Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-0727 State: PUBLISHED Published: 2011-03-31T22:00:00 Last Updated: 2024-08-06T22:05:52.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1099-1 - http://secunia.com/advisories/43714 - http://securitytracker.com/id?1025264 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057931.html - http://secunia.com/advisories/43854 - http://www.vupen.com/english/advisories/2
ackage-announce/2011-April/057931.html - http://secunia.com/advisories/43854 - http://www.vupen.com/english/advisories/2011/0847 - http://www.vupen.com/english/advisories/2011/0787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66377 - http://www.vupen.com/english/advisories/2011/0911 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:070 - http://www.debian.org/security/2011/dsa-2205 - http://www.redhat.com/support/errata/RHSA-2011-0395.html - http://www.securityfocus.com/bid/47063 - http://www.vupen.com/english/advisories/2011/0786 - http://mail.gnome.org/archives/gdm-list/2011-March/msg00020.html - https://bugzilla.redhat.com/show_bug.cgi?id=688323 - http://ftp.gnome.or
rg/archives/gdm-list/2011-March/msg00020.html - https://bugzilla.redhat.com/show_bug.cgi?id=688323 - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.1.news - http://secunia.com/advisories/44021 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057333.html - http://www.vupen.com/english/advisories/2011/0797
CVE ID: CVE-2011-0728 State: PUBLISHED Published: 2011-03-29T18:00:00 Last Updated: 2024-08-06T22:05:53.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/loggerhead/1.18/1.18.1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057502.html - https://bugs.launchpad.net/loggerhead/+bug/740142 - http://www.vupen.com/english/advisories/2011/0849 - h
/057502.html - https://bugs.launchpad.net/loggerhead/+bug/740142 - http://www.vupen.com/english/advisories/2011/0849 - http://www.securityfocus.com/bid/47032 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057413.html - http://secunia.com/advisories/43822 - http://www.vupen.com/english/advisories/2011/0848 - http://www.osvdb.org/71279 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057479.html - http://secunia.com/advisories/44017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66305
CVE ID: CVE-2011-0729 State: PUBLISHED Published: 2011-04-29T22:00:00Z Last Updated: 2024-09-16T23:30:55.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: dbus_backend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a (1) SetSystemDefaultLangEnv or (2) SetSystemDefaultLanguageEnv call. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/764397 - http://secunia.com/advisories/44214 - http://www.ubuntuupdates.org/packages/show/307975 - https://launchpad.net/ubuntu
- http://secunia.com/advisories/44214 - http://www.ubuntuupdates.org/packages/show/307975 - https://launchpad.net/ubuntu/+source/language-selector/0.6.7 - http://www.vupen.com/english/advisories/2011/1032 - http://www.securityfocus.com/bid/47502 - http://www.ubuntu.com/usn/USN-1115-1/
CVE ID: CVE-2011-0730 State: PUBLISHED Published: 2011-06-02T19:00:00 Last Updated: 2024-08-06T22:05:53.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue. Additional Analyst Notes: - CVE Program Container: References: - http://open.eucalyptus.com/wiki/esa-02 - http://secunia.com/advisories/44705 - http://launchpadlibrarian.net/724
nces: - http://open.eucalyptus.com/wiki/esa-02 - http://secunia.com/advisories/44705 - http://launchpadlibrarian.net/72472626/eucalyptus_2.0.1%2Bbzr1256-0ubuntu5_2.0.1%2Bbzr1256-0ubuntu6.diff.gz - https://exchange.xforce.ibmcloud.com/vulnerabilities/67670 - http://www.ubuntu.com/usn/USN-1137-1 - https://bugs.launchpad.net/bugs/746101 - http://www.securityfocus.com/bid/48000 - https://launchpad.net/ubuntu/+source/eucalyptus/+changelog
CVE ID: CVE-2011-0731 State: PUBLISHED Published: 2011-02-01T17:00:00 Last Updated: 2024-08-06T22:05:52.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC71203 - http://www.securityfocus.com/bid/46052 - http://www.osvdb.org/70683 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14699 - http://www-
b.org/70683 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14699 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC72028 - http://secunia.com/advisories/43059 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC72029
