Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-2699 State: PUBLISHED Published: 2012-05-24T23:00:00 Last Updated: 2024-08-06T23:08:23.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027274 - https://github.com/torvalds/linux/commit/87c48fa3b4630905f98268dde838ee43626a060c - http://www.openwall.com/lists/oss-security/2011/07/
com/torvalds/linux/commit/87c48fa3b4630905f98268dde838ee43626a060c - http://www.openwall.com/lists/oss-security/2011/07/20/5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=87c48fa3b4630905f98268dde838ee43626a060c - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 - https://bugzilla.redhat.com/show_bug.cgi?id=723429 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2011-2700 State: PUBLISHED Published: 2011-09-06T15:00:00Z Last Updated: 2024-08-06T23:08:23.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the si4713_write_econtrol_string function in drivers/media/radio/si4713-i2c.c in the Linux kernel before 2.6.39.4 on the N900 platform might allow local users to cause a denial of service or have unspecified other impact via a crafted s_ext_ctrls operation with a (1) V4L2_CID_RDS_TX_PS_NAME or (2) V4L2_CID_RDS_TX_RADIO_TEXT control ID. Additional Analyst Notes: - CVE Program Container: References: - http://xorl.wordpress.com/2011/07/24/cve-2011-2700-linux-kernel-si4713-i2c-buffer-overflow/ - http:
ainer: References: - http://xorl.wordpress.com/2011/07/24/cve-2011-2700-linux-kernel-si4713-i2c-buffer-overflow/ - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.4 - http://www.securityfocus.com/bid/48804 - http://openwall.com/lists/oss-security/2011/07/20/4 - http://openwall.com/lists/oss-security/2011/07/20/6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dc6b845044ccb7e9e6f3b7e71bd179b3cf0223b6
CVE ID: CVE-2011-2701 State: PUBLISHED Published: 2011-08-04T01:00:00 Last Updated: 2024-08-06T23:08:23.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ocsp_check function in rlm_eap_tls.c in FreeRADIUS 2.1.11, when OCSP is enabled, does not properly parse replies from OCSP responders, which allows remote attackers to bypass authentication by using the EAP-TLS protocol with a revoked X.509 client certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68782 - http://www.openwall.com/lists/oss-security/2011/07/15/6 - http://www.openwall.com/lists/oss-security
erabilities/68782 - http://www.openwall.com/lists/oss-security/2011/07/15/6 - http://www.openwall.com/lists/oss-security/2011/07/18/2 - http://secunia.com/advisories/45425 - http://www.securityfocus.com/archive/1/518974/100/0/threaded - https://www.dfn-cert.de/informationen/Sicherheitsbulletins/dsb-2011-01.html - http://securityreason.com/securityalert/8325 - http://securitytracker.com/id?1025833 - https://bugzilla.redhat.com/show_bug.cgi?id=724815 - http://www.openwall.com/lists/oss-security/2011/07/20/9
CVE ID: CVE-2011-2702 State: PUBLISHED Published: 2014-10-27T20:00:00 Last Updated: 2024-08-06T23:08:23.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 (SSSE3) optimization, allows context-dependent attackers to execute arbitrary code via a negative length parameter to (1) memcpy-ssse3-rep.S, (2) memcpy-ssse3.S, or (3) memset-sse2.S in sysdeps/i386/i686/multiarch/, which triggers an out-of-bounds read, as demonstrated using the memcpy function. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=7069
ction. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=706915 - http://seclists.org/oss-sec/2011/q3/123 - http://xorl.wordpress.com/2011/08/06/cve-2011-2702-eglibc-and-glibc-signedness-issue/ - http://www.nodefense.org/eglibc.txt - http://seclists.org/oss-sec/2011/q3/153 - https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=a0ac24d98ace90d1ccba6a2f3e7d55600f2fdb6e - http://www.osvdb.org/80718 - http://www.eglibc.org/cgi-bin/viewvc.cgi/trunk/libc/ChangeLog?view=markup&pathrev=10032
CVE ID: CVE-2011-2703 State: PUBLISHED Published: 2011-08-01T19:00:00 Last Updated: 2024-08-06T23:08:23.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45318 - http://trac.osgeo.org/mapserver/ticket/3903 - http://www.openwall.com/lists/oss-security/2011/07/19/11 - http://secunia.com/advisories/45257 - http://www.debian.org/security/2011/dsa-2285 - http
