Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1020 State: PUBLISHED Published: 2011-02-28T15:00:00 Last Updated: 2024-08-06T22:14:27.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65693 - http://securityreason.com/securityalert/8107 - http://secunia.com/advisories
xforce.ibmcloud.com/vulnerabilities/65693 - http://securityreason.com/securityalert/8107 - http://secunia.com/advisories/43496 - http://openwall.com/lists/oss-security/2011/02/24/18 - https://lkml.org/lkml/2011/2/7/466 - http://openwall.com/lists/oss-security/2011/02/25/2 - https://lkml.org/lkml/2011/2/7/414 - https://lkml.org/lkml/2011/2/10/21 - http://www.securityfocus.com/bid/46567 - https://lkml.org/lkml/2011/2/7/368 - https://lkml.org/lkml/2011/2/9/417 - https://lkml.org/lkml/2011/2/7/474 - https://lkml.org/lkml/2011/2/7/404 - http://seclists.org/fulldisclosure/2011/Jan/421 - http://www.halfdog.net/Security/2011/SuidBinariesAndProcInterface/
CVE ID: CVE-2011-1021 State: PUBLISHED Published: 2012-06-21T23:00:00Z Last Updated: 2024-08-06T22:14:27.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by leveraging root privileges to write to the /sys/kernel/debug/acpi/custom_method file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4347. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/02/25/5 - https://github.com/torvalds/linux/commit/526b4af47f44148c9d665e57723ed9f86634c6e3 - http://git.kernel.org/?p=linux/kernel/
tps://github.com/torvalds/linux/commit/526b4af47f44148c9d665e57723ed9f86634c6e3 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=526b4af47f44148c9d665e57723ed9f86634c6e3 - http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0 - https://bugzilla.redhat.com/show_bug.cgi?id=680841
CVE ID: CVE-2011-1022 State: PUBLISHED Published: 2011-03-22T17:00:00 Last Updated: 2024-08-06T22:14:27.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/02/25/11 - http://secunia.com/advisories/43758 - http://secunia.com/advisories/44093 - http://bugs.debian.org/c
ity/2011/02/25/11 - http://secunia.com/advisories/43758 - http://secunia.com/advisories/44093 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615987 - http://www.securitytracker.com/id?1025157 - http://www.securityfocus.com/bid/46578 - http://sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download - http://secunia.com/advisories/43891 - http://www.debian.org/security/2011/dsa-2193 - http://lists.opensuse.org/opensuse-updates/2011-04/msg00027.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056683.html - http://www.vupen.com/english/advisories/2011/0679 - http://www.vupen.com/english/advisories/2011/0774 - http://sourceforge.net/m
ww.vupen.com/english/advisories/2011/0679 - http://www.vupen.com/english/advisories/2011/0774 - http://sourceforge.net/mailarchive/message.php?msg_id=26598749 - http://openwall.com/lists/oss-security/2011/02/25/14 - https://bugzilla.redhat.com/show_bug.cgi?id=680409 - http://www.redhat.com/support/errata/RHSA-2011-0320.html - http://openwall.com/lists/oss-security/2011/02/25/12 - http://secunia.com/advisories/43611 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056734.html - http://openwall.com/lists/oss-security/2011/02/25/6 - http://openwall.com/lists/oss-security/2011/02/25/9 - http://sourceforge.net/mailarchive/message.php?msg_id=27102603
CVE ID: CVE-2011-1023 State: PUBLISHED Published: 2012-06-21T23:00:00Z Last Updated: 2024-08-06T22:14:27.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Reliable Datagram Sockets (RDS) subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates, which allows local users to cause a denial of service (BUG_ON and system crash) via vectors involving (1) a loopback (aka loop) transmit operation or (2) an InfiniBand (aka ib) transmit operation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/6094628bfd94323fc1cea05ec2c6affd98c18f7f - http://www.openwall.com/lists/oss-security/2011/03/03/2
orvalds/linux/commit/6094628bfd94323fc1cea05ec2c6affd98c18f7f - http://www.openwall.com/lists/oss-security/2011/03/03/2 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6094628bfd94323fc1cea05ec2c6affd98c18f7f - https://bugzilla.redhat.com/show_bug.cgi?id=680345
CVE ID: CVE-2011-1024 State: PUBLISHED Published: 2011-03-20T01:00:00 Last Updated: 2024-08-06T22:14:27.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201406-36.xml - http://www.redhat.com/support/errata/RHSA-2011-0346.html - http://securitytracker.com/id?1025188 - htt
