Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-5136 State: PUBLISHED Published: 2012-08-30T22:00:00 Last Updated: 2024-08-07T00:23:40.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2011/Dec/125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71630 - http://osvdb.org/77505 - http://secunia.com/advisories/47072
CVE ID: CVE-2011-5137 State: PUBLISHED Published: 2012-08-31T21:00:00 Last Updated: 2024-08-07T00:23:40.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in tForum b0.915 allow remote attackers to execute arbitrary SQL commands via the (1) TopicID parameter to viewtopic.php, the (2) BoardID parameter to viewboard.php, or (3) CatID parameter to viewcat.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/108184/tforum-sqlxss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/71975
CVE ID: CVE-2011-5138 State: PUBLISHED Published: 2012-08-31T21:00:00 Last Updated: 2024-08-07T00:23:40.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in member.php in tForum b0.915 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a viewprofile action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71973 - http://packetstormsecurity.org/files/view/108184/tforum-sqlxss.txt
CVE ID: CVE-2011-5139 State: PUBLISHED Published: 2012-08-31T21:00:00 Last Updated: 2024-08-07T00:23:40.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/76596 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71972 - http://packetstormsecurity.org/files/view/108148/prestudiobusinesscard-sql.txt - http://secunia.com/advisories/46545 - http://www.exploit-db.com/exploits/18009
CVE ID: CVE-2011-5140 State: PUBLISHED Published: 2012-08-31T21:00:00 Last Updated: 2024-08-07T00:23:40.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the blog module 1.0 for DiY-CMS allow remote attackers to execute arbitrary SQL commands via the (1) start parameter to (a) tags.php, (b) list.php, (c) index.php, (d) main_index.php, (e) viewpost.php, (f) archive.php, (g) control/approve_comments.php, (h) control/approve_posts.php, and (i) control/viewcat.php; and the (2) month and (3) year parameters to archive.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/78081 - http://secunia.com/advisor
Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/78081 - http://secunia.com/advisories/47337 - http://www.osvdb.org/78083 - http://www.osvdb.org/78071 - http://www.exploit-db.com/exploits/18288 - http://www.osvdb.org/78080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72022 - http://www.osvdb.org/78082
CVE ID: CVE-2011-5141 State: PUBLISHED Published: 2012-08-31T21:00:00 Last Updated: 2024-08-07T00:23:40.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in exportcsv/exportcsv_index.php in Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the module parameter in an export_page action. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_obm.html - http://osvdb.org/78003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71921
CVE ID: CVE-2011-5142 State: PUBLISHED Published: 2012-08-31T21:00:00 Last Updated: 2024-08-07T00:23:40.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 2.4.0-rc13 and probably earlier allow remote attackers to inject arbitrary web script or HTML via the (1) tf_delegation, (2) tf_ip, or (3) tf_name parameter in a search action to host/host_index.php; (4) login parameter to obm.php; or (5) tf_user parameter in a search action to group/group_index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_obm.html - https:/
: - CVE Program Container: References: - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_obm.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/71923 - http://osvdb.org/78007 - http://secunia.com/advisories/47139 - http://osvdb.org/78008
CVE ID: CVE-2011-5143 State: PUBLISHED Published: 2012-08-31T21:00:00Z Last Updated: 2024-09-16T17:42:53.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 2.3.20 and probably earlier allow remote attackers to inject arbitrary web script or HTML via the (1) tf_name, (2) tf_delegation, and (3) tf_ip parameters to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47139
CVE ID: CVE-2011-5144 State: PUBLISHED Published: 2012-08-31T21:00:00 Last Updated: 2024-08-07T00:30:46.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote attackers to obtain configuration information via a direct request to test.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_obm.html - http://osvdb.org/78009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71924 - http://secunia.com/advisories/47139
