Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
name=MDVSA-2011:127 - http://www.mozilla.org/security/announce/2011/mfsa2011-30.html - https://bugzilla.mozilla.org/show_bug.cgi?id=648065 - http://www.debian.org/security/2011/dsa-2297 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html - http://www.debian.org/security/2011/dsa-2296 - http://www.redhat.com/support/errata/RHSA-2011-1166.html - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html - http://www.redhat.com/support/errata/RHSA-2011-1164.html - http://www.debian.org/security/2011/dsa-2295 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14163
CVE ID: CVE-2011-2379 State: PUBLISHED Published: 2011-08-09T19:00:00 Last Updated: 2024-08-06T23:00:33.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3, when Internet Explorer before 9 or Safari before 5.0.6 is used for Raw Unified mode, allows remote attackers to inject arbitrary web script or HTML via a crafted patch, related to content sniffing. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45501 - http://www.bugzilla.org/security/3.4.1
tes: - CVE Program Container: References: - http://secunia.com/advisories/45501 - http://www.bugzilla.org/security/3.4.11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=637981 - http://www.osvdb.org/74297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69033 - http://www.debian.org/security/2011/dsa-2322 - http://www.securityfocus.com/bid/49042
CVE ID: CVE-2011-2380 State: PUBLISHED Published: 2011-08-09T19:00:00 Last Updated: 2024-08-06T23:00:33.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to determine the existence of private group names via a crafted parameter during (1) bug creation or (2) bug editing. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/74298 - http://secunia.com/advisories/45501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69034 - http://www.bugzilla.org/security/3.4.11/ - htt
ries/45501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69034 - http://www.bugzilla.org/security/3.4.11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=653477 - http://www.osvdb.org/74299 - http://www.debian.org/security/2011/dsa-2322 - http://www.securityfocus.com/bid/49042
CVE ID: CVE-2011-2381 State: PUBLISHED Published: 2011-08-09T19:00:00 Last Updated: 2024-08-06T23:00:33.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to inject arbitrary e-mail headers via an attachment description in a flagmail notification. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/74300 - https://bugzilla.mozilla.org/show_bug.cgi?id=657158 - http://secunia.com/advisories/45501 - http://www.bugzilla.org/security/3.4.11/ - htt
ozilla.org/show_bug.cgi?id=657158 - http://secunia.com/advisories/45501 - http://www.bugzilla.org/security/3.4.11/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/69035 - http://www.debian.org/security/2011/dsa-2322 - http://www.securityfocus.com/bid/49042
CVE ID: CVE-2011-2382 State: PUBLISHED Published: 2011-06-03T17:00:00Z Last Updated: 2024-09-17T02:41:25.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.informationweek.com/news/security/vulnerabilities/229700031 - http://conference.hackinthebox.org/hi
rences: - http://www.informationweek.com/news/security/vulnerabilities/229700031 - http://conference.hackinthebox.org/hitbsecconf2011ams/?page_id=1388 - http://news.cnet.com/8301-1009_3-20066419-83.html - http://www.eweek.com/c/a/Security/IE-Flaw-Lets-Attackers-Steal-Cookies-Access-User-Accounts-402503/ - http://www.theregister.co.uk/2011/05/25/microsoft_internet_explorer_cookiejacking/ - http://www.youtube.com/watch?v=VsSkcnIFCxM - http://ju12.tistory.com/attachment/cfile4.uf%40151FAB4C4DDC9E0002A6FE.ppt - http://www.networkworld.com/community/node/74259 - http://www.youtube.com/watch?v=V95CX-3JpK0 - https://sites.google.com/site/tentacoloviola/cookiejacking/Cookiejacking2011_final.ppt
CVE ID: CVE-2011-2383 State: PUBLISHED Published: 2011-06-03T17:00:00 Last Updated: 2024-08-06T23:00:33.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing an http: URL that redirects to a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue, aka "Drag and Drop Information Disclosure Vulnerability." NOTE: this vulnerability exists because of an incomplete fix in the Internet Explorer 9 release. Additional Analyst No
" NOTE: this vulnerability exists because of an incomplete fix in the Internet Explorer 9 release. Additional Analyst Notes: - CVE Program Container: References: - http://www.informationweek.com/news/security/vulnerabilities/229700031 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057 - http://conference.hackinthebox.org/hitbsecconf2011ams/?page_id=1388 - http://news.cnet.com/8301-1009_3-20066419-83.html - http://www.eweek.com/c/a/Security/IE-Flaw-Lets-Attackers-Steal-Cookies-Access-User-Accounts-402503/ - http://www.theregister.co.uk/2011/05/25/microsoft_internet_explorer_cookiejacking/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
5/25/microsoft_internet_explorer_cookiejacking/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12820 - http://www.youtube.com/watch?v=VsSkcnIFCxM - http://ju12.tistory.com/attachment/cfile4.uf%40151FAB4C4DDC9E0002A6FE.ppt - http://www.networkworld.com/community/node/74259 - http://www.youtube.com/watch?v=V95CX-3JpK0 - https://sites.google.com/site/tentacoloviola/cookiejacking/Cookiejacking2011_final.ppt
