Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3956 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14906 - http://code.google.com/p/chromium/issues/detail?id=103630
CVE ID: CVE-2011-3957 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the garbage-collection functionality in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving PDF documents. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14675 - http://code.google.com/p/chromium/issues/detail?id=104056
CVE ID: CVE-2011-3958 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 17.0.963.46 does not properly perform casts of variables during handling of a column span, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5485 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3A
- http://support.apple.com/kb/HT5503 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14948 - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=105459 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html - http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html - http://support.apple.com/kb/HT5400
CVE ID: CVE-2011-3959 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the locale implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=106441 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14235
CVE ID: CVE-2011-3960 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14921 - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=108416
CVE ID: CVE-2011-3961 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Google Chrome before 17.0.963.46 allows remote attackers to execute arbitrary code via vectors that trigger a crash of a utility process. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14864 - http://code.google.com/p/chromium/issues/detail?id=108871
CVE ID: CVE-2011-3962 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 17.0.963.46 does not properly perform path clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14249 - http://code.google.com/p/chromium/issues/detail?id=108901
CVE ID: CVE-2011-3963 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 17.0.963.46 does not properly handle PDF FAX images, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=109094 - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14825
CVE ID: CVE-2011-3964 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=109245 - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14591
CVE ID: CVE-2011-3965 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 17.0.963.46 does not properly check signatures, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=109664 - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14954
CVE ID: CVE-2011-3966 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to error handling for Cascading Style Sheets (CSS) token-sequence data. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5485 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://googlechromereleases.blogspot.com/2012/02/stable-channel-up
/msg00003.html - http://support.apple.com/kb/HT5503 - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html - http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14944 - http://code.google.com/p/chromium/issues/detail?id=109716 - http://support.apple.com/kb/HT5400
CVE ID: CVE-2011-3967 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=109717 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14010
CVE ID: CVE-2011-3968 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving Cascading Style Sheets (CSS) token sequences. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5485 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - http://code.
support.apple.com/kb/HT5503 - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=109743 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html - http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html - http://support.apple.com/kb/HT5400 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14483
CVE ID: CVE-2011-3969 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to layout of SVG documents. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5485 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - https://oval.cisecurity.org/repo
/HT5503 - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14917 - http://code.google.com/p/chromium/issues/detail?id=110112 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html - http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html - http://support.apple.com/kb/HT5400
CVE ID: CVE-2011-3970 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.suse.com/support/update/announcement/2013/suse-su-20131654-1.html - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - https://www.suse.com/support/update/announcement/2013/suse-su-20131656-1.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ov
announcement/2013/suse-su-20131656-1.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14818 - http://code.google.com/p/chromium/issues/detail?id=110277
CVE ID: CVE-2011-3971 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to mousemove events. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5485 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14960 - http://g
.com/kb/HT5503 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14960 - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=110374 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html - http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html - http://support.apple.com/kb/HT5400
CVE ID: CVE-2011-3972 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shader translator implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=110559 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14550 - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html
CVE ID: CVE-2011-3973 State: PUBLISHED Published: 2011-10-02T20:00:00 Last Updated: 2024-08-06T23:53:32.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (incorrect write operation and application crash) via an invalid bitstream in a Chinese AVS video (aka CAVS) file, related to the decode_residual_block, check_for_slice, and cavs_decode_frame functions, a different vulnerability than CVE-2011-3362. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2012:076 - http://git.videolan.org/?p=ff
Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2012:076 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=bd968d260aef322fb32e254a3de0d2036c57bd56 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:074 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:075 - http://www.ffmpeg.org/releases/ffmpeg-0.8.4.changelog - http://www.ffmpeg.org/releases/ffmpeg-0.7.5.changelog
CVE ID: CVE-2011-3974 State: PUBLISHED Published: 2011-10-02T20:00:00 Last Updated: 2024-08-06T23:53:32.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the decode_residual_inter function in cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (incorrect write operation and application crash) via an invalid bitstream in a Chinese AVS video (aka CAVS) file, a different vulnerability than CVE-2011-3362. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2012:076 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3B