CVE ID: CVE-2011-0732 State: PUBLISHED Published: 2011-02-01T17:00:00Z Last Updated: 2024-09-16T16:52:45.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM Tivoli Integrated Portal (TIP) 1.1.1.1, as used in IBM Tivoli Common Reporting (TCR) 1.2.0 before Interim Fix 9, have unknown impact and attack vectors, related to "security vulnerabilities of Websphere Application Server bundled within" and "many internal defects and APARs." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43030 - http://www.ibm.com/support/docview.wss?uid=swg1IY99978
CVE ID: CVE-2011-0733 State: PUBLISHED Published: 2011-02-01T17:00:00 Last Updated: 2024-08-06T22:05:53.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header in an id=- query to a .cfm file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70777 - http://websecurity.com.ua/4879/ - http://kb2.adobe.com/cps/890/cpsid_89094.html - http://securitytracker.com/id?1025012 - http://www.adobe.com/support/security/bulletins/apsb11-04.html - http://archives.neohapsis.com/archives/fulldisclo
012 - http://www.adobe.com/support/security/bulletins/apsb11-04.html - http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html
CVE ID: CVE-2011-0734 State: PUBLISHED Published: 2011-02-01T17:00:00 Last Updated: 2024-08-06T22:05:53.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via an id parameter containing a JavaScript onLoad event handler for a BODY element, related to a "tag body" attack. NOTE: this was originally reported as affecting 9.0.1 CHF1 and earlier. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70778 - http://websecurity.com.ua/4879/ - http://kb2.adobe.com/cps/890/cpsid_89094.html - http://securitytracker.com/id
/70778 - http://websecurity.com.ua/4879/ - http://kb2.adobe.com/cps/890/cpsid_89094.html - http://securitytracker.com/id?1025012 - http://www.adobe.com/support/security/bulletins/apsb11-04.html - http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html
CVE ID: CVE-2011-0735 State: PUBLISHED Published: 2011-02-01T17:00:00 Last Updated: 2024-08-06T22:05:52.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via vectors involving a "tag script." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70779 - http://websecurity.com.ua/4879/ - http://kb2.adobe.com/cps/890/cpsid_89094.html - http://www.adobe.com/support/security/bulletins/apsb11-04.html - http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html
CVE ID: CVE-2011-0736 State: PUBLISHED Published: 2011-02-01T17:00:00 Last Updated: 2025-01-21T17:41:57.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe ColdFusion 9.0.1 CHF1 and earlier, when a web application is configured to use a DBMS, allows remote attackers to obtain potentially sensitive information about the database structure via an id=- query to a .cfm file. NOTE: the vendor disputes the significance of this issue because the Site-wide Error Handler and Debug Output Settings sections of the ColdFusion Lockdown guide explain the requirement for settings that prevent this information disclosure Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
settings that prevent this information disclosure Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://osvdb.org/70780 - http://websecurity.com.ua/4879/ - http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html
CVE ID: CVE-2011-0737 State: PUBLISHED Published: 2011-02-01T17:00:00 Last Updated: 2024-08-06T22:05:53.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe ColdFusion 9.0.1 CHF1 and earlier allows remote attackers to obtain sensitive information via an id=- query to a .cfm file, which reveals the installation path in an error message. NOTE: the vendor disputes the significance of this issue because the Site-wide Error Handler and Debug Output Settings sections of the ColdFusion Lockdown guide explain the requirement for settings that prevent this information disclosure Additional Analyst Notes: - ADP Container: - CVE Program Container: References: - http://osvdb.org/70781 -
on disclosure Additional Analyst Notes: - ADP Container: - CVE Program Container: References: - http://osvdb.org/70781 - http://websecurity.com.ua/4879/ - http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html
CVE ID: CVE-2011-0738 State: PUBLISHED Published: 2011-02-02T00:00:00 Last Updated: 2024-08-06T22:05:52.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the (1) hostname or (2) identity in the X.509 certificate for the myproxy-server, which allows remote attackers to spoof the server and conduct man-in-the-middle (MITM) attacks via a crafted certificate when executing (a) myproxy-logon or (b) myproxy-get-delegation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053461.html - http://www.vupen.c
