Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
c - https://github.com/torvalds/linux/commit/bc909d9ddbf7778371e36a651d6e4194b1cc7d4c - https://bugzilla.redhat.com/show_bug.cgi?id=761646 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 - http://www.openwall.com/lists/oss-security/2011/12/08/4
CVE ID: CVE-2011-4595 State: PUBLISHED Published: 2020-01-10T13:20:12 Last Updated: 2024-08-07T00:09:19.311Z Vendors: pretty-link Products: pretty-link plugin Problem Types: XSS Description: Pretty-Link WordPress plugin 1.5.2 has XSS Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/12/08/5 - https://wordpress.org/support/topic/plugin-pretty-link-lite-152-xss-vulnerability/
CVE ID: CVE-2011-4596 State: PUBLISHED Published: 2011-12-23T22:00:00Z Last Updated: 2024-08-07T00:09:19.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openstack/nova/commit/ad3241929ea00569c74505ed002208ce360c667e - https://bugs.launchpad.net/nova/+bug/894755 - https://lists.launchpad.net/openstack/msg06105.html - https://github.c
e - https://bugs.launchpad.net/nova/+bug/894755 - https://lists.launchpad.net/openstack/msg06105.html - https://github.com/openstack/nova/commit/76363226bd8533256f7795bba358d7f4b8a6c9e6 - https://bugs.launchpad.net/nova/+bug/885167
CVE ID: CVE-2011-4597 State: PUBLISHED Published: 2011-12-15T02:00:00 Last Updated: 2024-08-07T00:09:19.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote attackers to enumerate usernames via a series of requests. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/77597 - http://downloads.asterisk.org/pub/security/AST-2011-013.html - http://openwall.com/lists/oss-security/2011/12/09/4 - http://openwall
oads.asterisk.org/pub/security/AST-2011-013.html - http://openwall.com/lists/oss-security/2011/12/09/4 - http://openwall.com/lists/oss-security/2011/12/09/3 - http://secunia.com/advisories/47273 - http://archives.neohapsis.com/archives/bugtraq/2011-12/0151.html - http://www.debian.org/security/2011/dsa-2367 - http://lists.digium.com/pipermail/asterisk-dev/2011-November/052191.html
CVE ID: CVE-2011-4598 State: PUBLISHED Published: 2011-12-15T02:00:00 Last Updated: 2024-08-07T00:09:19.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 and 1.8.x before 1.8.7.2, when automon is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted sequence of SIP requests. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/12/09/4 - http://openwall.com/lists/oss-security/2011/12/09/3 - http://secunia.com/advisories/47273 - http://osvdb.org/77598 - http
ttp://openwall.com/lists/oss-security/2011/12/09/3 - http://secunia.com/advisories/47273 - http://osvdb.org/77598 - http://downloads.asterisk.org/pub/security/AST-2011-014.html - http://www.debian.org/security/2011/dsa-2367
CVE ID: CVE-2011-4599 State: PUBLISHED Published: 2012-06-21T15:00:00 Last Updated: 2024-08-07T00:09:19.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows remote attackers to execute arbitrary code via a crafted locale ID that is not properly handled during variant canonicalization. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51006 - http://secunia.com/advisories/47674 - http://secunia.com/advisories/47146 - http://secunia.com/advisories/47775 - http://lists.apple.com/archives/security-an
http://secunia.com/advisories/47146 - http://secunia.com/advisories/47775 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71726 - http://www.openwall.com/lists/oss-security/2011/12/09/5 - http://code.google.com/p/chromium/issues/detail?id=106441 - http://www.osvdb.org/77698 - http://bugs.icu-project.org/trac/ticket/8984 - http://ubuntu.com/usn/usn-1348-1 - http://secunia.com/advisories/47227 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:194 - http://lists.opensuse.org/opensuse-updates/2012-01/msg00035.html - http://lists.apple.com/archives/security-announce/
- http://lists.opensuse.org/opensuse-updates/2012-01/msg00035.html - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://support.apple.com/kb/HT5501 - http://www.openwall.com/lists/oss-security/2011/12/09/2 - http://rhn.redhat.com/errata/RHSA-2011-1815.html - http://www.debian.org/security/2012/dsa-2397 - http://secunia.com/advisories/47714
CVE ID: CVE-2011-4600 State: PUBLISHED Published: 2016-04-14T15:00:00 Last Updated: 2024-08-07T00:09:19.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query. Additional Analyst Notes: - CVE Program Container: References: - http://libvirt.org/news-2012.html - http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=ae1232b298323dd7bef909426e2ebafa6bca9157 - https://bugzilla.redhat.com/show_bug.cgi?id=76
