Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1320 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-17T00:06:59.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when the Tivoli Integrated Portal / embedded WebSphere Application Server (TIP/eWAS) framework is used, does not properly delete AuthCache entries upon a logout, which might allow remote attackers to access the server by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM21536 - http://www-01.ibm.com/support/doc
m Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM21536 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2011-1321 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-17T03:27:26.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AuthCache purge implementation in the Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 does not purge a user from the PlatformCredential cache, which might allow remote authenticated users to gain privileges by leveraging a group membership specified in an old RACF Object (aka RACO). Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM24668 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2011-1322 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-16T16:13:26.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via encrypted SOAP messages. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM19534 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2011-1323 State: PUBLISHED Published: 2011-05-09T19:00:00Z Last Updated: 2024-09-16T20:43:08.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service (device reboot) via a crafted option that triggers access to an invalid memory location. Additional Analyst Notes: - CVE Program Container: References: - http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN55714408.html - http://www.nec.co.jp/security-info/secinfo/nv11-004.html - http:
w.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN55714408.html - http://www.nec.co.jp/security-info/secinfo/nv11-004.html - http://jvn.jp/en/jp/JVN55714408/index.html
CVE ID: CVE-2011-1324 State: PUBLISHED Published: 2011-05-09T19:00:00Z Last Updated: 2024-09-17T03:22:31.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN50505257/index.html - http://buffalo.jp/support_s/20080808/csrf.htm
gram Container: References: - http://jvn.jp/en/jp/JVN50505257/index.html - http://buffalo.jp/support_s/20080808/csrf.html
CVE ID: CVE-2011-1325 State: PUBLISHED Published: 2011-05-13T17:00:00Z Last Updated: 2024-09-17T04:24:35.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000029 - http://secunia.com/advisories/44487 - http://jvn.jp/en/jp/JVN37878530/index.html - http://www.osvdb.org/72239 - http://www.ec-cube.net/press/detail.php?press_id=114
CVE ID: CVE-2011-1326 State: PUBLISHED Published: 2011-05-13T22:00:00 Last Updated: 2024-08-06T22:21:34.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on the La Fonera+ router with firmware before 1.7.0.1 allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67405 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000027 - http://secunia.com/advisories/44508 - http://www.securityfocus.com/bid/47801 - http://jvn.jp/en/jp/JVN96839637/index.html
CVE ID: CVE-2011-1327 State: PUBLISHED Published: 2011-05-20T22:00:00Z Last Updated: 2024-09-17T02:51:57.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Keystroke Encryption feature in Trend Micro Internet Security 2009 (aka Virus Buster 2009 and PC-cillin 2009) does not completely encrypt passwords, which allows local users to obtain sensitive information by leveraging a keylogger. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN99175647/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000028 - http://esupport.trendmicro.co.jp/Pages/JP-2079186.aspx
CVE ID: CVE-2011-1328 State: PUBLISHED Published: 2011-05-24T23:00:00 Last Updated: 2024-08-06T22:21:34.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in RADVISION iVIEW Suite before 7.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000030 - http://jvn.jp/en/jp/JVN77697803/index.html - http://jvn.jp/en/jp/JVN77697803/995139/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67556 - http://www.osvdb.org/72410 - http://secunia.com/advisories/44634
CVE ID: CVE-2011-1329 State: PUBLISHED Published: 2011-05-31T20:00:00 Last Updated: 2024-08-06T22:21:34.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: WalRack 1.x before 1.1.9 and 2.x before 2.0.7 does not properly restrict file uploads, which allows remote attackers to execute arbitrary PHP code via vectors involving a double extension, as demonstrated by a .php.zzz file. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN46984044/index.html - http://www.securityfocus.com/bid/48001 - http://digit.que.ne.jp/work/index.cgi?WalRack2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67641 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000032 -
i?WalRack2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67641 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000032 - http://jvn.jp/en/jp/JVN46984044/54827/index.html - http://digit.que.ne.jp/work/index.cgi?WalRack
CVE ID: CVE-2011-1330 State: PUBLISHED Published: 2011-06-22T22:00:00 Last Updated: 2024-08-06T22:21:34.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48338 - http://jvn.jp/en/jp/JVN43386477/index.html - http://www.kbs.co.jp/jp/tabid/254/Default.aspx - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000042 - http://secunia.com/advisories/44994