s/oss-security/2011/07/19/11 - http://secunia.com/advisories/45257 - http://www.debian.org/security/2011/dsa-2285 - https://bugzilla.redhat.com/show_bug.cgi?id=723293 - http://www.openwall.com/lists/oss-security/2011/07/19/14 - http://secunia.com/advisories/45368 - https://bugzilla.redhat.com/show_bug.cgi?id=722545 - http://lists.osgeo.org/pipermail/mapserver-users/2011-July/069430.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/68682 - http://www.securityfocus.com/bid/48720 - http://www.openwall.com/lists/oss-security/2011/07/20/15
CVE ID: CVE-2011-2704 State: PUBLISHED Published: 2011-08-01T19:00:00 Last Updated: 2024-08-06T23:08:23.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors related to OGC filter encoding. Additional Analyst Notes: - CVE Program Container: References: - http://trac.osgeo.org/mapserver/ticket/3903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68719 - http://secunia.com/advisories/45257 - http://www.debian.org/security/2011/dsa-2285 - https://bugzilla.redhat.com/show_bug.cgi?id=723293 - http://www.openwall.com/lists/oss-security/2011/07/1
011/dsa-2285 - https://bugzilla.redhat.com/show_bug.cgi?id=723293 - http://www.openwall.com/lists/oss-security/2011/07/19/14 - http://secunia.com/advisories/45368 - http://lists.osgeo.org/pipermail/mapserver-users/2011-July/069430.html - http://www.securityfocus.com/bid/48720 - http://www.openwall.com/lists/oss-security/2011/07/20/15
CVE ID: CVE-2011-2705 State: PUBLISHED Published: 2011-08-05T21:00:00 Last Updated: 2024-08-06T23:08:23.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x before 1.9.2-p290 relies on PID values for initialization, which makes it easier for context-dependent attackers to predict the result string by leveraging knowledge of random strings obtained in an earlier process with the same PID. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/07/12/14 - http://www.ruby-lang.org/en/news/2011/07/02/ruby-1-8-7-p352-released/ - http
wall.com/lists/oss-security/2011/07/12/14 - http://www.ruby-lang.org/en/news/2011/07/02/ruby-1-8-7-p352-released/ - https://bugzilla.redhat.com/show_bug.cgi?id=722415 - http://www.openwall.com/lists/oss-security/2011/07/20/16 - http://www.redhat.com/support/errata/RHSA-2011-1581.html - http://www.ruby-lang.org/en/news/2011/07/15/ruby-1-9-2-p290-is-released/ - http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=32050 - http://svn.ruby-lang.org/repos/ruby/tags/v1_8_7_352/ChangeLog - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063062.html - http://svn.ruby-lang.org/repos/ruby/tags/v1_9_2_290/ChangeLog - http://www.openwall.com/lists/oss-security/2011/07/20
- http://svn.ruby-lang.org/repos/ruby/tags/v1_9_2_290/ChangeLog - http://www.openwall.com/lists/oss-security/2011/07/20/1 - http://redmine.ruby-lang.org/issues/4579 - http://www.openwall.com/lists/oss-security/2011/07/11/1 - http://www.securityfocus.com/bid/49015 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063071.html
CVE ID: CVE-2011-2706 State: PUBLISHED Published: 2020-01-14T20:58:34 Last Updated: 2024-08-06T23:08:23.734Z Vendors: sNews Products: sNews Problem Types: XSS Description: A Cross-Site Scripting (XSS) vulnerability exists in the reorder administrator functions in sNews 1.71. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/07/20/17 - https://seclists.org/fulldisclosure/2011/May/300
CVE ID: CVE-2011-2707 State: PUBLISHED Published: 2012-05-24T23:00:00Z Last Updated: 2024-08-06T23:08:23.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ptrace_setxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does not validate user-space pointers, which allows local users to obtain sensitive information from kernel memory locations via a crafted PTRACE_SETXTREGS request. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d0138ebe24b94065580bd2601f8bb7eb6152f56 - http://www.openwall.com/lists/oss-security/2011/07/20/18 - https://github.com/torvalds/
4b94065580bd2601f8bb7eb6152f56 - http://www.openwall.com/lists/oss-security/2011/07/20/18 - https://github.com/torvalds/linux/commit/0d0138ebe24b94065580bd2601f8bb7eb6152f56 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1
CVE ID: CVE-2011-2708 State: REJECTED Published: 2011-11-23T11:00:00 Last Updated: 2011-12-13T10:00:00 Description: No description available.