r: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053461.html - http://www.vupen.com/english/advisories/2011/0227 - http://lists.globus.org/pipermail/security-announce/2011-January/000018.html - http://secunia.com/advisories/43103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64830 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053473.html - http://grid.ncsa.illinois.edu/myproxy/security/myproxy-adv-2011-01.txt - http://www.securityfocus.com/bid/45916 - http://osvdb.org/70494 - http://secunia.com/advisories/42972
CVE ID: CVE-2011-0739 State: PUBLISHED Published: 2011-02-02T00:00:00 Last Updated: 2024-08-06T22:05:52.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The deliver function in the sendmail delivery agent (lib/mail/network/delivery_methods/sendmail.rb) in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0233 - http://groups.google.com/group/mail-ruby/browse_thread/thread/e93bbd05706478dd?pli=1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65010 - http://www.securityfocus.com/b
ead/e93bbd05706478dd?pli=1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65010 - http://www.securityfocus.com/bid/46021 - https://github.com/mikel/mail/raw/master/patches/20110126_sendmail.patch - http://secunia.com/advisories/43077 - http://osvdb.org/70667
CVE ID: CVE-2011-0740 State: PUBLISHED Published: 2011-02-02T00:00:00 Last Updated: 2024-08-06T22:05:53.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in RSS Feed Reader 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the rss_url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64949 - http://www.securityfocus.com/bid/45997 - http://www.autosectools.com/Advisories/WordPress.RSS.Feed.Reader.for.WordPress.0.1_Reflected.Cross-site.Scripting_82.html - http://osvdb.org/70644 - http://sec
WordPress.RSS.Feed.Reader.for.WordPress.0.1_Reflected.Cross-site.Scripting_82.html - http://osvdb.org/70644 - http://secunia.com/advisories/43071
CVE ID: CVE-2011-0741 State: PUBLISHED Published: 2011-02-02T00:00:00 Last Updated: 2024-08-06T22:05:53.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image editor. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65164 - http://www.securityfocus.com/bid/46154 - http://modxcms.com/forums/index.php/topic%2C60045.0.html
CVE ID: CVE-2011-0742 State: PUBLISHED Published: 2011-02-02T00:00:00 Last Updated: 2024-08-06T22:05:52.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ZfHIPCND.exe in Novell ZENworks Handheld Management 7.0 allows remote attackers to execute arbitrary code via a crafted IP Conduit packet to TCP port 2400. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64930 - http://www.securityfocus.com/archive/1/516045/100/0/threaded - http://www.vupen.com/english/advisories/2011/0221 - http://osvdb.org/70694 - http://secunia.com/advisories/43094 - http://www.securityfocus.com/bid/46024 - http://www.n
1 - http://osvdb.org/70694 - http://secunia.com/advisories/43094 - http://www.securityfocus.com/bid/46024 - http://www.novell.com/support/viewContent.do?externalId=7007663 - http://www.securitytracker.com/id?1024993 - http://telussecuritylabs.com/threats/show/FSC20110125-06 - http://www.zerodayinitiative.com/advisories/ZDI-11-026/
CVE ID: CVE-2011-0745 State: PUBLISHED Published: 2011-03-16T22:00:00 Last Updated: 2024-08-06T22:05:53.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or (2) the names of contact persons via a ShowDuplicates action to the Contacts module, reachable through index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46885 - https://exchange
ditional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66110 - http://www.vupen.com/english/advisories/2011/0675 - http://www.redteam-pentesting.de/advisories/rt-sa-2011-002 - http://www.securitytracker.com/id?1025222 - http://securityreason.com/securityalert/8141 - http://www.securityfocus.com/archive/1/517027/100/0/threaded
CVE ID: CVE-2011-0746 State: PUBLISHED Published: 2011-04-13T14:00:00 Last Updated: 2024-08-06T22:05:53.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Forms/PortForwarding_Edit_1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the PortRule_Name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8198 - http://www.securityfocus.com/archive/1/517399/100/0/threaded - http://int21.de/cve/CVE-2011-0746-o2-router.html
CVE ID: CVE-2011-0748 State: PUBLISHED Published: 2011-04-13T14:00:00 Last Updated: 2024-08-06T22:05:52.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) edit administrator accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/517400/100/0/threaded - http://int21.de/cve/CVE-2011-0748-phplist.html - http://secunia.com/advisories/44041 - http://osvdb.org/78549 - http://www.exploit-db.com/exploits/18419 - http://www.phplist.com/?lid=516
