Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3287 State: PUBLISHED Published: 2011-10-06T10:00:00Z Last Updated: 2024-09-17T01:00:41.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Jabber Extensible Communications Platform (aka Jabber XCP) 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XML document containing a large number of nested entity references, aka Bug ID CSCtq78106, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/pr
r issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d47.shtml
CVE ID: CVE-2011-3288 State: PUBLISHED Published: 2011-10-06T10:00:00Z Last Updated: 2024-09-16T22:36:23.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XML document containing a large number of nested entity references, aka Bug IDs CSCtq89842 and CSCtq88547, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d47.shtml
CVE ID: CVE-2011-3289 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T23:29:56.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html - http://www.securitytracker.com/id?1027005
CVE ID: CVE-2011-3290 State: PUBLISHED Published: 2011-09-21T16:00:00 Last Updated: 2024-08-06T23:29:56.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via unknown vectors, aka Bug ID CSCts59135. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69945 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95105.shtml - http://www.securitytracker.com/id?1026075
ww.cisco.com/en/US/products/products_security_advisory09186a0080b95105.shtml - http://www.securitytracker.com/id?1026075 - http://www.securityfocus.com/bid/49703
CVE ID: CVE-2011-3293 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T23:29:56.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences, aka Bug ID CSCtr78143. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49101 - http://www.securityfocus.com/bid/53436 - http://www.cisco.com/web/software/282766937/37718/Acs-5-2-0-26-9-Readme.txt
CVE ID: CVE-2011-3294 State: PUBLISHED Published: 2011-10-19T15:00:00 Last Updated: 2024-08-06T23:29:56.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers (VCS) with software before X7.0 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, aka Bug ID CSCts80342. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70563 - http://securitytracker.com/id?1026186 - http://www.cisco.com/en/US/product
e.xforce.ibmcloud.com/vulnerabilities/70563 - http://securitytracker.com/id?1026186 - http://www.cisco.com/en/US/products/products_security_response09186a0080b98d0b.html
CVE ID: CVE-2011-3295 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T23:29:56.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service (CPU consumption) via crafted network traffic, aka Bug ID CSCti59888. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027005 - http://www-europe.cisco.com/cisco/software/release.html?mdfid=279879106&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577&sortparam=7 - http://www.securitytracker
mdfid=279879106&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577&sortparam=7 - http://www.securitytracker.com/id?1027006
CVE ID: CVE-2011-3296 State: PUBLISHED Published: 2011-10-06T10:00:00 Last Updated: 2024-08-06T23:29:56.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when IPv6 is used, allows remote attackers to cause a denial of service (memory corruption and module crash or hang) via vectors that trigger syslog message 302015, aka Bug ID CSCti83875. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70326 - http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml
CVE ID: CVE-2011-3297 State: PUBLISHED Published: 2011-10-06T10:00:00 Last Updated: 2024-08-06T23:29:56.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when certain authentication configurations are used, allows remote attackers to cause a denial of service (module crash) by making many authentication requests for network access, aka Bug ID CSCtn15697. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70327 - http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml
CVE ID: CVE-2011-3298 State: PUBLISHED Published: 2011-10-06T10:00:00 Last Updated: 2024-08-06T23:29:56.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.3), 8.0 before 8.0(5.24), 8.1 before 8.1(2.50), 8.2 before 8.2(5), 8.3 before 8.3(2.18), 8.4 before 8.4(1.10), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to bypass authentication via a crafted TACACS+ reply, ak
.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to bypass authentication via a crafted TACACS+ reply, aka Bug IDs CSCto40365 and CSCto74274. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70328 - http://www.cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml - http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml
CVE ID: CVE-2011-3299 State: PUBLISHED Published: 2011-10-06T10:00:00 Last Updated: 2024-08-06T23:29:56.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2.6), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traf
