Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4908 State: PUBLISHED Published: 2020-02-12T21:17:10 Last Updated: 2024-08-07T00:23:38.279Z Vendors: Joomla! Products: TinyBrowser Plugin Problem Types: Arbitrary File Upload Description: TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/12/25/7 - https://vulmon.com/vulnerabilitydetails?qid=CVE-2011-4908 - https://www.exploit-db.com/exploits/9926
CVE ID: CVE-2011-4909 State: PUBLISHED Published: 2012-10-07T21:00:00Z Last Updated: 2024-09-16T21:08:56.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.5.12 allow remote attackers to inject arbitrary web script or HTML via the HTTP_REFERER header to (1) components/com_content/views/article/tmpl/form.php, (2) components/com_user/controller.php, (3) plugins/system/legacy/html.php, or (4) templates/beez/html/com_content/article/form.php. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/news/298-20090604-core-frontend-xss-httpreferer-not-properly-filtered.
eferences: - http://developer.joomla.org/security/news/298-20090604-core-frontend-xss-httpreferer-not-properly-filtered.html - http://www.osvdb.org/55589 - http://archives.neohapsis.com/archives/bugtraq/2009-07/0012.html - http://secunia.com/advisories/35668 - http://www.openwall.com/lists/oss-security/2011/12/25/8 - http://www.securityfocus.com/bid/35544 - http://www.openwall.com/lists/oss-security/2011/12/25/3
CVE ID: CVE-2011-4910 State: PUBLISHED Published: 2012-10-07T21:00:00Z Last Updated: 2024-09-16T18:39:44.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Joomla! before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/news/299-20090605-core-frontend-xss-phpself-not-properly-filtered.html - http://secunia.com/advisories/35668 - http://www.osvdb.org/55590 - http://www.openwall.com/lists/oss-security/2011/12/25/8 - http://www.securityfocus.com/bid/35544 - http://www.openwall.com/lists/oss-security
om/lists/oss-security/2011/12/25/8 - http://www.securityfocus.com/bid/35544 - http://www.openwall.com/lists/oss-security/2011/12/25/3
CVE ID: CVE-2011-4911 State: PUBLISHED Published: 2012-10-07T21:00:00Z Last Updated: 2024-09-16T23:36:53.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! before 1.5.12 does not perform a JEXEC check in unspecified files, which allows remote attackers to obtain the installation path via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35668 - http://www.osvdb.org/55591 - http://developer.joomla.org/security/news/300-20090606-core-missing-jexec-check.html - http://www.openwall.com/lists/oss-security/2011/12/25/8 - http://www.securityfocus.com/bid/35544 - http://www.openwall.com/lists/oss-security/2011/12/
oss-security/2011/12/25/8 - http://www.securityfocus.com/bid/35544 - http://www.openwall.com/lists/oss-security/2011/12/25/3
CVE ID: CVE-2011-4912 State: PUBLISHED Published: 2020-02-04T13:23:19 Last Updated: 2024-08-07T00:23:38.308Z Vendors: Joomla! Products: Joomla! Problem Types: mail timeout bypass Description: Joomla! com_mailto 1.5.x through 1.5.13 has an automated mail timeout bypass. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/12/25/9 - https://developer.joomla.org/security/news/303-20090723-core-com-mailto-timeout-issue.html
CVE ID: CVE-2011-4913 State: PUBLISHED Published: 2012-06-21T23:00:00 Last Updated: 2024-08-07T00:23:38.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT_DEST_NSAP and FAC_CCITT_SRC_NSAP fields, which allows remote attackers to (1) cause a denial of service (integer underflow, heap memory corruption, and panic) via a small length value in data sent to a ROSE socket, or (2) conduct stack-based buffer overflow attacks via a large length value in data sent to a ROSE socket. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torval
n data sent to a ROSE socket. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/be20250c13f88375345ad99950190685eda51eb8 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=be20250c13f88375345ad99950190685eda51eb8 - https://bugzilla.redhat.com/show_bug.cgi?id=770777 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://www.openwall.com/lists/oss-security/2011/12/28/2 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2011-4914 State: PUBLISHED Published: 2012-06-21T23:00:00 Last Updated: 2024-08-07T00:23:38.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain data-length values are consistent with the amount of data sent, which might allow remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) via crafted data to a ROSE socket. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e0bccd315db0c2f919e7fcf9cb60db21d9986f52 - https://bugzi
