Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
and CVE-2011-2459. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html - http://security.gentoo.org/glsa/glsa-201204-07.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15836 - http://www.redhat.com/support/errata/RHSA-2011-1445.html - http://secunia.com/advisories/48819 - http://www.adobe.com/support/security/bulletins/apsb11-28.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
m/support/security/bulletins/apsb11-28.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14260
CVE ID: CVE-2011-2461 State: PUBLISHED Published: 2011-12-01T11:00:00 Last Updated: 2024-08-06T23:00:33.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from different domains. Additional Analyst Notes: - CVE Program Container: References: - https://threatpost.com/adobe-cve-2011-2461-remains-exploitable-four-years-after-patch/111754 - http://www.adobe.com/support/security/bulletins/apsb11-25.html - http://packetstormsecurity.com/files/131376/Magento-eCommerce-Vulnerable-Adobe-Flex-SDK.
rity/bulletins/apsb11-25.html - http://packetstormsecurity.com/files/131376/Magento-eCommerce-Vulnerable-Adobe-Flex-SDK.html - http://secunia.com/advisories/47053 - http://blog.mindedsecurity.com/2015/03/the-old-is-new-again-cve-2011-2461-is.html - http://kb2.adobe.com/cps/915/cpsid_91544.html - http://blog.nibblesec.org/2015/03/the-old-is-new-again-cve-2011-2461-is.html
CVE ID: CVE-2011-2462 State: PUBLISHED Published: 2011-12-07T19:00:00.000Z Last Updated: 2025-11-21T15:56:38.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00020.html - http://www.adobe.com/support/secur
ences: - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00020.html - http://www.adobe.com/support/security/bulletins/apsb12-01.html - http://www.adobe.com/support/security/advisories/apsa11-04.html - http://www.redhat.com/support/errata/RHSA-2012-0011.html - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00019.html - http://www.adobe.com/support/security/bulletins/apsb11-30.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14562 - http://www.us-cert.gov/cas/techalerts/TA11-350A.html
CVE ID: CVE-2011-2463 State: PUBLISHED Published: 2011-12-14T11:00:00 Last Updated: 2024-08-06T23:00:33.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving the cfform tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb11-29.html - http://www.securitytracker.com/id?1026405
CVE ID: CVE-2011-2464 State: PUBLISHED Published: 2011-07-08T20:00:00 Last Updated: 2024-08-06T23:00:33.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45185 - http://www.isc.org/software/bind/advisories/cve-2011-2464 - http://osvdb.org/73605 - http://secunia.com/advisories/45410 - http://www.kb.cert.org/vuls/id/142646 - http://www.redhat.com/support/errata/RHSA-201
p://secunia.com/advisories/45410 - http://www.kb.cert.org/vuls/id/142646 - http://www.redhat.com/support/errata/RHSA-2011-0926.html - http://secunia.com/advisories/45143 - http://www.debian.org/security/2011/dsa-2272 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.securityfocus.com/archive/1/518749/100/0/threaded - http://secunia.com/advisories/45177 - https://www.ubuntu.com/usn/USN-1163-1/ - http://www.securitytracker.com/id?1025742 - http://secunia.com/advisories/45089 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.377171 - http://secunia.com/advisories/45412 - http://secunia.com/advisories/45223 - ht
rity&y=2011&m=slackware-security.377171 - http://secunia.com/advisories/45412 - http://secunia.com/advisories/45223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68375 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13997 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00006.html - http://support.apple.com/kb/HT5002 - http://secunia.com/advisories/45082 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:115 - http://blogs.oracle.com/sunsecurity/entry/cve_2011_2464_remote_denial - http://www.securityfocus.com/bid/48566 - http://marc.info/?l=bugtraq&m=131983337229394&w=2 - http://lists.fedoraproject.org/pipermail/pa
ityfocus.com/bid/48566 - http://marc.info/?l=bugtraq&m=131983337229394&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062522.html - http://marc.info/?l=bugtraq&m=131983337229394&w=2 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00004.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062846.html - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00002.html
