Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4967 State: PUBLISHED Published: 2019-11-19T15:10:58 Last Updated: 2024-08-07T00:23:39.302Z Vendors: tog-pegasus Products: tog-pegasus Problem Types: xml hash table collision CPU usage DoS Description: tog-Pegasus has a package hash collision DoS vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4967 - https://access.redhat.com/security/cve/cve-2011-4967 - http://www.openwall.com/lists/oss-security/2012/12/14/2 - http://bugzilla.openpegasus.org/show_bug.cgi?id=9182 - https://www.securityfocus.com/bid/56941
CVE ID: CVE-2011-4968 State: PUBLISHED Published: 2019-11-19T15:18:17 Last Updated: 2024-08-07T00:23:39.358Z Vendors: nginx Products: nginx Problem Types: http proxy module does not verify peer identity of https origin server Description: nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM) Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4968 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4968 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-4968 - https://access.redhat.com/security/cve/cve-2011-4968 - http://www.openwall.com/lists/o
m/show_bug.cgi?id=CVE-2011-4968 - https://access.redhat.com/security/cve/cve-2011-4968 - http://www.openwall.com/lists/oss-security/2013/01/03/8 - http://www.securityfocus.com/bid/57139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80952
CVE ID: CVE-2011-4969 State: PUBLISHED Published: 2013-03-08T22:00:00 Last Updated: 2024-08-07T00:23:39.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036620 - http://www.osvdb.org/80056 - http://bugs.jquery.com/ticket/9521 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 - http://blog.jquery.com/2011/09/01/jquery-1-6-3-released/ - http://blog.min
public/kb/docDisplay?docId=emr_na-c05111017 - http://blog.jquery.com/2011/09/01/jquery-1-6-3-released/ - http://blog.mindedsecurity.com/2011/07/jquery-is-sink.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - https://github.com/jquery/jquery/commit/db9e023e62c1ff5d8f21ed9868ab6878da2005e9 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05232730 - http://www.ubuntu.com/usn/USN-1722-1 - http://www.openwall.com/lists/oss-security/2013/01/31/3 - http://www.securityfocus.com/bid/58458 - https://security.netapp.com/advisory/ntap-20190416-0007/ - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1
urity.netapp.com/advisory/ntap-20190416-0007/ - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E
CVE ID: CVE-2011-4970 State: PUBLISHED Published: 2014-05-13T14:00:00 Last Updated: 2024-08-07T00:23:39.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in LCG Disk Pool Manager (DPM) before 1.8.6, as used in EGI UDM, allow remote attackers to execute arbitrary SQL commands via the (1) r_token variable in the dpm_get_pending_req_by_token, (2) dpm_get_cpr_by_fullid, (3) dpm_get_cpr_by_surl, (4) dpm_get_cpr_by_surls, (5) dpm_get_gfr_by_fullid, (6) dpm_get_gfr_by_surl, (7) dpm_get_pfr_by_fullid, (8) dpm_get_pfr_by_surl, (9) dpm_get_req_by_token, (10) dpm_insert_cpr_entry, (11) dpm_insert_gfr_entry, (12) dpm_insert_pending_entry, (13) dpm_ins
dpm_get_req_by_token, (10) dpm_insert_cpr_entry, (11) dpm_insert_gfr_entry, (12) dpm_insert_pending_entry, (13) dpm_insert_pfr_entry, (14) dpm_insert_xferreq_entry, (15) dpm_list_cpr_entry, (16) dpm_list_gfr_entry, or (17) dpm_list_pfr_entry function; the (18) surl variable in the dpm_get_cpr_by_surl function; the (19) to_surl variable in the dpm_get_cpr_by_surls function; the (20) u_token variable in the dpm_get_pending_reqs_by_u_desc, (21) dpm_get_reqs_by_u_desc, (22) dpm_get_spcmd_by_u_desc, (23) dpm_insert_pending_entry, (24) dpm_insert_spcmd_entry, or (25) dpm_insert_xferreq_entry function; the (26) s_token variable in the dpm_get_spcmd_by_token, (27) dpm_insert_cpr_entry, (28) dpm_ins