CVE ID: CVE-2011-2709 State: PUBLISHED Published: 2012-06-21T15:00:00 Last Updated: 2024-08-06T23:08:23.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPI_MECH_CONF environment variable, as demonstrated using mount.nfs. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/07/21/3 - https://bugzilla.novell.com/show_bug.cgi?id=694598 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082297.html - http://secunia.com/advisories/4507
8 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082297.html - http://secunia.com/advisories/45075 - http://www.securityfocus.com/bid/48490 - http://www.citi.umich.edu/projects/nfsv4/linux/libgssglue/libgssglue-0.4.tar.gz - http://www.openwall.com/lists/oss-security/2011/07/22/4 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082072.html - http://www.openwall.com/lists/oss-security/2011/08/12/10 - http://secunia.com/advisories/50785 - http://secunia.com/advisories/50973 - http://lwn.net/Alerts/449415/
CVE ID: CVE-2011-2710 State: PUBLISHED Published: 2011-07-27T20:00:00 Last Updated: 2024-08-06T23:08:23.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URI to includes/application.php, reachable through index.php; and, when Internet Explorer or Konqueror is used, (2) allow remote attackers to inject arbitrary web script or HTML via the searchword parameter in a search action to index.php in the com_search component. NOTE: vector 2 exists because of an incomplete fix for CVE-2011-2509.5. Additional Analyst Notes: - CVE Program Co
nent. NOTE: vector 2 exists because of an incomplete fix for CVE-2011-2509.5. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/news/357-20110701-xss-vulnerability.html - http://yehg.net/lab/pr0js/advisories/joomla/core/%5Bjoomla_1.7.0-rc%5D_cross_site_scripting%28XSS%29 - http://www.openwall.com/lists/oss-security/2011/11/21/27 - http://www.openwall.com/lists/oss-security/2011/07/22/5 - http://www.openwall.com/lists/oss-security/2011/07/22/1 - http://www.openwall.com/lists/oss-security/2011/10/16/1
CVE ID: CVE-2011-2711 State: PUBLISHED Published: 2011-08-03T00:00:00 Last Updated: 2024-08-06T23:08:23.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the print_fileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the filename associated with the rename hint. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/07/24/4 - https://bugzilla.redhat.com/show_bug.cgi?id=725042 - http://www.securityfocus.com/bid/48866 - http://www.openwall.com/lists/oss-security/2011/07/24/3 - http://www.openwall.c
http://www.securityfocus.com/bid/48866 - http://www.openwall.com/lists/oss-security/2011/07/24/3 - http://www.openwall.com/lists/oss-security/2011/07/22/6 - http://hjemli.net/git/cgit/commit/?h=stable&id=bebe89d7c11a92bf206bf6e528c51ffa8ecbc0d5 - https://hermes.opensuse.org/messages/10998459 - http://www.osvdb.org/74050 - http://www.openwall.com/lists/oss-security/2011/07/22/2 - http://secunia.com/advisories/45358 - http://www.openwall.com/lists/oss-security/2011/07/22/7 - http://secunia.com/advisories/45541 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68754 - http://hjemli.net/pipermail/cgit/2011-July/000276.html
CVE ID: CVE-2011-2712 State: PUBLISHED Published: 2011-08-29T15:00:00 Last Updated: 2024-08-06T23:08:23.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.18, when setAutomaticMultiWindowSupport is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45727 - http://www.securitytracker.com/id?1025976 - http://securityreason.com/securityalert/8357 - http://www.securityfocus.com/bid/49290 - http://wicket.apache.org/2011/08/23/cve-2011-2712.html - https://exchange.xforc
http://www.securityfocus.com/bid/49290 - http://wicket.apache.org/2011/08/23/cve-2011-2712.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69394 - http://www.securityfocus.com/archive/1/519398/100/0/threaded
CVE ID: CVE-2011-2713 State: PUBLISHED Published: 2011-10-21T18:00:00 Last Updated: 2024-08-06T23:08:23.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068160.html - http://lists.opensuse.org/opensuse-updates/2011-10/msg00019.html - http://www.securityfocus.com/bid/49969 - http://secunia.com/advisories/60799 - http://www.gento
/2011-10/msg00019.html - http://www.securityfocus.com/bid/49969 - http://secunia.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://security.gentoo.org/glsa/glsa-201209-05.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2011:172 - http://www.libreoffice.org/advisories/CVE-2011-2713/ - http://www.securitytracker.com/id?1026145 - http://secunia.com/advisories/50692 - http://osvdb.org/76178 - https://bugzilla.redhat.com/show_bug.cgi?id=725668 - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068198.html - http://www.debian.org/security/2011/dsa-2315
CVE ID: CVE-2011-2714 State: PUBLISHED Published: 2020-01-14T21:17:41 Last Updated: 2024-08-06T23:08:23.748Z Vendors: Drupal Products: Data-module Problem Types: XSS Description: A Cross-Site Scripting vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table descriptions, field names, or labels before display. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/07/26/8 - https://www.drupal.org/node/1056470 - https://seclists.org/fulldisclosure/2011/Feb/219