CVE ID: CVE-2011-2465 State: PUBLISHED Published: 2011-07-08T20:00:00 Last Updated: 2024-08-06T23:00:33.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records, allows remote attackers to cause a denial of service (named daemon crash) via an unspecified query. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45185 - http://www.securityfocus.com/archive/1/518750/100/0/threaded - http://www.securitytracker.com/id?1025743 - http://www.isc.org/software/bind/advisor
m/archive/1/518750/100/0/threaded - http://www.securitytracker.com/id?1025743 - http://www.isc.org/software/bind/advisories/cve-2011-2465 - http://osvdb.org/73604 - http://www.kb.cert.org/vuls/id/137968 - http://www.securityfocus.com/bid/48565 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062522.html - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/68374
CVE ID: CVE-2011-2467 State: PUBLISHED Published: 2011-07-27T01:29:00 Last Updated: 2024-08-06T23:00:33.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45276 - http://www.ubuntu.com/usn/USN-1171-1 - http://secunia.com/advisories/45326 - http://www.likewise.com/community/index.php/forums/viewannounce/1212_6/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/68
w.likewise.com/community/index.php/forums/viewannounce/1212_6/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/68765 - https://launchpadlibrarian.net/74204969/LWSA-2011-002.txt - http://www.securityfocus.com/bid/48816 - https://bugs.launchpad.net/ubuntu/+source/likewise-open/+bug/802748
CVE ID: CVE-2011-2468 State: PUBLISHED Published: 2011-06-07T19:00:00Z Last Updated: 2024-09-17T03:43:56.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web interface in AnyMacro Mail System G4X allows remote attackers to read arbitrary files via directory traversal sequences in a request. Additional Analyst Notes: - CVE Program Container: References: - http://www.cnvd.org.cn/vulnerability/CNVD-2011-05282 - http://www.securityfocus.com/bid/48063 - http://www.kb.cert.org/vuls/id/603590 - http://secunia.com/advisories/44810
CVE ID: CVE-2011-2470 State: PUBLISHED Published: 2011-06-29T17:00:00Z Last Updated: 2024-09-16T23:05:31.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in chat/base/admin/login.php in A Really Simple Chat (ARSC) 3.3-rc2 allows remote attackers to inject arbitrary web script or HTML via the arsc_message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/02/1 - http://www.openwall.com/lists/oss-security/2011/06/02/7 - https://sourceforge.net/tracker/?func=detail&aid=3310673&group_id=32699&atid=406296
CVE ID: CVE-2011-2471 State: PUBLISHED Published: 2011-06-09T21:00:00 Last Updated: 2024-08-06T23:00:33.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) --session-dir, or (3) --xen argument, related to the daemonrc file and the do_save_setup and do_load_setup functions, a different vulnerability than CVE-2011-1760. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/05/03/1 - http://openwall.com/lists/oss-security/2011/05/10/7 - https://bugzilla.redhat.com/show_bug.cgi?id=700883 - ht
/05/03/1 - http://openwall.com/lists/oss-security/2011/05/10/7 - https://bugzilla.redhat.com/show_bug.cgi?id=700883 - http://openwall.com/lists/oss-security/2011/05/11/1 - http://secunia.com/advisories/45205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67980 - http://openwall.com/lists/oss-security/2011/05/10/6 - http://www.ubuntu.com/usn/USN-1166-1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624212 - http://www.debian.org/security/2011/dsa-2254
CVE ID: CVE-2011-2472 State: PUBLISHED Published: 2011-06-09T21:00:00 Last Updated: 2024-08-06T23:00:33.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to overwrite arbitrary files via a .. (dot dot) in the --save argument, related to the --session-dir argument, a different vulnerability than CVE-2011-1760. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/05/03/1 - http://openwall.com/lists/oss-security/2011/05/10/7 - https://bugzilla.redhat.com/show_bug.cgi?id=700883 - http://openwall.com/lists/oss-security/201
-security/2011/05/10/7 - https://bugzilla.redhat.com/show_bug.cgi?id=700883 - http://openwall.com/lists/oss-security/2011/05/11/1 - http://secunia.com/advisories/45205 - http://openwall.com/lists/oss-security/2011/05/10/6 - http://www.ubuntu.com/usn/USN-1166-1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624212 - http://www.debian.org/security/2011/dsa-2254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67979
