Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4668 State: PUBLISHED Published: 2011-12-02T11:00:00 Last Updated: 2024-08-07T00:09:19.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Netcool/Reporter 2.2 before 2.2.0.8 allows remote attackers to execute arbitrary code via vectors related to an unspecified CGI program used with the Apache HTTP Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50864 - http://osvdb.org/77402 - http://secunia.com/advisories/46999 - http://www.ibm.com/support/docview.wss?uid=swg1IZ94277 - http://www-01.ibm.com/support/docview.wss?uid=swg24031456 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71663
CVE ID: CVE-2011-4669 State: PUBLISHED Published: 2011-12-02T16:00:00 Last Updated: 2024-08-07T00:09:19.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wp-users.php in WordPress Users plugin 1.3 and possibly earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the uid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70683 - http://www.securityfocus.com/bid/50174 - http://plugins.trac.wordpress.org/changeset/448261/wordpress-users - http://wordpress.org/extend/plugins/wordpress-users/ - http://secunia.com/advisories/46442
CVE ID: CVE-2011-4670 State: PUBLISHED Published: 2011-12-02T16:00:00 Last Updated: 2024-08-07T00:09:19.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 5.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) viewname parameter in a CalendarAjax action, (2) activity_mode parameter in a DetailView action, (3) contact_id and (4) parent_id parameters in an EditView action, (5) day, (6) month, (7) subtab, (8) view, and (9) viewOption parameters in the index action, and (10) start parameter in the ListView action to the Calendar module; (11) return_action and (12) return_module par
n, and (10) start parameter in the ListView action to the Calendar module; (11) return_action and (12) return_module parameters in the EditView action, and (13) query parameter in an index action to the Campaigns module; (14) return_url and (15) workflow_id parameters in an editworkflow action to the com_vtiger_workflow module; (16) display_view parameter in an index action to the Dashboard module; (17) closingdate_end, (18) closingdate_start, (19) date_closed, (20) owner, (21) leadsource, (22) sales_stage, and (23) type parameters in a ListView action to the Potentials module; (24) folderid parameter in a SaveandRun action to the Reports module; (25) returnaction and (26) groupId parameters
ule; (24) folderid parameter in a SaveandRun action to the Reports module; (25) returnaction and (26) groupId parameters in a createnewgroup action, (27) mode and (28) parent parameters in a createrole action, (29) src_module in a ModuleManager action, (30) mode and (31) profile_id parameters in a profilePrivileges action, and (32) roleid parameter in a RoleDetailView to the Settings module; and (33) action parameter to the Home module and (34) module parameter to phprint.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/36203/ - http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_XSS - http://osvdb.org/76006 - https://www.exploit-d
ts/36203/ - http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_XSS - http://osvdb.org/76006 - https://www.exploit-db.com/exploits/36204/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/70306 - http://www.securityfocus.com/bid/49927 - http://www.securityfocus.com/archive/1/519993/100/0/threaded - http://osvdb.org/76005 - http://seclists.org/fulldisclosure/2011/Oct/154
CVE ID: CVE-2011-4671 State: PUBLISHED Published: 2011-12-02T18:00:00 Last Updated: 2024-08-07T00:09:19.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter (aka redirect URL). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50674 - http://secunia.com/advisories/46814 - http://downloads.wordpress.org/plugin/adrotate.3.6.8.zip - http://www.exploit-db.com/exploits/18114 - http://unconciousmind.blogspot.com/2011/11/wordpre
lugin/adrotate.3.6.8.zip - http://www.exploit-db.com/exploits/18114 - http://unconciousmind.blogspot.com/2011/11/wordpress-adrotate-plugin-366-sql.html
CVE ID: CVE-2011-4672 State: PUBLISHED Published: 2011-12-02T18:00:00 Last Updated: 2024-08-07T00:09:19.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Valid tiny-erp 1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the SearchField parameter in a search action to (1) _partner_list.php, (2) proioncategory_list.php, (3) _rantevou_list.php, (4) syncategory_list.php, (5) synallasomenos_list.php, (6) ypelaton_list.php, and (7) yproion_list.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71402 - http://www.securityfocus.com/bid/50732 - htt
References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71402 - http://www.securityfocus.com/bid/50732 - http://www.exploit-db.com/exploits/18128 - http://www.securityfocus.com/archive/1/520572/100/0/threaded - http://seclists.org/fulldisclosure/2011/Nov/303
CVE ID: CVE-2011-4673 State: PUBLISHED Published: 2011-12-02T18:00:00 Last Updated: 2024-08-07T00:09:19.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71404 - http://www.exploit-db.com/exploits/18126 - http://www.securityfocus.com/bid/50730
CVE ID: CVE-2011-4674 State: PUBLISHED Published: 2011-12-02T18:00:00 Last Updated: 2024-08-07T00:09:19.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows remote attackers to execute arbitrary SQL commands via the only_hostid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18155 - https://support.zabbix.com/browse/ZBX-4385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71479 - http://www.securityfocus.com/bid/50803
