Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4618 State: PUBLISHED Published: 2013-01-24T01:00:00 Last Updated: 2024-08-07T00:09:19.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset?reponame=&new=466102%40advanced-text-widget&old=465828%40advanced-text-widget - https://exchange.xforce.ibmcloud.com/vulnerabilities/71412 - http://www.openwall.com/lists/oss-security/2011/12/19/6 - http://archives.ne
xforce.ibmcloud.com/vulnerabilities/71412 - http://www.openwall.com/lists/oss-security/2011/12/19/6 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0119.html - http://www.securityfocus.com/bid/50744 - http://www.securityfocus.com/archive/1/520589 - http://wordpress.org/extend/plugins/advanced-text-widget/changelog/ - http://wordpress.org/support/topic/wordpress-advanced-text-widget-plugin-cross-site-scripting-vulnerabilities
CVE ID: CVE-2011-4619 State: PUBLISHED Published: 2012-01-06T01:00:00 Last Updated: 2024-08-07T00:09:19.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48528 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://lists.opensuse.org/opensuse-secur
jectID=c03360041 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:006 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html - http://www.openssl.org/news/secadv_20120104.txt - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html - http://rhn.redhat.com/errata/RHSA-2012-1308.html - http://rhn.redhat.com/errata/RHSA-2012-1307.html - http://support.apple.com/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - http://www.kb.cert.org/vuls/id/737740 - http://mar
//lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - http://www.kb.cert.org/vuls/id/737740 - http://marc.info/?l=bugtraq&m=132750648501816&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:007 - http://rhn.redhat.com/errata/RHSA-2012-1306.html - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://secunia.com/advisories/57353 - http://marc.info/?l=bugtraq&m=133728068926468&w=2 - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://marc.info/?l=bugtraq&m=132750648501816&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www.debian.org/security/2012/dsa-
p://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www.debian.org/security/2012/dsa-2390 - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc - http://marc.info/?l=bugtraq&m=133728068926468&w=2
CVE ID: CVE-2011-4620 State: PUBLISHED Published: 2011-12-31T01:00:00 Last Updated: 2024-08-07T00:09:19.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51340 - http://secunia.com/advisories/47297 - http://www.exploit-db.com/exploits/18258/
- http://secunia.com/advisories/51340 - http://secunia.com/advisories/47297 - http://www.exploit-db.com/exploits/18258/ - https://security.gentoo.org/glsa/201606-16 - http://osvdb.org/77973 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00013.html - http://openwall.com/lists/oss-security/2011/12/21/2 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00015.html
CVE ID: CVE-2011-4621 State: PUBLISHED Published: 2012-05-17T10:00:00Z Last Updated: 2024-08-07T00:09:19.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 2.6.37 does not properly implement a certain clock-update optimization, which allows local users to cause a denial of service (system hang) via an application that executes code in a loop. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/f26f9aff6aaf67e9a430d16c266f91b13a5bff64 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - http://www.openwall.com/lists/oss-security/2011/12/21/6 - https://bugzilla.redhat.com/show_bug.cgi?id=7697
eLog-2.6.37 - http://www.openwall.com/lists/oss-security/2011/12/21/6 - https://bugzilla.redhat.com/show_bug.cgi?id=769711 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f26f9aff6aaf67e9a430d16c266f91b13a5bff64
CVE ID: CVE-2011-4622 State: PUBLISHED Published: 2012-01-27T15:00:00 Last Updated: 2024-08-07T00:09:19.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle when Programmable Interval Timer (PIT) interrupt requests (IRQs) when a virtual interrupt controller (irqchip) is not available, which allows local users to cause a denial of service (NULL pointer dereference) by starting a timer. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2012-0051.html - https://bugzilla.redhat.com/show_bug.cgi?id=769721 - http:
- http://www.redhat.com/support/errata/RHSA-2012-0051.html - https://bugzilla.redhat.com/show_bug.cgi?id=769721 - http://www.securityfocus.com/bid/51172 - http://www.openwall.com/lists/oss-security/2011/12/21/7 - http://permalink.gmane.org/gmane.comp.emulators.kvm.devel/83564 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html - http://www.securitytracker.com/id?1026559
CVE ID: CVE-2011-4623 State: PUBLISHED Published: 2012-09-25T23:00:00 Last Updated: 2024-08-07T00:09:19.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.adiscon.com/show_bug.cgi?id=221 - http://www.ubuntu.com/usn/USN-1338-1 - http://rsyslog.com/changelog-for-6-1-4-devel/ - https://bugzilla.redhat.com/show_bug.cgi?id=
ubuntu.com/usn/USN-1338-1 - http://rsyslog.com/changelog-for-6-1-4-devel/ - https://bugzilla.redhat.com/show_bug.cgi?id=769822 - http://git.adiscon.com/?p=rsyslog.git%3Ba=commit%3Bh=6bad782f154b7f838c7371bf99c13f6dc4ec4101 - http://www.securitytracker.com/id?1026556 - http://rsyslog.com/changelog-for-5-7-4-v5-beta/ - http://secunia.com/advisories/45848 - http://www.securityfocus.com/bid/51171 - http://secunia.com/advisories/47698 - http://rsyslog.com/changelog-for-4-6-6-v4-stable/ - http://www.openwall.com/lists/oss-security/2011/12/22/2
CVE ID: CVE-2011-4624 State: PUBLISHED Published: 2014-10-01T14:00:00 Last Updated: 2024-08-07T00:09:19.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash-album-gallery) before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2011-12/0180.html - http://www.securityfocus.com/archive/1/520691/100/0/threaded - http://wordpress.org/extend/plugins/flash-album-gallery/changelog/ - http://www.openwall.com/lists/oss-security/2011/
- http://wordpress.org/extend/plugins/flash-album-gallery/changelog/ - http://www.openwall.com/lists/oss-security/2011/12/23/2 - http://www.securityfocus.com/bid/50861 - http://plugins.trac.wordpress.org/changeset/469785 - http://www.securityfocus.com/archive/1/520704/100/0/threaded
CVE ID: CVE-2011-4625 State: PUBLISHED Published: 2019-11-06T14:53:31 Last Updated: 2024-08-07T00:09:19.359Z Vendors: simplesamlphp Products: simplesamlphp Problem Types: Cryptography Description: simplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4625 - https://www.mageni.net/1.3.6.1.4.1.25623.1.0.70545
CVE ID: CVE-2011-4626 State: PUBLISHED Published: 2019-11-06T16:07:45 Last Updated: 2024-08-07T00:09:19.538Z Vendors: TYPO3 Products: TYPO3 Problem Types: Cross-Site Scripting Description: Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the "JSwindow" property of the typolink function. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4626 - https://typo3.org/security/advisory/typo3-core-sa-2011-001/#XSS
CVE ID: CVE-2011-4627 State: PUBLISHED Published: 2019-11-06T16:16:40 Last Updated: 2024-08-07T00:09:19.397Z Vendors: TYPO3 Products: TYPO3 Problem Types: Other Description: TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows Information Disclosure on the backend. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4627 - https://typo3.org/security/advisory/typo3-core-sa-2011-001/#Information_Disclosure
CVE ID: CVE-2011-4628 State: PUBLISHED Published: 2019-11-06T16:22:56 Last Updated: 2024-08-07T00:09:19.403Z Vendors: TYPO3 Products: TYPO3 Problem Types: Weak Authentication Description: TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to bypass authentication mechanisms in the backend through a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4628 - https://typo3.org/security/advisory/typo3-core-sa-2011-001/#Authentication_Delay_Bypass
CVE ID: CVE-2011-4629 State: PUBLISHED Published: 2019-11-06T16:30:30 Last Updated: 2024-08-07T00:09:19.411Z Vendors: TYPO3 Products: TYPO3 Problem Types: Cross-Site Scripting Description: Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4629 - https://typo3.org/security/advisory/typo3-core-sa-2011-001/#XSS
CVE ID: CVE-2011-4630 State: PUBLISHED Published: 2019-11-06T16:34:04 Last Updated: 2024-08-07T00:09:19.504Z Vendors: TYPO3 Products: TYPO3 Problem Types: UNKNOWN_TYPE Description: Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the browse_links wizard. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4630 - https://typo3.org/security/advisory/typo3-core-sa-2011-001/#XSS