CVE ID: CVE-2011-2473 State: PUBLISHED Published: 2011-06-09T21:00:00 Last Updated: 2024-08-06T23:00:34.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opd_pipe file, a different vulnerability than CVE-2011-1760. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/05/03/1 - http://openwall.com/lists/oss-security/2011/05/10/7 - http://openwall.com/lists/oss-security/2011/05/11/1 - http://openwall.com/lists
ll.com/lists/oss-security/2011/05/10/7 - http://openwall.com/lists/oss-security/2011/05/11/1 - http://openwall.com/lists/oss-security/2011/05/10/6 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624212 - http://www.debian.org/security/2011/dsa-2254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67978
CVE ID: CVE-2011-2474 State: PUBLISHED Published: 2011-06-09T21:00:00Z Last Updated: 2024-09-16T19:47:20.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary files via a /.\../\../\ sequence in a path. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=912
CVE ID: CVE-2011-2475 State: PUBLISHED Published: 2011-06-09T21:00:00Z Last Updated: 2024-09-17T01:36:48.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Sybase OneBridge Mobile Data Suite 5.5 and 5.6 allows remote attackers to execute arbitrary code via format string specifiers in unspecified string fields, related to authentication logging. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-11-171/ - http://www.sybase.com/detail?id=1092074
CVE ID: CVE-2011-2476 State: PUBLISHED Published: 2011-06-14T17:00:00 Last Updated: 2024-08-06T23:00:34.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/08/2 - http://www.openwall.com/lists/oss-security/2011/06/08/6 - http://forum.coppermine-gallery.net/index.php/topic%2C69495.0.html - http://sourceforge.net/news/?group_id=89658 - https://excha
orum.coppermine-gallery.net/index.php/topic%2C69495.0.html - http://sourceforge.net/news/?group_id=89658 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68058
CVE ID: CVE-2011-2477 State: PUBLISHED Published: 2011-06-14T17:00:00 Last Updated: 2024-08-06T23:00:33.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in Icinga before 1.4.1, when escape_html_tags is disabled, allow remote attackers to inject arbitrary web script or HTML via a JavaScript expression, as demonstrated by the onload attribute of a BODY element located after a check-host-alive! sequence, a different vulnerability than CVE-2011-2179. Additional Analyst Notes: - CVE Program Container: References: - https://dev.icinga.org/issues/1605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6
ram Container: References: - https://dev.icinga.org/issues/1605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68056
CVE ID: CVE-2011-2478 State: PUBLISHED Published: 2012-04-17T18:00:00 Last Updated: 2024-08-06T23:00:34.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google SketchUp before 8 does not properly handle edge geometry in SketchUp (aka .SKP) files, which allows remote attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://technet.microsoft.com/en-us/security/msvr/msvr11-006 - http://support.google.com/sketchup/bin/static.py?hl=en&page=release_notes.cs&rd=1
CVE ID: CVE-2011-2479 State: PUBLISHED Published: 2013-03-01T11:00:00Z Last Updated: 2024-08-06T23:00:34.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 2.6.39 does not properly create transparent huge pages in response to a MAP_PRIVATE mmap system call on /dev/zero, which allows local users to cause a denial of service (system crash) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=78f11a255749d09025f54d4e2df4fbcb031530e2 - http://www.openwall.com/lists/oss-security/2011/06/20/14 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/Chang
b031530e2 - http://www.openwall.com/lists/oss-security/2011/06/20/14 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - https://bugzilla.redhat.com/show_bug.cgi?id=714761 - https://github.com/torvalds/linux/commit/78f11a255749d09025f54d4e2df4fbcb031530e2
CVE ID: CVE-2011-2480 State: PUBLISHED Published: 2019-11-27T18:53:37 Last Updated: 2024-08-06T23:00:33.992Z Vendors: FreeBSD, NetBSD Products: FreeBSD, NetBSD Problem Types: info disclosure Description: Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures. A signedness error in the IEEE80211_IOC_CHANINFO ioctl allows a local unprivileged user to cause the kernel to copy large amounts of kernel memory back to the user, disclosing potentially sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2480 - https://access.redh
: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2480 - https://access.redhat.com/security/cve/cve-2011-2480 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631161 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631160 - https://www.openwall.com/lists/oss-security/2011/06/20/15