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:076 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=bd968d260aef322fb32e254a3de0d2036c57bd56 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:074 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:075 - http://www.ffmpeg.org/releases/ffmpeg-0.8.4.changelog - http://www.ffmpeg.org/releases/ffmpeg-0.7.5.changelog
CVE ID: CVE-2011-3975 State: PUBLISHED Published: 2011-10-03T15:00:00 Last Updated: 2024-08-06T23:53:32.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC EVO 3D, EVO 4G, ThunderBolt, and unspecified other devices, provides the HtcLoggers.apk application, which allows user-assisted remote attackers to obtain a list of telephone numbers from a log, and other sensitive information, by leveraging the android.permission.INTERNET application permission and establishing TCP sessions to 127.0.0.1 on port 65511 and a second port. Additional Analyst Notes: - CVE Program Container: References:
P sessions to 127.0.0.1 on port 65511 and a second port. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49916 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70270 - http://news.cnet.com/8301-1035_3-20114556-94/ - http://www.thetechherald.com/article.php/201140/7676/HTC-looking-into-vulnerability-reports - http://www.androidpolice.com/2011/10/01/massive-security-vulnerability-in-htc-android-devices-evo-3d-4g-thunderbolt-others-exposes-phone-numbers-gps-sms-emails-addresses-much-more/
CVE ID: CVE-2011-3976 State: PUBLISHED Published: 2011-10-04T10:00:00 Last Updated: 2024-08-06T23:53:32.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response to a LIST command, as demonstrated using (1) GETLIST or (2) GETFILE in a ScriptFTP script. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/440219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69962 - http://www.exploit-db.com/exploits/17876 - http://www.digital-echidna.org/2011/09/scriptftp-3-3-remote-buffer-overflow-exploit-0day/ - h
it-db.com/exploits/17876 - http://www.digital-echidna.org/2011/09/scriptftp-3-3-remote-buffer-overflow-exploit-0day/ - http://secunia.com/advisories/46099 - http://www.securityfocus.com/bid/49707
CVE ID: CVE-2011-3977 State: PUBLISHED Published: 2011-10-04T10:00:00 Last Updated: 2024-08-06T23:53:32.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in nxconfigure.sh in NoMachine NX Node 3.x before 3.5.0-4 and NX Server 3.x before 3.5.0-5 allows local users to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/519730/100/0/threaded - http://www.securityfocus.com/bid/49720 - http://www.nomachine.com/tr/view.php?id=TR08I02575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69974 - http://securityreason.com/securityalert/8406
CVE ID: CVE-2011-3978 State: PUBLISHED Published: 2011-10-04T10:00:00 Last Updated: 2024-08-06T23:53:32.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow remote authenticated users to inject arbitrary web script or HTML via the (1) commentemail, (2) commentmessage, or (3) commentname parameter in a sendcomment action for the news page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/519571/100/0/threaded - http://www.rul3z.de/advisories/SSCHADV2011-013.txt - http://securityreason.com/securityalert/8407 - http://secunia.com/advis
://www.rul3z.de/advisories/SSCHADV2011-013.txt - http://securityreason.com/securityalert/8407 - http://secunia.com/advisories/45955 - http://www.lightneasy.org/punbb/viewtopic.php?id=1464 - http://osvdb.org/75262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69737
CVE ID: CVE-2011-3979 State: PUBLISHED Published: 2011-10-04T10:00:00 Last Updated: 2024-08-06T23:53:32.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ztemp/view_compiled/Theme/theme_admin_setasdefault.php in the theme module in Zikula Application Framework 1.3.0 build 3168, 1.2.7, and probably other versions allows remote attackers to inject arbitrary web script or HTML via the themename parameter in the setasdefault action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://community.zikula.org/index.php?module=News&func=display&sid=3075 - https://www.htbridge.ch/advisory/xss_in_zikula.html - htt
unity.zikula.org/index.php?module=News&func=display&sid=3075 - https://www.htbridge.ch/advisory/xss_in_zikula.html - http://www.securityfocus.com/archive/1/519565/100/0/threaded - http://securityreason.com/securityalert/8409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69644 - http://secunia.com/advisories/45884 - http://www.securityfocus.com/bid/49491 - http://osvdb.org/75226
CVE ID: CVE-2011-3980 State: PUBLISHED Published: 2011-10-04T10:00:00 Last Updated: 2024-08-06T23:53:32.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Drag Drop Mass Upload (ameos_dragndropupload) extension 2.0.2 and earlier for TYPO3 allows remote attackers to upload arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2011-010/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/69694 - http://www.securityfocus.com/bid/49516
CVE ID: CVE-2011-3981 State: PUBLISHED Published: 2011-10-04T10:00:00 Last Updated: 2024-08-06T23:53:32.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset/438959/allwebmenus-wordpress-menu-plugin/trunk/actions.php?old=408304&old_path=allwebmenus-wordpress-menu-plugin%2Ftrunk%2Factions.php - http://www.securityfocus.com/bid/49685 - http://www.exploit-db.com/exploits/17861 - http://secu
%2Ftrunk%2Factions.php - http://www.securityfocus.com/bid/49685 - http://www.exploit-db.com/exploits/17861 - http://secunia.com/advisories/46068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69929
CVE ID: CVE-2011-3982 State: PUBLISHED Published: 2011-10-05T01:00:00 Last Updated: 2024-08-06T23:53:32.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA resource limitations, which allows local users to cause a denial of service (system hang) via vectors that generate a large amount of DMA I/O, related to a deadlock in timer processing across CPUs. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0691 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67292 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ94675 -
https://exchange.xforce.ibmcloud.com/vulnerabilities/67292 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ94675 - http://www.vupen.com/english/advisories/2011/0275 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ94383 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ96761 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ94222 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ94593
CVE ID: CVE-2011-3983 State: PUBLISHED Published: 2011-10-24T17:00:00 Last Updated: 2024-08-06T23:53:32.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to cookies. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70468 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000081 - http://jvn.jp/en/jp/JVN89764731/index.html