0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic, aka Bug IDs CSCto92380 and CSCtq09972. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70330 - http://www.cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml - http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml
CVE ID: CVE-2011-3300 State: PUBLISHED Published: 2011-10-06T10:00:00 Last Updated: 2024-08-06T23:29:56.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2.6), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traf
0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic, aka Bug IDs CSCtq06065 and CSCtq09978. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/70331 - http://osvdb.org/76087 - http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml
CVE ID: CVE-2011-3301 State: PUBLISHED Published: 2011-10-06T10:00:00 Last Updated: 2024-08-06T23:29:56.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2.6), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traf
0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic, aka Bug IDs CSCtq06062 and CSCtq09986. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70332 - http://www.cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml - http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml
CVE ID: CVE-2011-3302 State: PUBLISHED Published: 2011-10-06T10:00:00 Last Updated: 2024-08-06T23:29:56.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2.6), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traf
0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic, aka Bug IDs CSCto92398 and CSCtq09989. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76089 - http://www.cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/70333 - http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml
CVE ID: CVE-2011-3303 State: PUBLISHED Published: 2011-10-06T10:00:00 Last Updated: 2024-08-06T23:29:56.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 before 8.1(2.50), 8.2 before 8.2(5.6), 8.3 before 8.3(2.23), 8.4 before 8.4(2.7), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via malfor
4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via malformed ILS traffic, aka Bug IDs CSCtq57697 and CSCtq57802. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70329 - http://www.cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml - http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml - http://osvdb.org/76090
CVE ID: CVE-2011-3304 State: PUBLISHED Published: 2011-10-06T10:00:00 Last Updated: 2024-08-06T23:29:56.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.2 before 7.2(5.3), 8.0 before 8.0(5.25), 8.1 before 8.1(2.50), 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2), and 8.5 before 8.5(1.1) allow remote attackers to cause a denial of service (device reload) via crafted MSN Instant Messenger traffic, aka Bug ID CSCtl67486. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/v
g ID CSCtl67486. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70334 - http://www.securityfocus.com/bid/49952 - http://www.cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml - http://osvdb.org/76091
CVE ID: CVE-2011-3305 State: PUBLISHED Published: 2011-10-06T10:00:00 Last Updated: 2024-08-06T23:29:56.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20111005-nac.shtml - http://www.securitytracker.com/id?1026142 - http://secunia.com/advisories/46309 - http://www.securityfocus.com/bid/49954 - http://osvdb.org/76080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70
ttp://www.securityfocus.com/bid/49954 - http://osvdb.org/76080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70335
CVE ID: CVE-2011-3309 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T23:29:56.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 process IKE requests despite a vpnclient mode configuration, which allows remote attackers to obtain potentially sensitive information by reading IKE responder traffic, aka Bug ID CSCtt07749. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027008 - http://www.cisco.com/web/software/280775065/45357/ASA-825-Interim-Release-Notes.html
CVE ID: CVE-2011-3310 State: PUBLISHED Published: 2011-10-20T00:00:00 Last Updated: 2024-08-06T23:29:56.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service Monitor, Cisco Unified Operations Manager, CiscoWorks QoS Policy Manager, and CiscoWorks Voice Manager, allows remote authenticated users to execute arbitrary commands via a crafted URL, aka Bug IDs CSCtq48990, CSCtq63992, CSCtq64011, CSCtq64019, CSCtr23090, and CSCtt25535. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cis
SCtq64019, CSCtr23090, and CSCtt25535. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111019-cs - http://www.securityfocus.com/bid/50284 - http://secunia.com/advisories/46533 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70759
