Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3658 State: PUBLISHED Published: 2011-12-21T02:00:00 Last Updated: 2024-08-06T23:46:01.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via vectors involving removal of SVG elements. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://www.mozilla.org/security/announce/2011/mfsa2011-55.html - http://www.
rg/opensuse-updates/2012-03/msg00042.html - http://www.mozilla.org/security/announce/2011/mfsa2011-55.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:192 - http://secunia.com/advisories/48823 - http://www.ubuntu.com/usn/USN-1401-1 - http://secunia.com/advisories/47334 - http://www.securitytracker.com/id?1026447 - http://www.securitytracker.com/id?1026446 - http://secunia.com/advisories/49055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71910 - http://www.securitytracker.com/id?1026445 - http://osvdb.org/77953 - https://bugzilla.mozilla.org/show_bug.cgi?id=708186 - http://secunia.com/advisories/4849
6445 - http://osvdb.org/77953 - https://bugzilla.mozilla.org/show_bug.cgi?id=708186 - http://secunia.com/advisories/48495 - http://secunia.com/advisories/48553 - http://secunia.com/advisories/47302 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14664 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html
CVE ID: CVE-2011-3659 State: PUBLISHED Published: 2012-02-01T16:00:00 Last Updated: 2024-08-06T23:46:01.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=708198 - http://www.mozilla.org/security/announce/2012/mfsa2012-04.html - http://list
gzilla.mozilla.org/show_bug.cgi?id=708198 - http://www.mozilla.org/security/announce/2012/mfsa2012-04.html - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:013 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14697 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
CVE ID: CVE-2011-3660 State: PUBLISHED Published: 2011-12-21T02:00:00 Last Updated: 2024-08-06T23:46:01.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger a compartment mismatch associated with the nsDOMMessageEvent::GetData function, and unknown other vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=685321 - htt
ditional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=685321 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:192 - https://bugzilla.mozilla.org/show_bug.cgi?id=562442 - https://bugzilla.mozilla.org/show_bug.cgi?id=691873 - https://bugzilla.mozilla.org/show_bug.cgi?id=685186 - https://bugzilla.mozilla.org/show_bug.cgi?id=701248 - https://bugzilla.mozilla.org/show_bug.cgi?id=697255 - http://secunia.com/advisories/47334 - http://www.mozilla.org/security/announce/2011/mfsa2011-53.html - https://bugzilla.mozilla.org/show_bug.cgi?id=688364 - https://bugzilla.mozilla.org/show_bug.cgi?id=706249 - http://www.securitytracker.com/id?10
.org/show_bug.cgi?id=688364 - https://bugzilla.mozilla.org/show_bug.cgi?id=706249 - http://www.securitytracker.com/id?1026447 - https://bugzilla.mozilla.org/show_bug.cgi?id=686107 - https://bugzilla.mozilla.org/show_bug.cgi?id=701637 - http://www.securitytracker.com/id?1026446 - https://bugzilla.mozilla.org/show_bug.cgi?id=693143 - https://bugzilla.mozilla.org/show_bug.cgi?id=696579 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14226 - https://bugzilla.mozilla.org/show_bug.cgi?id=691746 - https://bugzilla.mozilla.org/show_bug.cgi?id=689892 - https://bugzilla.mozilla.org/show_bug.cgi?id=700512 - http://secunia.com/advisories/49055 - http://www.securi
d=689892 - https://bugzilla.mozilla.org/show_bug.cgi?id=700512 - http://secunia.com/advisories/49055 - http://www.securitytracker.com/id?1026445 - https://bugzilla.mozilla.org/show_bug.cgi?id=682252 - https://bugzilla.mozilla.org/show_bug.cgi?id=680687 - http://osvdb.org/77952 - https://bugzilla.mozilla.org/show_bug.cgi?id=679986 - https://bugzilla.mozilla.org/show_bug.cgi?id=690376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71908 - https://bugzilla.mozilla.org/show_bug.cgi?id=688974 - https://bugzilla.mozilla.org/show_bug.cgi?id=693144 - https://bugzilla.mozilla.org/show_bug.cgi?id=694200 - http://secunia.com/advisories/47302 - https://bugzilla.mozilla.org/show_bug.cgi?id=679494
a.org/show_bug.cgi?id=694200 - http://secunia.com/advisories/47302 - https://bugzilla.mozilla.org/show_bug.cgi?id=679494 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html