CVE ID: CVE-2011-4675 State: PUBLISHED Published: 2011-12-05T11:00:00 Last Updated: 2024-08-07T00:09:19.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pathname canonicalization functionality in io/filesystem/filesystem.cc in Widelands before 15.1 expands leading ~ (tilde) characters to home-directory pathnames but does not restrict use of these characters in strings received from the network, which might allow remote attackers to conduct absolute path traversal attacks and overwrite arbitrary files via a ~ in a pathname that is used for a file transfer in an Internet game, a different vulnerability than CVE-2011-1932. Additional Analyst Notes: - CVE Program Container: Re
in an Internet game, a different vulnerability than CVE-2011-1932. Additional Analyst Notes: - CVE Program Container: References: - http://bazaar.launchpad.net/~widelands-dev/widelands/build-15/revision/5021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71626 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=617960
CVE ID: CVE-2011-4677 State: PUBLISHED Published: 2011-12-06T11:00:00Z Last Updated: 2024-09-17T03:02:04.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: One Click Orgs before 1.2.3 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/group/oneclickorgs-devspace/msg/26c40a4cc9e127d2?hl=en&dmode=source&output=gplain - http://dmcdonald.net/?page_id=43
CVE ID: CVE-2011-4678 State: PUBLISHED Published: 2011-12-06T11:00:00Z Last Updated: 2024-09-16T17:03:53.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password reset feature in One Click Orgs before 1.2.3 generates different error messages for failed reset attempts depending on whether the e-mail address is registered, which allows remote attackers to enumerate user accounts via a series of requests. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/group/oneclickorgs-devspace/msg/26c40a4cc9e127d2?hl=en&dmode=source&output=gplain - http://dmcdonald.net/?page_id=43
CVE ID: CVE-2011-4679 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-16T23:45:30.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: vtiger CRM before 5.3.0 does not properly recognize the disabled status of a field in the Leads module, which allows remote authenticated users to bypass intended access restrictions by reading a previously created report. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.vtiger.com/index.php/Oct2011:ODUpdate - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/7004 - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/7003
CVE ID: CVE-2011-4680 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-17T02:32:53.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the customer portal in vtiger CRM before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.vtiger.com/index.php/Jan2011:ODUpdate
CVE ID: CVE-2011-4681 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-16T17:57:48.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.60 does not properly consider the number of . (dot) characters that conventionally exist in domain names of different top-level domains, which allows remote attackers to bypass the Same Origin Policy by leveraging access to a different domain name in the same top-level domain, as demonstrated by the .no or .uk domain. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/support/kb/view/1003/ - http://www.opera.com/docs/changelogs/mac/1160/ - http://www.opera.com/docs/changelogs
.opera.com/support/kb/view/1003/ - http://www.opera.com/docs/changelogs/mac/1160/ - http://www.opera.com/docs/changelogs/windows/1160/ - http://www.opera.com/docs/changelogs/unix/1160/
CVE ID: CVE-2011-4682 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-17T00:51:49.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different web sites. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1160/ - http://www.opera.com/support/kb/view/1005/ - http://www.opera.com/docs/changelogs/windows/1160/ - http://www.opera.com/docs/changelogs/unix/1160/
CVE ID: CVE-2011-4683 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-17T02:47:42.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1160/ - http://www.opera.com/docs/changelogs/windows/1160/ - http://www.opera.com/docs/changelogs/unix/1160/
CVE ID: CVE-2011-4684 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-17T02:47:08.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corner cases." Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1160/ - http://www.opera.com/docs/changelogs/windows/1160/ - http://www.opera.com/docs/changelogs/unix/1160/
CVE ID: CVE-2011-4685 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-16T21:02:49.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dragonfly in Opera before 11.60 allows remote attackers to cause a denial of service (application crash) via unspecified content on a web page, as demonstrated by forbes.com. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1160/ - http://www.opera.com/docs/changelogs/windows/1160/ - http://www.opera.com/docs/changelogs/unix/1160/
CVE ID: CVE-2011-4686 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-16T19:19:27.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote attackers to cause a denial of service (application crash) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1160/ - http://www.opera.com/docs/changelogs/windows/1160/ - http://www.opera.com/docs/changelogs/unix/1160/
CVE ID: CVE-2011-4687 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-16T21:08:01.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.60 allows remote attackers to cause a denial of service (CPU and memory consumption) via unspecified content on a web page, as demonstrated by a page under the cisco.com home page. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1160/ - http://www.opera.com/docs/changelogs/windows/1160/ - http://www.opera.com/docs/changelogs/unix/1160/
