Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-2140 State: PUBLISHED Published: 2011-08-10T22:00:00 Last Updated: 2024-08-06T22:53:16.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.htm
Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14074 - http://secunia.com/advisories/48308 - http://www.us-cert.gov/cas/techalerts/TA11-222A.html - http://www.adobe.com/support/security/bulletins/apsb11-21.html - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html - http://www.redhat.com/support/errata/RHSA-2011-1144.html - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
CVE ID: CVE-2011-2141 State: PUBLISHED Published: 2011-05-16T18:00:00 Last Updated: 2024-08-06T22:53:17.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in TMWeb in IBM Datacap Taskmaster Capture 8.0.1 before FP1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47848 - http://secunia.com/advisories/44553 - http://osvdb.org/72314 - http://www.ibm.com/support/docview.wss?uid=swg27021511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67452
CVE ID: CVE-2011-2142 State: PUBLISHED Published: 2011-05-16T18:00:00 Last Updated: 2024-08-06T22:53:16.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Client Service in IBM Datacap Taskmaster Capture 8.0.1 before FP1 requires a cleartext password, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg27021511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67506
CVE ID: CVE-2011-2143 State: PUBLISHED Published: 2011-05-16T18:00:00 Last Updated: 2024-08-06T22:53:16.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Datacap Taskmaster Capture 8.0.1 before FP1, when Windows Authentication is enabled, allows remote attackers to obtain login access by using an incorrect password in conjunction with an account name from a different domain. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67505 - http://www.ibm.com/support/docview.wss?uid=swg27021511 - http://www.securityfocus.com/bid/47909
CVE ID: CVE-2011-2144 State: PUBLISHED Published: 2011-05-16T18:00:00 Last Updated: 2024-08-06T22:53:16.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and earlier allows remote attackers to cause a denial of service (batch abort) via a long subject line in an e-mail message that is represented in a .eml file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47912 - http://www.ibm.com/support/docview.wss?uid=swg27021511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67504
CVE ID: CVE-2011-2145 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:53:17.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1, when a Solaris or FreeBSD guest OS is used, allows guest OS users to modify arbitrary guest OS files via unspecified vectors, related to a "procedural error." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44904 - http://www.securityfocus.com/bid/48098 -
s: - CVE Program Container: References: - http://secunia.com/advisories/44904 - http://www.securityfocus.com/bid/48098 - http://www.vmware.com/security/advisories/VMSA-2011-0009.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67815 - http://secunia.com/advisories/44840 - http://www.securitytracker.com/id?1025601 - https://hermes.opensuse.org/messages/8711677
CVE ID: CVE-2011-2146 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:53:16.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to determine the existence of host OS files and directories via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67813 - http://www.securityfocus.com/bid
nia.com/advisories/44904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67813 - http://www.securityfocus.com/bid/48098 - http://www.vmware.com/security/advisories/VMSA-2011-0009.html - http://secunia.com/advisories/44840 - http://www.securitytracker.com/id?1025601 - https://hermes.opensuse.org/messages/8711677
CVE ID: CVE-2011-2147 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:16.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Openswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid, related to starter.c in the IPsec starter, and (2) /var/lock/subsys/ipsec, which allows local users to kill arbitrary processes by writing a PID to a file, or possibly bypass disk quotas by writing arbitrary data to a file, as demonstrated by files with 0666 permissions, a different vulnerability than CVE-2011-1784. Additional Analyst Notes: - CVE Program Container: References: - http://lists.debian.org/debian-security/2011/05/msg00012.html - h
Analyst Notes: - CVE Program Container: References: - http://lists.debian.org/debian-security/2011/05/msg00012.html - http://lists.debian.org/debian-security/2011/05/msg00018.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67822 - http://lists.debian.org/debian-security/2011/05/msg00013.html
CVE ID: CVE-2011-2148 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:17.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Admin/frmSite.aspx in the SmarterTools SmarterStats 6.0 web server allows remote attackers to execute arbitrary commands via vectors involving a leading and trailing & (ampersand) character, and (1) an STTTState cookie, (2) the ctl00%24MPH%24txtAdminNewPassword_SettingText parameter, (3) the ctl00%24MPH%24txtSmarterLogDirectory parameter, (4) the ctl00%24MPH%24ucSiteSeoSearchEngineSettings%24chklistEngines_SettingCheckBox%2414 parameter, (5) the ctl00%24MPH%24ucSiteSeoSettings%24txtSeoMaxKeywords_SettingText parameter, or (6)
