Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-2016 State: PUBLISHED Published: 2011-11-08T21:00:00.000Z Last Updated: 2025-06-04T15:49:44.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .eml or .wcinv file, aka "Windows Mail Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/secu
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-085 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14028
CVE ID: CVE-2011-2017 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-2018 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T22:46:00.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 does not properly initialize objects, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Exception Handler Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14635 - https://do
11-347A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14635 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-098
CVE ID: CVE-2011-2019 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T22:46:00.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an HTML file, aka "Internet Explorer Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybul
: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-099 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13884
CVE ID: CVE-2011-2020 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:46:00.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories/iprocess-advisory_20110518.jsp - https://exchange.xforce.ibmcloud.com/vulnerabilities/67537 - http://www.securityfocus.com/bid/47921 - http://www.vupen.com/english/advisories/2011/1272 - http://secunia.com/advisor
http://www.securityfocus.com/bid/47921 - http://www.vupen.com/english/advisories/2011/1272 - http://secunia.com/advisories/44639 - http://osvdb.org/72553 - http://www.tibco.com/multimedia/iprocess_advisory_20110518_tcm8-13710.txt
CVE ID: CVE-2011-2021 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:46:00.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories/iprocess-advisory_20110518.jsp - https://exchange.xforce.ibmcloud.com/vulnerabilities/67538 - http://www.securityfocus.com/bid/47921 - http://osvdb.org/72554 - http://www.vupen.com/english/advisories/2011/1272 - http://secunia.com/advisori
com/bid/47921 - http://osvdb.org/72554 - http://www.vupen.com/english/advisories/2011/1272 - http://secunia.com/advisories/44639 - http://www.tibco.com/multimedia/iprocess_advisory_20110518_tcm8-13710.txt
CVE ID: CVE-2011-2022 State: PUBLISHED Published: 2011-05-09T19:00:00 Last Updated: 2024-08-06T22:46:00.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start parameter, which allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_UNBIND agp_ioctl ioctl call, a different vulnerability than CVE-2011-1745. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2011-0927.html - http://openwall.com/lists/oss-security/2011/04/21/4 - https://bugzilla.redhat.com/
dhat.com/errata/RHSA-2011-0927.html - http://openwall.com/lists/oss-security/2011/04/21/4 - https://bugzilla.redhat.com/show_bug.cgi?id=698996 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=194b3da873fd334ef183806db751473512af29ce - https://lkml.org/lkml/2011/4/14/293 - http://openwall.com/lists/oss-security/2011/04/22/7 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.5 - http://www.securityfocus.com/bid/47843
CVE ID: CVE-2011-2023 State: PUBLISHED Published: 2011-07-14T23:00:00 Last Updated: 2024-08-06T22:46:00.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2291 - http://support.apple.com/kb/HT5130 - http://www.squirrelmail.org/security/issue/2011-07-10 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:123 - http://lists.apple.com/archives/security-announce/2012/
ttp://www.mandriva.com/security/advisories?name=MDVSA-2011:123 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=720695 - http://rhn.redhat.com/errata/RHSA-2012-0103.html - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=revision&revision=14121 - http://securitytracker.com/id?1025766
CVE ID: CVE-2011-2024 State: PUBLISHED Published: 2011-06-02T20:00:00 Last Updated: 2024-08-06T22:46:00.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Network Registrar before 7.2 has a default administrative password, which makes it easier for remote attackers to obtain access via a TCP session, aka Bug ID CSCsm50627. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67782 - http://www.securitytracker.com/id?1025589 - http://www.securityfocus.com/bid/48076 - http://osvdb.org/72720 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80121.shtml
CVE ID: CVE-2011-2039 State: PUBLISHED Published: 2011-06-02T19:00:00 Last Updated: 2024-08-06T22:46:00.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a certain ActiveX control in vpnweb.ocx, aka Bug ID CSCsy00904. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/72714 - http://www.cisco.com/en/US/products/products_security_advi
CVE Program Container: References: - http://osvdb.org/72714 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml - http://securityreason.com/securityalert/8272 - http://www.securitytracker.com/id?1025591 - http://www.kb.cert.org/vuls/id/490097 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=909 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67739
