Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-0284 State: PUBLISHED Published: 2011-03-20T01:00:00 Last Updated: 2024-08-06T21:51:08.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an e_data field containing typed data. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0680 - http://www.kb.cert.org/vuls/id/943220 - http://www.vupen.com/english/advisor
ww.vupen.com/english/advisories/2011/0680 - http://www.kb.cert.org/vuls/id/943220 - http://www.vupen.com/english/advisories/2011/0673 - http://www.securityfocus.com/bid/46881 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056579.html - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-003.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/66101 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://www.vupen.com/english/advisories/2011/0722 - http://www.vupen.com/english/advisories/2011/0763 - http://www.ubuntu.com/usn/USN-1088-1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056413.html - http://list
untu.com/usn/USN-1088-1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056413.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056573.html - http://secunia.com/advisories/43700 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:048 - http://www.redhat.com/support/errata/RHSA-2011-0356.html - http://www.vupen.com/english/advisories/2011/0672 - http://secunia.com/advisories/43783 - http://secunia.com/advisories/43760 - http://osvdb.org/71183 - http://www.securityfocus.com/archive/1/517029/100/0/threaded - http://securitytracker.com/id?1025216 - http://secunia.com/advisories/43881
CVE ID: CVE-2011-0285 State: PUBLISHED Published: 2011-04-15T00:00:00 Last Updated: 2024-08-06T21:51:07.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/517484/100/0/threaded - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-004.txt - http://www.redhat
com/archive/1/517484/100/0/threaded - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-004.txt - http://www.redhat.com/support/errata/RHSA-2011-0447.html - http://www.securityfocus.com/bid/47310 - http://secunia.com/advisories/44181 - http://www.securitytracker.com/id?1025320 - https://hermes.opensuse.org/messages/8086843 - http://secunia.com/advisories/44125 - http://secunia.com/advisories/44196 - http://www.vupen.com/english/advisories/2011/0997 - http://osvdb.org/71789 - http://www.vupen.com/english/advisories/2011/0936 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:077 - http://www.vupen.com/english/advisories/2011/0986 - http://securityreason.com/securityalert/8200
?name=MDVSA-2011:077 - http://www.vupen.com/english/advisories/2011/0986 - http://securityreason.com/securityalert/8200 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058181.html - http://krbdev.mit.edu/rt/Ticket/Display.html?id=6899 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621726
CVE ID: CVE-2011-0286 State: PUBLISHED Published: 2011-04-18T18:00:00Z Last Updated: 2024-09-17T02:20:53.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and 5.0.2, allows remote attackers to inject arbitrary web script or HTML via the displayErrorMessage parameter in a ManageDevices action. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackberry.com/btsc/KB26296 - http://www.v
. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackberry.com/btsc/KB26296 - http://www.vupen.com/english/advisories/2011/0971 - http://www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdf - http://secunia.com/advisories/44183 - http://securitytracker.com/id?1025356 - http://www.securityfocus.com/bid/47324
CVE ID: CVE-2011-0287 State: PUBLISHED Published: 2011-07-14T23:00:00Z Last Updated: 2024-09-16T19:21:15.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the BlackBerry Administration API in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 5.0.1 through 5.0.3, and BlackBerry Enterprise Server Express software 5.0.1 through 5.0.3, allows remote attackers to read text files or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45242 - http://www.securityfocus.com/bid/48655 - http://www.blackberry.com/btsc/KB27258
CVE ID: CVE-2011-0290 State: PUBLISHED Published: 2011-10-21T10:00:00 Last Updated: 2024-08-06T21:51:07.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log into arbitrary user accounts associated with the same organization, and send messages, read messages, read contact lists, or cause a denial of service (login unavailability), via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46370 - http://www.blackberry.com/btsc
alyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46370 - http://www.blackberry.com/btsc/KB28524 - http://www.securityfocus.com/bid/50064 - http://securitytracker.com/id?1026179 - http://www.osvdb.org/76286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70519
CVE ID: CVE-2011-0291 State: PUBLISHED Published: 2011-12-08T20:00:00 Last Updated: 2024-08-06T21:51:07.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BlackBerry PlayBook service on the Research In Motion (RIM) BlackBerry PlayBook tablet with software before 1.0.8.6067 allows local users to gain privileges via a crafted configuration file in a backup archive. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71659 - http://www.securityfocus.com/bid/50931 - http://blackberry.com/btsc/KB29191 - http://securitytracker.com/id?1026386 - http://secunia.com/advisories/47132
CVE ID: CVE-2011-0310 State: PUBLISHED Published: 2011-01-13T18:35:00 Last Updated: 2024-08-06T21:51:07.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM WebSphere MQ 7.0 before 7.0.1.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted header field in a message. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70476 - http://www-01.ibm.com/support/docview.wss?uid=swg27014224 - http://www.securityfocus.com/bid/45923 - http://www.vupen.com/english/advisories/2011/0128 - http://secunia.com/advisories/42958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/646
sh/advisories/2011/0128 - http://secunia.com/advisories/42958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64628 - https://www-304.ibm.com/support/docview.wss?uid=swg1SE45551
CVE ID: CVE-2011-0311 State: PUBLISHED Published: 2011-09-02T23:00:00 Last Updated: 2024-08-06T21:51:07.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html - http://www-01.ibm.
Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89602 - http://www.redhat.com/support/errata/RHSA-2011-1159.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65189 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89620 - https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html - http://www.redhat.com/support/errata/RHSA-2011-1265.html
CVE ID: CVE-2011-0314 State: PUBLISHED Published: 2011-01-12T00:00:00 Last Updated: 2024-08-06T21:51:07.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 allows remote authenticated users to execute arbitrary code or cause a denial of service (queue manager crash) by inserting an invalid message into the queue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64550 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ81294 - http://secunia.com/advisories/42941
CVE ID: CVE-2011-0315 State: PUBLISHED Published: 2011-01-12T00:00:00 Last Updated: 2024-08-06T21:51:08.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Servlet Engine / Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to the lack of an error page for an application. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64554 - http://www-01.ibm.com/support/docview.w
s?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64554 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM18512 - http://secunia.com/advisories/42938 - http://www.securityfocus.com/bid/46736 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www.vupen.com/english/advisories/2011/0564
CVE ID: CVE-2011-0316 State: PUBLISHED Published: 2011-01-12T00:00:00 Last Updated: 2024-08-06T21:51:07.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM24372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64558 - http:
/www-01.ibm.com/support/docview.wss?uid=swg1PM24372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64558 - http://secunia.com/advisories/42938 - http://www.securityfocus.com/bid/46736 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www.vupen.com/english/advisories/2011/0564
CVE ID: CVE-2011-0317 State: PUBLISHED Published: 2011-06-16T23:00:00 Last Updated: 2024-08-06T21:51:07.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb11-17.html - http://www.us-cert.gov/cas/techalerts/TA11-166A.html
CVE ID: CVE-2011-0318 State: PUBLISHED Published: 2011-06-16T23:00:00 Last Updated: 2024-08-06T21:51:08.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0319, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb11-17.html - http://www.us-cert.gov/cas/techalerts/TA11-166A.html
CVE ID: CVE-2011-0319 State: PUBLISHED Published: 2011-06-16T23:00:00 Last Updated: 2024-08-06T21:51:07.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb11-17.html - http://www.us-cert.gov/cas/techalerts/TA11-166A.html
CVE ID: CVE-2011-0320 State: PUBLISHED Published: 2011-06-16T23:00:00 Last Updated: 2024-08-06T21:51:07.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb11-17.html - http://www.us-cert.gov/cas/techalerts/TA11-166A.html
CVE ID: CVE-2011-0321 State: PUBLISHED Published: 2011-02-01T17:00:00 Last Updated: 2024-08-06T21:51:08.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to (1) register or (2) unregister RPC services, and consequently cause a denial of service or obtain sensitive information from interprocess communication, via crafted UDP packets containing service commands. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives
ervice commands. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2011-01/att-0162/ESA-2011-003.txt - http://securitytracker.com/id?1025010 - http://www.securityfocus.com/bid/46044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64997 - http://archives.neohapsis.com/archives/bugtraq/2011-01/0162.html - http://www.osvdb.org/70686 - http://secunia.com/advisories/43113 - http://www.vupen.com/english/advisories/2011/0241
CVE ID: CVE-2011-0322 State: PUBLISHED Published: 2011-03-16T22:00:00 Last Updated: 2024-08-06T21:51:08.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in EMC RSA Access Manager Server 5.5.x, 6.0.x, and 6.1.x allows remote attackers to access resources via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43796 - http://securityreason.com/securityalert/8142 - http://www.securitytracker.com/id?1025214 - http://www.securityfocus.com/bid/46875 - http://www.securityfocus.com/archive/1/517023/100/0/threaded - http://www.vupen.com/english/advisories/2011/0676 - https://exchange.xforce.ibmcloud.c
archive/1/517023/100/0/threaded - http://www.vupen.com/english/advisories/2011/0676 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66104
CVE ID: CVE-2011-0323 State: PUBLISHED Published: 2011-02-07T20:19:00 Last Updated: 2024-08-06T21:51:07.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe (1) SetLogFilePath and (2) SigMessage methods to create arbitrary files with arbitrary content. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65117 - http://secunia.com/advisories/42800 - http://www.securityfocus.com/bid/46128 - http://secunia.com/secunia_research/2011-1/