CVE ID: CVE-2011-3661 State: PUBLISHED Published: 2011-12-21T02:00:00 Last Updated: 2024-08-06T23:46:02.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: YARR, as used in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=691299 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:192 - http://secunia.com/advisories/47334 - http://www.securitytracker.com/id?1026447 - http://www.securitytracker.c
011:192 - http://secunia.com/advisories/47334 - http://www.securitytracker.com/id?1026447 - http://www.securitytracker.com/id?1026446 - http://secunia.com/advisories/49055 - http://www.securitytracker.com/id?1026445 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71909 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14424 - http://www.mozilla.org/security/announce/2011/mfsa2011-54.html - http://secunia.com/advisories/47302 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html
CVE ID: CVE-2011-3663 State: PUBLISHED Published: 2011-12-21T02:00:00 Last Updated: 2024-08-06T23:46:02.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to capture keystrokes entered on a web page, even when JavaScript is disabled, by using SVG animation accessKey events within that web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:192 - http://secunia.com/advisories/47334 - http://www.securitytracker.com/id?1026447 - http://www.securitytracker.com/id?1026446 - https://bugzilla.mozilla
47334 - http://www.securitytracker.com/id?1026447 - http://www.securitytracker.com/id?1026446 - https://bugzilla.mozilla.org/show_bug.cgi?id=704482 - http://secunia.com/advisories/49055 - http://www.securitytracker.com/id?1026445 - http://www.mozilla.org/security/announce/2011/mfsa2011-56.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/71911 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14739 - http://secunia.com/advisories/47302 - http://osvdb.org/77954 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html
CVE ID: CVE-2011-3664 State: PUBLISHED Published: 2011-12-21T02:00:00 Last Updated: 2024-08-06T23:46:01.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) or possibly have unspecified other impact via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=649079 - http://secunia.com/advisories/47334 - http://www.securitytracker.com/id?1026447 -
.mozilla.org/show_bug.cgi?id=649079 - http://secunia.com/advisories/47334 - http://www.securitytracker.com/id?1026447 - http://www.securitytracker.com/id?1026446 - http://www.mozilla.org/security/announce/2011/mfsa2011-57.html - http://www.securitytracker.com/id?1026445 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14574 - http://secunia.com/advisories/47302
CVE ID: CVE-2011-3665 State: PUBLISHED Published: 2011-12-21T02:00:00 Last Updated: 2024-08-06T23:46:03.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an Ogg VIDEO element that is not properly handled after scaling. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:192 - https://bugzilla.mozilla.org/show_bug.cgi?id=701259 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71913 - http://secunia.c
zilla.mozilla.org/show_bug.cgi?id=701259 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71913 - http://secunia.com/advisories/47334 - http://www.securitytracker.com/id?1026447 - http://www.securitytracker.com/id?1026446 - http://www.securitytracker.com/id?1026445 - http://www.mozilla.org/security/announce/2011/mfsa2011-58.html - http://osvdb.org/77956 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14640 - http://secunia.com/advisories/47302 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html
CVE ID: CVE-2011-3666 State: PUBLISHED Published: 2011-12-21T02:00:00 Last Updated: 2024-08-06T23:46:02.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.6.25 and Thunderbird before 3.1.17 on Mac OS X do not consider .jar files to be executable files, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted file. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-2372 on Mac OS X. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026447 - https://bugzilla.mozilla.org/show_bug.cgi?id=704622 - http://www.securitytracker.com/id?1026445 - https://
/id?1026447 - https://bugzilla.mozilla.org/show_bug.cgi?id=704622 - http://www.securitytracker.com/id?1026445 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14831 - http://www.mozilla.org/security/announce/2011/mfsa2011-59.html
