Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-2569 State: PUBLISHED Published: 2011-10-27T21:00:00Z Last Updated: 2024-09-17T02:51:44.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Nexus OS (aka NX-OS) 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line options, which allows local users to gain privileges via unspecified vectors, aka Bug IDs CSCtf40008, CSCtg18363, CSCtr44645, CSCts10195, and CSCts10188. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=24458
CVE ID: CVE-2011-2577 State: PUBLISHED Published: 2011-08-31T23:00:00 Last Updated: 2024-08-06T23:08:23.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service (crash) via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq46500. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025994 - http://securityreason.com/securityalert/8389 - http://securityreason.com/securityalert/8387 - http://www.securityfocus.c
http://securityreason.com/securityalert/8389 - http://securityreason.com/securityalert/8387 - http://www.securityfocus.com/bid/49392 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69513 - http://www.securityfocus.com/archive/1/519698/100/0/threaded - http://www.exploit-db.com/exploits/17871 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b91395.shtml
CVE ID: CVE-2011-2578 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T23:08:23.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption) via malformed SIP packets on a NAT interface, aka Bug ID CSCts12366. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75338 - http://www.securitytracker.com/id?1027005 - http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-4MCAVS.html
CVE ID: CVE-2011-2581 State: PUBLISHED Published: 2011-09-14T15:00:00 Last Updated: 2024-08-06T23:08:23.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, and NX-OS before 5.0(3)U1(2a) on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending packets, aka Bug IDs CSCto09813 and CSCtr61490. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026019 - http://www.cisco.com/en/US
yst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026019 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9250c.shtml - http://secunia.com/advisories/45883
CVE ID: CVE-2011-2583 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T23:08:23.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Contact Center Express (aka CCX) 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case, aka Bug ID CSCth33834. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75339 - http://www.cisco.com/en/US/docs/voice_ip_comm/cust_contact/contact_center/crs/express_8_5/release/guide/uccx851rn.pdf - http://www.securitytracker.com/id?1027009
CVE ID: CVE-2011-2584 State: PUBLISHED Published: 2011-10-20T00:00:00 Last Updated: 2024-08-06T23:08:23.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1) allows remote attackers to access the (1) Encoders and Pull Configurations, (2) Push Configurations, (3) Video Encoding Formats, and (4) Transcoding administration pages, and cause a denial of service (live event outage) or obtain potentially sensitive information, via unspecified vectors, aka Bug ID CSCto73758. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70757 - http://www.securityfocus.com/b
ram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70757 - http://www.securityfocus.com/bid/50282 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111019-sns
CVE ID: CVE-2011-2585 State: PUBLISHED Published: 2011-10-20T00:00:00 Last Updated: 2024-08-06T23:08:23.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1) allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50285 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111019-sns
CVE ID: CVE-2011-2586 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T23:08:23.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assisted remote attackers to cause a denial of service (device crash) via a malformed HTTP response to a request for service installation, aka Bug ID CSCts12249. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=24436 - http://www.securitytracker.com/id?1027005
CVE ID: CVE-2011-2587 State: PUBLISHED Published: 2011-07-27T01:29:00 Last Updated: 2024-08-06T23:08:23.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media player 1.1.x before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real Media file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14851 - http://secunia.com/advisories/45066 - http://www.securityfocus.com/bid/48664 - http://git.v
g.mitre.oval%3Adef%3A14851 - http://secunia.com/advisories/45066 - http://www.securityfocus.com/bid/48664 - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=1bce40644cddee93b4b1877a94a6ce345f32852c - https://exchange.xforce.ibmcloud.com/vulnerabilities/68531 - http://www.videolan.org/security/sa1105.html
CVE ID: CVE-2011-2588 State: PUBLISHED Published: 2011-07-27T01:29:00 Last Updated: 2024-08-06T23:08:23.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted AVI media file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45066 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14858 - http://www.videolan.org/security/sa1106.html - http://www.se
ory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14858 - http://www.videolan.org/security/sa1106.html - http://www.securityfocus.com/bid/48664 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68532 - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=9c14964bd11482d5c1d6c0e223440f9f1e5b1831
