - https://bugzilla.mozilla.org/show_bug.cgi?id=676918 - https://bugzilla.mozilla.org/show_
la.org/show_bug.cgi?id=646968 - https://bugzilla.mozilla.org/show_bug.cgi?id=676918 - https://bugzilla.mozilla.org/show_bug.cgi?id=652054
CVE ID: CVE-2011-3652 State: PUBLISHED Published: 2011-11-09T11:00:00 Last Updated: 2024-08-06T23:46:01.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49055 - http://www.mozilla.org/security/announce/2011/mfsa2011-48.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14239
nce/2011/mfsa2011-48.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14239 - https://bugzilla.mozilla.org/show_bug.cgi?id=682727
CVE ID: CVE-2011-3653 State: PUBLISHED Published: 2011-11-09T11:00:00 Last Updated: 2024-08-06T23:46:01.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the Same Origin Policy and read image data via vectors related to WebGL textures. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2011/mfsa2011-51.html - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html - https://bugzilla.mozilla.org/show_bu
html - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html - https://bugzilla.mozilla.org/show_bug.cgi?id=684882 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13347
CVE ID: CVE-2011-3654 State: PUBLISHED Published: 2011-11-09T11:00:00 Last Updated: 2024-08-06T23:46:01.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly handle links from SVG mpath elements to non-SVG elements, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=694953 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13830 - http:
bug.cgi?id=694953 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13830 - http://secunia.com/advisories/49055 - http://www.mozilla.org/security/announce/2011/mfsa2011-48.html
CVE ID: CVE-2011-3655 State: PUBLISHED Published: 2011-11-09T11:00:00 Last Updated: 2024-08-06T23:46:01.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14202 - http://www.mozilla.org/security/announce/2011/mfsa2011-52.html - http://secunia.com/advisories/49055 - https://bugzilla.mozilla.org/show_bug.cgi?id=672182
ounce/2011/mfsa2011-52.html - http://secunia.com/advisories/49055 - https://bugzilla.mozilla.org/show_bug.cgi?id=672182 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html
CVE ID: CVE-2011-3656 State: PUBLISHED Published: 2021-06-02T16:31:22 Last Updated: 2024-08-06T23:46:01.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP 0.9 errors, non-default ports, and content-sniffing. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=667907
CVE ID: CVE-2011-3657 State: PUBLISHED Published: 2012-01-02T19:00:00 Last Updated: 2024-08-06T23:46:01.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when debug mode is used, allow remote attackers to inject arbitrary web script or HTML via vectors involving a (1) tabular report, (2) graphical report, or (3) new chart. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=697699 - http://archives.neohapsis.com/archives/bugtraq/2011-12/0184.html -
https://bugzilla.mozilla.org/show_bug.cgi?id=697699 - http://archives.neohapsis.com/archives/bugtraq/2011-12/0184.html - http://www.bugzilla.org/security/3.4.12/