l.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e0bccd315db0c2f919e7fcf9cb60db21d9986f52 - https://bugzilla.redhat.com/show_bug.cgi?id=770777 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - https://github.com/torvalds/linux/commit/e0bccd315db0c2f919e7fcf9cb60db21d9986f52 - http://www.openwall.com/lists/oss-security/2011/12/28/2 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2011-4915 State: PUBLISHED Published: 2020-02-20T17:03:06 Last Updated: 2024-08-07T00:23:38.519Z Vendors: n/a Products: Linux kernel Problem Types: Path Disclosure Description: fs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /proc/interrupts. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/11/07/9 - https://lkml.org/lkml/2011/11/7/340 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0499680a42141d86417a8fbaa8c8db806bea1201 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a2ef990ab5a6705a356
417a8fbaa8c8db806bea1201 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a2ef990ab5a6705a356d146dd773a3b359787497 - http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-4915.html - https://security-tracker.debian.org/tracker/CVE-2011-4915 - https://vigilance.fr/vulnerability/Linux-kernel-information-disclosure-about-keyboard-11131 - https://seclists.org/oss-sec/2011/q4/571
CVE ID: CVE-2011-4916 State: PUBLISHED Published: 2022-07-12T20:36:25 Last Updated: 2024-08-07T00:23:38.584Z Vendors: n/a Products: Linux Kernel Problem Types: CWE-200 Description: Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ and /dev/tty*. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/12/28/3 - https://lkml.org/lkml/2011/11/7/355
CVE ID: CVE-2011-4917 State: PUBLISHED Published: 2022-04-18T16:20:43 Last Updated: 2024-08-07T00:23:38.623Z Vendors: n/a Products: Linux kernel Problem Types: CWE-200 Description: In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat. Additional Analyst Notes: - CVE Program Container: References: - https://lkml.org/lkml/2011/11/7/340 - https://www.openwall.com/lists/oss-security/2011/12/28/4
CVE ID: CVE-2011-4918 State: PUBLISHED Published: 2012-08-29T01:00:00 Last Updated: 2024-08-07T00:23:38.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Elxis CMS 2009.2, 2009.3 and 2009.3 Aphrodite before revision 2684 allow remote attackers to inject arbitrary web script or HTML via the (1) task parameter to elxis/index.php, and (2) PATH_INFO to elxis/administrator/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520748/100/0/threaded - http://secunia.com/advisories/47073 - http://www.osvdb.org/77563 - http://www.securityfocus.com/bid/50910 - http://www.os
ttp://secunia.com/advisories/47073 - http://www.osvdb.org/77563 - http://www.securityfocus.com/bid/50910 - http://www.osvdb.org/77564 - http://forum.elxis.org/index.php?PHPSESSID=v9i7kgmmb2554ldmlcmbj32ugjd0ngpc&topic=5144.msg43327#msg43327 - http://www.openwall.com/lists/oss-security/2011/12/31/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71648
CVE ID: CVE-2011-4919 State: PUBLISHED Published: 2019-11-19T15:34:13 Last Updated: 2024-08-07T00:23:38.540Z Vendors: mpack Products: mpack Problem Types: info disclosure Description: mpack 1.6 has information disclosure via eavesdropping on mails sent by other users Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4919 - https://access.redhat.com/security/cve/cve-2011-4919 - https://www.openwall.com/lists/oss-security/2011/12/31/1
CVE ID: CVE-2011-4920 State: PUBLISHED Published: 2012-01-04T19:00:00 Last Updated: 2024-08-07T00:23:38.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitrary web script or HTML via the URL to (1) e107_images/thumb.php or (2) rate.php, (3) resend_name parameter to e107_admin/users.php, and (4) link BBCode in user signatures. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78049 - http://secunia.com/advisories/46706 - http://osvdb.org/78047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72010 - http:/
unia.com/advisories/46706 - http://osvdb.org/78047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72010 - http://osvdb.org/78048 - http://www.securityfocus.com/bid/51253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72104 - http://www.openwall.com/lists/oss-security/2012/01/04/3
CVE ID: CVE-2011-4921 State: PUBLISHED Published: 2012-01-04T19:00:00 Last Updated: 2024-08-07T00:23:38.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72011 - http://osvdb.org/78050 - http://www.securityfocus.com/bid/51253 - http://www.openwall.com/lists/oss-security/2012/01/04/3
CVE ID: CVE-2011-4922 State: PUBLISHED Published: 2012-08-08T10:00:00 Last Updated: 2024-08-07T00:23:38.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/01/04/13 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18223 - http://www.pidgin.im/news/security/?id=50 - http://hg.pidgin.im/pidgin/main/r
