Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4330 State: PUBLISHED Published: 2012-01-27T15:00:00Z Last Updated: 2024-08-07T00:01:51.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the hfs_mac2asc function in fs/hfs/trans.c in the Linux kernel 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via an HFS image with a crafted len field. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/11/21/14 - http://www.securityfocus.com/bid/50750 - https://bugzilla.redhat.com/show_bug.cgi?id=755431 - http://www.openwall.com/lists/oss-security/2011/11/21/5 - http://git.kernel.org/
lla.redhat.com/show_bug.cgi?id=755431 - http://www.openwall.com/lists/oss-security/2011/11/21/5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=bc5b8a9003132ae44559edd63a1623 - https://lkml.org/lkml/2011/11/9/303
CVE ID: CVE-2011-4331 State: REJECTED Published: 2011-11-23T11:00:00 Last Updated: 2011-12-13T10:00:00 Description: No description available.
CVE ID: CVE-2011-4332 State: PUBLISHED Published: 2011-11-23T18:00:00Z Last Updated: 2024-09-17T02:57:26.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/news/349-20110601-xss-vulnerabilities.html - http://seclists.org/fulldisclosure/2011/Nov/142 - http://www.mavitunasecurity.com/xss-vulnerability-in-joomla-163/ - http://www.openwall.com/lists/oss-security/2011/11/21/29
CVE ID: CVE-2011-4333 State: PUBLISHED Published: 2017-10-23T18:00:00 Last Updated: 2024-08-07T00:01:51.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LabWiki 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) from parameter to index.php or the (2) page_no parameter to recentchanges.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/11/21/16 - http://www.openwall.com/lists/oss-security/2014/02/08/5
CVE ID: CVE-2011-4334 State: PUBLISHED Published: 2017-10-23T18:00:00 Last Updated: 2024-08-07T00:01:51.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: edit.php in LabWiki 1.1 and earlier does not properly verify uploaded user files, which allows remote authenticated users to upload arbitrary PHP files via a PHP file with a .gif extension in the userfile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/11/21/16 - http://www.openwall.com/lists/oss-security/2014/02/08/5
CVE ID: CVE-2011-4335 State: PUBLISHED Published: 2011-11-28T11:00:00 Last Updated: 2024-08-07T00:01:51.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Contao before 2.10.2 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php in a (1) teachers.html or (2) teachers/ action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520046/100/0/threaded - http://openwall.com/lists/oss-security/2011/11/21/30 - http://dev.contao.org/projects/typolight/repository/revisions/1041 - http://openwall.com/lists/oss-security/2011/11/22/1 - http://ww
ontao.org/projects/typolight/repository/revisions/1041 - http://openwall.com/lists/oss-security/2011/11/22/1 - http://www.rul3z.de/advisories/SSCHADV2011-025.txt
CVE ID: CVE-2011-4336 State: PUBLISHED Published: 2020-01-15T13:48:01 Last Updated: 2024-08-07T00:01:51.572Z Vendors: Tiki Products: Wiki CMS Groupware Problem Types: XSS Description: Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2011/Nov/140 - https://www.securityfocus.com/bid/48806/info
CVE ID: CVE-2011-4337 State: PUBLISHED Published: 2012-01-29T11:00:00Z Last Updated: 2024-09-17T02:27:02.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to inject arbitrary PHP code into an executable language file in the i18n directory via the lang variable. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.sitracker.org/view.php?id=1737 - http://www.exploit-db.com/exploits/18132/ - http://www.openwall.com/lists/oss-security/2011/11/22/3 - http://www.securityfocus.com/archive/1/520577
CVE ID: CVE-2011-4338 State: PUBLISHED Published: 2020-02-12T18:11:17 Last Updated: 2024-08-07T00:01:51.573Z Vendors: shaman Products: shaman Problem Types: authorization error Description: Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root password in shaman. The next time shaman is run, root privileges are granted despite the fact that the user never entered the root password. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/11/22/4 - https://bbs.archlinux.org/viewtopic.php?id=64066&p=1
CVE ID: CVE-2011-4339 State: PUBLISHED Published: 2011-12-15T02:00:00 Last Updated: 2024-08-07T00:01:51.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:196 - http://secuni