CVE ID: CVE-2011-5145 State: PUBLISHED Published: 2012-08-31T21:00:00 Last Updated: 2024-08-07T00:30:44.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Open Business Management (OBM) 2.4.0-rc13 and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sel_domain_id or (2) action parameter to obm.php; (3) tf_user parameter in a search action to group/group_index.php; (4) tf_delegation, (5) tf_ip, (6) tf_name to host/host_index.php; or (7) lang, (8) theme, (9) cal_alert, (10) cal_first_hour, (11) cal_interval, (12) cal_last_hour, (13) commentorder, (14) csv_sep, (15) date, (16) date_upd, (17) de
al_first_hour, (11) cal_interval, (12) cal_last_hour, (13) commentorder, (14) csv_sep, (15) date, (16) date_upd, (17) debug_exe, (18) debug_id, (19) debug_param, (20) debug_sess, (21) debug_solr, (22) debug_sql, (23) dsrc, (24) menu, (25) rows, (26) sel_display_days, (27) timeformat, (28) timezone, or (29) todo parameter to settings/settings_index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_obm.html - http://osvdb.org/78006 - http://osvdb.org/78005 - http://osvdb.org/78004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71922 - http://secunia.com/advisories/47139
CVE ID: CVE-2011-5146 State: PUBLISHED Published: 2012-08-31T21:00:00Z Last Updated: 2024-09-16T22:46:14.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bokken before 1.6 and 1.5-x before 1.5-3 for Debian allows local users to overwrite arbitrary files via a symlink attack on /tmp/graph.dot. Additional Analyst Notes: - CVE Program Container: References: - http://inguma.eu/projects/bokken/repository/revisions/56894084b0ec - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651931 - http://secunia.com/advisories/47252 - http://www.osvdb.org/77700 - http://ingumadev.blogspot.com/2012/01/bokken-16-is-more-stable-and-easier-to.html
CVE ID: CVE-2011-5147 State: PUBLISHED Published: 2012-08-31T21:00:00Z Last Updated: 2024-09-17T01:05:47.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in ajax_save_name.php in the Ajax File Manager module in the tinymce plugin in FreeWebshop 2.2.9 R2 and earlier allows remote attackers to inject arbitrary PHP code into data.php via the selected document, as demonstrated by a call to ajax_file_cut.php and then to ajax_save_name.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18121 - http://www.osvdb.org/77162 - http://www.freewebshop.org/forum/index.php?topic=5235.0
CVE ID: CVE-2011-5148 State: PUBLISHED Published: 2012-08-31T21:00:00 Last Updated: 2024-08-07T00:30:44.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple incomplete blacklist vulnerabilities in the Simple File Upload (mod_simplefileuploadv1.3) module before 1.3.5 for Joomla! allow remote attackers to execute arbitrary code by uploading a file with a (1) php5, (2) php6, or (3) double (e.g. .php.jpg) extension, then accessing it via a direct request to the file in images/, as exploited in the wild in January 2012. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18287 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
Container: References: - http://www.exploit-db.com/exploits/18287 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72023 - http://www.securityfocus.com/bid/51214 - http://www.securityfocus.com/bid/51234 - http://www.osvdb.org/78122 - http://wasen.net/index.php?option=com_content&view=article&id=87&Itemid=59 - http://secunia.com/advisories/47370 - http://docs.joomla.org/Vulnerable_Extensions_List#Simple_File_Upload_1.3
CVE ID: CVE-2011-5149 State: PUBLISHED Published: 2012-08-31T21:00:00 Last Updated: 2024-08-07T00:30:44.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SpamTitan 5.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) testaddr or (2) testpass parameter to auth-settings.php; (3) hostname, (4) domainname, or (5) mailserver parameter to setup-relay.php; or (6) subnetmask or (7) defaultroute parameter to setup-network.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/77988 - http://www.exploit-db.com/exploits/18261 - http://www.vulnerability-lab.com/get_c
References: - http://osvdb.org/77988 - http://www.exploit-db.com/exploits/18261 - http://www.vulnerability-lab.com/get_content.php?id=91 - http://secunia.com/advisories/47309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71942 - http://osvdb.org/77987 - http://osvdb.org/77989