CVE ID: CVE-2011-2481 State: PUBLISHED Published: 2011-08-15T21:00:00 Last Updated: 2024-08-06T23:00:34.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 7.0.x before 7.0.17 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application. NOTE: this vulnerability exists because of a CVE-2009-0783 regression. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-7.html - http://svn.apache.org/viewvc?view=
es: - CVE Program Container: References: - http://tomcat.apache.org/security-7.html - http://svn.apache.org/viewvc?view=revision&revision=1138788 - http://securitytracker.com/id?1025924 - https://issues.apache.org/bugzilla/show_bug.cgi?id=51395 - http://secunia.com/advisories/57126 - http://svn.apache.org/viewvc?view=revision&revision=1137753 - http://www.securityfocus.com/bid/49147 - http://marc.info/?l=bugtraq&m=139344343412337&w=2
CVE ID: CVE-2011-2482 State: PUBLISHED Published: 2013-06-08T10:00:00 Last Updated: 2024-08-06T23:00:34.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Red Hat patch to the sctp_sock_migrate function in net/sctp/socket.c in the Linux kernel before 2.6.21, as used in Red Hat Enterprise Linux (RHEL) 5, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted SCTP packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=714867 - http://rhn.redhat.com/errata/RHSA-2011-1212.html - http://www.openwall.com/lists/oss-security/2011/08/30/1 - http://ftp.osuosl.org/pub/lin
com/errata/RHSA-2011-1212.html - http://www.openwall.com/lists/oss-security/2011/08/30/1 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21 - https://github.com/torvalds/linux/commit/ea2bc483ff5caada7c4aa0d5fbf87d3a6590273d - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea2bc483ff5caada7c4aa0d5fbf87d3a6590273d
CVE ID: CVE-2011-2483 State: PUBLISHED Published: 2011-08-25T14:00:00 Last Updated: 2024-08-06T23:00:34.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/crypt/ - http://www.mandriva.com/security/advisories?name=MDVSA-2011:180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69319 - http://sup
va.com/security/advisories?name=MDVSA-2011:180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69319 - http://support.apple.com/kb/HT5130 - http://php.net/security/crypt_blowfish - http://www.securityfocus.com/bid/49241 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:165 - http://www.debian.org/security/2012/dsa-2399 - http://www.debian.org/security/2011/dsa-2340 - http://www.redhat.com/support/errata/RHSA-2011-1378.html - http://www.postgresql.org/docs/8.4/static/release-8-4-9.html - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00015.html - http://www.mandriva.com/security/advi
tml - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00015.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:178 - http://www.redhat.com/support/errata/RHSA-2011-1377.html - http://www.redhat.com/support/errata/RHSA-2011-1423.html - http://www.php.net/ChangeLog-5.php#5.3.7 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.php.net/archive/2011.php#id2011-08-18-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:179 - http://freshmeat.net/projects/crypt_blowfish - http://www.ubuntu.com/usn/USN-1229-1
CVE ID: CVE-2011-2484 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T23:00:34.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48383 - http://openwall.com/lists/oss-security/2011/06/22/2 - https://bugzilla.redhat.com/show_bug.cgi?id=715436 - http://lists.openwall.net/linu
om/lists/oss-security/2011/06/22/2 - https://bugzilla.redhat.com/show_bug.cgi?id=715436 - http://lists.openwall.net/linux-kernel/2011/06/16/605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68150 - http://openwall.com/lists/oss-security/2011/06/22/1
CVE ID: CVE-2011-2485 State: PUBLISHED Published: 2012-07-03T16:00:00Z Last Updated: 2024-08-06T23:00:34.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does not properly handle certain return values, which allows remote attackers to cause a denial of service (memory consumption) via a crafted GIF image file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45656 - http://git.gnome.org/browse/gdk-pixbuf/commit/?id=f8569bb13e2aa1584dde61ca545144750f7a7c98 - http://ftp.gnome.org/pub/GNOME/sources/gdk-pixbuf/2.23/gdk-pixbuf-2.23.5.news - http:/
e2aa1584dde61ca545144750f7a7c98 - http://ftp.gnome.org/pub/GNOME/sources/gdk-pixbuf/2.23/gdk-pixbuf-2.23.5.news - http://secunia.com/advisories/49715 - http://security.gentoo.org/glsa/glsa-201206-20.xml