CVE ID: CVE-2011-2385 State: PUBLISHED Published: 2011-07-19T20:00:00 Last Updated: 2024-08-06T23:00:33.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/73885 - http://otrs.org/advisory/OSA-2011-02-en/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/68558 - http://www.securityfocus.com/bid/486
sory/OSA-2011-02-en/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/68558 - http://www.securityfocus.com/bid/48678 - http://secunia.com/advisories/45227
CVE ID: CVE-2011-2386 State: PUBLISHED Published: 2011-06-08T10:00:00Z Last Updated: 2024-09-16T22:51:48.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site Survey before 2.1.9 allows user-assisted remote attackers to execute arbitrary code via a (1) vws and (2) vwr file with an invalid Type property, which triggers an untrusted pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.stratsec.net/Research/Advisories/VisiWave-Site-Survey-Report-Trusted-Pointer-%28SS-20 - http://secunia.com/advisories/44636 - http://www.securityfocus.com/bid/47948 - http://www.visiwave.com/blog/index
S-20 - http://secunia.com/advisories/44636 - http://www.securityfocus.com/bid/47948 - http://www.visiwave.com/blog/index.php?/archives/4-Version-2.1.9-Released.html - http://www.exploit-db.com/exploits/17317 - http://osvdb.org/72464
CVE ID: CVE-2011-2391 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T23:00:33.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (CPU consumption) via crafted ICMPv6 packets. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87222 - http://www.securitytracker.com/id/1029054 - http://support.apple.com/kb/HT6441 - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://osvdb.org/97438 - http://support.apple.com/kb/HT6442 - http://archives.neohapsis.com
nce/2013/Oct/msg00004.html - http://osvdb.org/97438 - http://support.apple.com/kb/HT6442 - http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html - http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://support.apple.com/HT204244 - https://support.apple.com/kb/HT6535 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2011-2393 State: PUBLISHED Published: 2012-02-02T17:00:00Z Last Updated: 2024-09-16T20:32:12.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD, NetBSD, and possibly other BSD-based operating systems allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, a similar vulnerability to CVE-2010-4670. Additional Analyst Notes: - CVE Program Container: References: - http://www.mh-sec.de/downloads/mh-RA_flooding_CVE-2010-multiple.txt - http://seclists.org/fulldisclosure/2011/Apr/86
CVE ID: CVE-2011-2395 State: PUBLISHED Published: 2011-06-07T19:00:00 Last Updated: 2024-08-06T23:00:33.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Neighbor Discovery (ND) protocol implementation in Cisco IOS on unspecified switches allows remote attackers to bypass the Router Advertisement Guarding functionality via a fragmented IPv6 packet in which the Router Advertisement (RA) message is contained in the second fragment, as demonstrated by (1) a packet in which the first fragment contains a long Destination Options extension header or (2) a packet in which the first fragment contains an ICMPv6 Echo Request message. Additional Analyst Notes: - CVE Program Container:
in which the first fragment contains an ICMPv6 Echo Request message. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2011/May/446 - http://securityreason.com/securityalert/8271 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67940
CVE ID: CVE-2011-2397 State: PUBLISHED Published: 2011-12-05T11:00:00 Last Updated: 2024-08-06T23:00:33.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-11-339/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/71602 - http://osvdb.org/77495
CVE ID: CVE-2011-2398 State: PUBLISHED Published: 2011-07-11T20:00:00 Last Updated: 2024-08-06T23:00:33.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the dynamic loader in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8303 - http://www.securityfocus.com/bid/48577 - http://securitytracker.com/id?1025749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68399 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12615 - http:
erabilities/68399 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12615 - http://secunia.com/advisories/45132 - http://marc.info/?l=bugtraq&m=130997622428494&w=2 - http://www.osvdb.org/73616 - http://marc.info/?l=bugtraq&m=130997622428494&w=2
CVE ID: CVE-2011-2399 State: PUBLISHED Published: 2011-08-01T19:00:00 Last Updated: 2024-08-06T23:00:33.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Media Management Daemon (mmd) in HP Data Protector 6.11 and earlier allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=131188787531606&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68865 - http://www.securityfocus.com/bid/48917 - http://securityreason.com/securityalert/8320 - http://www.securitytracker.com/id?1025857 - http://marc.info/?l=bugtraq&m=131188787531606&w
son.com/securityalert/8320 - http://www.securitytracker.com/id?1025857 - http://marc.info/?l=bugtraq&m=131188787531606&w=2
CVE ID: CVE-2011-2400 State: PUBLISHED Published: 2011-07-29T20:00:00 Last Updated: 2024-08-06T23:00:33.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/68867 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02940969 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02940969 - http://osvdb.org/74113 - http://www.securityfocus.com/bid/48913 - http://se