xferreq_entry function; the (26) s_token variable in the dpm_get_spcmd_by_token, (27) dpm_insert_cpr_entry, (28) dpm_insert_gfr_entry, (29) dpm_insert_pfr_entry, (30) dpm_insert_spcmd_entry, (31) dpm_update_cpr_entry, (32) dpm_update_gfr_entry, or (33) dpm_update_pfr_entry function; or remote administrators to execute arbitrary SQL commands via the (34) poolname variable in the dpm_get_pool_entry, (35) dpm_insert_fs_entry, (36) dpm_insert_pool_entry, (37) dpm_insert_spcmd_entry, (38) dpm_list_fs_entry, or (39) dpm_update_spcmd_entry function. Additional Analyst Notes: - CVE Program Container: References: - http://site.pi3.com.pl/adv/disk_pool_manager_1.txt - http://www.openwall.com/lists/oss
Program Container: References: - http://site.pi3.com.pl/adv/disk_pool_manager_1.txt - http://www.openwall.com/lists/oss-security/2013/03/12/1 - http://www.openwall.com/lists/oss-security/2013/03/10/1 - http://secunia.com/advisories/52487 - https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2012-2683 - http://blog.pi3.com.pl/?p=402
CVE ID: CVE-2011-4971 State: PUBLISHED Published: 2013-12-12T18:00:00 Last Updated: 2024-08-07T00:23:39.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet. Additional Analyst Notes: - CVE Program Container: References: - http://insecurety.net/?p=872 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:280 - https://code.google.com/p/memcached/issues/detail?id=192 - htt
ww.mandriva.com/security/advisories?name=MDVSA-2013:280 - https://code.google.com/p/memcached/issues/detail?id=192 - http://www.ubuntu.com/usn/USN-2080-1 - http://www.securityfocus.com/bid/59567 - https://puppet.com/security/cve/cve-2011-4971 - http://www.debian.org/security/2014/dsa-2832 - http://secunia.com/advisories/56183
CVE ID: CVE-2011-4972 State: PUBLISHED Published: 2019-11-13T20:51:23 Last Updated: 2024-08-07T00:23:39.372Z Vendors: CKSource Products: CKEditor Drupal module Problem Types: Insecure Permissions Description: hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private files via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/1337006 - http://www.openwall.com/lists/oss-security/2013/06/04/5 - http://www.openwall.com/lists/oss-security/2013/06/04/7
CVE ID: CVE-2011-4973 State: PUBLISHED Published: 2018-02-15T21:00:00 Last Updated: 2024-08-07T00:23:39.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1017197 - https://www.redhat.com/archives/mod_nss-list/2011-May/msg00001.html
CVE ID: CVE-2011-4974 State: REJECTED Published: 2020-11-05T22:01:44 Last Updated: 2020-11-05T22:01:44 Description: No description available.
CVE ID: CVE-2011-4975 State: REJECTED Published: 2020-11-05T22:02:13 Last Updated: 2020-11-05T22:02:13 Description: No description available.
CVE ID: CVE-2011-4976 State: REJECTED Published: 2020-11-05T22:02:36 Last Updated: 2020-11-05T22:02:36 Description: No description available.
CVE ID: CVE-2011-4977 State: REJECTED Published: 2020-11-05T22:02:57 Last Updated: 2020-11-05T22:02:57 Description: No description available.
CVE ID: CVE-2011-4978 State: REJECTED Published: 2020-11-05T22:03:22 Last Updated: 2020-11-05T22:03:22 Description: No description available.
