Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-0432 State: PUBLISHED Published: 2011-03-14T19:00:00Z Last Updated: 2024-09-16T17:18:35.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the get_userinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV before 0.9.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) pw argument. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2177 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055444.html - http://pywebdav.google
011/dsa-2177 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055444.html - http://pywebdav.googlecode.com/files/PyWebDAV-0.9.4.1.tar.gz - http://secunia.com/advisories/43602 - http://secunia.com/advisories/43571 - http://www.vupen.com/english/advisories/2011/0553 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055413.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055412.html - http://secunia.com/advisories/43703 - http://www.vupen.com/english/advisories/2011/0554 - http://www.vupen.com/english/advisories/2011/0634 - http://www.securityfocus.com/bid/46655 - http://code.google.com/p/pywebdav/updates/list - https://bugzi
ries/2011/0634 - http://www.securityfocus.com/bid/46655 - http://code.google.com/p/pywebdav/updates/list - https://bugzilla.redhat.com/show_bug.cgi?id=677718
CVE ID: CVE-2011-0433 State: PUBLISHED Published: 2012-11-19T11:00:00 Last Updated: 2024-08-06T21:51:08.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=679732 - http://secunia.com/advisories/48985 - http://xorl.wordpress.
ces: - https://bugzilla.redhat.com/show_bug.cgi?id=679732 - http://secunia.com/advisories/48985 - http://xorl.wordpress.com/2011/02/20/cve-2011-0433-evince-linetoken-buffer-overflow/ - http://rhn.redhat.com/errata/RHSA-2012-1201.html - https://bugzilla.gnome.org/show_bug.cgi?id=640923 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:144 - https://security.gentoo.org/glsa/201701-57
CVE ID: CVE-2011-0434 State: PUBLISHED Published: 2011-03-07T20:00:00 Last Updated: 2024-08-06T21:51:09.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Domain Technologie Control (DTC) before 0.32.9 allow remote attackers to execute arbitrary SQL commands via the cid parameter to (1) admin/bw_per_month.php or (2) client/bw_per_month.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43523 - http://www.vupen.com/english/advisories/2011/0556 - http://packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.29.17-1+lenny1/changelog - https://exchange.xforce.ibmcloud.com/vulnerabilities/65895 -
changelogs/pool/main/d/dtc/dtc_0.29.17-1+lenny1/changelog - https://exchange.xforce.ibmcloud.com/vulnerabilities/65895 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=89da9c519b04cda1b23e6290d2b0a6cea1bae31e - http://www.debian.org/security/2011/dsa-2179 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=e94e8b9cc354bfcaeb284d5331b815256bb46162 - http://packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.32.10-1/changelog - http://www.gplhost.sg/lists/dtcannounce/msg00025.html
CVE ID: CVE-2011-0435 State: PUBLISHED Published: 2011-03-07T20:00:00 Last Updated: 2024-08-06T21:51:09.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Domain Technologie Control (DTC) before 0.32.9 does not require authentication for (1) admin/bw_per_month.php and (2) client/bw_per_month.php, which allows remote attackers to obtain potentially sensitive bandwidth information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43523 - http://www.vupen.com/english/advisories/2011/0556 - http://packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.29.17-1+lenny1/changelog - http://git.gplhost.com/gitweb/?p=dtc.git%
ackages.debian.org/changelogs/pool/main/d/dtc/dtc_0.29.17-1+lenny1/changelog - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=89da9c519b04cda1b23e6290d2b0a6cea1bae31e - http://www.debian.org/security/2011/dsa-2179 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65896 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=e94e8b9cc354bfcaeb284d5331b815256bb46162 - http://packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.32.10-1/changelog - http://www.gplhost.sg/lists/dtcannounce/msg00025.html
CVE ID: CVE-2011-0436 State: PUBLISHED Published: 2011-03-07T20:00:00 Last Updated: 2024-08-06T21:51:08.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The register_user function in client/new_account_form.php in Domain Technologie Control (DTC) before 0.32.9 includes a cleartext password in an e-mail message, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43523 - http://www.vupen.com/english/advisories/2011/0556 - http://packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.29.17-1+lenny1/changelog - http://openwall.com/lists/oss-