ttingCheckBox%2414 parameter, (5) the ctl00%24MPH%24ucSiteSeoSettings%24txtSeoMaxKeywords_SettingText parameter, or (6) the ctl00_MPH_grdLogLocations_HiddenLSR parameter, related to an "OS command injection" issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67834 - http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html - http://www.kb.cert.org/vuls/id/MORO-8GYQR4 - http://www.kb.cert.org/vuls/id/240150
CVE ID: CVE-2011-2149 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:16.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execute arbitrary SQL commands via certain parameters to (1) Admin/frmSite.aspx, (2) Default.aspx, (3) Services/SiteAdmin.asmx, or (4) Client/frmViewReports.aspx; certain cookies to (5) Services/SiteAdmin.asmx or (6) login.aspx; the Referer HTTP header to (7) Services/SiteAdmin.asmx or (8) login.aspx; or (9) the User-Agent HTTP header to Services/SiteAdmin.asmx. Additional Analyst Notes: - CVE Program Container: Ref
px; or (9) the User-Agent HTTP header to Services/SiteAdmin.asmx. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html - http://www.kb.cert.org/vuls/id/MORO-8GYQR4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67833 - http://www.kb.cert.org/vuls/id/240150
CVE ID: CVE-2011-2150 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:17.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service (parsing error and daemon pause) via vectors involving (1) certain cookies in a SiteInfoLookup action to Admin/frmSites.aspx, or certain (2) cookies or (3) parameters to (a) Client/frmViewOverviewReport.aspx, (b) Client/frmViewReports.aspx, or (c) Services/SiteAdmin.asmx, as demonstrated by a ]]>> string, related to an "XML injection" iss
frmViewReports.aspx, or (c) Services/SiteAdmin.asmx, as demonstrated by a ]]>> string, related to an "XML injection" issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67832 - http://www.kb.cert.org/vuls/id/MORO-8GYQR4 - http://www.kb.cert.org/vuls/id/240150
CVE ID: CVE-2011-2151 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:17.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite.aspx, (4) Client/frmUser.aspx, and (5) Login.aspx components in the SmarterTools SmarterStats 6.0 web server accept cleartext passwords, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html - https://exchange.xforce.ibmc
examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67831 - http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html - http://www.kb.cert.org/vuls/id/MORO-8GYQR4 - http://www.kb.cert.org/vuls/id/240150
CVE ID: CVE-2011-2152 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:17.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests with query strings for (1) Client/frmViewReports.aspx or (2) UserControls/Popups/frmHelp.aspx, which makes it easier for remote attackers to obtain sensitive information by reading (a) web-server access logs or (b) web-server Referer logs, related to a "cross-domain Referer leakage" issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/smarterstats-60-oscommandinjection
ditional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67830 - http://www.kb.cert.org/vuls/id/MORO-8GYQR4 - http://www.kb.cert.org/vuls/id/240150
CVE ID: CVE-2011-2153 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:17.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Login.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and txtPass parameters in the query string, which makes it easier for context-dependent attackers to discover credentials by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, related to a "cross-domain Referer leakage" issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html -
References: - http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67829 - http://www.kb.cert.org/vuls/id/MORO-8GYQR4 - http://www.kb.cert.org/vuls/id/240150
CVE ID: CVE-2011-2154 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:16.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html - http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html - http://w
l-sqlinjection.html.html - http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html - http://www.kb.cert.org/vuls/id/MORO-8GYQR4 - http://www.kb.cert.org/vuls/id/240150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67828
CVE ID: CVE-2011-2155 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:16.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67827 - http://xss.cx/examples/exploits/st
sqlinjection.html.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67827 - http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html - http://www.kb.cert.org/vuls/id/MORO-8GYQR4 - http://www.kb.cert.org/vuls/id/240150
CVE ID: CVE-2011-2156 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:16.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request for the (1) Admin/, (2) Admin/Defaults/, (3) Admin/GettingStarted/, (4) Admin/Popups/, (5) App_Themes/, (6) Client/, (7) Client/Popups/, (8) Services/, (9) Temp/, (10) UserControls/, (11) UserControls/PanelBarTemplates/, (12) UserControls/Popups/, (13) aspnet_client/, or (14) aspnet_client/system_web/ directory name, or (15) certain directory names under App_Themes/Default/. Additional Analyst Notes: - CVE Pro
stem_web/ directory name, or (15) certain directory names under App_Themes/Default/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67826 - http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html - http://www.kb.cert.org/vuls/id/MORO-8GYQR4 - http://www.kb.cert.org/vuls/id/240150