echSupport/Document.jsp?objectID=c02940969 - http://osvdb.org/74113 - http://www.securityfocus.com/bid/48913 - http://secunia.com/advisories/45440 - http://securitytracker.com/id?1025856
CVE ID: CVE-2011-2401 State: PUBLISHED Published: 2011-07-29T20:00:00 Last Updated: 2024-08-06T23:00:33.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02940969 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02940969 - http://osvdb.org/74114 - http://www.securityfocus.com/bid/48916 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68868 - http://secunia.com/advisories/45440
tyfocus.com/bid/48916 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68868 - http://secunia.com/advisories/45440 - http://securitytracker.com/id?1025856
CVE ID: CVE-2011-2402 State: PUBLISHED Published: 2011-08-01T19:00:00 Last Updated: 2024-08-06T23:00:33.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/74133 - http://securityreason.com/securityalert/8321 - http://marc.info/?l=bugtraq&m=131188727830971&w=2 - http://secunia.com/advisories/45454 - http://www.securityfocus.com/bid/48922 - http://www.securitytracker.com/id?1025862 - https://exchange.xforce.ibmcloud.c
http://www.securityfocus.com/bid/48922 - http://www.securitytracker.com/id?1025862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68885 - http://marc.info/?l=bugtraq&m=131188727830971&w=2
CVE ID: CVE-2011-2403 State: PUBLISHED Published: 2011-08-01T19:00:00 Last Updated: 2024-08-06T23:00:33.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48924 - http://securityreason.com/securityalert/8321 - http://marc.info/?l=bugtraq&m=131188727830971&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68886 - http://osvdb.org/74134 - http://secunia.com/advisories/45454 - http://www.securitytracke
oud.com/vulnerabilities/68886 - http://osvdb.org/74134 - http://secunia.com/advisories/45454 - http://www.securitytracker.com/id?1025862 - http://marc.info/?l=bugtraq&m=131188727830971&w=2
CVE ID: CVE-2011-2404 State: PUBLISHED Published: 2011-08-11T22:00:00 Last Updated: 2024-08-06T23:00:33.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8332 - http://marc.info/?l=bugtraq&m=131291471508119&w=2 - http://securityreason.com/securityalert/8348 - http://marc.info/?l=bugtraq&m=13
.info/?l=bugtraq&m=131291471508119&w=2 - http://securityreason.com/securityalert/8348 - http://marc.info/?l=bugtraq&m=131291471508119&w=2
CVE ID: CVE-2011-2405 State: PUBLISHED Published: 2011-08-11T22:00:00Z Last Updated: 2024-09-16T17:37:42.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HP ProLiant SL Advanced Power Manager (SL-APM) with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02950841 - http://secunia.com/advisories/45521 - http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02950841
CVE ID: CVE-2011-2406 State: PUBLISHED Published: 2011-08-11T22:00:00 Last Updated: 2024-08-06T23:00:33.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8333 - http://marc.info/?l=bugtraq&m=131292748121409&w=2 - http://marc.info/?l=bugtraq&m=131292748121409&w=2 - http://www.securityfocus.com/bid/49096
CVE ID: CVE-2011-2407 State: PUBLISHED Published: 2011-08-11T22:00:00 Last Updated: 2024-08-06T23:00:33.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to obtain access via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8333 - http://marc.info/?l=bugtraq&m=131292748121409&w=2 - http://marc.info/?l=bugtraq&m=131292748121409&w=2 - http://www.securityfocus.com/bid/49096
CVE ID: CVE-2011-2408 State: PUBLISHED Published: 2011-08-11T22:00:00Z Last Updated: 2024-09-17T03:23:05.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Contacts application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02937744 - http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02937744 - http://secunia.com/advisories/45543
CVE ID: CVE-2011-2409 State: PUBLISHED Published: 2011-08-11T22:00:00Z Last Updated: 2024-09-17T03:54:47.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Calendar application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02945437 - http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02945437 - http://secunia.com/advisories/45543
CVE ID: CVE-2011-2410 State: PUBLISHED Published: 2011-08-19T17:00:00Z Last Updated: 2024-09-16T20:07:35.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02942411 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02942411
CVE ID: CVE-2011-2411 State: PUBLISHED Published: 2011-10-02T20:00:00Z Last Updated: 2024-09-16T19:25:16.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x through J06.12.00, when Samba is used, allows remote authenticated users to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543
CVE ID: CVE-2011-2412 State: PUBLISHED Published: 2011-09-21T16:00:00 Last Updated: 2024-08-06T23:00:33.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Business Service Automation (BSA) Essentials 2.01 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=131645943904951&w=2 - http://securityreason.com/securityalert/8390 - http://marc.info/?l=bugtraq&m=131645943904951&w=2
CVE ID: CVE-2011-2414 State: PUBLISHED Published: 2011-08-10T22:00:00 Last Updated: 2024-08-06T23:00:33.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2415. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html - http://secu