CVE ID: CVE-2011-1331 State: PUBLISHED Published: 2011-07-18T22:00:00 Last Updated: 2024-08-06T22:21:34.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: JustSystems Ichitaro 2005 through 2011, Ichitaro Government 6, Ichitaro Government 2006 through 2010, Ichitaro Portable, Ichitaro Pro, and Ichitaro Viewer allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document, as exploited in the wild in early 2011. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44956 - http://www.securityfocus.com/bid/48283 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000043 - https://exchange.xfo
ries/44956 - http://www.securityfocus.com/bid/48283 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68072 - http://www.justsystems.com/jp/info/js11001.html - http://www.symantec.com/connect/blogs/targeted-attacks-2011-using-ichitaro-zero-day-vulnerability - http://jvn.jp/en/jp/JVN87239473/index.html
CVE ID: CVE-2011-1332 State: PUBLISHED Published: 2011-06-29T17:00:00Z Last Updated: 2024-09-16T17:18:56.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-6570. Additional Analyst Notes: - CVE Program Container: References: - http://cybozu.co.jp/products/dl/notice/detail/0023.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000044 - http://jvn.jp/en/jp/JVN59779256/index.html
CVE ID: CVE-2011-1333 State: PUBLISHED Published: 2011-06-29T17:00:00Z Last Updated: 2024-09-17T00:40:53.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the bulletin board system." Additional Analyst Notes: - CVE Program Container: References: - http://cybozu.co.jp/products/dl/notice/detail/0019.html - http://secunia.com/advisories/45063 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000045 - http://www.securityfocus.com/bid/48446 - http://jvn.jp/en/jp/JVN80877328/index.h
/jvndb.jvn.jp/jvndb/JVNDB-2011-000045 - http://www.securityfocus.com/bid/48446 - http://jvn.jp/en/jp/JVN80877328/index.html - http://www.osvdb.org/73327
CVE ID: CVE-2011-1334 State: PUBLISHED Published: 2011-06-29T17:00:00Z Last Updated: 2024-09-17T01:16:50.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the mail system." Additional Analyst Notes: - CVE Program Container: References: - http://cybozu.co.jp/products/dl/notice/detail/0019.html - http://www.osvdb.org/73317 - http://www.securityfocus.com/bid/48446 - http://jvn.jp/en/jp/
/dl/notice/detail/0019.html - http://www.osvdb.org/73317 - http://www.securityfocus.com/bid/48446 - http://jvn.jp/en/jp/JVN54074460/index.html - http://secunia.com/advisories/45043 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000046
CVE ID: CVE-2011-1335 State: PUBLISHED Published: 2011-06-29T17:00:00Z Last Updated: 2024-09-16T17:17:46.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user list functions." Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20100816notice05.php - http://secunia.com/advisories/44992 - http://secunia.com/advisories/45050 - http://www.osvdb.org/73320 - http://www.securityfocus.com/bid/48446 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000047 - htt
http://www.osvdb.org/73320 - http://www.securityfocus.com/bid/48446 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000047 - http://jvn.jp/en/jp/JVN55508059/index.html
CVE ID: CVE-2011-1336 State: PUBLISHED Published: 2011-07-07T19:00:00Z Last Updated: 2024-09-16T18:13:33.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ALZip 8.21 and earlier allows remote attackers to execute arbitrary code via a crafted mim file. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000048 - http://www.securityfocus.com/bid/48493 - http://www.altools.jp/ETC/NEWS.aspx?mid=231&vidx=118 - http://www.altools.jp/download.aspx - http://secunia.com/advisories/45108 - http://jvn.jp/en/jp/JVN01547302/index.html
CVE ID: CVE-2011-1337 State: PUBLISHED Published: 2011-07-01T10:00:00 Last Updated: 2024-08-06T22:21:34.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.50 allows remote attackers to cause a denial of service (disk consumption) via invalid URLs that trigger creation of error pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68323 - http://secunia.com/advisories/45060 - http://www.osvdb.org/73486 - http://www.opera.com/docs/changelogs/windows/1150/ - http://jvn.jp/en/jp/JVN47757122/index.html - http://www.opera.com/docs/changelogs/unix/1150/ - http
logs/windows/1150/ - http://jvn.jp/en/jp/JVN47757122/index.html - http://www.opera.com/docs/changelogs/unix/1150/ - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000049.html - http://www.opera.com/docs/changelogs/mac/1150/ - http://www.opera.com/support/kb/view/996/
CVE ID: CVE-2011-1338 State: PUBLISHED Published: 2011-07-11T20:00:00 Last Updated: 2024-08-06T22:21:34.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000050 - http://www.securityfocus.com/bid/48562 - http://www.osvdb.org/73619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68369 - http://jvn.jp/en/jp/JVN17844633/index.html - http://secunia.com/advisories/45127
CVE ID: CVE-2011-1339 State: PUBLISHED Published: 2011-07-28T18:00:00Z Last Updated: 2024-09-16T17:38:26.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Google Search Appliance before 5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN86220950/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000054
CVE ID: CVE-2011-1340 State: PUBLISHED Published: 2011-08-05T21:00:00Z Last Updated: 2024-09-16T23:40:36.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the type_name parameter to Members/ipa/createObject. Additional Analyst Notes: - CVE Program Container: References: - http://dev.plone.org/plone/ticket/6110 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000056 - http://jvn.jp/en/jp/JVN41222793/index.html - http://dev.plone.org/plone/changeset/12262
CVE ID: CVE-2011-1341 State: PUBLISHED Published: 2011-08-19T21:00:00Z Last Updated: 2024-09-17T03:34:25.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Aimluck Aipo before 4.0.4.0, and Aipo for ASP before 4.0.4.0, allows remote attackers to hijack the authentication of administrators for requests that modify data. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN72854072/91216/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000062 - http://jvn.jp/en/jp/JVN72854072/index.html