CVE ID: CVE-2011-2715 State: PUBLISHED Published: 2020-01-14T21:22:54 Last Updated: 2024-08-06T23:08:23.801Z Vendors: Drupal Products: Data-module Problem Types: SQL injection Description: An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/07/26/8 - https://www.drupal.org/node/1056470
CVE ID: CVE-2011-2716 State: PUBLISHED Published: 2012-07-03T16:00:00 Last Updated: 2024-08-06T23:08:23.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.avaya.com/css/P8/documents/100158840 - http://www.busybox.net/news.html - http://secunia.com/advisories/45363 - https://support.t-mobile.com/docs/DOC-21994 - https://bugs.busybox.net/show_bug.cgi?id=3979 - http://rhn.re
ries/45363 - https://support.t-mobile.com/docs/DOC-21994 - https://bugs.busybox.net/show_bug.cgi?id=3979 - http://rhn.redhat.com/errata/RHSA-2012-0810.html - http://www.securityfocus.com/bid/48879 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:129 - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html - http://seclists.org/fulldisclosure/2020/Aug/20
CVE ID: CVE-2011-2717 State: PUBLISHED Published: 2019-11-27T20:58:00 Last Updated: 2024-08-06T23:08:23.737Z Vendors: dhcpv6 project Products: dhcpv6 Problem Types: insufficient checking of DHCP options Description: The DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2717 - https://access.redhat.com/security/cve/cve-2011-2717 - https://www.openwall.com/lists/oss-security/2011/07/26/9 - https://vigilance.fr/vulnerability/dhcp6c-s
e/cve-2011-2717 - https://www.openwall.com/lists/oss-security/2011/07/26/9 - https://vigilance.fr/vulnerability/dhcp6c-shell-command-injection-10869
CVE ID: CVE-2011-2718 State: PUBLISHED Published: 2011-08-01T19:00:00 Last Updated: 2024-08-06T23:08:23.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) libraries/schema/User_Schema.class.php and (2) schema_export.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45515 - http://secunia.com/advisories/45365 - http://osvdb.org/74111 - http://www.securityfocus.com
cunia.com/advisories/45515 - http://secunia.com/advisories/45365 - http://osvdb.org/74111 - http://www.securityfocus.com/bid/48874 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=3ae58f0cd6b89ad4767920f9b214c38d3f6d4393 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:124 - http://www.openwall.com/lists/oss-security/2011/07/26/10 - https://bugzilla.redhat.com/show_bug.cgi?id=725383 - http://www.phpmyadmin.net/home_page/security/PMASA-2011-11.php - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/68768 - http://lists.fedoraproject.org/pipermail/pac
/063410.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/68768 - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418.html - http://www.openwall.com/lists/oss-security/2011/07/25/4
CVE ID: CVE-2011-2719 State: PUBLISHED Published: 2011-08-01T19:00:00 Last Updated: 2024-08-06T23:08:23.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain swekey.auth.lib.php local variables via a crafted query string, a related issue to CVE-2011-2505. Additional Analyst Notes: - CVE Program Container: References: - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commi
Program Container: References: - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=e7bb42c002885c2aca7aba4d431b8c63ae4de9b7 - http://www.securityfocus.com/archive/1/518967/100/0/threaded - http://seclists.org/fulldisclosure/2011/Jul/300 - http://www.securityfocus.com/archive/1/519155/100/0/threaded - http://secunia.com/advisories/45515 - https://bugzilla.redhat.com/show_bug.cgi?id=725384 - http://secunia.com/advisories/45365 - http://www.securityfocus.com/bid/48874 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:124 - http://www.openwall.com/lists/oss-security/2011/07/26/10 - http://osvdb.org/74112 - http://phpmyadmin.git.sourceforge.n
http://www.openwall.com/lists/oss-security/2011/07/26/10 - http://osvdb.org/74112 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=571cdc6ff4bf375871b594f4e06f8ad3159d1754 - http://www.phpmyadmin.net/home_page/security/PMASA-2011-12.php - http://www.debian.org/security/2011/dsa-2286 - http://securityreason.com/securityalert/8322 - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418.html - http://secunia.com/advisories/45315 - http://www.openwall.com/lists/oss-security/2011/07/25/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6876
15 - http://www.openwall.com/lists/oss-security/2011/07/25/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68769 - http://www.xxor.se/advisories/phpMyAdmin_3.x_Conditional_Session_Manipulation.txt
CVE ID: CVE-2011-2720 State: PUBLISHED Published: 2011-08-05T21:00:00 Last Updated: 2024-08-06T23:08:23.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://forge.indepnet.net/issues/3017 - https://bugzilla.redhat.com/show_bug.cgi?id=726185 - https://forge.indepnet.net/projects/glpi/repository/revisions/14956 - http://secunia.com/advisories/45542 - https://forge.indepnet.net/projects/glpi/repository/revisions/1