CVE ID: CVE-2011-3667 State: PUBLISHED Published: 2012-01-02T19:00:00 Last Updated: 2024-08-06T23:46:02.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The User.offer_account_by_email WebService method in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when createemailregexp is not empty, does not properly handle user_can_create_account settings, which allows remote attackers to create user accounts by leveraging a token contained in an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2011-12/0184.html - http://www.bugzilla.or
ogram Container: References: - http://archives.neohapsis.com/archives/bugtraq/2011-12/0184.html - http://www.bugzilla.org/security/3.4.12/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/72042 - https://bugzilla.mozilla.org/show_bug.cgi?id=711714
CVE ID: CVE-2011-3668 State: PUBLISHED Published: 2012-01-02T19:00:00 Last Updated: 2024-08-06T23:46:01.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in post_bug.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2rc1 allows remote attackers to hijack the authentication of arbitrary users for requests that create bug reports. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47368 - http://www.bugzilla.org/security/3.4.12/ - https://bugzilla.mozilla.org/show_bug.cgi?id=703975
CVE ID: CVE-2011-3669 State: PUBLISHED Published: 2012-01-02T19:00:00 Last Updated: 2024-08-06T23:46:02.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2rc1 allows remote attackers to hijack the authentication of arbitrary users for requests that upload attachments. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=703983 - http://secunia.com/advisories/47368 - http://www.bugzilla.org/security/3.4.12/
CVE ID: CVE-2011-3670 State: PUBLISHED Published: 2012-02-01T16:00:00 Last Updated: 2024-08-06T23:46:02.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before 2.4 do not properly enforce the IPv6 literal address syntax, which allows remote attackers to obtain sensitive information by making XMLHttpRequest calls through a proxy and reading the error messages. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=504014 - http://www.debian.org/security/2012/dsa-2402 - http://www.mozilla.org/security/announce/2012
rg/show_bug.cgi?id=504014 - http://www.debian.org/security/2012/dsa-2402 - http://www.mozilla.org/security/announce/2012/mfsa2012-02.html - http://www.debian.org/security/2012/dsa-2400 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:013 - http://www.debian.org/security/2012/dsa-2406 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14814 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
CVE ID: CVE-2011-3671 State: PUBLISHED Published: 2012-06-18T19:00:00Z Last Updated: 2024-09-16T20:12:45.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allows remote attackers to execute arbitrary code via vectors involving removal of the parent node of an element. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2012/mfsa2012-41.html - https://bugzilla.mozilla.org/show_bug.cgi?id=739343
CVE ID: CVE-2011-3672 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3673 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3674 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3675 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3676 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3677 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3678 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3679 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3680 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3681 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3684 State: PUBLISHED Published: 2011-09-27T19:00:00Z Last Updated: 2024-09-16T17:15:16.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via (1) the siteid parameter to logbook.asp, (2) the siteid parameter to monitor-events.asp, (3) the siteid parameter to reports-config-by-device.asp, (4) the siteid parameter to reports-config-by-monitor.asp, (5) the siteid parameter to reports-monitoring-queue.asp, (6) the action parameter to site-list.asp, the (7) siteid or (8) type parameter to event-history.as
onitoring-queue.asp, (6) the action parameter to site-list.asp, the (7) siteid or (8) type parameter to event-history.asp, the (9) siteid or (10) type parameter to admin-history.asp, the (11) siteid or (12) id parameter to dashboard-view.asp, the (13) siteid or (14) dn parameter to device-events.asp, the (15) siteid or (16) submit parameter to device-finder.asp, the (17) siteid or (18) dn parameter to device-monitors.asp, the (19) siteid or (20) type parameter to device-views.asp, the (21) siteid or (22) type parameter to monitor-views.asp, the (23) siteid or (24) sel parameter to reports-list.asp, the (25) siteid, (26) action, or (27) sel parameter to monitor-list.asp, or the (28) siteid, (
eter to reports-list.asp, the (25) siteid, (26) action, or (27) sel parameter to monitor-list.asp, or the (28) siteid, (29) action, or (30) sel parameter to device-list.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.solutionary.com/index/SERT/Vuln-Disclosures/Tembria-Server-Monitor-XSS.html
CVE ID: CVE-2011-3685 State: PUBLISHED Published: 2011-09-27T19:00:00Z Last Updated: 2024-09-16T22:35:20.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to (1) authentication.dat or (2) XML files in the Exports directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.solutionary.com/index/SERT/Vuln-Disclosures/Tembria-Server-Monitor-Weak-Xpto-Pwd-Storage.html
CVE ID: CVE-2011-3686 State: PUBLISHED Published: 2011-09-27T19:00:00Z Last Updated: 2024-09-16T17:54:50.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in myAddressBook.asp in Sonexis ConferenceManager 9.2.11.0 and 9.3.14.0 allow remote attackers to inject arbitrary web script or HTML via the (1) fname, (2) lname, (3) email_edit, (4) email, (5) email2, (6) email3, (7) sms, (8) sms_id, or (9) work parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.solutionary.com/index/SERT/Vuln-Disclosures/Sonexis-XSS-Vulnerabilities.html
CVE ID: CVE-2011-3687 State: PUBLISHED Published: 2011-09-27T19:00:00 Last Updated: 2024-08-06T23:46:02.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sonexis ConferenceManager 9.2.11.0 allow remote attackers to inject arbitrary web script or HTML via (1) the txtConferenceID parameter to HostLogin.asp, (2) the txtConferenceID parameter to ParticipantLogin.asp, (3) the acp parameter to ForgotPIN.asp, or the (4) Description, (5) title, or (6) Heading parameter to Error.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.solutionary.com/index/SERT/Vuln-Disclosures/Sonexis-XSS-Vulnerabilities.htm
Program Container: References: - http://www.solutionary.com/index/SERT/Vuln-Disclosures/Sonexis-XSS-Vulnerabilities.html - http://securityreason.com/securityalert/8400
CVE ID: CVE-2011-3688 State: PUBLISHED Published: 2011-09-27T19:00:00 Last Updated: 2024-08-06T23:46:02.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via (1) the g parameter to Conference/Audio/AudioResourceContainer.asp or (2) the txtConferenceID parameter to Login/HostLogin.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8401 - http://www.solutionary.com/index/SERT/Vuln-Disclosures/Sonexis-SQL-Injection.html
CVE ID: CVE-2011-3689 State: PUBLISHED Published: 2011-09-27T19:00:00Z Last Updated: 2024-09-16T16:28:26.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Licenses.html in Wibu-Systems CodeMeter WebAdmin 3.30 and 4.30 allows remote attackers to inject arbitrary web script or HTML via the BoxSerial parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.solutionary.com/index/SERT/Vuln-Disclosures/CodeMeter-WebAdmin.html
CVE ID: CVE-2011-3690 State: PUBLISHED Published: 2011-09-27T19:00:00Z Last Updated: 2024-09-16T17:28:46.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in PlotSoft PDFill PDF Editor 8.0 allows local users to gain privileges via a Trojan horse mfc70enu.dll or mfc80loc.dll in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.solutionary.com/index/SERT/Vuln-Disclosures/PDFill-Insecure-Library.html
CVE ID: CVE-2011-3691 State: PUBLISHED Published: 2011-09-27T19:00:00Z Last Updated: 2024-09-16T16:43:37.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Trojan horse dwmapi.dll, dwrite.dll, or msdrm.dll in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.solutionary.com/index/SERT/Vuln-Disclosures/Foxit-Reader.html
CVE ID: CVE-2011-3692 State: PUBLISHED Published: 2011-09-27T19:00:00Z Last Updated: 2024-09-16T23:11:53.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml, which allows local users to obtain sensitive information by reading this file and performing a base64 decoding step. Additional Analyst Notes: - CVE Program Container: References: - http://www.solutionary.com/index/SERT/Vuln-Disclosures/NetSaro-Enterprise-Messenger-Vulnerability.html