CVE ID: CVE-2011-2589 State: PUBLISHED Published: 2011-08-09T22:00:00 Last Updated: 2024-08-06T23:08:23.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SendLogAction method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 might allow remote attackers to execute arbitrary code via a long argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/68974 - http://secunia.com/advisories/44885 - http://www.osvdb.org/74216 - http://www.securityfocus.com/bid/48975 - http://secunia.com/secunia_research/2011-60/
CVE ID: CVE-2011-2590 State: PUBLISHED Published: 2011-08-09T22:00:00 Last Updated: 2024-08-06T23:08:22.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2011-59/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/68975 - http://secunia.com/advisories/44885 - http://www.osvdb.org/74217 - http://www.securityfocus.com/bid/48975
CVE ID: CVE-2011-2591 State: PUBLISHED Published: 2011-08-05T21:00:00 Last Updated: 2024-08-06T23:08:23.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Provideo ActiveX controls allow remote attackers to execute arbitrary code via crafted input fields, as demonstrated by (1) a long strIp argument to the voice method in 2way.dll in the alarm 1.0.3.1 ActiveX control, (2) a network response to AXPlayer.ocx in the GMAXPlayer 2.0.8.2 ActiveX control, the (3) UserName or (4) Password parameter to AXPlayer.ocx in the GMAXPlayer 2.0.8.2 ActiveX control, (5) a long Id parameter to the GetString method in PAxPlayer.ocx in the PAxPlayer 3.0.0.9 ActiveX c
8.2 ActiveX control, (5) a long Id parameter to the GetString method in PAxPlayer.ocx in the PAxPlayer 3.0.0.9 ActiveX control, or (6) a long strAdr parameter to the ConnectIPCam method in PAxPlayer.ocx in the PAxPlayer 3.0.0.9 ActiveX control. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2011-56/ - http://osvdb.org/74314 - http://secunia.com/secunia_research/2011-57/ - http://osvdb.org/74313 - http://www.securityfocus.com/bid/48977 - http://osvdb.org/74311 - http://secunia.com/secunia_research/2011-58/ - http://osvdb.org/74310 - http://osvdb.org/74312
CVE ID: CVE-2011-2592 State: PUBLISHED Published: 2014-06-18T14:00:00 Last Updated: 2024-08-06T23:08:22.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a long CSEC HTTP response header. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-08/0009.html - http://osvdb.org/show/osvdb/84433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77316 - http://secu
0009.html - http://osvdb.org/show/osvdb/84433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77316 - http://secunia.com/secunia_research/2012-27 - http://support.citrix.com/article/CTX134303
CVE ID: CVE-2011-2593 State: PUBLISHED Published: 2014-08-12T20:00:00 Last Updated: 2024-08-06T23:08:23.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a crafted Content-Length HTTP header, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45299 - http://secunia.com/secunia_research/2012-26 - http://support.citrix.com/article/CTX134303 - https:
om/advisories/45299 - http://secunia.com/secunia_research/2012-26 - http://support.citrix.com/article/CTX134303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77317
CVE ID: CVE-2011-2594 State: PUBLISHED Published: 2011-09-02T16:00:00 Last Updated: 2024-08-06T23:08:23.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist (.KPL) file with a long Title field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69451 - http://www.securityfocus.com/bid/49342
CVE ID: CVE-2011-2595 State: PUBLISHED Published: 2011-09-14T17:00:00 Last Updated: 2024-08-06T23:08:23.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a (1) String or (2) Int tag in a FotoSlate Project (aka PLP) file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/75425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69723 - http://secunia.com/advisories/44722 - http://www.securityfocus.com/bid/49558
CVE ID: CVE-2011-2597 State: PUBLISHED Published: 2011-07-07T19:00:00 Last Updated: 2024-08-06T23:08:23.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of service (infinite loop) via malformed packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2011-10.html - http://securitytracker.com/id?1025738 - http://secunia.com/advisories/45574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68335 - http://secunia.com/advisories/48947 - http://lists.fedoraproject.org/pipermail/pack
ibmcloud.com/vulnerabilities/68335 - http://secunia.com/advisories/48947 - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063586.html - http://www.securityfocus.com/bid/48506 - http://www.wireshark.org/security/wnpa-sec-2011-11.html - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00022.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063591.html - http://www.wireshark.org/security/wnpa-sec-2011-09.html - http://secunia.com/advisories/45086 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14794 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00021.html - http://www.ma
rg.mitre.oval%3Adef%3A14794 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00021.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:118
CVE ID: CVE-2011-2598 State: PUBLISHED Published: 2011-06-30T15:26:00 Last Updated: 2024-08-06T23:08:23.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtain screenshots of the windows of arbitrary desktop applications via vectors involving an SVG filter, an IFRAME element, and uninitialized data in graphics memory. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mozilla.com/security/2011/06/16/webgl-graphics-memory-stealing-issue/ - http://www.securityfocus.com/bid/48319 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14207 - http:
cus.com/bid/48319 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14207 - http://www.contextis.com/resources/blog/webgl2/ - http://www.theregister.co.uk/2011/06/16/webgl_security_threats_redux/
CVE ID: CVE-2011-2599 State: PUBLISHED Published: 2011-06-30T15:26:00 Last Updated: 2024-08-06T23:08:23.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14183 - http://www.contextis.co.uk/resources/blog/webgl/ - http://lists.whatwg.org/pipermail/whatwg-whatwg.org/2011-March/030882.html
CVE ID: CVE-2011-2600 State: PUBLISHED Published: 2011-06-30T15:26:00Z Last Updated: 2024-09-16T19:09:30.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GPU support functionality in Windows XP does not properly restrict rendering time, which allows remote attackers to cause a denial of service (system crash) via vectors involving WebGL and (1) shader programs or (2) complex 3D geometry, as demonstrated by using Mozilla Firefox or Google Chrome to visit the lots-of-polys-example.html test page in the Khronos WebGL SDK. Additional Analyst Notes: - CVE Program Container: References: - http://www.contextis.com/resources/blog/webgl/
CVE ID: CVE-2011-2601 State: PUBLISHED Published: 2011-06-30T15:26:00Z Last Updated: 2024-09-16T18:09:10.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GPU support functionality in Mac OS X does not properly restrict rendering time, which allows remote attackers to cause a denial of service (desktop hang) via vectors involving WebGL and (1) shader programs or (2) complex 3D geometry, as demonstrated by using Mozilla Firefox or Google Chrome to visit the lots-of-polys-example.html test page in the Khronos WebGL SDK. Additional Analyst Notes: - CVE Program Container: References: - http://www.contextis.com/resources/blog/webgl/
CVE ID: CVE-2011-2602 State: PUBLISHED Published: 2011-06-30T15:26:00Z Last Updated: 2024-09-17T02:53:06.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA Geforce 310 driver 6.14.12.7061 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48319 - http://www.contextis.com/resources/blog/webgl2/ - http://www.contextis.com/resources/blog/webgl/
CVE ID: CVE-2011-2603 State: PUBLISHED Published: 2011-06-30T15:26:00Z Last Updated: 2024-09-16T20:43:30.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of service (desktop hang) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48319 - http://www.contextis.com/resources/blog/webgl2/ - http://www.contextis.com/resources/blog/webgl/
CVE ID: CVE-2011-2604 State: PUBLISHED Published: 2011-06-30T15:26:00Z Last Updated: 2024-09-16T16:33:28.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intel G41 driver 6.14.10.5355 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48319 - http://www.contextis.com/resources/blog/webgl2/ - http://www.contextis.com/resources/blog/webgl/
CVE ID: CVE-2011-2605 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:08:23.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing a \n (newline) character, which is not properly handled in a JavaScript "document.cookie =" expression, a different vulnerability than CVE-2011-2374. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mo
t vulnerability than CVE-2011-2374. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=643051 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14401 - http://www.redhat.com/support/errata/RHSA-2011-0887.html - http://www.redhat.com/support/errata/RHSA-2011-0885.html - http://www.mozilla.org/security/announce/2011/mfsa2011-19.html - http://www.redhat.com/support/errata/RHSA-2011-0888.html - http://www.redhat.com/support/errata/RHSA-2011-0886.html
CVE ID: CVE-2011-2606 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:08:23.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1PM40308 - http://www.securityfocus.com/bid/48356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68119 - http://secunia.com/advisories/44926 - http://www.osvdb.org/73198
CVE ID: CVE-2011-2607 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:08:23.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165513. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48356 - http://www.ibm.com/support/docview.wss?uid=swg1PM40311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68119 - http://secunia.com/advisories/44926 - http://www.osvdb.org/73198
CVE ID: CVE-2011-2608 State: PUBLISHED Published: 2011-07-01T10:00:00 Last Updated: 2024-08-06T23:08:23.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register command. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68269 - http://marc.info/?l=bugtraq&m=131188898632504&w=2 - http://marc.info/?l=bugtraq&
ce.ibmcloud.com/vulnerabilities/68269 - http://marc.info/?l=bugtraq&m=131188898632504&w=2 - http://marc.info/?l=bugtraq&m=131188898632504&w=2 - http://aluigi.altervista.org/adv/ovbbccb_1-adv.txt - http://www.securityfocus.com/bid/48481 - http://secunia.com/advisories/45079
CVE ID: CVE-2011-2609 State: PUBLISHED Published: 2011-07-01T10:00:00 Last Updated: 2024-08-06T23:08:23.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.50 does not properly restrict data: URIs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/68322 - http://www.securityfocus.com/bid/48500 - http://secunia.com/advisories/45060 - http://www.opera.com/docs/changelogs/windows/1150/ - http://www.opera.com/support/kb/view/995/ - http://www.osvdb.org/73485 - http://www.opera.com/docs/chan
/windows/1150/ - http://www.opera.com/support/kb/view/995/ - http://www.osvdb.org/73485 - http://www.opera.com/docs/changelogs/unix/1150/ - http://www.opera.com/docs/changelogs/mac/1150/