Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-2647 State: PUBLISHED Published: 2011-08-23T21:00:00 Last Updated: 2024-08-06T23:08:23.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted archive name in the list of testdrive modified files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49236 - http://support.novell.com/security/cve/CVE-2011-2647.html - https://bugzilla.novell.com/show_bug.cgi?id=700589 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html - https://exchange.xforce.ibmc
gi?id=700589 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69282
CVE ID: CVE-2011-2648 State: PUBLISHED Published: 2011-08-23T21:00:00 Last Updated: 2024-08-06T23:08:23.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a filter in a modified file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49236 - http://support.novell.com/security/cve/CVE-2011-2648.html - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69283 - https://bugzilla.novell.com/show_bug.cgi?id=701814
CVE ID: CVE-2011-2649 State: PUBLISHED Published: 2011-08-23T21:00:00 Last Updated: 2024-08-06T23:08:23.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/security/cve/CVE-2011-2649.html - http://www.securityfocus.com/bid/49236 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69284 - https://bugzilla.novell.com/show_bug.cgi?id=701815
CVE ID: CVE-2011-2650 State: PUBLISHED Published: 2011-08-23T21:00:00 Last Updated: 2024-08-06T23:08:23.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted pattern name that is included in an RPM info display. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69285 - https://bugzilla.novell.com/show_bug.cgi?id=701816 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html -
ugzilla.novell.com/show_bug.cgi?id=701816 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html - http://support.novell.com/security/cve/CVE-2011-2650.html
CVE ID: CVE-2011-2651 State: PUBLISHED Published: 2011-08-23T21:00:00 Last Updated: 2024-08-06T23:08:23.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69286 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html - http://support.novell.com/security/cve/CVE-2011-2651.html - https://bugzilla.novell.com/show_bug.cgi?id=
msg00013.html - http://support.novell.com/security/cve/CVE-2011-2651.html - https://bugzilla.novell.com/show_bug.cgi?id=702041
CVE ID: CVE-2011-2652 State: PUBLISHED Published: 2011-08-23T21:00:00 Last Updated: 2024-08-06T23:08:23.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted archive file list that is used in an overlay file. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/security/cve/CVE-2011-2652.html - http://www.securityfocus.com/bid/49236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69287 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.ht
nge.xforce.ibmcloud.com/vulnerabilities/69287 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html - https://bugzilla.novell.com/show_bug.cgi?id=702320
CVE ID: CVE-2011-2653 State: PUBLISHED Published: 2011-12-08T11:00:00Z Last Updated: 2024-09-17T04:24:35.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute arbitrary code by uploading an executable file. Additional Analyst Notes: - CVE Program Container: References: - http://download.novell.com/Download?buildid=hPvHtXeNmCU~ - http://zerodayinitiative.com/advisories/ZDI-11-342/
CVE ID: CVE-2011-2654 State: PUBLISHED Published: 2011-09-06T15:00:00 Last Updated: 2024-08-06T23:08:23.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC implementation in the server in Novell Cloud Manager 1.1.2 before Patch 3 does not properly initialize objects, which allows remote attackers to execute arbitrary code by making RPC calls that leverage incorrect privileges associated with a partially initialized session. Additional Analyst Notes: - CVE Program Container: References: - http://download.novell.com/Download?buildid=NSONlV5PqMo~ - http://www.securityfocus.com/bid/49432 - http://www.securitytracker.com/id?1026006 - http://zerodayinitiative.com/advisories/ZDI
ww.securityfocus.com/bid/49432 - http://www.securitytracker.com/id?1026006 - http://zerodayinitiative.com/advisories/ZDI-11-278/ - http://secunia.com/advisories/45845
CVE ID: CVE-2011-2655 State: PUBLISHED Published: 2011-10-24T17:00:00 Last Updated: 2024-08-06T23:08:23.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2656. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70831 - http://www.novell.com/support/viewContent.do?externalId=7009489 - http://www.securityfocus.com/bid/50303 - http://download.novell.com/Download?buildid=Fz0LYfG9qCU~
CVE ID: CVE-2011-2656 State: PUBLISHED Published: 2011-10-24T17:00:00 Last Updated: 2024-08-06T23:08:23.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2655. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70831 - http://www.novell.com/support/viewContent.do?externalId=7009489 - http://www.securityfocus.com/bid/50303 - http://download.novell.com/Download?buildid=Fz0LYfG9qCU~
CVE ID: CVE-2011-2657 State: PUBLISHED Published: 2012-07-26T22:00:00Z Last Updated: 2024-09-16T17:24:09.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary commands via a pathname in the first argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7009570 - http://www.zerodayinitiative.com/advisories/ZDI-11-318/ - http://www.exploit-db.com/exploits/19718/