CVE ID: CVE-2011-5150 State: PUBLISHED Published: 2012-08-31T21:00:00Z Last Updated: 2024-09-16T18:43:26.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SpamTitan 5.07 and possibly earlier allow remote attackers or authenticated users to inject arbitrary web script or HTML via the (1) ipaddress or (2) domain parameter to setup-network.php, different vectors than CVE-2011-5149. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/77989 - http://secunia.com/advisories/47309
CVE ID: CVE-2011-5151 State: PUBLISHED Published: 2012-09-06T10:00:00Z Last Updated: 2024-09-16T16:33:15.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in ACDSee Picture Frame Manager 1.0 Build 81 allows local users to gain privileges via a Trojan horse ShellIntMgrPFMU.dll file in the current working directory, as demonstrated by a directory that contains a .jpg file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43562
CVE ID: CVE-2011-5152 State: PUBLISHED Published: 2012-09-06T10:00:00Z Last Updated: 2024-09-16T18:14:14.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in ACDSee Photo Editor 2008 5.x build 291 allow local users to gain privileges via a Trojan horse (1) Wintab32.dll or (2) CV11-DialogEditor.dll file in the current working directory, as demonstrated by a directory that contains a .apd file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43563
CVE ID: CVE-2011-5153 State: PUBLISHED Published: 2012-09-06T10:00:00Z Last Updated: 2024-09-17T02:41:45.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in FotoSlate 4.0 Build 146 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .plp file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43564
CVE ID: CVE-2011-5154 State: PUBLISHED Published: 2012-09-06T10:00:00Z Last Updated: 2024-09-16T19:37:08.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in (1) SAPGui.exe and (2) BExAnalyzer.exe in SAP GUI 6.4 through 7.2 allow local users to gain privileges via a Trojan horse MFC80LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .sap file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43707 - https://service.sap.com/sap/support/notes/1511179 - http://www.sdn.sap.com/
ces: - http://secunia.com/advisories/43707 - https://service.sap.com/sap/support/notes/1511179 - http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a - http://dsecrg.com/pages/vul/show.php?id=314
CVE ID: CVE-2011-5155 State: PUBLISHED Published: 2012-09-06T10:00:00Z Last Updated: 2024-09-16T17:34:28.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Trojan horse ijl15.dll file in the current working directory, as demonstrated by a directory that contains a .hmxz, .hmxp, .hmskin, .hmx, .hm3, .hpj, .hlp, or .chm file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5009.php - http://secunia.com/advisories/44170
CVE ID: CVE-2011-5156 State: PUBLISHED Published: 2012-09-06T10:00:00Z Last Updated: 2024-09-17T01:41:09.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Effective File Search 6.7 allows local users to gain privileges via a Trojan horse ztvunrar36.dll file in the current working directory, as demonstrated by a directory that contains a .efs file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45153
CVE ID: CVE-2011-5157 State: PUBLISHED Published: 2012-09-06T10:00:00 Last Updated: 2024-08-07T00:30:44.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, a related issue to CVE-2011-0107. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://support.attachmate.com/techdocs/1708.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78318 - http://www.securityfocus.com/bid/50496 - http://secunia.com/advisories/46692
CVE ID: CVE-2011-5158 State: PUBLISHED Published: 2012-09-07T10:00:00Z Last Updated: 2024-09-16T18:56:21.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse (1) DVBSKNLANG101.dll or (2) DvZediTermSrvInfo004.dll file in the current working directory, as demonstrated by a directory that contains a .dmt, .adl, .c02, .dof, or .jrf file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sotiriu.de/adv/
ed from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sotiriu.de/adv/NSOADV-2010-010.txt - http://secunia.com/advisories/42940
CVE ID: CVE-2011-5159 State: PUBLISHED Published: 2012-09-09T21:00:00Z Last Updated: 2024-09-17T03:18:56.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML via the sub_group parameter, a different vulnerability than CVE-2011-4942. Additional Analyst Notes: - CVE Program Container: References: - http://www.geeklog.net/article.php/geeklog-1.7.1sr1 - http://www.osvdb.org/70245 - http://secunia.com/advisories/42775