CVE ID: CVE-2011-0324 State: PUBLISHED Published: 2011-02-07T20:19:00 Last Updated: 2024-08-06T21:51:07.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allow remote attackers to execute arbitrary code via a long (1) KeyString property, (2) NewPath parameter to the SetLocalIniFilePath method, or (3) NewPortPath parameter to the SetTabletPortPath method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2011-2/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/65114 - http://secunia.com/advisorie
com/secunia_research/2011-2/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/65114 - http://secunia.com/advisories/42800 - http://www.securityfocus.com/bid/46128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65116
CVE ID: CVE-2011-0329 State: PUBLISHED Published: 2011-02-21T17:00:00 Last Updated: 2024-08-06T21:51:07.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the GetData method in the Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 allows remote attackers to read arbitrary files via directory traversal sequences in the fileID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2011-10/ - http://www.securityfocus.com/bid/46443 - http://secunia.com/advisories/42880 - http://www.securitytracker.com/id?1025094
CVE ID: CVE-2011-0330 State: PUBLISHED Published: 2011-02-21T17:00:00 Last Updated: 2024-08-06T21:51:08.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the WMIAttributesOfInterest property, which allows remote attackers to execute arbitrary WMI Query Language (WQL) statements via a crafted value, as demonstrated by a value that triggers disclosure of information about installed software. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46443 - http://secunia.com/secunia_research/2011-11/ - http://secunia.com/ad
erences: - http://www.securityfocus.com/bid/46443 - http://secunia.com/secunia_research/2011-11/ - http://secunia.com/advisories/42880 - http://www.securitytracker.com/id?1025094
CVE ID: CVE-2011-0331 State: PUBLISHED Published: 2011-03-22T17:00:00 Last Updated: 2024-08-06T21:51:07.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the addOSPLext method in the Honeywell ScanServer ActiveX control 780.0.20.5 allows remote attackers to execute arbitrary code via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46930 - http://osvdb.org/71249 - http://www.vupen.com/english/advisories/2011/0725 - http://secunia.com/secunia_research/2011-22/ - http://secunia.com/advisories/43360
CVE ID: CVE-2011-0332 State: PUBLISHED Published: 2011-02-25T18:00:00 Last Updated: 2024-08-06T21:51:07.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43440 - http://www.vupen.com/english/advisories/2011/0508 - http://secunia.com/secunia_research/2011-14/ - http://secunia.com/advisories/43329 - http://www.foxitsoftware.com/pdf/reader/security_bulletins.php#memory -
011-14/ - http://secunia.com/advisories/43329 - http://www.foxitsoftware.com/pdf/reader/security_bulletins.php#memory - http://www.securitytracker.com/id?1025129
CVE ID: CVE-2011-0333 State: PUBLISHED Published: 2011-10-08T01:00:00Z Last Updated: 2024-09-16T17:54:55.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted TZNAME variable in a VCALENDAR attachment in an e-mail message, related to an "integer truncation error." Additional Analyst Notes: - CVE Program Container: References: - https://labs.idefense.com/verisign/intelligence/2009/vulnerabilities/display.php?id=943 - http://secunia.com/secunia_research/2011-66/ -
ense.com/verisign/intelligence/2009/vulnerabilities/display.php?id=943 - http://secunia.com/secunia_research/2011-66/ - https://bugzilla.novell.com/show_bug.cgi?id=678715 - http://www.novell.com/support/viewContent.do?externalId=7009208
CVE ID: CVE-2011-0334 State: PUBLISHED Published: 2011-10-08T01:00:00Z Last Updated: 2024-09-16T16:13:06.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a long HTTP request for a .css file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=678939 - http://www.novell.com/support/viewContent.do?externalId=7009210 - http://secunia.com/secunia_research/2011-67/
CVE ID: CVE-2011-0335 State: PUBLISHED Published: 2011-06-16T23:00:00 Last Updated: 2024-08-06T21:51:08.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-2011-2119, and CVE-2011-2122. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb11-17.html - http://www.us-cert.gov/cas/techalerts/TA11-166A.html
CVE ID: CVE-2011-0340 State: PUBLISHED Published: 2011-05-04T22:00:00 Last Updated: 2024-08-06T21:51:07.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers to execute arbitrary code via a long (1) InternationalOrder, (2) InternationalSeparator, or (3) LogFileName property value; or (4) a long bstrFileName argument to the OpenScreen method. Additional Analyst Notes: - CVE Program Container: References: - h