CVE ID: CVE-2011-2658 State: PUBLISHED Published: 2012-07-26T22:00:00Z Last Updated: 2024-09-17T03:48:24.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 provides access to the mscomct2.ocx file, which allows remote attackers to execute arbitrary code by leveraging unspecified mscomct2 flaws. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-11-317/ - http://www.novell.com/support/kb/doc.php?id=7009570
CVE ID: CVE-2011-2660 State: PUBLISHED Published: 2011-09-06T16:00:00 Last Updated: 2024-08-06T23:08:23.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: The modify_resolvconf_suse script in the vpnc package before 0.5.1-55.10.1 in SUSE Linux Enterprise Desktop 11 SP1 might allow remote attackers to execute arbitrary commands via a crafted DNS domain name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49391 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00029.html - https://bugzilla.novell.com/651577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69514 - https://bugzilla.novell.com/708656 - http://li
com/651577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69514 - https://bugzilla.novell.com/708656 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00028.html
CVE ID: CVE-2011-2661 State: PUBLISHED Published: 2011-10-08T01:00:00Z Last Updated: 2024-09-16T23:16:42.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitrary web script or HTML via the (1) Directory.Item.name or (2) Directory.Item.displayName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=702786 - http://www.novell.com/support/viewContent.do?externalId=7009214
CVE ID: CVE-2011-2662 State: PUBLISHED Published: 2011-10-08T01:00:00Z Last Updated: 2024-09-16T20:42:12.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE variable in a VCALENDAR attachment in an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=707527 - http://www.novell.com/support/viewContent.do?externalId=7009215 - https://labs.idefense.com/verisign/intelligence/2009/vulnerabilities/display.php?id=947
CVE ID: CVE-2011-2663 State: PUBLISHED Published: 2011-10-08T01:00:00 Last Updated: 2024-08-06T23:08:23.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a VCALENDAR attachment in an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=7009216 - http://www.securityfocus.com/archive/1/519875/100/0/threaded - https://labs.idefense.com/verisign/intelligence/2009/vulnerabilities/display.php?id=945 - https://bugzilla.novell.co
d - https://labs.idefense.com/verisign/intelligence/2009/vulnerabilities/display.php?id=945 - https://bugzilla.novell.com/show_bug.cgi?id=705917
CVE ID: CVE-2011-2664 State: PUBLISHED Published: 2011-07-08T20:00:00 Last Updated: 2024-08-06T23:08:23.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Check Point Multi-Domain Management / Provider-1 NGX R65, R70, R71, and R75, and SmartCenter during installation on non-Windows machines, allows local users on the MDS system to overwrite arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45231 - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk63565 - http://www.securityfocus.com/bid/48656 - https://exchange.x
al?eventSubmit_doGoviewsolutiondetails=&solutionid=sk63565 - http://www.securityfocus.com/bid/48656 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68502
CVE ID: CVE-2011-2665 State: PUBLISHED Published: 2011-07-06T19:00:00 Last Updated: 2024-08-06T23:08:23.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.3 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a SIP packet with a Contact header that lacks a < (less than) character. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2011-009.html - http://secunia.com/advisories/45239 - http://www.debian.org/security/2011/dsa-2276 - http://lists.fedoraproject.org/pipermail/package-announce
isories/45239 - http://www.debian.org/security/2011/dsa-2276 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062628.html - http://downloads.asterisk.org/pub/security/AST-2011-009-1.8.diff - http://secunia.com/advisories/45048 - http://secunia.com/advisories/45201
CVE ID: CVE-2011-2666 State: PUBLISHED Published: 2011-07-06T19:00:00 Last Updated: 2024-08-06T23:08:23.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41.2 and 1.6.2.x through 1.6.2.18.2 does not enable the alwaysauthreject option, which allows remote attackers to enumerate account names by making a series of invalid SIP requests and observing the differences in the responses for different usernames, a different vulnerability than CVE-2011-2536. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/68472 - http://downlo
Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/68472 - http://downloads.asterisk.org/pub/security/AST-2011-011.html
CVE ID: CVE-2011-2667 State: PUBLISHED Published: 2011-07-28T22:00:00 Last Updated: 2024-08-06T23:08:23.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-11-237/ - http://www.securityfocus.com/archive/1/518935/100/0/threaded - http://securitytracker.com/id?1025812 - ht
/ZDI-11-237/ - http://www.securityfocus.com/archive/1/518935/100/0/threaded - http://securitytracker.com/id?1025812 - http://securityreason.com/securityalert/8316 - http://www.securityfocus.com/archive/1/518934/100/0/threaded - http://www.securityfocus.com/bid/48813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68736 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B5E404992-6B58-4C44-A29D-027D05B6285D%7D - http://securitytracker.com/id?1025813 - http://secunia.com/advisories/45332
CVE ID: CVE-2011-2668 State: PUBLISHED Published: 2020-01-21T14:38:40 Last Updated: 2024-08-06T23:08:23.794Z Vendors: Mozilla Products: Firefox Problem Types: header mishandling Description: Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN36721438/index.html