curity/ovmbulletinjul2016-3090546.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:196 - http://secunia.com/advisories/47228 - http://secunia.com/advisories/47376 - https://bugzilla.redhat.com/show_bug.cgi?id=742837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71763 - http://www.securityfocus.com/bid/51036 - http://www.debian.org/security/2011/dsa-2376 - http://www.redhat.com/support/errata/RHSA-2011-1814.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071575.html - http://openwall.com/lists/oss-security/2011/12/13/1 - http://secunia.com/advisories/47173 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071580.h
- http://secunia.com/advisories/47173 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071580.html - http://rhn.redhat.com/errata/RHSA-2013-0123.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2011-4340 State: PUBLISHED Published: 2012-02-12T22:00:00 Last Updated: 2024-08-07T00:01:51.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) the profile parameter to extensions/profiledevkit/content/content.profile.php, as demonstrated via requests to (a) the default URI, (b) about/, or (c) drafts/; or (2) the filter parameter in symphony/lib/core/class.symphony.php, as demonstrated via requests to (d) symphony/publish/comments or (e) symphony/publish
phony/lib/core/class.symphony.php, as demonstrated via requests to (d) symphony/publish/comments or (e) symphony/publish/images. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-symphony-cms/ - http://seclists.org/bugtraq/2011/Nov/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71106 - http://www.osvdb.org/76883 - http://secunia.com/advisories/46663 - http://www.osvdb.org/76882 - http://www.openwall.com/lists/oss-security/2011/11/22/9 - http://symphony-cms.com/download/releases/version/2.2.4/ - http://packetstormsecurity.org/
s/oss-security/2011/11/22/9 - http://symphony-cms.com/download/releases/version/2.2.4/ - http://packetstormsecurity.org/files/view/106493/symphonycms-sqlxss.txt
CVE ID: CVE-2011-4341 State: PUBLISHED Published: 2012-02-12T22:00:00 Last Updated: 2024-08-07T00:01:51.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in symphony/content/content.publish.php in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author permissions to execute arbitrary SQL commands via the filter parameter to (1) symphony/publish/comments or (2) symphony/publish/images. NOTE: this issue can be leveraged to perform cross-site scripting (XSS) attacks via error messages. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Progra
messages. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-symphony-cms/ - http://seclists.org/bugtraq/2011/Nov/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71105 - http://secunia.com/advisories/46663 - https://github.com/symphonycms/symphony-2/commit/476e4926e2773588eab10dd3036f27e1411521b5 - http://www.osvdb.org/76884 - http://www.openwall.com/lists/oss-security/2011/11/22/9 - http://symphony-cms.com/download/releases/version/2.2.4/ - http://packetstormsecurity.org/files/view/106493/symphonycms-sqlxss.txt
CVE ID: CVE-2011-4342 State: PUBLISHED Published: 2012-10-08T18:00:00Z Last Updated: 2024-09-17T03:37:39.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/support/topic/plugin-backwpup-remote-and-local-codeexecution-vulnerability-sos-11-003 - http://www.osvdb.org/71481 - http://www.exploit-db.com/exploits/17056 - http://www.senseofsecurity.com.au/advisories/SOS-11-003.pdf - http://seclists.org/full
w.exploit-db.com/exploits/17056 - http://www.senseofsecurity.com.au/advisories/SOS-11-003.pdf - http://seclists.org/fulldisclosure/2011/Mar/328 - http://secunia.com/advisories/43565 - http://www.openwall.com/lists/oss-security/2011/11/22/10 - http://www.openwall.com/lists/oss-security/2011/11/22/7 - http://packetstormsecurity.org/files/view/99799/SOS-11-003.txt
CVE ID: CVE-2011-4343 State: PUBLISHED Published: 2017-08-08T21:00:00 Last Updated: 2024-08-07T00:01:51.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information disclosure vulnerability in Apache MyFaces Core 2.0.1 through 2.0.10 and 2.1.0 through 2.1.4 allows remote attackers to inject EL expressions via crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=132313252814362 - https://issues.apache.org/jira/secure/attachment/12504807/MYFACES-3405-1.patch - http://www.securitytracker.com/id/1039695