CVE ID: CVE-2011-4979 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4980 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4981 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4982 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4983 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4984 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4985 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4986 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4987 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4988 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4989 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4990 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4991 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4992 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4993 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4994 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4995 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4996 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4997 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4998 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4999 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-5000 State: PUBLISHED Published: 2012-04-04T10:00:00 Last Updated: 2024-08-07T00:23:39.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2011/Aug/2 - http://rhn.redhat.com/errata/RHSA-2012-0884.html - http://site.pi3.com.pl/adv/ssh_1.txt
CVE ID: CVE-2011-5001 State: PUBLISHED Published: 2011-12-25T01:00:00 Last Updated: 2024-08-07T00:23:39.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 allows remote attackers to execute arbitrary code via a crafted IPC packet to TCP port 20101. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520780/100/0/threaded - http://www.securitytracker.com/id?1026390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71681 - http://secunia.com/adviso
.securitytracker.com/id?1026390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71681 - http://secunia.com/advisories/47114 - http://www.trendmicro.com/ftp/documentation/readme/readme_critical_patch_TMCM55_1613.txt - http://www.zerodayinitiative.com/advisories/ZDI-11-345/
CVE ID: CVE-2011-5002 State: PUBLISHED Published: 2011-12-25T01:00:00 Last Updated: 2024-08-07T00:23:39.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to execute arbitrary code via a .fdx or .fdxt file with long (1) Word, (2) Transition, (3) Location, (4) Extension, (5) SceneIntro, (6) TimeOfDay, and (7) Character elements. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50850 - http://osvdb.org/77454 - http://www.exploit-db.com/exploits/18184 - http://www.security-assessment.com/files/documents/advisory/Final_Draft-Multiple_Stack_Buffer
it-db.com/exploits/18184 - http://www.security-assessment.com/files/documents/advisory/Final_Draft-Multiple_Stack_Buffer_Overflows.pdf - http://secunia.com/advisories/47044
CVE ID: CVE-2011-5003 State: PUBLISHED Published: 2011-12-25T01:00:00 Last Updated: 2024-08-07T00:23:39.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18183 - http://www.osvdb.org/77376 - http://www.securityfocus.com/bid/50843 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71514 - http://secunia.com/advisories/47047 - http://www.security-assessment.com/files/document
loud.com/vulnerabilities/71514 - http://secunia.com/advisories/47047 - http://www.security-assessment.com/files/documents/advisory/Avid_Media_Composer-Phonetic_Indexer-Remote_Stack_Buffer_Overflow.pdf
CVE ID: CVE-2011-5004 State: PUBLISHED Published: 2011-12-25T01:00:00 Last Updated: 2024-08-07T00:23:39.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com_fabrik) component before 2.1.1 for Joomla! allows remote authenticated users with Manager privileges to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.ohloh.net/p/3417/commits/145749116 - http://www.osvdb.org/77371 - http://www.vulnerability-lab.com/get_content.php?id
ww.ohloh.net/p/3417/commits/145749116 - http://www.osvdb.org/77371 - http://www.vulnerability-lab.com/get_content.php?id=342 - http://www.securityfocus.com/bid/50823 - http://secunia.com/advisories/47036
CVE ID: CVE-2011-5005 State: PUBLISHED Published: 2011-12-25T01:00:00 Last Updated: 2024-08-07T00:23:39.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18118 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71323
CVE ID: CVE-2011-5006 State: PUBLISHED Published: 2011-12-25T01:00:00 Last Updated: 2024-08-07T00:23:39.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize value in a MOV file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18137 - http://www.osvdb.org/77266 - http://www.securityfocus.com/bid/50739 - http://secunia.com/advisories/46924
CVE ID: CVE-2011-5007 State: PUBLISHED Published: 2011-12-25T01:00:00 Last Updated: 2024-08-07T00:23:39.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf - http://seclists.org/bugtraq/2011/Nov/178 - http://secunia.com/advisories/47018 - http://aluigi.altervista.org/adv/codesys_1-adv.txt - http://osvdb.org/7738
v/178 - http://secunia.com/advisories/47018 - http://aluigi.altervista.org/adv/codesys_1-adv.txt - http://osvdb.org/77387 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-12-320-01 - http://www.exploit-db.com/exploits/18187