/advisories/44041 - http://osvdb.org/78549 - http://www.exploit-db.com/exploits/18419 - http://www.phplist.com/?lid=516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72746 - http://securityreason.com/securityalert/8199 - http://www.securityfocus.com/bid/51681
CVE ID: CVE-2011-0751 State: PUBLISHED Published: 2011-03-16T22:00:00 Last Updated: 2024-08-06T22:05:53.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f (encoded dot dot slash) in a URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.redteam-pentesting.de/advisories/rt-sa-2011-001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66103 - http://www.nazgul.ch/dev_nostromo.html - http://www.securityfocus.com/bid/46880 - http://www.securityfocus.com/archive/1/517026/100/0/threa
h/dev_nostromo.html - http://www.securityfocus.com/bid/46880 - http://www.securityfocus.com/archive/1/517026/100/0/threaded - http://www.vupen.com/english/advisories/2011/0674 - http://osvdb.org/71235 - http://secunia.com/advisories/43775 - http://securityreason.com/securityalert/8140
CVE ID: CVE-2011-0752 State: PUBLISHED Published: 2011-02-02T21:00:00 Last Updated: 2024-08-06T22:05:53.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The extract function in PHP before 5.2.15 does not prevent use of the EXTR_OVERWRITE parameter to overwrite (1) the GLOBALS superglobal array and (2) the this variable, which allows context-dependent attackers to bypass intended access restrictions by modifying data structures that were not intended to depend on external input, a related issue to CVE-2005-2691 and CVE-2006-3758. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - https://exchange.xforce.ibmcloud.
E Program Container: References: - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65432 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12016 - http://www.php.net/ChangeLog-5.php - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://www.php.net/archive/2010.php#id2010-12-10-1 - http://www.php.net/releases/5_2_15.php - http://www.openwall.com/lists/oss-security/2010/12/13/4
CVE ID: CVE-2011-0753 State: PUBLISHED Published: 2011-02-02T21:00:00 Last Updated: 2024-08-06T22:05:53.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service (memory corruption) via a large number of concurrent signals. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.php.net/52784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65431 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12271 - http://www.php.net/ChangeLog-5.php
CVE ID: CVE-2011-0754 State: PUBLISHED Published: 2011-02-02T21:00:00 Last Updated: 2024-08-06T22:05:53.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack of a FILE_ATTRIBUTE_REPARSE_POINT check. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.php.net/51763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65429 - http://www.php.net/ChangeLog-5.php -
/bugs.php.net/51763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65429 - http://www.php.net/ChangeLog-5.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12334
CVE ID: CVE-2011-0755 State: PUBLISHED Published: 2011-02-02T21:00:00 Last Updated: 2024-08-06T22:05:53.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return values by leveraging a script's use of a large max parameter, as demonstrated by a value that exceeds mt_getrandmax. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.php.net/46587 - http://www.php.net/ChangeLog-5.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/65426 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1
oud.com/vulnerabilities/65426 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12589
CVE ID: CVE-2011-0756 State: PUBLISHED Published: 2011-05-05T01:00:00Z Last Updated: 2024-09-17T01:11:57.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: The application server in Trustwave WebDefend Enterprise before 5.0 uses hardcoded console credentials, which makes it easier for remote attackers to read security-event data by using the remote console GUI to connect to the management port. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2011-001.txt - http://securitytracker.com/id?1025447
CVE ID: CVE-2011-0757 State: PUBLISHED Published: 2011-02-02T22:00:00 Last Updated: 2024-08-06T22:05:53.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP2 on Linux, UNIX, and Windows does not properly revoke the DBADM authority, which allows remote authenticated users to execute non-DDL statements by leveraging previous possession of this authority. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC66815 - http://www.ibm.com/support/docview.wss?uid=swg1IC66814 - http://secunia.com/advisories/43148 - http://www.ibm.com/support/docview.wss?uid=s