CVE ID: CVE-2011-1342 State: PUBLISHED Published: 2011-08-19T21:00:00Z Last Updated: 2024-09-17T00:06:13.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Aimluck Aipo before 5.1.1, and Aipo for ASP before 5.1.1, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000063 - http://jvn.jp/en/jp/JVN31506102/index.html - http://jvn.jp/en/jp/JVN31506102/91216/index.html
CVE ID: CVE-2011-1343 State: PUBLISHED Published: 2011-03-09T22:00:00 Last Updated: 2024-08-06T22:21:34.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via "dynamic SQL parameters." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65767 - http://www.vupen.com/english/advisories/2011/0550 - http://www.ibm.com/support/docview.wss?uid=swg24029093 - http://www.ibm.com/support/docview.wss?uid=swg1IZ83269 - http://secunia.com/advisories/43577
CVE ID: CVE-2011-1344 State: PUBLISHED Published: 2011-03-10T20:00:00 Last Updated: 2024-08-06T22:21:34.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA); and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag, related to text nodes, as demonstrated by Chaouki Bekrar during a Pwn2Own competition at CanSecWest 2011. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44151 - http://www.securityfocus.
al Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44151 - http://www.securityfocus.com/archive/1/517517/100/0/threaded - http://twitter.com/aaronportnoy/statuses/45632544967901187 - http://www.securityfocus.com/bid/46822 - http://support.apple.com/kb/HT4596 - http://lists.apple.com/archives/security-announce/2011//Apr/msg00002.html - http://www.securitytracker.com/id?1025363 - http://lists.apple.com/archives/security-announce/2011//Apr/msg00001.html - http://www.zerodayinitiative.com/advisories/ZDI-11-135 - http://www.vupen.com/english/advisories/2011/0984 - http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 - http://www.securityfocus.com/archive
dvisories/2011/0984 - http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 - http://www.securityfocus.com/archive/1/517505/100/0/threaded - http://support.apple.com/kb/HT4607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66061 - http://www.zdnet.com/blog/security/safarimacbook-first-to-fall-at-pwn2own-2011/8358 - http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own - http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html - http://secunia.com/advisories/44154
CVE ID: CVE-2011-1345 State: PUBLISHED Published: 2011-03-10T20:00:00 Last Updated: 2024-08-06T22:21:34.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011, aka "Object Management Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://
nal Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://twitter.com/msftsecresponse/statuses/45646985998516224 - http://twitter.com/aaronportnoy/statuses/45642180118855680 - http://www.securitytracker.com/id?1025327 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018 - http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 - http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own - http://www.securityfocus.com/bid/46821 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12228 - https://threatpost.com/en_us/blogs/pwn2own-winner-ste
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12228 - https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66062 - http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367
CVE ID: CVE-2011-1346 State: PUBLISHED Published: 2011-03-10T20:00:00 Last Updated: 2024-08-06T22:21:34.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Stephen Fewer as the second of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011. Additional Analyst Notes: - CVE Program Container: References: - http://twitter.com/msftsecresponse/statuses/45646985998516224 - http://twitter.com/aaronportnoy/statuses/45642180118855680 - http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 - http://w
ter.com/aaronportnoy/statuses/45642180118855680 - http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 - http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own - https://exchange.xforce.ibmcloud.com/vulnerabilities/66063 - http://www.securityfocus.com/bid/46821 - https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011 - http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367
CVE ID: CVE-2011-1347 State: PUBLISHED Published: 2011-03-10T20:00:00 Last Updated: 2024-08-06T22:21:34.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mode and create arbitrary files by leveraging access to a Low integrity process, as demonstrated by Stephen Fewer as the third of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057 - http://twitter.com/msftsecresponse/statuses/45646985998516
.com/en-us/security-updates/securitybulletins/2011/ms11-057 - http://twitter.com/msftsecresponse/statuses/45646985998516224 - http://twitter.com/aaronportnoy/statuses/45642180118855680 - http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66064 - http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own - http://www.securityfocus.com/bid/46821 - https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011 - http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367
CVE ID: CVE-2011-1350 State: PUBLISHED Published: 2013-02-05T15:00:00Z Last Updated: 2024-09-16T20:22:09.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device. Additional Analyst Notes: - CVE Program Container: References: - http://jon.oberheide.org/files/levitator.c - http://code.google.com/p/android/issues/detail?id=21522