a-201406-36.xml - http://www.redhat.com/support/errata/RHSA-2011-0346.html - http://securitytracker.com/id?1025188 - http://secunia.com/advisories/43708 - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6607 - http://www.openldap.org/lists/openldap-technical/201004/msg00247.html - http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-ldap/chain.c.diff?r1=1.76&r2=1.77&hideattic=1&sortbydate=0 - http://www.openldap.org/lists/openldap-announce/201102/msg00000.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:056 - https://bugzilla.novell.com/show_bug.cgi?id=674985 - http://openwall.com/lists/oss-security/2011/02/25/13 - http://www.redhat.com/support/errata/RHSA-2
w_bug.cgi?id=674985 - http://openwall.com/lists/oss-security/2011/02/25/13 - http://www.redhat.com/support/errata/RHSA-2011-0347.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:055 - http://secunia.com/advisories/43718 - https://bugzilla.redhat.com/show_bug.cgi?id=680466 - http://openwall.com/lists/oss-security/2011/02/24/12 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735 - http://www.ubuntu.com/usn/USN-1100-1 - http://www.vupen.com/english/advisories/2011/0665 - http://secunia.com/advisories/43331
CVE ID: CVE-2011-1025 State: PUBLISHED Published: 2011-03-20T01:00:00 Last Updated: 2024-08-06T22:14:27.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201406-36.xml - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6661 - http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-ndb/bind.cpp.diff?r1=1.5&r2=1.8 - https://bugzilla.redhat.com/show_bug.
openldap.org/devel/cvsweb.cgi/servers/slapd/back-ndb/bind.cpp.diff?r1=1.5&r2=1.8 - https://bugzilla.redhat.com/show_bug.cgi?id=680472 - http://securitytracker.com/id?1025190 - http://www.openldap.org/lists/openldap-announce/201102/msg00000.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:056 - http://www.redhat.com/support/errata/RHSA-2011-0347.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://openwall.com/lists/oss-security/2011/02/25/13 - http://secunia.com/advisories/43718 - http://openwall.com/lists/oss-security/2011/02/24/12 - http://www.ubuntu.com/usn/USN-1100-1 - http://www.vupen.com/english/advisories/2011/0665 - http://secunia.com/advi
/12 - http://www.ubuntu.com/usn/USN-1100-1 - http://www.vupen.com/english/advisories/2011/0665 - http://secunia.com/advisories/43331
CVE ID: CVE-2011-1026 State: PUBLISHED Published: 2011-06-02T20:00:00 Last Updated: 2024-08-06T22:14:27.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8266 - http://www.securityfocus.com/archive/1/518168/100/0/threaded - http://secunia.com/advisories/44693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67671 - http://www.securityfocus.com/bid/48015 - http://archiva.apache.org/
exchange.xforce.ibmcloud.com/vulnerabilities/67671 - http://www.securityfocus.com/bid/48015 - http://archiva.apache.org/security.html - http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0532.html - http://archiva.apache.org/docs/1.3.5/release-notes.html
CVE ID: CVE-2011-1027 State: PUBLISHED Published: 2011-03-20T01:00:00 Last Updated: 2024-08-06T22:14:27.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055896.html - http://www.osvdb.org/71005 - http://lists.fedoraproject.org/pipermail/package-announce/2011-Mar
2011-March/055896.html - http://www.osvdb.org/71005 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055966.html - http://www.securityfocus.com/bid/46756 - http://www.vupen.com/english/advisories/2011/0667 - http://openwall.com/lists/oss-security/2011/03/07/3 - http://secunia.com/advisories/43788 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055898.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65919 - https://bugzilla.redhat.com/show_bug.cgi?id=680905 - http://secunia.com/advisories/43633 - http://article.gmane.org/gmane.comp.version-control.git/168493 - http://hjemli.net/git/cgit/commit/?h=stable&id=fc384b16fb9787380746000d3cea2d5
g/gmane.comp.version-control.git/168493 - http://hjemli.net/git/cgit/commit/?h=stable&id=fc384b16fb9787380746000d3cea2d53fccc548e
CVE ID: CVE-2011-1028 State: PUBLISHED Published: 2019-11-20T14:45:10 Last Updated: 2024-08-06T22:14:27.221Z Vendors: smarty3 Products: smarty3 Problem Types: UNKNOWN_TYPE Description: The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-1028 - https://access.redhat.com/security/cve/cve-2011-1028 - https://seclists.org/oss-sec/2011/q1/313