CVE ID: CVE-2011-4631 State: PUBLISHED Published: 2019-11-06T16:36:09 Last Updated: 2024-08-07T00:09:19.505Z Vendors: TYPO3 Products: TYPO3 Problem Types: Cross-Site Scripting Description: Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the system extension recycler. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4631 - https://typo3.org/security/advisory/typo3-core-sa-2011-001/#XSS
CVE ID: CVE-2011-4632 State: PUBLISHED Published: 2019-11-06T16:39:08 Last Updated: 2024-08-07T00:09:19.408Z Vendors: TYPO3 Products: TYPO3 Problem Types: Cross-Site Scripting Description: Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the tcemain flash message. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4632 - https://typo3.org/security/advisory/typo3-core-sa-2011-001/#XSS
CVE ID: CVE-2011-4634 State: PUBLISHED Published: 2011-12-22T20:00:00 Last Updated: 2024-08-07T00:09:19.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted database name, related to the Database Synchronize panel; (2) a crafted database name, related to the Database rename panel; (3) a crafted SQL query, related to the table overview panel; (4) a crafted SQL query, related to the view creation dialog; (5) a crafted column type, related to the table search dialog; or (6) a crafted column type, related to the create ind
; (5) a crafted column type, related to the table search dialog; or (6) a crafted column type, related to the create index dialog. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-December/071040.html - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=1490533d91e9d3820e78ca4eac7981886eaea2cb - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=077c10020e349e8c1beb46309098992fde616913 - http://www.phpmyadmin.net/home_page/security/PMASA-2011-18.php - http://www.mandriva.com/security/advisories?name=MDVSA-2011:198 - http://ph
n.net/home_page/security/PMASA-2011-18.php - http://www.mandriva.com/security/advisories?name=MDVSA-2011:198 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=dac8d6ce256333ff45b5f46270304b8657452740 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=b289fe082441dc739939b0ba15dae0d9dc6cee92
CVE ID: CVE-2011-4638 State: PUBLISHED Published: 2012-10-08T10:00:00Z Last Updated: 2024-09-17T00:05:58.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SpamTitan WebTitan before 3.60 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to login-x.php, and allow remote authenticated users to execute arbitrary SQL commands via the (2) bldomain, (3) wldomain, or (4) temid parameter to urls-x.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec-1.com/blog/?p=211
CVE ID: CVE-2011-4639 State: PUBLISHED Published: 2012-10-08T10:00:00Z Last Updated: 2024-09-16T18:28:57.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, as demonstrated by an && (ampersand ampersand) sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec-1.com/blog/?p=211
CVE ID: CVE-2011-4640 State: PUBLISHED Published: 2012-10-08T10:00:00Z Last Updated: 2024-09-17T00:16:35.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the fname parameter in a view action. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec-1.com/blog/?p=211
CVE ID: CVE-2011-4642 State: PUBLISHED Published: 2012-01-03T11:00:00 Last Updated: 2024-08-07T00:09:19.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote authenticated administrators to execute arbitrary code by leveraging the sys module in a request to the search application, as demonstrated by a cross-site request forgery (CSRF) attack, aka SPL-45172. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAGMM - http://www.securitytracker.com/id?1026451 - http://www.sec-1.com/blog/?p=23
s: - http://www.splunk.com/view/SP-CAAAGMM - http://www.securitytracker.com/id?1026451 - http://www.sec-1.com/blog/?p=233 - http://secunia.com/advisories/47232 - http://www.sec-1.com/blog/wp-content/uploads/2011/12/Attacking_Splunk_Release.pdf - http://www.exploit-db.com/exploits/18245/
CVE ID: CVE-2011-4643 State: PUBLISHED Published: 2012-01-03T11:00:00 Last Updated: 2024-08-07T00:09:19.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAGMM - http://www.securitytracker.com/id?1026451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72244 - http://www.sec-1.com/blog/?p=233 - http://secunia.com/advisories/47232 - http://www.sec-1.com/blog/w