CVE ID: CVE-2011-2040 State: PUBLISHED Published: 2011-06-02T19:00:00 Last Updated: 2024-08-06T22:46:01.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a Java applet, aka Bug ID CSCsy05934. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml - http://
Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=910 - http://www.securitytracker.com/id?1025591 - http://www.kb.cert.org/vuls/id/490097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67739
CVE ID: CVE-2011-2041 State: PUBLISHED Published: 2011-06-02T20:00:00 Last Updated: 2024-08-06T22:46:00.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml - http://osvdb.org/72716 - http://www.securitytracker.com/id?1025591 - http://www.securityfocus.com/bid/4807
80123.shtml - http://osvdb.org/72716 - http://www.securitytracker.com/id?1025591 - http://www.securityfocus.com/bid/48077
CVE ID: CVE-2011-2042 State: PUBLISHED Published: 2011-10-22T01:00:00Z Last Updated: 2024-09-17T02:10:43.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and database port via an unspecified request to UDP port 2638, aka Bug ID CSCsk35018. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_common_services_software/3.3/release/notes/cs33rel.html
CVE ID: CVE-2011-2054 State: PUBLISHED Published: 2020-02-19T03:05:13.966780Z Last Updated: 2024-11-15T17:41:33.434Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Cisco Products: Cisco ASA Problem Types: CWE-287 Description: A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Secondary Authentication type is LDAP and the password is left blank, providing the primary credentials are correct. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker must have the correct primary credentials in order to suc
ertain parameters passed to the affected software. An attacker must have the correct primary credentials in order to successfully exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://quickview.cloudapps.cisco.com/quickview/bug/CSCtq58884
CVE ID: CVE-2011-2057 State: PUBLISHED Published: 2011-10-22T01:00:00Z Last Updated: 2024-09-17T00:06:51.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle (1) a loop between a dot1x enabled port and an open-authentication dot1x enabled port and (2) a loop between a dot1x enabled port and a non-dot1x port, which allows remote attackers to cause a denial of service (traffic storm) via unspecified vectors that trigger many Spanning Tree Protocol (STP) Bridge Protocol Data Unit (BPDU) frames, aka Bug ID CSCtq36327. Additional Analyst Notes: - CVE Program Container: References: - http://www.ci
nit (BPDU) frames, aka Bug ID CSCtq36327. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXI_rebuilds.html
CVE ID: CVE-2011-2058 State: PUBLISHED Published: 2011-10-22T01:00:00Z Last Updated: 2024-09-17T02:58:00.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle an external loop between a pair of dot1x enabled ports, which allows remote attackers to cause a denial of service (traffic storm) via unspecified vectors that trigger many unicast EAPoL Protocol Data Units (PDUs), aka Bug ID CSCtq36336. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXI_rebuilds.html
CVE ID: CVE-2011-2059 State: PUBLISHED Published: 2011-10-22T01:00:00Z Last Updated: 2024-09-17T04:03:35.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipv6 component in Cisco IOS before 15.1(4)M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet containing a Hop-by-Hop (HBH) extension header (EH) with a 0x0c01050c value in the PadN option data, aka Bug ID CSCtq02219. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=36606&signatureSubId=0 - http://blogs
eferences: - http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=36606&signatureSubId=0 - http://blogs.cisco.com/security/1999tcp-redux-the-ipv6-flavor
CVE ID: CVE-2011-2060 State: PUBLISHED Published: 2011-10-22T01:00:00Z Last Updated: 2024-09-16T16:43:06.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: The platform-sw component on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 before 8.2(5.3), 8.3 before 8.3(2.20), and 8.4 before 8.4(2.1) does not properly handle non-ASCII characters in an interface description, which allows local users to cause a denial of service (reload without configuration) via a crafted description, aka Bug ID CSCtq50523. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html
CVE ID: CVE-2011-2064 State: PUBLISHED Published: 2011-07-11T20:00:00 Last Updated: 2024-08-06T22:46:00.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.4MDA before 12.4(24)MDA5 on the Cisco Content Services Gateway - Second Generation (CSG2) allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets, aka Bug ID CSCtl79577. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45148 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b86503.shtml - http://securitytracker.com/id?1025748 - http://www.securityfocus.com/bid/48581 - https://exchange.xforce.ibmcloud.com/vul
ttp://securitytracker.com/id?1025748 - http://www.securityfocus.com/bid/48581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68408 - http://osvdb.org/73657
CVE ID: CVE-2011-2072 State: PUBLISHED Published: 2011-10-03T23:00:00 Last Updated: 2024-08-06T22:46:00.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco IOS 12.4, 15.0, and 15.1, Cisco IOS XE 2.5.x through 3.2.x, and Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su4, 8.x before 8.5(1)su2, and 8.6 before 8.6(1) allows remote attackers to cause a denial of service (memory consumption and device reload or process failure) via a malformed SIP message, aka Bug IDs CSCtl86047 and CSCto88686. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026110 - http://www.cisco.com/en/US/products/prod