CVE ID: CVE-2011-5008 State: PUBLISHED Published: 2011-12-25T01:00:00 Last Updated: 2024-08-07T00:23:39.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to execute arbitrary code via a large size value in the packet header, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf - http://seclists.org/bugtraq/2011/Nov/178 - http://secunia.com/advisories/47018 - http://aluigi.altervista.org/adv/codesys_1-adv.txt - http://www.osvdb.org/77386 - https://exchang
com/advisories/47018 - http://aluigi.altervista.org/adv/codesys_1-adv.txt - http://www.osvdb.org/77386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71531
CVE ID: CVE-2011-5009 State: PUBLISHED Published: 2011-12-25T01:00:00 Last Updated: 2024-08-07T00:23:39.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a crafted Content-Length in an HTTP POST or (2) an invalid HTTP request method. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf - http://seclists.org/bugtraq/2011/Nov/178 - http://secunia.com/advisories/47018 - http://aluigi.altervista.org/adv/codesys_1-adv.txt - http://www.osv
2011/Nov/178 - http://secunia.com/advisories/47018 - http://aluigi.altervista.org/adv/codesys_1-adv.txt - http://www.osvdb.org/77388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71533 - http://www.osvdb.org/77389
CVE ID: CVE-2011-5010 State: PUBLISHED Published: 2011-12-25T01:00:00 Last Updated: 2024-08-07T00:23:39.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action. Additional Analyst Notes: - CVE Program Container: References: - http://dev.metasploit.com/redmine/issues/5610 - http://www.securityfocus.com/bid/50867 - http://osvdb.org/77497 - http://secunia.com/advisories/47003 - http://www.exploit-db.com/exploits/18172
CVE ID: CVE-2011-5011 State: PUBLISHED Published: 2011-12-25T01:00:00 Last Updated: 2024-08-07T00:23:39.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in xt:Commerce 3.0.4 SP2.1 and possibly earlier allow remote attackers to hijack the authentication of Admins for requests that (1) set a New user to Admin via the cID parameter to a statusconfirm action in admin/customers.php and (2) grant permissions to users via the cID parameter to a save action in admin/accounting.php. Additional Analyst Notes: - CVE Program Container: References: - http://dishix.blogspot.com/p/xtcommerce-v304-sp21-cross-site-request_29.html - htt
CVE Program Container: References: - http://dishix.blogspot.com/p/xtcommerce-v304-sp21-cross-site-request_29.html - http://osvdb.org/77498 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71642 - http://secunia.com/advisories/47032 - http://dishix.blogspot.com/2011/11/exploiting-xtcommerce-v304-sp21-cross.html
CVE ID: CVE-2011-5012 State: PUBLISHED Published: 2011-12-25T01:00:00 Last Updated: 2024-08-07T00:23:39.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Reflection FTP Client (rftpcom.dll 7.2.0.106 and possibly other versions), as used in Attachmate Reflection 2008, Reflection 2011 R1 before 15.3.2.569 and R1 SP1 before, Reflection 2011 R2 before 15.4.1.327, Reflection Windows Client 7.2 SP1 before hotfix 7.2.1186, and Reflection 14.1 SP1 before 14.1.1.206, allows remote FTP servers to execute arbitrary code via a long directory name in a response to a LIST command. Additional Analyst Notes: - CVE Program Container: References: - http://suppor
ory name in a response to a LIST command. Additional Analyst Notes: - CVE Program Container: References: - http://support.attachmate.com/techdocs/1708.html - http://www.exploit-db.com/exploits/18119 - http://support.attachmate.com/techdocs/2502.html - http://secunia.com/advisories/46879 - http://support.attachmate.com/techdocs/2288.html - http://www.osvdb.org/77189 - http://www.securitytracker.com/id?1026340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71330 - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=29&Itemid=29
CVE ID: CVE-2011-5018 State: PUBLISHED Published: 2020-01-08T22:23:09 Last Updated: 2024-08-07T00:23:39.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Koala Framework before 2011-11-21 has XSS via the request_uri parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.cloudscan.me/2011/12/cve-2011-5018-koala-framework-xss.html - https://groups.google.com/forum/#%21topic/koala-framework-dev/wgHDD7N7qhk - https://github.com/koala-framework/koala-framework/commit/59f81ea6bd8ef96c04a706a3ca453cd656284faa
CVE ID: CVE-2011-5019 State: PUBLISHED Published: 2012-01-05T16:00:00 Last Updated: 2024-08-07T00:23:39.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in setup/index.php in Textpattern CMS 4.4.1, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the ddb parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51254 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0018.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72102
CVE ID: CVE-2011-5020 State: PUBLISHED Published: 2020-01-10T18:13:08 Last Updated: 2024-08-07T00:23:39.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection vulnerability exists in the ID parameter in Online TV Database 2011. Additional Analyst Notes: - CVE Program Container: References: - http://www.cloudscan.me/2012/02/cve-2011-5020-online-tv-database-sql.html