CVE ID: CVE-2011-1029 State: PUBLISHED Published: 2011-02-14T21:00:00 Last Updated: 2024-08-06T22:14:27.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 2.0.0.x allows remote authenticated users to inject arbitrary web script or HTML via the name of a shared report. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1PM22477 - http://www.securityfocus.com/bid/46179 - http://www.vupen.com/english/advisories/2011/0297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65170 - http://secunia.com/advisories/43223
CVE ID: CVE-2011-1030 State: PUBLISHED Published: 2011-02-14T21:00:00Z Last Updated: 2024-09-17T01:21:06.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Wikis component in IBM Lotus Connections 3.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Confirm New Page scene." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025054 - http://secunia.com/advisories/43134 - http://www.ibm.com/support/docview.wss?uid=swg1LO57850 - http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1LO57850
CVE ID: CVE-2011-1031 State: PUBLISHED Published: 2011-02-14T21:00:00Z Last Updated: 2024-09-16T20:31:22.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: The feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack on a /tmp/feh_ temporary file, a different vulnerability than CVE-2011-0702. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/derf/feh/issues/#issue/32 - https://bugzilla.redhat.com/show_bug.cgi?id=676389 - https://derf.homelinux.org/git/feh/commit/?id=29ab0855f044ef2fe9c295b72abefcb37f0861a5 - http://secunia.com/advisories/43221 - https://derf.homelinu
it/feh/commit/?id=29ab0855f044ef2fe9c295b72abefcb37f0861a5 - http://secunia.com/advisories/43221 - https://derf.homelinux.org/git/feh/commit/?id=23421a86cc826dd30f3dc4f62057fafb04b3ac40
CVE ID: CVE-2011-1032 State: PUBLISHED Published: 2011-02-14T23:00:00 Last Updated: 2024-08-06T22:14:27.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does not properly restrict access to the internal login module, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21462435 - http://osvdb.org/70931 - http://www.vupen.com/english/advisories/2011/0382 - http://secunia.com/advisories/43298 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK54565
CVE ID: CVE-2011-1033 State: PUBLISHED Published: 2011-02-14T23:00:00 Last Updated: 2024-08-06T22:14:27.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via crafted arguments in the USELASTCOMMITTED session environment option in a SQL SET ENVIRONMENT statement. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0309 - http://zerodayinitiative.com/advisories/ZDI-11-050/ - http://www.securityfocus.com/bid/46230 - http://securityreason.com/securityalert/8078 - http://dvlabs.tippingpoint.com/bl
ttp://www.securityfocus.com/bid/46230 - http://securityreason.com/securityalert/8078 - http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-ibm - http://secunia.com/advisories/43212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65209 - http://www.securityfocus.com/archive/1/516250/100/0/threaded
CVE ID: CVE-2011-1034 State: PUBLISHED Published: 2011-02-16T01:00:00Z Last Updated: 2024-09-16T17:43:50.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the UI in IBM Rational Build Forge 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter to the fullcontrol program. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43180 - http://www.vupen.com/english/advisories/2011/0276 - http://www.securityfocus.com/bid/46125 - http://www.ibm.com/support/docview.wss?uid=swg1PM05187 - http://ww
/2011/0276 - http://www.securityfocus.com/bid/46125 - http://www.ibm.com/support/docview.wss?uid=swg1PM05187 - http://www.osvdb.org/70763 - http://securitytracker.com/id?1025019
CVE ID: CVE-2011-1035 State: PUBLISHED Published: 2011-02-18T23:00:00 Last Updated: 2024-08-06T22:14:27.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://forum.pivotx.net/viewtopic.php?f=2&t=1961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65539 - http://forum.pivotx.net/viewtopic.php?p=10639#p10639 - http://www.vupen.com/english/advisories/2011/0445 - http://secunia.com/advisories/43417 - http://osvdb.org/70935 - http://www.securityfocus.com/bid/46463 - http://www