libvirt.git%3Ba=commitdiff%3Bh=ae1232b298323dd7bef909426e2ebafa6bca9157 - https://bugzilla.redhat.com/show_bug.cgi?id=760442 - http://www.ubuntu.com/usn/USN-2867-1
CVE ID: CVE-2011-4601 State: PUBLISHED Published: 2011-12-25T01:00:00 Last Updated: 2024-08-07T00:09:19.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: family_feedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service (application crash) via a crafted (1) AIM or (2) ICQ message associated with buddy-list addition. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-1820.html - http://developer.pidgin.im/viewmtn/revision/info/757272a78a8ca6027d518e614712c3399e34dda3 - https://herm
011-1820.html - http://developer.pidgin.im/viewmtn/revision/info/757272a78a8ca6027d518e614712c3399e34dda3 - https://hermes.opensuse.org/messages/13195955 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:183 - http://secunia.com/advisories/47219 - http://www.openwall.com/lists/oss-security/2011/12/10/2 - http://www.openwall.com/lists/oss-security/2011/12/10/1 - http://pidgin.im/news/security/?id=57 - http://www.redhat.com/support/errata/RHSA-2011-1821.html - http://developer.pidgin.im/viewmtn/revision/diff/bc79b1bf09dcfa1d8edac86a06761fce7416e69c/with/757272a78a8ca6027d518e614712c3399e34dda3/libpurple/protocols/oscar/family_feedbag.c - https://oval.cisecurity.org/repository/searc
8ca6027d518e614712c3399e34dda3/libpurple/protocols/oscar/family_feedbag.c - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18408 - http://secunia.com/advisories/47234 - http://www.securityfocus.com/bid/51010
CVE ID: CVE-2011-4602 State: PUBLISHED Published: 2011-12-17T02:00:00 Last Updated: 2024-08-07T00:09:19.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in (1) voice-chat and (2) video-chat stanzas, which allows remote attackers to cause a denial of service (application crash) via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-1820.html - https://hermes.opensuse.org/messages/13195955 - http://developer.pidgin.im/viewmtn/revision/info/fb216fc88b085afc06d9a15209519cde1f4df6c6 - https://oval.cisec
3195955 - http://developer.pidgin.im/viewmtn/revision/info/fb216fc88b085afc06d9a15209519cde1f4df6c6 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18420 - http://pidgin.im/news/security/?id=58 - http://secunia.com/advisories/47219 - http://www.redhat.com/support/errata/RHSA-2011-1821.html - http://secunia.com/advisories/47234
CVE ID: CVE-2011-4603 State: PUBLISHED Published: 2011-12-17T02:00:00 Last Updated: 2024-08-07T00:09:19.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: The silc_channel_message function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service (application crash) via a crafted message, a different vulnerability than CVE-2011-3594. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-1820.html - http://developer.pidgin.im/viewmtn/revision/info/afb9ede3de989f217f03d5670cca00e628bd11f
rt/errata/RHSA-2011-1820.html - http://developer.pidgin.im/viewmtn/revision/info/afb9ede3de989f217f03d5670cca00e628bd11f1 - http://www.securityfocus.com/bid/51074 - https://hermes.opensuse.org/messages/13195955 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18303 - http://www.pidgin.im/news/security/?id=59 - http://developer.pidgin.im/viewmtn/revision/diff/c7b95cc3be0590b52edc02d4750ae62844c1acb6/with/afb9ede3de989f217f03d5670cca00e628bd11f1/libpurple/protocols/silc/ops.c - http://secunia.com/advisories/47234
CVE ID: CVE-2011-4604 State: PUBLISHED Published: 2013-06-07T10:00:00 Last Updated: 2024-08-07T00:09:19.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bat_socket_read function in net/batman-adv/icmp_socket.c in the Linux kernel before 3.3 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted batman-adv ICMP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/12/12/1 - https://bugzilla.redhat.com/show_bug.cgi?id=767495 - https://lists.open-mesh.org/pipermail/b.a.t.m.a.n/2011-December/005904.html - http://git.kernel.org/?p=linux/ke
767495 - https://lists.open-mesh.org/pipermail/b.a.t.m.a.n/2011-December/005904.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b5a1eeef04cc7859f34dec9b72ea1b28e4aba07c - http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.3.bz2 - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html - https://github.com/torvalds/linux/commit/b5a1eeef04cc7859f34dec9b72ea1b28e4aba07c