CVE ID: CVE-2011-5160 State: PUBLISHED Published: 2012-09-09T21:00:00 Last Updated: 2024-08-07T00:30:47.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web script or HTML via the site parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18274 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71982
CVE ID: CVE-2011-5161 State: PUBLISHED Published: 2012-09-09T21:00:00 Last Updated: 2024-08-07T00:30:44.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the patient photograph functionality in OpenEMR 4 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the patient directory under documents/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71981 - http://www.exploit-db.com/exploits/18274
CVE ID: CVE-2011-5162 State: PUBLISHED Published: 2012-09-15T17:00:00 Last Updated: 2024-08-07T00:30:44.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a long URI in the "ref href" tag. NOTE: this issue exists because of a CVE-2007-0707 regression. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71575 - http://www.exploit-db.com/exploits/18174/ - http://www.osvdb.org/33080
CVE ID: CVE-2011-5163 State: PUBLISHED Published: 2012-09-15T17:00:00Z Last Updated: 2024-09-17T00:35:30.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in an unspecified third-party component in the Batch module for Schneider Electric CitectSCADA before 7.20 and Mitsubishi MX4 SCADA before 7.20 allows local users to execute arbitrary code via a long string in a login sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.citect.com/citectscada-batch - http://www.osvdb.org/76937 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-279-02.pdf - http://secunia.com/advisories/46779 - http://www.securitytracker.com/id?1026306 - https
systems/pdf/ICSA-11-279-02.pdf - http://secunia.com/advisories/46779 - http://www.securitytracker.com/id?1026306 - https://my.mitsubishi-automation.com/downloads_show.php?portal_id=1&doc_type=safety&scat=2&sstr=MX4%2CSCADA - http://secunia.com/advisories/46786
CVE ID: CVE-2011-5164 State: PUBLISHED Published: 2012-09-15T17:00:00Z Last Updated: 2024-09-16T23:52:17.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a crafted file name in a LIST command response. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18102 - http://secunia.com/advisories/46781 - http://www.saintcorporation.com/cgi-bin/exploit_info/vandyke_absoluteftp_list_client_overflow - http://www.osvdb.org/77105 - http://www.securityfocus.com/bid/50614
CVE ID: CVE-2011-5165 State: PUBLISHED Published: 2012-09-15T17:00:00 Last Updated: 2024-08-07T00:30:45.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/36465/ - http://secunia.com/advisories/39193 - http://www.exploit-db.com/exploits/17727 - http://www.securityfocus.com/bid/39672 - http://www.osvdb.org/63349 - http://www.exploit-db.com/exploits/18142 - http://www.exploit-db.com/exploits/11976 -
72 - http://www.osvdb.org/63349 - http://www.exploit-db.com/exploits/18142 - http://www.exploit-db.com/exploits/11976 - http://www.exploit-db.com/exploits/11975 - https://www.exploit-db.com/exploits/36826/ - https://www.exploit-db.com/exploits/36827/
CVE ID: CVE-2011-5166 State: PUBLISHED Published: 2012-09-15T17:00:00 Last Updated: 2024-08-07T00:30:46.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the (1) USER, (2) PASS, (3) REIN, (4) QUIT, (5) PORT, (6) PASV, (7) TYPE, (8) STRU, (9) MODE, (10) RETR, (11) STOR, (12) APPE, (13) ALLO, (14) REST, (15) RNFR, (16) RNTO, (17) ABOR, (18) DELE, (19) CWD, (20) LIST, (21) NLST, (22) SITE, (23) STST, (24) HELP, (25) NOOP, (26) MKD, (27) RMD, (28) PWD, (29) CDUP, (30) STOU, (31) SNMT, (32) SYST, and (33) XPWD commands. Additional Analyst Notes: - CVE Program Co
(28) PWD, (29) CDUP, (30) STOU, (31) SNMT, (32) SYST, and (33) XPWD commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45907 - http://www.exploit-db.com/exploits/17856 - http://archives.neohapsis.com/archives/bugtraq/2011-09/0015.html - http://www.exploit-db.com/exploits/18089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69557 - http://www.osvdb.org/75147 - http://www.exploit-db.com/exploits/17819 - http://www.exploit-db.com/exploits/17870
CVE ID: CVE-2011-5167 State: PUBLISHED Published: 2012-09-15T17:00:00 Last Updated: 2024-08-07T00:30:46.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote attackers to execute arbitrary code via a long string to the DriverName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18092 - http://www.securityfocus.com/bid/50565 - http://www.osvdb.org/76913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71163 - http://ww