445 - http://secunia.com/advisories/43417 - http://osvdb.org/70935 - http://www.securityfocus.com/bid/46463 - http://www.kb.cert.org/vuls/id/175068 - http://forum.pivotx.net/viewtopic.php?f=2&t=1967 - http://blog.pivotx.net/2011-02-16/pivotx-225-released
CVE ID: CVE-2011-1036 State: PUBLISHED Published: 2011-02-25T17:00:00 Last Updated: 2024-08-06T22:14:27.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System (HIPS) 8.1, as used in CA Internet Security Suite (ISS) 2010, allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via vectors involving the SetXml and Save methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/ad
etXml and Save methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0496 - http://secunia.com/advisories/43490 - http://www.zerodayinitiative.com/advisories/ZDI-11-093 - http://secunia.com/advisories/43377 - http://www.securityfocus.com/bid/46539 - http://www.securityfocus.com/archive/1/516649/100/0/threaded - http://securityreason.com/securityalert/8106 - http://www.securityfocus.com/archive/1/516687/100/0/threaded - http://www.securitytracker.com/id?1025120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65632 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B53A608DF-BFDB-4AB3-A98F-E4BB6BC7A2F4
ties/65632 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B53A608DF-BFDB-4AB3-A98F-E4BB6BC7A2F4%7D
CVE ID: CVE-2011-1038 State: PUBLISHED Published: 2011-02-22T18:00:00 Last Updated: 2024-08-06T22:14:27.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the messageString parameter in a WebMessage action or (2) the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65555 - http://securityreason.com/securityalert/8100 - http://www.securityfocus.com/bid/46471 - http://secunia.com/advisories/43430 - http://www.securityfocus.com/
lert/8100 - http://www.securityfocus.com/bid/46471 - http://secunia.com/advisories/43430 - http://www.securityfocus.com/archive/1/516563/100/0/threaded
CVE ID: CVE-2011-1042 State: PUBLISHED Published: 2011-02-18T16:00:00 Last Updated: 2024-08-06T22:14:27.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in flimflamd in flimflam in Google Chrome OS before 0.9.130.14 Beta allows user-assisted remote attackers to cause a denial of service (daemon crash) by providing the name of a hidden WiFi network that does not respond to connection attempts. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium-os/issues/detail?id=8871 - http://codereview.chromium.org/5255012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65556 - http://googlechromereleases.blog
iew.chromium.org/5255012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65556 - http://googlechromereleases.blogspot.com/2011/01/chrome-os-beta-channel-update.html
CVE ID: CVE-2011-1044 State: PUBLISHED Published: 2011-02-18T19:00:00 Last Updated: 2024-08-06T22:14:27.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially filled, a different vulnerability than CVE-2010-4649. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2011-0927.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3
- http://rhn.redhat.com/errata/RHSA-2011-0927.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7182afea8d1afd432a17c18162cc3fd441d0da93 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - https://bugzilla.redhat.com/show_bug.cgi?id=667916 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65563 - http://www.securityfocus.com/bid/46488
CVE ID: CVE-2011-1045 State: PUBLISHED Published: 2011-02-21T17:00:00 Last Updated: 2024-08-06T22:14:27.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Rendition Engine (aka P8RE) 4.0.1 through 4.5.1 in IBM FileNet P8 Content Manager (CM) allows remote attackers to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65417 - http://secunia.com/advisories/43321 - http://www.securityfocus.com/bid/46424 - http://www-01.ibm.com/support/docview.wss?uid=swg21462440 - http://www.vupen.com/english/advisories/2011/0406
CVE ID: CVE-2011-1046 State: PUBLISHED Published: 2011-02-21T17:00:00 Last Updated: 2024-08-06T22:14:27.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged property of an object via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65448 - http://www-01.ibm.com/support/docview.wss?uid=swg21462438 -
https://exchange.xforce.ibmcloud.com/vulnerabilities/65448 - http://www-01.ibm.com/support/docview.wss?uid=swg21462438 - http://www.securityfocus.com/bid/46432 - http://www.vupen.com/english/advisories/2011/0423 - http://secunia.com/advisories/43347