CVE ID: CVE-2011-4605 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-07T00:09:19.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly restrict write access, which allows remote attackers to add, delete, or modify items in a JNDI tree via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027501
ied vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027501 - http://secunia.com/advisories/49656 - http://rhn.redhat.com/errata/RHSA-2012-1028.html - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=766469 - http://secunia.com/advisories/49658 - http://rhn.redhat.com/errata/RHSA-2012-1109.html - http://rhn.redhat.com/errata/RHSA-2012-1025.html - http://secunia.com/advisories/50084 - http://rhn.redhat.com/errata/RHSA-2012-1295.html - http://rhn.redhat.com/errata/RHSA-2012-1027.html - http://www.securityfocus.com/bid/54644 - http://rhn.redhat.com/errata/RHSA-2012-1026.html - http://secunia.com/advisories/50549 - http://rhn.redhat.
/bid/54644 - http://rhn.redhat.com/errata/RHSA-2012-1026.html - http://secunia.com/advisories/50549 - http://rhn.redhat.com/errata/RHSA-2012-1024.html - http://rhn.redhat.com/errata/RHSA-2012-1232.html - http://rhn.redhat.com/errata/RHSA-2012-1022.html - http://rhn.redhat.com/errata/RHSA-2012-1023.html - http://rhn.redhat.com/errata/RHSA-2012-1125.html
CVE ID: CVE-2011-4606 State: PUBLISHED Published: 2011-12-15T02:00:00Z Last Updated: 2024-08-07T00:09:19.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artsoft Entertainment Rocks'n'Diamonds (aka rocksndiamonds) 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user's home directory. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/12/12/3 - https://bugzilla.redhat.com/show_bug.cgi?id=766805 - http://openwall.com/lists/oss-security/2011/12/12/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651620
CVE ID: CVE-2011-4607 State: PUBLISHED Published: 2013-08-23T16:00:00Z Last Updated: 2024-09-16T18:04:01.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: PuTTY 0.59 through 0.61 does not clear sensitive process memory when managing user replies that occur during keyboard-interactive authentication, which might allow local users to read login passwords by obtaining access to the process' memory. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2011/q4/500 - http://seclists.org/oss-sec/2011/q4/499 - http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/password-not-wiped.html
CVE ID: CVE-2011-4608 State: PUBLISHED Published: 2012-01-27T15:00:00 Last Updated: 2024-08-07T00:09:19.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_cluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sessions, and steal credentials by registering from an external vhost that does not enforce security constraints. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2012-0039.html - https://bugzilla.redhat.com/show_bug.cgi?id=7670
eferences: - http://www.redhat.com/support/errata/RHSA-2012-0039.html - https://bugzilla.redhat.com/show_bug.cgi?id=767020 - http://www.redhat.com/support/errata/RHSA-2012-0035.html - http://www.securityfocus.com/bid/51554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72460 - http://www.redhat.com/support/errata/RHSA-2012-0040.html - http://www.redhat.com/support/errata/RHSA-2012-0037.html - http://www.redhat.com/support/errata/RHSA-2012-0036.html - http://www.securitytracker.com/id?1026545 - http://www.redhat.com/support/errata/RHSA-2012-0038.html
CVE ID: CVE-2011-4609 State: PUBLISHED Published: 2013-05-02T14:00:00Z Last Updated: 2024-08-07T00:09:19.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service (CPU consumption) via a large number of RPC connections. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=767299
CVE ID: CVE-2011-4610 State: PUBLISHED Published: 2014-02-10T23:00:00 Last Updated: 2024-08-07T00:09:19.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a "surrogate pair character" that is "at the boundary of an internal buffer." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51829 - http://rhn.redhat.com/errata/RHSA-2012-0325.html - http://
ainer: References: - http://www.securityfocus.com/bid/51829 - http://rhn.redhat.com/errata/RHSA-2012-0325.html - http://rhn.redhat.com/errata/RHSA-2012-0078.html - http://rhn.redhat.com/errata/RHSA-2012-0075.html - http://rhn.redhat.com/errata/RHSA-2012-0074.html - https://bugzilla.redhat.com/show_bug.cgi?id=767871 - http://www.osvdb.org/78775 - http://rhn.redhat.com/errata/RHSA-2012-0076.html - http://rhn.redhat.com/errata/RHSA-2012-0077.html