CVE ID: CVE-2011-4688 State: PUBLISHED Published: 2011-12-07T19:00:00 Last Updated: 2024-08-07T00:16:33.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 8.0.1 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47090 - http://lcamtuf.coredump.cx/cachetime/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13770
CVE ID: CVE-2011-4689 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-16T19:04:54.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47129 - http://lcamtuf.coredump.cx/cachetime/
CVE ID: CVE-2011-4690 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-17T04:09:06.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47128 - http://lcamtuf.coredump.cx/cachetime/
CVE ID: CVE-2011-4691 State: PUBLISHED Published: 2011-12-07T19:00:00 Last Updated: 2024-08-07T00:16:33.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://lcamtuf.coredump.cx/cachetime/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14188 - http://secunia.com/advisories/47127
CVE ID: CVE-2011-4692 State: PUBLISHED Published: 2011-12-07T19:00:00 Last Updated: 2024-08-07T00:16:33.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required for image loading, which makes it easier for remote attackers to determine whether an image exists in the browser cache via crafted JavaScript code, as demonstrated by visipisi. Additional Analyst Notes: - CVE Program Container: References: - http://lcamtuf.coredump.cx/cachetime/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14098 - http://oxplot
achetime/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14098 - http://oxplot.github.com/visipisi/visipisi.html
CVE ID: CVE-2011-4693 State: PUBLISHED Published: 2011-12-07T20:00:00 Last Updated: 2024-08-07T00:16:33.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a crafted SWF file, as demonstrated by the first of two vulnerabilities exploited by the Intevydis vd_adobe_fp module in VulnDisco Step Ahead (SA). NOTE: as of 20111207, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Containe
er, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://partners.immunityinc.com/movies/VulnDisco-Flash0day-v2.mov - http://www.securitytracker.com/id?1026392 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15703 - https://bugzilla.redhat.com/show_bug.cgi?id=761216 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14405 - https://lists.immunityinc.com/pipermail/dailydave/2011-December/000402.html
CVE ID: CVE-2011-4694 State: PUBLISHED Published: 2011-12-07T20:00:00 Last Updated: 2024-08-07T00:16:34.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a crafted SWF file, as demonstrated by the second of two vulnerabilities exploited by the Intevydis vd_adobe_fp module in VulnDisco Step Ahead (SA). NOTE: as of 20111207, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Contain
her, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=761223 - http://partners.immunityinc.com/movies/VulnDisco-Flash0day-v2.mov - http://www.securitytracker.com/id?1026392 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16096 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14539 - https://lists.immunityinc.com/pipermail/dailydave/2011-December/000402.html
CVE ID: CVE-2011-4695 State: PUBLISHED Published: 2011-12-07T20:00:00Z Last Updated: 2024-09-16T19:05:31.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wp_ie_sandbox_escape module for Immunity CANVAS. NOTE: as of 20111207, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: Refere
ssue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://partners.immunityinc.com/movies/VulnDisco-Flash0day-v2.mov - https://lists.immunityinc.com/pipermail/dailydave/2011-December/000402.html
CVE ID: CVE-2011-4696 State: PUBLISHED Published: 2014-03-03T16:00:00 Last Updated: 2024-08-07T00:16:33.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Eye-Fi Helper before 3.4.23 allows man-in-the-middle attackers to create arbitrary files via a .. (dot dot) in the filesignature in a GetPhotoStatus request. Additional Analyst Notes: - CVE Program Container: References: - http://www.pentest.co.uk/documents/ptl-2013-01.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80995 - http://www.securityfocus.com/bid/57163
CVE ID: CVE-2011-4697 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-16T18:28:31.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xiaomi MiTalk Messenger (com.xiaomi.channel) application before 2.1.320 for Android does not properly protect data, which allows remote attackers to read or modify messaging information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4697-vulnerability-in-MiTalk.html
CVE ID: CVE-2011-4698 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-16T19:36:12.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AndroidAppTools Easy Filter (com.phoneblocker.android) application 1.1 and 1.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and call records via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4698-vulnerability-in-EasyFilter.html
CVE ID: CVE-2011-4699 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-16T19:10:54.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ubermedia Twidroyd Legacy (com.twidroydlegacy) application 4.3.11 for Android does not properly protect data, which allows remote attackers to read or modify Twitter information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4699-vulnerability-in-Twidroyd.html
CVE ID: CVE-2011-4700 State: PUBLISHED Published: 2012-01-25T02:00:00 Last Updated: 2024-08-07T00:16:34.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UberMedia UberSocial (com.twidroid) application 7.x before 7.2.4 for Android does not properly protect data, which allows remote attackers to read or modify Twitter information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4700-vulnerability-in-UberSocial.html