CVE ID: CVE-2011-2669 State: PUBLISHED Published: 2020-01-21T14:41:39 Last Updated: 2024-08-06T23:08:23.781Z Vendors: Mozilla Products: Firefox Problem Types: DoS Description: Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN70984231/index.html
CVE ID: CVE-2011-2670 State: PUBLISHED Published: 2020-01-13T13:33:20 Last Updated: 2024-08-06T23:08:23.708Z Vendors: Mozilla Products: Firefox Problem Types: XSS Description: Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style Sheets Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN74649877/index.html
CVE ID: CVE-2011-2671 State: PUBLISHED Published: 2011-09-15T17:00:00 Last Updated: 2024-08-06T23:08:23.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Megalith 12th edition through 27th edition allows remote attackers to gain administrative privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49533 - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000073.html - http://secunia.com/advisories/45935 - http://osvdb.org/75352 - http://jvn.jp/en/jp/JVN45458289/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69678 - http://9.dotpp.net/software/megalith/JVN4545
9/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69678 - http://9.dotpp.net/software/megalith/JVN45458289/
CVE ID: CVE-2011-2672 State: PUBLISHED Published: 2011-09-20T10:00:00 Last Updated: 2024-08-06T23:08:23.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.98 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69900 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000074 - http://osvdb.org/75585 - http://jvn.jp/en/jp/JVN28973089/index.html - http://sourceforge.net/projects/semanticscuttle/files/SemanticScuttle/v0.98/SemanticScutt
en/jp/JVN28973089/index.html - http://sourceforge.net/projects/semanticscuttle/files/SemanticScuttle/v0.98/SemanticScuttle-0.98.0.zip/download - http://secunia.com/advisories/46031
CVE ID: CVE-2011-2673 State: PUBLISHED Published: 2011-10-02T01:00:00Z Last Updated: 2024-09-16T19:41:41.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BaserCMS before 1.6.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://basercms.net/patch/JVN09789751 - http://jvn.jp/en/jp/JVN09789751/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000065
CVE ID: CVE-2011-2674 State: PUBLISHED Published: 2011-10-02T01:00:00Z Last Updated: 2024-09-17T01:31:21.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://basercms.net/patch/JVN09789751 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000066 - http://jvn.jp/en/jp/JVN16617002/index.html
CVE ID: CVE-2011-2675 State: PUBLISHED Published: 2011-10-10T10:00:00 Last Updated: 2024-08-06T23:08:23.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Enkai-kun before 110916 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70414 - http://jvn.jp/en/jp/JVN03869266/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000077 - http://secunia.com/advisories/46314 - http://utage.org/enkai/
CVE ID: CVE-2011-2676 State: PUBLISHED Published: 2011-11-03T10:00:00 Last Updated: 2024-08-06T23:08:23.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70408 - http://www.ark-web.jp/movabletype/a-form/docs/security_patch.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000078 - http://www.ark-web.jp/movabletype/bl
ype/a-form/docs/security_patch.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000078 - http://www.ark-web.jp/movabletype/blog/2011/09/aform_update110927.html - http://jvn.jp/en/jp/JVN34980730/index.html
CVE ID: CVE-2011-2677 State: PUBLISHED Published: 2011-10-21T18:00:00 Last Updated: 2024-08-06T23:08:23.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified vectors related to manipulation of a URL. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76124 - http://cs.cybozu.co.jp/information/20111005notice01.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/70411 - http://jvn.jp/en/jp/JVN84838479/index.html - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000079.html
lities/70411 - http://jvn.jp/en/jp/JVN84838479/index.html - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000079.html - http://www.securityfocus.com/bid/50015 - http://secunia.com/advisories/46321
CVE ID: CVE-2011-2678 State: PUBLISHED Published: 2011-07-07T19:00:00 Last Updated: 2024-08-06T23:08:23.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITY\INTERACTIVE:F) for cvpnd.exe, which allows local users to gain privileges by replacing this executable file with an arbitrary program, aka Bug ID CSCtn50645. NOTE: this vulnerability exists because of a CVE-2007-4415 regression. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/518638/100/0/threaded - http://isc.sans.edu/diary.html?storyid=11125 - http://www.cisco.
www.securityfocus.com/archive/1/518638/100/0/threaded - http://isc.sans.edu/diary.html?storyid=11125 - http://www.cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml - http://securityreason.com/securityalert/8297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68485
CVE ID: CVE-2011-2679 State: PUBLISHED Published: 2011-07-07T19:00:00 Last Updated: 2024-08-06T23:08:23.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45119 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM34961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68350 - http://www.securityfocus.com/bid/48520 - http://www.ibm.com/support/docview.wss?uid=swg27020404 - http://osvdb.org/73547