CVE ID: CVE-2011-4611 State: PUBLISHED Published: 2012-05-17T10:00:00Z Last Updated: 2024-08-07T00:09:19.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the perf_event_interrupt function in arch/powerpc/kernel/perf_event.c in the Linux kernel before 2.6.39 on powerpc platforms allows local users to cause a denial of service (unhandled performance monitor exception) via vectors that trigger certain outcomes of performance events. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/12/15/2 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - https://github.com/torvalds/linux/commit/0837
1/12/15/2 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - https://github.com/torvalds/linux/commit/0837e3242c73566fc1c0196b4ec61779c25ffc93 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0837e3242c73566fc1c0196b4ec61779c25ffc93 - https://bugzilla.redhat.com/show_bug.cgi?id=767914
CVE ID: CVE-2011-4612 State: PUBLISHED Published: 2012-11-20T00:00:00Z Last Updated: 2024-09-16T17:22:55.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=768176 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090668.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090695.html - http://www.icecast.org/
CVE ID: CVE-2011-4613 State: PUBLISHED Published: 2014-02-05T19:00:00 Last Updated: 2024-08-07T00:09:19.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652249 - http://www.ubuntu.com/usn/USN-1349-1 - http://www.debian.org/security/2011/dsa-2364
CVE ID: CVE-2011-4614 State: PUBLISHED Published: 2012-02-18T00:00:00Z Last Updated: 2024-09-17T04:24:23.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Classes/Controller/AbstractController.php in the workspaces system extension in TYPO3 4.5.x before 4.5.9, 4.6.x before 4.6.2, and development versions of 4.7 allows remote attackers to execute arbitrary PHP code via a URL in the BACK_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/77776 - http://secunia.com/advisories/47201 - http://www.openwall.com/lists/oss-security/2011/12/16/1 - http://typo3.org/teams/security/security-bulleti
ories/47201 - http://www.openwall.com/lists/oss-security/2011/12/16/1 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2011-004/ - http://typo3.org/fileadmin/security-team/bug32571/32571.diff
CVE ID: CVE-2011-4615 State: PUBLISHED Published: 2011-12-29T22:00:00 Last Updated: 2024-08-07T00:09:19.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Zabbix before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the gname parameter (aka host groups name) to (1) hostgroups.php and (2) usergrps.php, the update action to (3) hosts.php and (4) scripts.php, and (5) maintenance.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/77771 - http://www.securityfocus.com/bid/51093 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071660.html - https:
ecurityfocus.com/bid/51093 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071660.html - https://support.zabbix.com/browse/ZBX-4015 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071687.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/71855 - http://www.zabbix.com/rn1.8.10.php - http://secunia.com/advisories/47216
CVE ID: CVE-2011-4616 State: PUBLISHED Published: 2012-01-06T02:00:00 Last Updated: 2024-08-07T00:09:19.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters. Additional Analyst Notes: - CVE Program Container: References: - http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes - http://www.securityfocus.com/bid/51117 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html - http://l
urityfocus.com/bid/51117 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html - http://openwall.com/lists/oss-security/2011/12/19/1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587 - http://secunia.com/advisories/47184 - http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507
CVE ID: CVE-2011-4617 State: PUBLISHED Published: 2011-12-31T01:00:00 Last Updated: 2024-08-07T00:09:19.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47240 - https://bitbucket.org/ianb/virtualenv/changeset/8be37c509fe5 - http://openwall.com/lists/oss-security/2011/12/19/4 - http://openwall.com/lists/oss-security/2011/12/19/2 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071638.html - http://lists.fedoraproject.org/piperm
tp://lists.fedoraproject.org/pipermail/package-announce/2012-January/071638.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071643.html - http://openwall.com/lists/oss-security/2011/12/19/5