VE Program Container: References: - http://www.securitytracker.com/id?1026110 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d58.shtml - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d5a.shtml - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-cucm - http://tools.cisco.com/security/center/viewAlert.x?alertId=24129
CVE ID: CVE-2011-2074 State: PUBLISHED Published: 2011-05-10T18:00:00Z Last Updated: 2024-09-17T00:37:12.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary code or cause a denial of service (application crash) via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://blogs.skype.com/security/2011/05/security_vulnerability_in_mac.html - http://www.purehacking.com/blogs/gordon-maddern/skype-0day-vulnerabilitiy-discovered-by-pure-hacking - http://secunia.com/advisories/44522 - http://www.securityfocus.com/bid/4
day-vulnerabilitiy-discovered-by-pure-hacking - http://secunia.com/advisories/44522 - http://www.securityfocus.com/bid/47747 - http://www.theregister.co.uk/2011/05/06/skype_for_mac_critical_vulnerability/ - http://www.vupen.com/english/advisories/2011/1192 - http://isc.sans.edu/diary.html?storyid=10837
CVE ID: CVE-2011-2075 State: PUBLISHED Published: 2011-05-10T18:00:00 Last Updated: 2024-08-06T22:46:00.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome 11.0.696.65 on Windows 7 SP1 allows remote attackers to execute arbitrary code via unknown vectors. NOTE: as of 20110510, the only disclosure is a vague advisory that possibly relates to multiple vulnerabilities or multiple products. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47771 - http://www.vupen.com/demos/VUPEN_Pw
tes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47771 - http://www.vupen.com/demos/VUPEN_Pwning_Chrome.php - http://www.youtube.com/watch?v=c8cQ0yU89sk - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14099
CVE ID: CVE-2011-2076 State: PUBLISHED Published: 2011-05-10T19:00:00 Last Updated: 2024-08-06T22:46:00.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaCAST 8 and earlier stores passwords in cleartext, which makes it easier for context-dependent attackers to obtain sensitive information by reading an unspecified password data store, a different vulnerability than CVE-2010-0216. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt - http://securityreason.com/securityalert/8245
CVE ID: CVE-2011-2077 State: PUBLISHED Published: 2011-05-10T19:00:00 Last Updated: 2024-08-06T22:46:00.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easier for remote attackers to have an unspecified impact via a TCP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt - http://securityreason.com/securityalert/8245
CVE ID: CVE-2011-2078 State: PUBLISHED Published: 2011-05-10T19:00:00 Last Updated: 2024-08-06T22:46:01.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt - http://securityreason.com/securityalert/8245
CVE ID: CVE-2011-2079 State: PUBLISHED Published: 2011-05-10T19:00:00 Last Updated: 2024-08-06T22:46:00.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaCAST 8 and earlier allows remote attackers to have an unspecified impact via a (1) CP_RIGHTSOURCE or (2) bdclient_Inventive cookie to the default URI under inventivex/managetraining/, related to an "XML injection" issue. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44182 - http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt - http://securityreason.com/securityalert/8245
CVE ID: CVE-2011-2080 State: PUBLISHED Published: 2011-05-10T19:00:00 Last Updated: 2024-08-06T22:46:00.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MediaCAST 8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) a CP_ENLARGESTYLE cookie to the default URI under inventivex/managetraining/ or (2) unspecified input to authenticate_ad_setup_finished.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67220 - http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt - http://securityreaso
vulnerabilities/67220 - http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt - http://securityreason.com/securityalert/8245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67221
CVE ID: CVE-2011-2081 State: PUBLISHED Published: 2011-05-10T19:00:00 Last Updated: 2024-08-06T22:46:00.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaCAST 8 and earlier does not properly handle requests for inventivex/isptools/release/metadata/globalIncludeFolders.txt, which allows remote attackers to obtain sensitive information via unspecified vectors related to the Public/ directory tree. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44182 - http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt - http://securityreason.com/securityalert/8245
CVE ID: CVE-2011-2082 State: PUBLISHED Published: 2012-06-04T19:00:00 Last Updated: 2024-08-06T22:46:01.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algorithm for disabled user accounts, which makes it easier for context-dependent attackers to determine cleartext passwords, and possibly use these passwords after accounts are re-enabled, via a brute-force attack on the database. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0009. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpr