Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4940 State: PUBLISHED Published: 2012-06-27T10:00:00 Last Updated: 2024-08-07T00:23:39.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer 7 via UTF-7 encoding. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1592-1 - http://jvn.jp/en/jp/JVN51176027/index.html - http://secunia.com/advisories/
es: - http://www.ubuntu.com/usn/USN-1592-1 - http://jvn.jp/en/jp/JVN51176027/index.html - http://secunia.com/advisories/51040 - http://secunia.com/advisories/50858 - http://bugs.python.org/issue11442 - http://www.securityfocus.com/bid/54083 - http://www.ubuntu.com/usn/USN-1596-1 - http://www.ubuntu.com/usn/USN-1613-2 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000063 - https://bugzilla.redhat.com/show_bug.cgi?id=803500 - http://secunia.com/advisories/51024 - http://www.ubuntu.com/usn/USN-1613-1
CVE ID: CVE-2011-4941 State: PUBLISHED Published: 2012-09-18T18:00:00Z Last Updated: 2024-09-16T19:15:49.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://piwik.org/blog/2011/06/piwik-1-5-security-advisory/ - http://www.openwall.com/lists/oss-security/2012/03/19/8 - http://www.openwall.com/lists/oss-security/2012/03/18/1
CVE ID: CVE-2011-4942 State: PUBLISHED Published: 2012-09-09T21:00:00Z Last Updated: 2024-09-16T16:23:55.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/configuration.php in Geeklog before 1.7.1sr1 allow remote attackers to inject arbitrary web script or HTML via the (1) subgroup or (2) conf_group parameters. NOTE: this vulnerability might require a user-assisted attack or a bypass of a CSRF protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.geeklog.net/article.php/geeklog-1.7.1sr1 - http://www.osvdb.org/70245 - http://www.openwall.com/lists/oss-security/2011/03/18/8 -
t/article.php/geeklog-1.7.1sr1 - http://www.osvdb.org/70245 - http://www.openwall.com/lists/oss-security/2011/03/18/8 - http://www.openwall.com/lists/oss-security/2012/03/23/13 - http://secunia.com/advisories/42775 - http://www.openwall.com/lists/oss-security/2012/03/23/5 - http://yehg.net/lab/pr0js/advisories/%5Bgeeklog1.7.1%5D_cross_site_scripting
CVE ID: CVE-2011-4943 State: PUBLISHED Published: 2020-01-22T12:11:39 Last Updated: 2024-08-07T00:23:39.273Z Vendors: ImpressPages CMS Products: ImpressPages CMS Problem Types: Remote Code Execution Description: ImpressPages CMS v1.0.12 has Unspecified Remote Code Execution (fixed in v1.0.13) Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/23/16
CVE ID: CVE-2011-4944 State: PUBLISHED Published: 2012-08-27T23:00:00 Last Updated: 2024-08-07T00:23:38.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1615-1 - http://secunia.com/advisories/51087 - http://www.openwall.com/lists/oss-security/2012/03/27/2 - http://www.ubuntu.com/usn/USN-1592-1 - http://www.openwall.com/lists/oss-security/2012/03/27/5
-security/2012/03/27/2 - http://www.ubuntu.com/usn/USN-1592-1 - http://www.openwall.com/lists/oss-security/2012/03/27/5 - https://bugzilla.redhat.com/show_bug.cgi?id=758905 - http://www.ubuntu.com/usn/USN-1616-1 - http://secunia.com/advisories/51040 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650555 - http://bugs.python.org/file23824/pypirc-secure.diff - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://secunia.com/advisories/50858 - http://secunia.com/advisories/51089 - http://www.openwall.com/lists/oss-security/2012/03/27/10 - http://bugs.python.org/issue13512 - http://www.ubuntu.com/usn/USN-1596-1 - http://www.ubuntu.com/usn/USN-1613-2 - http://secun
/bugs.python.org/issue13512 - http://www.ubuntu.com/usn/USN-1596-1 - http://www.ubuntu.com/usn/USN-1613-2 - http://secunia.com/advisories/51024 - http://www.ubuntu.com/usn/USN-1613-1 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
CVE ID: CVE-2011-4945 State: PUBLISHED Published: 2012-10-01T23:00:00 Last Updated: 2024-08-07T00:23:38.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/28/2 - https://bugs.gentoo.org/show_bug.cgi?id=401513 - http://patch-tracker.debian.org/patch/series/view/policykit-1/0.104-2/05_revert-admin-identities-unix-group-wheel.patch - https://launchpad.net/ubuntu/+source/policykit-1/0.103-1 - http://www.mail-archive
n-identities-unix-group-wheel.patch - https://launchpad.net/ubuntu/+source/policykit-1/0.103-1 - http://www.mail-archive.com/polkit-devel%40lists.freedesktop.org/msg00327.html - http://security.gentoo.org/glsa/glsa-201204-06.xml - http://secunia.com/advisories/48817 - http://cgit.freedesktop.org/PolicyKit/commit/?id=763faf434b445c20ae9529100d3ef5290976d0c9 - http://www.openwall.com/lists/oss-security/2012/03/28/1
CVE ID: CVE-2011-4946 State: PUBLISHED Published: 2012-08-31T22:00:00 Last Updated: 2024-08-07T00:23:39.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote attackers to execute arbitrary SQL commands via the user_field parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/68061 - http://secunia.com/advisories/44968 - http://www.osvdb.org/73120 - http://www.openwall.com/lists/oss-security/2012/03/28/4 - https://www.htbridge.com/advisory/multiple_vulnerabilities_in_e107_1.html - http://e107.svn.sourceforge.net/vi
03/28/4 - https://www.htbridge.com/advisory/multiple_vulnerabilities_in_e107_1.html - http://e107.svn.sourceforge.net/viewvc/e107/trunk/e107_0.7/e107_admin/users_extended.php?r1=12225&r2=12306 - http://e107.org/svn_changelog.php?version=0.7.26 - http://www.openwall.com/lists/oss-security/2012/03/29/3
CVE ID: CVE-2011-4947 State: PUBLISHED Published: 2012-08-31T22:00:00 Last Updated: 2024-08-07T00:23:38.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the user_include parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/28/4 - https://www.htbridge.com/advisory/multiple_vulnerabilities_in_e107_1.html - http://e107.svn.sourceforge.net/viewvc/e107/trunk/e107_0.7/e107_a
com/advisory/multiple_vulnerabilities_in_e107_1.html - http://e107.svn.sourceforge.net/viewvc/e107/trunk/e107_0.7/e107_admin/users_extended.php?r1=12225&r2=12306 - http://e107.org/svn_changelog.php?version=0.7.26 - http://www.openwall.com/lists/oss-security/2012/03/29/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68062
CVE ID: CVE-2011-4948 State: PUBLISHED Published: 2012-08-31T22:00:00Z Last Updated: 2024-09-16T20:21:15.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) in the type parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.egroupware.org/epl-changelog - http://www.autosectools.com/Advisory/eGroupware-1.8.001.20110421-Local-File-Inclusion-224 - http://packetstormsecurity.org/files/101676/eGroupware-
/Advisory/eGroupware-1.8.001.20110421-Local-File-Inclusion-224 - http://packetstormsecurity.org/files/101676/eGroupware-1.8.001.20110421-Local-File-Inclusion.html - http://www.egroupware.org/changelog - http://www.securityfocus.com/bid/52770 - http://comments.gmane.org/gmane.comp.web.egroupware.german/33144 - http://www.openwall.com/lists/oss-security/2012/03/29/1 - http://www.openwall.com/lists/oss-security/2012/03/30/3
CVE ID: CVE-2011-4949 State: PUBLISHED Published: 2012-08-31T22:00:00Z Last Updated: 2024-09-17T03:48:18.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/with_db/loaddetails.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.egroupware.org/epl-changelog - http://www.autosectools.com/Advisory/eGroupware-1.8.001-SQL-Injection-179 - http://www.egroupware.org/changelog - http://www.securityfocus.com
s.com/Advisory/eGroupware-1.8.001-SQL-Injection-179 - http://www.egroupware.org/changelog - http://www.securityfocus.com/bid/52770 - http://comments.gmane.org/gmane.comp.web.egroupware.german/33144 - http://packetstormsecurity.org/files/100179/eGroupware-1.8.001-SQL-Injection.html - http://www.openwall.com/lists/oss-security/2012/03/29/1 - http://www.openwall.com/lists/oss-security/2012/03/30/3
CVE ID: CVE-2011-4950 State: PUBLISHED Published: 2012-08-31T22:00:00Z Last Updated: 2024-09-16T17:47:58.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpgwapi/js/jscalendar/test.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to inject arbitrary web script or HTML via the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.egroupware.org/epl-changelog - http://packetstormsecurity.org/files/100180/eGroupware-1.8.001-Cross-Site-Scripting.html - http://www.egroupware.org/changelog - http://www.secur
y.org/files/100180/eGroupware-1.8.001-Cross-Site-Scripting.html - http://www.egroupware.org/changelog - http://www.securityfocus.com/bid/52770 - http://www.autosectools.com/Advisory/eGroupware-1.8.001-Reflected-Cross-site-Scripting-178 - http://comments.gmane.org/gmane.comp.web.egroupware.german/33144 - http://www.openwall.com/lists/oss-security/2012/03/29/1 - http://www.openwall.com/lists/oss-security/2012/03/30/3
CVE ID: CVE-2011-4951 State: PUBLISHED Published: 2012-08-31T22:00:00Z Last Updated: 2024-09-16T18:19:43.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.egroupware.org/epl-changelog - http://www.egroupware.org/changelog - http://www.securityfocus.com/bid/52770 - http://www.autosectools.com/Advisory/eGroupw