erabilities/72244 - http://www.sec-1.com/blog/?p=233 - http://secunia.com/advisories/47232 - http://www.sec-1.com/blog/wp-content/uploads/2011/12/Attacking_Splunk_Release.pdf - http://www.exploit-db.com/exploits/18245/
CVE ID: CVE-2011-4644 State: PUBLISHED Published: 2012-01-03T11:00:00 Last Updated: 2024-08-07T00:09:19.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, which allows remote attackers to (1) read arbitrary files via a management-console session that leverages the ability to create crafted data sources, or (2) execute management commands via an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec-1.com/blog/?p=233 - http://www.sec-1.com/blog/wp-content/uploads/20
CVE Program Container: References: - http://www.sec-1.com/blog/?p=233 - http://www.sec-1.com/blog/wp-content/uploads/2011/12/Attacking_Splunk_Release.pdf - http://www.exploit-db.com/exploits/18245/
CVE ID: CVE-2011-4646 State: PUBLISHED Published: 2011-11-30T19:00:00Z Last Updated: 2024-09-16T23:51:44.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the ratings shortcode when creating a post. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset/430970/wp-postratings/trunk/wp-postratings.php?ol
m Container: References: - http://plugins.trac.wordpress.org/changeset/430970/wp-postratings/trunk/wp-postratings.php?old=355076&old_path=wp-postratings%2Ftrunk%2Fwp-postratings.php - http://wordpress.org/extend/plugins/wp-postratings/changelog/ - http://secunia.com/advisories/46328 - http://www.securityfocus.com/bid/49986
CVE ID: CVE-2011-4647 State: PUBLISHED Published: 2011-11-30T19:00:00Z Last Updated: 2024-09-16T17:48:02.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the story creation feature in Geeklog 1.8.0 allow remote attackers to inject arbitrary web script or HTML via the (1) code or (2) raw BBcode tags. Additional Analyst Notes: - CVE Program Container: References: - http://project.geeklog.net/tracking/view.php?id=1368 - http://www.geeklog.net/article.php/geeklog-1.8.1 - http://project.geeklog.net/cgi-bin/hgwebdir.cgi/geeklog/rev/fd3ca3aebf86 - http://secunia.com/advisories/46348/ - http://osvdb.org/76297
CVE ID: CVE-2011-4650 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-07T00:09:19.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.2(1). Known Fixed Releases: 6.0(0)SL1(0.14) 5.2(2.73)S0. Product identification: CSCtt15295. Additional Analyst Notes: - CVE Program Container: References: - https://icisystem.blogspot.com/2015/09/cisco-notification-alert-prime-dcnm-01.html - https://quickview.cloudapps.cisco.
https://icisystem.blogspot.com/2015/09/cisco-notification-alert-prime-dcnm-01.html - https://quickview.cloudapps.cisco.com/quickview/bug/CSCtt15295
CVE ID: CVE-2011-4659 State: PUBLISHED Published: 2012-01-19T15:00:00Z Last Updated: 2024-09-17T03:42:52.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than CVE-2011-2555. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120118-te
CVE ID: CVE-2011-4661 State: PUBLISHED Published: 2020-02-12T16:43:39 Last Updated: 2024-11-15T17:41:53.495Z Vendors: Cisco Products: IOS Problem Types: memory leak Description: A memory leak vulnerability exists in Cisco IOS before 15.2(1)T due to a memory leak in the HTTP PROXY Server process (aka CSCtu52820), when configured with Cisco ISR Web Security with Cisco ScanSafe and User Authenticaiton NTLM configured. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisco.com/c/en/us/td/docs/ios/15_2m_and_t/release/notes/15_2m_and_t/152-1TCAVS.html
CVE ID: CVE-2011-4667 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-07T00:09:19.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The encryption library in Cisco IOS Software 15.2(1)T, 15.2(1)T1, and 15.2(2)T, Cisco NX-OS in Cisco MDS 9222i Multiservice Modular Switch, Cisco MDS 9000 18/4-Port Multiservice Module, and Cisco MDS 9000 Storage Services Node module before 5.2(6), and Cisco IOS in Cisco VPN Services Port Adaptor for Catalyst 6500 12.2(33)SXI, and 12.2(33)SXJ when IP Security (aka IPSec) is used, allows remote attackers to obtain unencrypted packets from encrypted sessions. Additional Analyst Notes: - CVE Program Container: References: - https
tain unencrypted packets from encrypted sessions. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120913-CVE-2011-4667 - https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/release/notes/ol_14271/caveats_SXI_rebuilds.html