CVE ID: CVE-2011-4344 State: PUBLISHED Published: 2011-12-01T11:00:00 Last Updated: 2024-08-07T00:01:51.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jenkins Core in Jenkins before 1.438, and 1.409 LTS before 1.409.3 LTS, when a stand-alone container is used, allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/23/6 - http://www.securityfocus.com/bid/50786 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2011-11-08.cb - http://openwall.com/lists/oss-se
6 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2011-11-08.cb - http://openwall.com/lists/oss-security/2011/11/23/5 - https://github.com/jenkinsci/winstone/commit/410ed3001d51c689cf59085b7417466caa2ded7b.patch - http://secunia.com/advisories/46911 - http://groups.google.com/group/jenkinsci-advisories/msg/1b94588f90f876b5?dmode=source&output=gplain
CVE ID: CVE-2011-4345 State: PUBLISHED Published: 2011-11-30T02:00:00 Last Updated: 2024-08-07T00:01:51.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Namazu before 2.0.21, when Internet Explorer 6 or 7 is used, allows remote attackers to inject arbitrary web script or HTML via a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=756348 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - http://www.securityfocus.com/bid/50771 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://ww
cus.com/bid/50771 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://www.namazu.org/security.html#cross-site-scripting - http://secunia.com/advisories/46925
CVE ID: CVE-2011-4346 State: PUBLISHED Published: 2011-12-10T17:00:00Z Last Updated: 2024-08-07T00:01:51.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47162 - https://bugzilla.redhat.com/show_bug.cgi?id=742050 - http://www.redhat.com/support/errata/RHSA-2011-1794.html - http://www.securityfocus.com/bid/50963 - http://www.securitytracker.com/id
dhat.com/support/errata/RHSA-2011-1794.html - http://www.securityfocus.com/bid/50963 - http://www.securitytracker.com/id?1026391
CVE ID: CVE-2011-4347 State: PUBLISHED Published: 2013-06-08T10:00:00Z Last Updated: 2024-08-07T00:01:51.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/11/24/7 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.10 - https://b
.openwall.com/lists/oss-security/2011/11/24/7 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.10 - https://bugzilla.redhat.com/show_bug.cgi?id=756084 - https://github.com/torvalds/linux/commit/c4e7f9022e506c6635a5037713c37118e23193e4
CVE ID: CVE-2011-4348 State: PUBLISHED Published: 2013-06-08T10:00:00Z Last Updated: 2024-08-07T00:01:51.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the sctp_rcv function in net/sctp/input.c in the Linux kernel before 2.6.29 allows remote attackers to cause a denial of service (system hang) via SCTP packets. NOTE: in some environments, this issue exists because of an incomplete fix for CVE-2011-2482. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29 - https://github.com/torvalds/linux/commit/ae53b5bd77719fed58086c5be60ce4f22bffe1c6 - http://git.kernel.org/?p=linux/kernel/git/torv
thub.com/torvalds/linux/commit/ae53b5bd77719fed58086c5be60ce4f22bffe1c6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ae53b5bd77719fed58086c5be60ce4f22bffe1c6 - http://www.openwall.com/lists/oss-security/2012/03/05/2 - https://bugzilla.redhat.com/show_bug.cgi?id=757143
CVE ID: CVE-2011-4349 State: PUBLISHED Published: 2011-12-10T17:00:00Z Last Updated: 2024-09-17T02:22:02.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50814 - http://ubuntu.com/usn/usn-1289-1 - http://secunia.com/advisories/46940 - http://www.openwall.com/lists/oss-security/2011/11/25/4 - https://bugzilla.redhat.com/show_bug.cgi?id=
dvisories/46940 - http://www.openwall.com/lists/oss-security/2011/11/25/4 - https://bugzilla.redhat.com/show_bug.cgi?id=757171 - http://secunia.com/advisories/47160 - http://gitorious.org/colord/master/commit/1fadd90afcb4bbc47513466ee9bb1e4a8632ac3b - http://lists.fedoraproject.org/pipermail/package-announce/2011-December/070518.html - https://bugs.freedesktop.org/show_bug.cgi?id=42904 - http://gitorious.org/colord/master/commit/36549e0ed255e7dfa7852d08a75dd5f00cbd270e - http://lists.fedoraproject.org/pipermail/package-announce/2011-December/070450.html - http://www.openwall.com/lists/oss-security/2011/11/25/3