CVE ID: CVE-2011-3315 State: PUBLISHED Published: 2011-10-27T21:00:00Z Last Updated: 2024-09-17T02:31:56.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (Unified IP-IVR) before 6.0(1)SR1ES8, 7.0(x) before 7.0(2)ES1, 8.0(x) through 8.0(2)SU3, and 8.5(x) before 8.5(1)SU2, allows remote attackers to read arbitrary files via a crafted URL, aka Bug IDs CSCth09343 and CSCts44049. Additional Analyst Notes: - CVE Pro
rs to read arbitrary files via a crafted URL, aka Bug IDs CSCth09343 and CSCts44049. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111026-cucm - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111026-uccx
CVE ID: CVE-2011-3317 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T23:29:56.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtr78192. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49101 - http://www.securityfocus.com/bid/53436 - http://www.cisco.com/web/software/282766937/37718/Acs-5-2-0-26-9-Readme.txt
CVE ID: CVE-2011-3318 State: PUBLISHED Published: 2011-10-27T21:00:00Z Last Updated: 2024-09-16T16:53:34.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Video Surveillance 2421 and 2500 series cameras with software 1.1.x and 2.x before 2.4.0 and Video Surveillance 2600 series cameras with software before 4.2.0-13 allow remote attackers to cause a denial of service (device reload) by sending crafted RTSP packets over TCP, aka Bug IDs CSCtj96312, CSCtj39462, and CSCtl80175. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111026-camera
CVE ID: CVE-2011-3319 State: PUBLISHED Published: 2011-10-27T21:00:00Z Last Updated: 2024-09-16T22:36:14.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the WRF parsing functionality in the Cisco WebEx Recording Format (WRF) player T26 before SP49 EP40 and T27 before SP28 allows remote attackers to execute arbitrary code via a crafted WRF file. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111026-webex
CVE ID: CVE-2011-3320 State: PUBLISHED Published: 2011-11-02T17:00:00Z Last Updated: 2024-09-16T22:19:47.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-243-02.pdf - http://www.securityfocus.com/bid/50473
CVE ID: CVE-2011-3321 State: PUBLISHED Published: 2011-09-15T21:00:00 Last Updated: 2024-08-06T23:29:56.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted packet to TCP port 2308. Additional Analyst Notes: - CVE Program Container: References: - http://support.automation.siemens.com/WW/view/en/29054992 - http://cache.automation.siemens.com/dnl/jI/jI0NDY5AAAA_29054992_FAQ/Siemens_Security_Advisory_SS
m/WW/view/en/29054992 - http://cache.automation.siemens.com/dnl/jI/jI0NDY5AAAA_29054992_FAQ/Siemens_Security_Advisory_SSA-460621_V1_2.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/69803 - http://secunia.com/advisories/46011 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-244-01.pdf
CVE ID: CVE-2011-3322 State: PUBLISHED Published: 2011-09-15T17:00:00 Last Updated: 2024-08-06T23:29:56.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password to the Telnet (TCP/23) port, which triggers an out-of-bounds read or write, leading to a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/17827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69632 - http://www.str
- http://www.exploit-db.com/exploits/17827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69632 - http://www.stratsec.net/Research/Advisories/Procyon-Core-Server-HMI-Remote-Stack-Overflow - http://secunia.com/advisories/45866 - http://www.uscert.gov/control_systems/pdf/ICSA-11-216-01.pdf - http://securityreason.com/securityalert/8374 - http://osvdb.org/75371 - http://www.securityfocus.com/bid/49480
CVE ID: CVE-2011-3323 State: PUBLISHED Published: 2011-10-10T10:00:00 Last Updated: 2024-08-06T23:29:56.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix length. Additional Analyst Notes: - CVE Program Container: References: - http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=abc7ef44ca05493500865ce81f7b84f5c4eb6594 - http://www.quagga.net/download/quagga-0.99.19.changelog.txt - http://www.kb.cert.org/vuls/id/668534 - http://www.debian.org/security/2011/dsa-2
ownload/quagga-0.99.19.changelog.txt - http://www.kb.cert.org/vuls/id/668534 - http://www.debian.org/security/2011/dsa-2316 - http://rhn.redhat.com/errata/RHSA-2012-1259.html - https://www.cert.fi/en/reports/2011/vulnerability539178.html - http://secunia.com/advisories/46139 - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html - http://security.gentoo.org/glsa/glsa-201202-02.xml - http://rhn.redhat.com/errata/RHSA-2012-1258.html - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html - http://secunia.com/advisories/46274 - http://secunia.com/advisories/48106 - http://list
announce/2011-12/msg00009.html - http://secunia.com/advisories/46274 - http://secunia.com/advisories/48106 - http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html