tion/oval%3Aorg.mitre.oval%3Adef%3A18223 - http://www.pidgin.im/news/security/?id=50 - http://hg.pidgin.im/pidgin/main/rev/8c850977cb42
CVE ID: CVE-2011-4923 State: PUBLISHED Published: 2012-02-18T00:00:00 Last Updated: 2024-08-07T00:23:38.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in View.pm in BackupPC 3.0.0, 3.1.0, 3.2.0, 3.2.1, and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the num parameter in a view action to index.cgi, related to the log file viewer, a different vulnerability than CVE-2011-3361. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/10/27/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71030 - http://www.openwall.com/lists/oss-securit
ty/2011/10/27/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71030 - http://www.openwall.com/lists/oss-security/2012/01/04/15 - http://ubuntu.com/usn/usn-1249-1 - http://www.securityfocus.com/bid/50406 - http://secunia.com/advisories/46615
CVE ID: CVE-2011-4924 State: PUBLISHED Published: 2019-11-25T17:03:14 Last Updated: 2024-08-07T00:23:39.047Z Vendors: zope Products: zope2, zope3 Problem Types: Incomplete upstream patch for CVE-2010-1104 issue Description: Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform sanitization. NOTE: this issue exists because of an incomplete fix for CVE-2010-1104 Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.d
mplete fix for CVE-2010-1104 Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4924 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4924 - https://access.redhat.com/security/cve/cve-2011-4924 - http://www.openwall.com/lists/oss-security/2012/01/19/19 - http://www.openwall.com/lists/oss-security/2012/01/19/16 - http://www.openwall.com/lists/oss-security/2012/01/19/17 - http://www.openwall.com/lists/oss-security/2012/01/19/18
CVE ID: CVE-2011-4925 State: PUBLISHED Published: 2012-01-13T02:00:00 Last Updated: 2024-08-07T00:23:38.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/01/05/1 - http://secunia.com/advisories/47381 - http://openwall.com/lists/oss-security/2012/01/05/9 - http://www.adaptivecomputing.com/resources/docs/torque/3-0-3/changelog.php#259 - http://www.sec
-security/2012/01/05/9 - http://www.adaptivecomputing.com/resources/docs/torque/3-0-3/changelog.php#259 - http://www.securityfocus.com/bid/51224
CVE ID: CVE-2011-4926 State: PUBLISHED Published: 2012-08-29T01:00:00 Last Updated: 2024-08-07T00:23:38.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in adminimize/adminimize_page.php in the Adminimize plugin before 1.7.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/01/10/9 - http://wordpress.org/extend/plugins/adminimize/changelog/ - http://www.osvdb.org/77472 - http://www.openwall.com/lists/oss-security/2012/01/05/10 - http://www.securityfocus.com/archive/1/520591/
db.org/77472 - http://www.openwall.com/lists/oss-security/2012/01/05/10 - http://www.securityfocus.com/archive/1/520591/100/0/threaded - http://plugins.trac.wordpress.org/changeset?reponame=&new=467338%40adminimize&old=466900%40adminimize#file5 - http://www.securityfocus.com/bid/50745 - http://www.securityfocus.com/archive/1/520591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71414
CVE ID: CVE-2011-4927 State: PUBLISHED Published: 2012-10-08T18:00:00Z Last Updated: 2024-09-16T20:31:20.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the bazaar repository adapter in Redmine 1.0.x before 1.0.5 allows remote authenticated users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/01/06/5 - http://www.debian.org/security/2011/dsa-2261 - http://www.openwall.com/lists/oss-security/2012/01/06/7 - http://www.redmine.org/news/49
CVE ID: CVE-2011-4928 State: PUBLISHED Published: 2012-10-08T18:00:00Z Last Updated: 2024-09-17T00:20:46.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the textile formatter in Redmine before 1.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/01/06/5 - http://www.debian.org/security/2011/dsa-2261 - http://www.openwall.com/lists/oss-security/2012/01/06/7 - http://www.redmine.org/news/49
CVE ID: CVE-2011-4929 State: PUBLISHED Published: 2012-10-08T18:00:00Z Last Updated: 2024-09-16T21:57:09.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attackers to execute arbitrary commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/01/06/5 - http://www.debian.org/security/2011/dsa-2261 - http://www.openwall.com/lists/oss-security/2012/01/06/7 - http://www.redmine.org/news/49
CVE ID: CVE-2011-4930 State: PUBLISHED Published: 2014-02-10T17:00:00 Last Updated: 2024-08-07T00:23:38.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors. Additional Analyst Notes: - CVE Program Container: Ref