p://www.egroupware.org/changelog - http://www.securityfocus.com/bid/52770 - http://www.autosectools.com/Advisory/eGroupware-1.8.001-Reflected-Cross-site-Scripting-178 - http://comments.gmane.org/gmane.comp.web.egroupware.german/33144 - http://packetstormsecurity.org/files/101675/eGroupware-1.8.001.20110421-Open-Redirect.html - http://www.openwall.com/lists/oss-security/2012/03/29/1 - http://www.openwall.com/lists/oss-security/2012/03/30/3
CVE ID: CVE-2011-4952 State: PUBLISHED Published: 2019-11-19T15:29:47 Last Updated: 2024-08-07T00:23:39.818Z Vendors: cobbler Products: cobbler Problem Types: UNKNOWN_TYPE Description: cobbler: Web interface lacks CSRF protection when using Django framework Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4952 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4952 - https://access.redhat.com/security/cve/cve-2011-4952 - http://www.openwall.com/lists/oss-security/2012/04/12/10
CVE ID: CVE-2011-4953 State: PUBLISHED Published: 2014-10-27T01:00:00 Last Updated: 2024-08-07T00:23:38.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safe_load function, as demonstrated using Puppet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00019.html - https://bugs.launchpad.net/ubuntu/oneiric/+source/cobbler/+bug/858883 - https://bugzilla.novell.com/show_bug.cgi?id=757062
CVE ID: CVE-2011-4954 State: PUBLISHED Published: 2019-11-19T15:41:37 Last Updated: 2024-08-07T00:23:38.937Z Vendors: cobbler Products: cobbler Problem Types: Local privilege escalation due use of insecure (world writable) location for PYTHON_EGG_CACHE cache Description: cobbler has local privilege escalation via the use of insecure location for PYTHON_EGG_CACHE Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4954 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4954 - https://access.redhat.com/security/cve/cve-2011-4954 - http://www.openwall.com/lists/oss-security/2012/04/12/10 - https://bugs.gentoo.org/show_bug.cgi
rity/cve/cve-2011-4954 - http://www.openwall.com/lists/oss-security/2012/04/12/10 - https://bugs.gentoo.org/show_bug.cgi?id=CVE-2011-4954
CVE ID: CVE-2011-4955 State: PUBLISHED Published: 2017-12-20T22:00:00 Last Updated: 2024-08-07T00:23:38.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ui_stats.php in the bSuite plugin before 5 alpha 3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) s or (2) p parameters to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/support/topic/plugin-bsuite-xss-security-vulnerability-in-407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68602 - http://secunia.com/advisories/45234 - http://www.openwall.com/lists/oss-security/2012/04/16
.com/vulnerabilities/68602 - http://secunia.com/advisories/45234 - http://www.openwall.com/lists/oss-security/2012/04/16/3 - http://www.openwall.com/lists/oss-security/2012/04/16/8 - http://plugins.trac.wordpress.org/changeset?old_path=%2Fbsuite&old=520611&new_path=%2Fbsuite&new=520611
CVE ID: CVE-2011-4956 State: PUBLISHED Published: 2012-06-27T21:00:00Z Last Updated: 2024-09-16T17:18:37.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/19/17 - http://secunia.com/advisories/44038 - http://wordpress.org/news/2011/04/wordpress-3-1-1/ - http://secunia.com/advisories/49138 - http://www.openwall.com/lists/oss-security/2012/04/19/6 - http://www.debian.org/security/2012/dsa-2470 - http://www.osvdb.o
p://www.openwall.com/lists/oss-security/2012/04/19/6 - http://www.debian.org/security/2012/dsa-2470 - http://www.osvdb.org/72141
CVE ID: CVE-2011-4957 State: PUBLISHED Published: 2012-06-27T21:00:00Z Last Updated: 2024-09-17T03:44:06.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attackers to cause a denial of service (crash) via a comment with a crafted URL that triggers many recursive calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/19/17 - http://secunia.com/advisories/44038 - http://wordpress.org/news/2011/04/wordpress-3-1-1/ - http://core.trac.wordpress
- http://secunia.com/advisories/44038 - http://wordpress.org/news/2011/04/wordpress-3-1-1/ - http://core.trac.wordpress.org/ticket/16892 - http://secunia.com/advisories/49138 - http://www.openwall.com/lists/oss-security/2012/04/19/6 - http://www.debian.org/security/2012/dsa-2470