- http://packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.29.17-1+lenny1/changelog - http://openwall.com/lists/oss-security/2011/02/22/1 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=adffff7efb3687ff465ee0552a944dd3109f3cb0 - http://www.debian.org/security/2011/dsa-2179 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614302 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=f8e3b2d7cc2da313addc05394568ab9599499285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65898 - http://packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.32.10-1/changelog - http://www.gplhost.sg/lists/dtcannounce/msg00025.html
CVE ID: CVE-2011-0437 State: PUBLISHED Published: 2011-03-07T20:00:00 Last Updated: 2024-08-06T21:51:08.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: shared/inc/sql/ssh.php in the SSH accounts management implementation in Domain Technologie Control (DTC) before 0.32.9 allows remote authenticated users to delete arbitrary accounts via the edssh_account parameter in a deletesshaccount Delete action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43523 - http://www.vupen.com/english/advisories/2011/0556 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=9b75112fc12fead5740b1aaf0df562b5a9045ec0 - http://packages.debian.org/
/git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=9b75112fc12fead5740b1aaf0df562b5a9045ec0 - http://packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.29.17-1+lenny1/changelog - http://www.debian.org/security/2011/dsa-2179 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65897 - http://packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.32.10-1/changelog - http://www.gplhost.sg/lists/dtcannounce/msg00025.html - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=c97ab4ae43945de36534c40004d713b3b10113db
CVE ID: CVE-2011-0438 State: PUBLISHED Published: 2011-03-15T17:00:00 Last Updated: 2024-08-06T21:51:08.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found in LDAP, which allows remote attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8132 - http://www.securityfocus.com/bid/46819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66028 - http://lists.arthurdejong.org/nss-pam-ldapd-announce/2011/attachments/txtVf3rHgt8qQ.txt - http://lists.arthurdejong.org/nss-pam-ldapd-announce/2011/msg0000
am-ldapd-announce/2011/attachments/txtVf3rHgt8qQ.txt - http://lists.arthurdejong.org/nss-pam-ldapd-announce/2011/msg00000.html - http://arthurdejong.org/nss-pam-ldapd/news.html#20110309
CVE ID: CVE-2011-0439 State: PUBLISHED Published: 2011-03-28T16:00:00 Last Updated: 2024-08-06T21:51:08.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box. Additional Analyst Notes: - CVE Program Container: References: - http://mahara.org/interaction/forum/topic.php?id=3208 - http://www.debian.org/security/2011/dsa-2206 - http://www.securityfocus.com/bid/47033 - http://mahara.org/interaction/forum/topic.php?id=3205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66327 - http://secunia.com/ad
interaction/forum/topic.php?id=3205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66327 - http://secunia.com/advisories/43858
CVE ID: CVE-2011-0440 State: PUBLISHED Published: 2011-03-28T16:00:00 Last Updated: 2024-08-06T21:51:09.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs. Additional Analyst Notes: - CVE Program Container: References: - http://mahara.org/interaction/forum/topic.php?id=3208 - http://www.debian.org/security/2011/dsa-2206 - http://www.securityfocus.com/bid/47033 - http://mahara.org/interaction/forum/topic.php?id=3206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66326 - ht
http://mahara.org/interaction/forum/topic.php?id=3206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66326 - http://secunia.com/advisories/43858
CVE ID: CVE-2011-0441 State: PUBLISHED Published: 2011-03-29T18:00:00 Last Updated: 2024-08-06T21:51:09.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46928 - http://git.debian.org/?p=pkg-php/php.git%3Ba=commit%3Bh=d09fd04ed7bfcf7f008360c6a42025108925df09 - http://www.vupen.com/english/advisories/2011/0910 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
1/0910 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66180 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:069
CVE ID: CVE-2011-0442 State: PUBLISHED Published: 2011-03-16T22:00:00 Last Updated: 2024-08-06T21:51:09.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in (1) service requests and (2) e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66109 - http://www.vupen.com/english/advisories/2011/0678 - http://www.vupen.com/english/advisories/2011/0677 - http://www.securityfocus.com/archive/1/517022/100/0/threaded - http:/
ttp://www.vupen.com/english/advisories/2011/0677 - http://www.securityfocus.com/archive/1/517022/100/0/threaded - http://secunia.com/advisories/43797 - http://www.securitytracker.com/id?1025213 - http://securityreason.com/securityalert/8139 - http://www.securityfocus.com/bid/46879
CVE ID: CVE-2011-0443 State: PUBLISHED Published: 2011-01-12T23:00:00 Last Updated: 2024-08-06T21:51:08.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/tinybb-settings.php in tinyBB 1.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45737 - http://www.securitytracker.com/id?1024949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64570 - http://secunia.com/advisories/42
tytracker.com/id?1024949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64570 - http://secunia.com/advisories/42854 - http://www.exploit-db.com/exploits/15961 - http://tinybb.net/forum/?page=thread&post=989525101 - http://osvdb.org/70394
CVE ID: CVE-2011-0444 State: PUBLISHED Published: 2011-01-12T23:00:00 Last Updated: 2024-08-06T21:51:09.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the MAC-LTE dissector (epan/dissectors/packet-mac-lte.c) in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of RARs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43175 - https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5676 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5530 - http://www.wireshark.org/security/wnpa-sec-2011-01
?id=5676 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5530 - http://www.wireshark.org/security/wnpa-sec-2011-01.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:007 - http://www.vupen.com/english/advisories/2011/0270 - http://www.securityfocus.com/bid/45775 - http://www.wireshark.org/security/wnpa-sec-2011-02.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64624 - http://www.vupen.com/english/advisories/2011/0719 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053650.html - http://www.vupen.com/english/advisories/2011/0079 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053669.html - http://www.vupen.c
ies/2011/0079 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053669.html - http://www.vupen.com/english/advisories/2011/0104 - http://www.redhat.com/support/errata/RHSA-2011-0369.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14283 - http://osvdb.org/70403
CVE ID: CVE-2011-0445 State: PUBLISHED Published: 2011-01-12T23:00:00 Last Updated: 2024-08-06T21:51:09.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASN.1 BER dissector in Wireshark 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service (assertion failure) via crafted packets, as demonstrated by fuzz-2010-12-30-28473.pcap. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43175 - http://www.vupen.com/english/advisories/2011/0270 - http://www.securityfocus.com/bid/45775 - http://www.wireshark.org/security/wnpa-sec-2011-02.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
rk.org/security/wnpa-sec-2011-02.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14505 - http://osvdb.org/70402 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053650.html - http://www.vupen.com/english/advisories/2011/0079 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053669.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64625
CVE ID: CVE-2011-0446 State: PUBLISHED Published: 2011-02-14T20:00:00 Last Updated: 2024-08-06T21:51:09.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the mail_to helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when javascript encoding is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) name or (2) email value. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0587 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055088.html - http://www.securityfocus.com/bid/46291 - http://www.debian.org/se
rg/pipermail/package-announce/2011-March/055088.html - http://www.securityfocus.com/bid/46291 - http://www.debian.org/security/2011/dsa-2247 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html - http://secunia.com/advisories/43274 - http://www.securitytracker.com/id?1025064 - http://groups.google.com/group/rubyonrails-security/msg/365b8a23b76a6b4a?dmode=source&output=gplain - http://www.vupen.com/english/advisories/2011/0877 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055074.html - http://secunia.com/advisories/43666
CVE ID: CVE-2011-0447 State: PUBLISHED Published: 2011-02-14T20:00:00 Last Updated: 2024-08-06T21:51:09.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged (1) AJAX or (2) API requests that leverage "combinations of browser plugins and HTTP redirects," a related issue to CVE-2011-0696. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0587 - http://weblog.rubyon
t Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0587 - http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ruby-on-rails - http://www.securitytracker.com/id?1025060 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055088.html - http://www.securityfocus.com/bid/46291 - http://www.debian.org/security/2011/dsa-2247 - http://groups.google.com/group/rubyonrails-security/msg/c22ea1668c0d181c?dmode=source&output=gplain - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html - http://secunia.com/advisories/43274 - http://www.vupen.com/english/advisories/2011/0877 - http://lists.fedoraproject.or
http://secunia.com/advisories/43274 - http://www.vupen.com/english/advisories/2011/0877 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055074.html - http://secunia.com/advisories/43666
CVE ID: CVE-2011-0448 State: PUBLISHED Published: 2011-02-21T00:00:00 Last Updated: 2024-08-06T21:51:09.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/rubyonrails-security/msg/4e19864cf6ad40ad?dmode=source&output=gplain - http://weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4 - http://securitytracker.com/id?1025063 - http://lists.fedoraproject.org/pipermail
011/2/8/new-releases-2-3-11-and-3-0-4 - http://securitytracker.com/id?1025063 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html - http://secunia.com/advisories/43278 - http://www.vupen.com/english/advisories/2011/0877 - https://github.com/rails/rails/commit/354da43ab0a10b3b7b3f9cb0619aa562c3be8474
CVE ID: CVE-2011-0449 State: PUBLISHED Published: 2011-02-21T17:00:00 Last Updated: 2024-08-06T21:51:09.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action name that uses an unintended case for alphabetic characters. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025061 - http://groups.google.com/group/rubyonrails-security/msg/04345b2e84df5
erences: - http://securitytracker.com/id?1025061 - http://groups.google.com/group/rubyonrails-security/msg/04345b2e84df5b4f?dmode=source&output=gplain - http://weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html - http://secunia.com/advisories/43278 - http://www.vupen.com/english/advisories/2011/0877
CVE ID: CVE-2011-0450 State: PUBLISHED Published: 2011-01-31T19:00:00 Last Updated: 2024-08-06T21:51:08.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisted remote attackers to execute arbitrary code via a crafted web site that hosts an executable file. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/support/kb/view/985/ - http://www.opera.com/docs/changelogs/windows/1101/ - http://www.vupen.com/english/advisories/2011/0231 - https://oval.cisecurity.org/repository/search/definition/ov
/1101/ - http://www.vupen.com/english/advisories/2011/0231 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12369 - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000010.html - http://osvdb.org/70726 - http://jvn.jp/en/jp/JVN33880169/index.html - http://secunia.com/advisories/43023
CVE ID: CVE-2011-0451 State: PUBLISHED Published: 2011-02-03T15:00:00 Last Updated: 2024-08-06T21:51:08.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN84393059/index.html - http://secunia.com/advisories/43153 - http://www.securityfocus.com/bid/46100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65079 - http://s
s/43153 - http://www.securityfocus.com/bid/46100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65079 - http://svn.ec-cube.net/open_trac/changeset/18742 - http://www.ec-cube.net/info/weakness/weakness.php?id=36 - http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000011.html
CVE ID: CVE-2011-0452 State: PUBLISHED Published: 2011-02-24T20:00:00 Last Updated: 2024-08-06T21:51:08.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the script function in Lunascape before 6.4.3 allows local users to gain privileges via a Trojan horse executable file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN38362957/ - http://lunapedia.lunascape.jp/index.php?title=Lunascape6#2011.2F02.2F18_ver_6.4.3 - http://secunia.com/advisories/43441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65592 - http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000012.ht
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65592 - http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000012.html