CVE ID: CVE-2011-4350 State: PUBLISHED Published: 2019-11-26T04:49:52 Last Updated: 2024-08-07T00:01:51.588Z Vendors: yaws Products: yaws Problem Types: Directory Traversal (Local File Inclusion) Description: Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4350 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4350 - https://access.redhat.com/security/cve/cve-2011-4350 - https://bugs.debian.org/cgi-bin/bugr
w_bug.cgi?id=CVE-2011-4350 - https://access.redhat.com/security/cve/cve-2011-4350 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650009 - https://www.openwall.com/lists/oss-security/2011/11/25/7
CVE ID: CVE-2011-4351 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-07T00:01:51.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2011/Nov/145 - http://www.ffmpeg.org/security.html
CVE ID: CVE-2011-4352 State: PUBLISHED Published: 2012-08-20T20:00:00Z Last Updated: 2024-09-17T01:01:06.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the vp3_dequant function in the VP3 decoder (vp3.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VP3 stream, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://libav.org/releases/libav-0.6.4.changelog - htt
. Additional Analyst Notes: - CVE Program Container: References: - http://libav.org/releases/libav-0.6.4.changelog - http://www.mandriva.com/security/advisories?name=MDVSA-2012:076 - http://ubuntu.com/usn/usn-1320-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:074 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:075 - http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=8b94df0f2047e9728cb872adc9e64557b7a5152f - http://www.securityfocus.com/archive/1/520622 - http://ffmpeg.org/ - http://libav.org/ - http://ubuntu.com/usn/usn-1333-1 - http://libav.org/releases/libav-0.5.6.changelog - http://libav.org/releases/libav-0.7.3.changelog - http://git.videolan.org/?p=ffmpeg.
rg/releases/libav-0.5.6.changelog - http://libav.org/releases/libav-0.7.3.changelog - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=eef5c35b4352ec49ca41f6198bee8a976b1f81e5
CVE ID: CVE-2011-4353 State: PUBLISHED Published: 2012-08-20T20:00:00Z Last Updated: 2024-09-16T19:35:31.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted VP5 or VP6 stream. Additional Analyst Notes: - CVE Program Container: References: - http://libav.org/releases/libav-0.6.4.changelog - http://www.mandriva.com/security/advisories?name=MDVS
r: References: - http://libav.org/releases/libav-0.6.4.changelog - http://www.mandriva.com/security/advisories?name=MDVSA-2012:076 - http://ubuntu.com/usn/usn-1320-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:074 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:075 - http://ffmpeg.org/ - http://libav.org/ - http://ubuntu.com/usn/usn-1333-1 - http://libav.org/releases/libav-0.5.6.changelog - http://libav.org/releases/libav-0.7.3.changelog
CVE ID: CVE-2011-4354 State: PUBLISHED Published: 2012-01-27T00:00:00 Last Updated: 2024-08-07T00:01:51.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: crypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving ECDH or ECDHE cipher suites, uses an incorrect modular reduction algorithm in its implementation of the P-256 and P-384 NIST elliptic curves, which allows remote attackers to obtain the private key of a TLS server via multiple handshake attempts. Additional Analyst Notes: - CVE Program Container: References: - http://crypto.di.uminho.pt/CACE/CT-RSA2012-openssl-src.zip - https://bugzilla.re
- CVE Program Container: References: - http://crypto.di.uminho.pt/CACE/CT-RSA2012-openssl-src.zip - https://bugzilla.redhat.com/show_bug.cgi?id=757909 - http://openwall.com/lists/oss-security/2011/12/01/6 - http://eprint.iacr.org/2011/633 - http://rt.openssl.org/Ticket/Display.html?id=1593&user=guest&pass=guest - http://cvs.openssl.org/filediff?f=openssl/crypto/bn/bn_nist.c&v1=1.14&v2=1.21 - http://www.debian.org/security/2012/dsa-2390 - http://marc.info/?t=119271238800004
CVE ID: CVE-2011-4355 State: PUBLISHED Published: 2013-03-04T21:00:00Z Last Updated: 2024-08-07T00:09:18.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0522.html - http://sourceware.org/ml/gdb-patches/2011-04/msg00559.html - http://sourceware.org/ml/gdb-patches/2011-05/msg00202.html - http://sourceware.org/cgi-bin/cvsweb.cgi/~checkout~/src/gdb/NE
p://sourceware.org/ml/gdb-patches/2011-05/msg00202.html - http://sourceware.org/cgi-bin/cvsweb.cgi/~checkout~/src/gdb/NEWS?content-type=text/x-cvsweb-markup&cvsroot=src - http://www.securitytracker.com/id/1028191