CVE ID: CVE-2011-2157 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:16.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Admin/frmEmailReportSettings.aspx and (2) Admin/frmGeneralSettings.aspx components in the SmarterTools SmarterStats 6.0 web server generate web pages containing e-mail addresses, which allows remote attackers to obtain potentially sensitive information by reading the default values of form fields. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6
scommandinjection-directorytraversal-xml-sqlinjection.html.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67825 - http://www.kb.cert.org/vuls/id/MORO-8GYQR4 - http://www.kb.cert.org/vuls/id/240150
CVE ID: CVE-2011-2158 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:17.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving (1) Admin/frmSite.aspx, (2) Admin/frmSites.aspx, (3) Admin/frmViewReports.aspx, (4) App_Themes/AboutThisFolder.txt, (5) Client/frmViewReports.aspx, (6) Temp/AboutThisFolder.txt, (7) default.aspx, (8) login.aspx, or (9) certain .jpg URIs under Temp/. NOTE: it is possible that only clients, not the SmarterStats
spx, (8) login.aspx, or (9) certain .jpg URIs under Temp/. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html - http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67824 - http://www.kb.cert.org/vuls/id/MORO-8GYQR4 - http://www.kb.cert.org/vuls/id/240150
CVE ID: CVE-2011-2159 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:16.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving (1) Admin/Defaults/frmDefaultSiteSettings.aspx, (2) Admin/Defaults/frmServerDefaults.aspx, (3) Admin/frmReportSettings.aspx, (4) Admin/frmSite.aspx, (5) App_Themes/Default/ButtonBarIcons.xml, (6) App_Themes/Default/Skin.xml, (7) Client/frmImportSettings.aspx, (8) Client/frmSeoSettings.aspx, (9) Services/Web.config, (
p_Themes/Default/Skin.xml, (7) Client/frmImportSettings.aspx, (8) Client/frmSeoSettings.aspx, (9) Services/Web.config, (10) aspnet_client/system_web/4_0_30319/, (11) clientaccesspolicy.xml, (12) cloudscan.exe, (13) crossdomain.xml, or (14) sitemap.xml. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67823 - http://www.kb.cert.org/vuls/id/MORO-8GYQR4 - http://www.kb.cert.org/vuls/id/240150
CVE ID: CVE-2011-2160 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:17.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote attackers to have an unspecified impact via a crafted VC-1 file, a related issue to CVE-2011-0723. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47956 - http://ffmpeg.mplayerhq.hu/
CVE ID: CVE-2011-2161 State: PUBLISHED Published: 2011-05-20T22:00:00Z Last Updated: 2024-09-17T00:01:54.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ape_read_header function in ape.c in libavformat in FFmpeg before 0.5.4, as used in MPlayer, VideoLAN VLC media player, and other products, allows remote attackers to cause a denial of service (application crash) via an APE (aka Monkey's Audio) file that contains a header but no frames. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/8312e3fc9041027a33c8bc667bb99740fdf41dd5 - http://ffmpeg.mplayerhq.hu/ - http://packetstorm.linuxsecurity.com/1103-exploits/vlc105-dos
7a33c8bc667bb99740fdf41dd5 - http://ffmpeg.mplayerhq.hu/ - http://packetstorm.linuxsecurity.com/1103-exploits/vlc105-dos.txt
CVE ID: CVE-2011-2162 State: PUBLISHED Published: 2011-05-20T22:00:00Z Last Updated: 2024-09-16T17:03:18.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1; Corporate Server 4.0 (aka CS4.0); and Mandriva Enterprise Server 5 (aka MES5) have unknown impact and attack vectors, related to issues "originally discovered by Google Chrome developers." Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:088 - http://www.mandriva.com/security/advisories?name=MDVSA
http://www.mandriva.com/security/advisories?name=MDVSA-2011:088 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:061 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:062 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:089 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:059 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:060
CVE ID: CVE-2011-2163 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:53:17.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Virtualization Manager 1.2.2 in IBM Systems Director 1.2.2 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67516 - http://www.vupen.com/english/advisories/2011/1256 - http://www-01.ibm.com/support/docview.wss?uid=nas7057acf6c8f05fa568625787e0059fb36
CVE ID: CVE-2011-2164 State: PUBLISHED Published: 2011-05-20T22:00:00Z Last Updated: 2024-09-17T01:36:42.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Adobe Photoshop before 12.0.4 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44419 - http://securitytracker.com/id?1025483 - http://www.vupen.com/english/advisories/2011/1169 - http://www.adobe.com/support/downloads/detail.jsp?ftpID=4973 - http://blogs.adobe.com/jnack/2011/05/photoshop-12-0-4-update-for-cs5-arrives.html
CVE ID: CVE-2011-2165 State: PUBLISHED Published: 2011-05-23T22:00:00 Last Updated: 2024-08-06T22:53:17.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: The STARTTLS implementation in WatchGuard XCS 9.0 and 9.1 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67729 - http://secunia.com/advisories/44753 - http://www.kb.cert.org
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/67729 - http://secunia.com/advisories/44753 - http://www.kb.cert.org/vuls/id/MAPG-8D9M75 - http://www.watchguard.com/support/release-notes/xcs/9/en-US/EN_ReleaseNotes_XCS_9_1_1/EN_ReleaseNotes_WG_XCS_9_1_TLS_Hotfix.pdf - http://www.kb.cert.org/vuls/id/555316