CVE ID: CVE-2011-4958 State: PUBLISHED Published: 2014-04-08T14:00:00 Last Updated: 2024-08-07T00:23:39.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to template placeholders, as demonstrated by a request to (1) admin/reports/, (2) admin/comments/, (3) admin/, (4) admin/show/, (5) admin/assets/, and (6) admin/security/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520050/100/0/threaded - http://doc.sil
es: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520050/100/0/threaded - http://doc.silverstripe.org/sapphire/en/trunk/changelogs/2.4.6 - http://doc.silverstripe.org/sapphire/en/trunk/changelogs/2.3.12 - http://osvdb.org/76258 - https://github.com/silverstripe/sapphire/commit/bdd6391 - http://secunia.com/advisories/46390 - https://github.com/silverstripe/sapphire/commit/52a895f - https://github.com/silverstripe/sapphire/commit/16c3235 - http://www.rul3z.de/advisories/SSCHADV2011-024.txt
CVE ID: CVE-2011-4959 State: PUBLISHED Published: 2012-09-17T17:00:00Z Last Updated: 2024-09-17T02:10:53.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the addslashes method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6, when connected to a MySQL database using far east character encodings, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/silverstripe/sapphire/commit/73cca09 - https://github.com/silverstripe/silverstripe-cms/commit/b5ea2f6 - https://github.com/silverstripe/sapphire/commit/ca78784 - http://www.openwa
lverstripe/silverstripe-cms/commit/b5ea2f6 - https://github.com/silverstripe/sapphire/commit/ca78784 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.12 - http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.6
CVE ID: CVE-2011-4960 State: PUBLISHED Published: 2012-09-17T17:00:00Z Last Updated: 2024-09-17T00:52:26.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Folder::findOrMake method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/silverstripe/sapphire/commit/fef7c32 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.12 - http://doc.silverstrip
ts/oss-security/2012/04/30/3 - http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.12 - http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.6
CVE ID: CVE-2011-4961 State: PUBLISHED Published: 2012-09-17T17:00:00Z Last Updated: 2024-09-16T17:19:06.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote authenticated users with the EDIT_PERMISSIONS permission to gain administrator privileges via a TreeMultiselectField that includes admin groups when adding a user to the selected groups. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/silverstripe/sapphire/commit/de1f070 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://doc.silverstripe.org/framewo
ss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.12 - http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.6
CVE ID: CVE-2011-4962 State: PUBLISHED Published: 2012-09-17T17:00:00Z Last Updated: 2024-09-17T03:23:38.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/30/1 - https://github.com/silverstripe/silverstripe-cms/commit/d15e850 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://doc.silverstripe.org/framework/en/trun
commit/d15e850 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.6
CVE ID: CVE-2011-4963 State: PUBLISHED Published: 2012-07-26T19:00:00Z Last Updated: 2024-09-16T19:56:18.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain "$index_allocation" sequences in a request. Additional Analyst Notes: - CVE Program Container: References: - http://english.securitylab.ru/lab/PT-2012-06 - http://nginx.org/en/security_advisories.html - http://mailman.nginx.org/pipermail/nginx-announce/2012/000086.html
CVE ID: CVE-2011-4964 State: REJECTED Published: 2012-06-07T19:00:00Z Last Updated: 2024-09-17T01:11:58.095Z Description: No description available.
CVE ID: CVE-2011-4965 State: REJECTED Published: 2017-07-24T16:00:00 Last Updated: 2017-07-24T15:57:01 Description: No description available.
CVE ID: CVE-2011-4966 State: PUBLISHED Published: 2013-03-12T22:00:00Z Last Updated: 2024-08-07T00:23:39.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0134.html - http://rhn.redhat.com/errata/RHBA-2012-0881.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00029.html - http://lists.opensuse.org/opensuse-updates/
81.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00029.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00079.html - https://github.com/alandekok/freeradius-server/commit/1b1ec5ce75e224bd1755650c18ccdaa6dc53e605