a file to be transferred, and possibly other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://research.cs.wisc.edu/htcondor/security/vulnerabilities/CONDOR-2012-0001.html - https://bugzilla.redhat.com/show_bug.cgi?id=759548 - https://htcondor-wiki.cs.wisc.edu/index.cgi/chngview?cn=28429 - http://rhn.redhat.com/errata/RHSA-2012-0099.html - https://htcondor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=5e5571d1a431eb3c61977b6dd6ec90186ef79867 - https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=2660 - https://htcondor-wiki.cs.wisc.edu/index.cgi/chngview?cn=28264 - http://rhn.redhat.com/errata/RHSA-2012-0100.html
CVE ID: CVE-2011-4931 State: PUBLISHED Published: 2019-10-29T13:05:03 Last Updated: 2024-08-07T00:23:38.646Z Vendors: gpw Products: gpw Problem Types: UNKNOWN_TYPE Description: gpw generates shorter passwords than required Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4931 - https://access.redhat.com/security/cve/cve-2011-4931 - http://www.openwall.com/lists/oss-security/2012/01/17/13
CVE ID: CVE-2011-4932 State: PUBLISHED Published: 2012-10-06T21:00:00Z Last Updated: 2024-09-16T16:28:26.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in ip_cms/modules/standard/content_management/actions.php in ImpressPages CMS 1.0.12 and possibly other versons before 1.0.13 allows remote attackers to execute arbitrary code via the cm_group parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46193 - http://www.impresspages.org/news/impresspages-1-0-13-security-release/ - http://www.osvdb.org/75783 - http://www.openwall.com/lists/oss-security/2012/01/18/12 - http://www.securityfocus.com/bid/4
tp://www.osvdb.org/75783 - http://www.openwall.com/lists/oss-security/2012/01/18/12 - http://www.securityfocus.com/bid/49798 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0029.html - http://www.openwall.com/lists/oss-security/2012/01/15/9 - http://seclists.org/bugtraq/2011/Sep/156
CVE ID: CVE-2011-4933 State: REJECTED Published: 2017-07-24T16:00:00 Last Updated: 2017-07-24T15:57:01 Description: No description available.
CVE ID: CVE-2011-4934 State: REJECTED Published: 2017-07-24T16:00:00 Last Updated: 2017-07-24T15:57:01 Description: No description available.
CVE ID: CVE-2011-4935 State: REJECTED Published: 2017-07-24T16:00:00 Last Updated: 2017-07-24T15:57:01 Description: No description available.
CVE ID: CVE-2011-4936 State: REJECTED Published: 2017-07-24T16:00:00 Last Updated: 2017-07-24T15:57:01 Description: No description available.
CVE ID: CVE-2011-4937 State: PUBLISHED Published: 2020-02-04T12:18:11 Last Updated: 2024-08-07T00:23:38.561Z Vendors: Joomla! Products: Joomla! Problem Types: information disclosure Description: Joomla! 1.7.1 has core information disclosure due to inadequate error checking. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/02/4 - http://www.openwall.com/lists/oss-security/2012/03/28/6 - http://www.openwall.com/lists/oss-security/2012/03/02/1 - https://developer.joomla.org/security/news/371-20111002-core-information-disclosure.html
CVE ID: CVE-2011-4938 State: PUBLISHED Published: 2020-02-11T20:04:38 Last Updated: 2024-08-07T00:23:39.061Z Vendors: Ariadne Products: Ariadne Problem Types: Cross-Site Scripting Description: Multiple cross-site scripting (XSS) vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter to (1) index.php and (2) loader.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.rul3z.de/advisories/SSCHADV2011-038.txt - http://www.openwall.com/lists/oss-security/2012/03/09/4 - http://www.openwall.com/lists/oss-security/2012/03/10/6 - http://bugs.ariadne-cms.org/view.php?id=277 - https://seclists.org/bugtraq/20
wall.com/lists/oss-security/2012/03/10/6 - http://bugs.ariadne-cms.org/view.php?id=277 - https://seclists.org/bugtraq/2011/Dec/7
CVE ID: CVE-2011-4939 State: PUBLISHED Published: 2012-03-15T10:00:00 Last Updated: 2024-08-07T00:23:38.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pidgin_conv_chat_rename_user function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by changing a nickname while in an XMPP chat room. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18406 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:029 - http://developer.pidgin.im/ticket/14392 - http://developer.pidgin.im/viewm
com/security/advisories?name=MDVSA-2012:029 - http://developer.pidgin.im/ticket/14392 - http://developer.pidgin.im/viewmtn/revision/diff/10ead4688e3af4132d454fa3bc241480500651c9/with/d1d77da56217f3a083e1d459bef054db9f1d5699/pidgin/gtkconv.c - http://pidgin.im/news/security/?id=60 - http://developer.pidgin.im/viewmtn/revision/info/d1d77da56217f3a083e1d459bef054db9f1d5699