Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/revisions/14956 - http://secunia.com/advisories/45542 - https://forge.indepnet.net/projects/glpi/repository/revisions/14951 - http://www.openwall.com/lists/oss-security/2011/07/26/11 - https://forge.indepnet.net/projects/glpi/repository/revisions/14957 - http://www.openwall.com/lists/oss-security/2011/07/25/7 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:014 - https://forge.indepnet.net/projects/glpi/repository/revisions/14958 - http://www.securityfocus.com/bid/48884 - https://forge.indepnet.net/projects/glpi/repository/revisions/14955 - https://forge.indepnet.net/projects/glpi/repository/revisions/14966 - http://www.glpi-project.org/spip.php?page=annonce&id_breve=237&lang=e
net.net/projects/glpi/repository/revisions/14966 - http://www.glpi-project.org/spip.php?page=annonce&id_breve=237&lang=en - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063408.html - https://forge.indepnet.net/projects/glpi/repository/revisions/14960 - https://forge.indepnet.net/projects/glpi/repository/revisions/14954 - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063679.html - http://secunia.com/advisories/45366 - https://forge.indepnet.net/projects/glpi/repository/revisions/14952 - https://forge.indepnet.net/projects/glpi/versions/605
CVE ID: CVE-2011-2721 State: PUBLISHED Published: 2011-08-05T21:00:00 Last Updated: 2024-08-06T23:08:23.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45382 - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068942.html - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0
e/2011-November/068942.html - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.97.2 - http://securitytracker.com/id?1025858 - https://bugzilla.redhat.com/show_bug.cgi?id=725694 - http://www.ubuntu.com/usn/USN-1179-1 - https://bugzilla.novell.com/show_bug.cgi?id=708263 - http://secunia.com/advisories/46717 - http://www.openwall.com/lists/oss-security/2011/07/26/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68785 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commit%3Bh=4842733eb3f09be61caeed83778bb6679141dbc5 - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068940.html - http://lists.fedoraproject.org/piperma
://lists.fedoraproject.org/pipermail/package-announce/2011-November/068940.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068941.html - http://www.openwall.com/lists/oss-security/2011/07/26/13 - http://www.securityfocus.com/bid/48891 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2818 - http://www.osvdb.org/74181 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:122
CVE ID: CVE-2011-2722 State: PUBLISHED Published: 2012-05-25T20:00:00 Last Updated: 2024-08-06T23:08:23.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=704608 - http://secunia.com/advisories/55083 - http://www.ubuntu.com/usn/USN-1981-1 - http://rhn.redhat.com/errata/RHSA-2013-0133.html - https://bugs.launchpad.net/hplip/+bug/809904 - https:/
n/USN-1981-1 - http://rhn.redhat.com/errata/RHSA-2013-0133.html - https://bugs.launchpad.net/hplip/+bug/809904 - https://bugzilla.redhat.com/attachment.cgi?id=515866&action=diff - http://hplipopensource.com/hplip-web/release_notes.html - https://bugzilla.redhat.com/show_bug.cgi?id=725830 - http://security.gentoo.org/glsa/glsa-201203-17.xml - http://www.openwall.com/lists/oss-security/2011/07/26/14 - http://secunia.com/advisories/48441
CVE ID: CVE-2011-2723 State: PUBLISHED Published: 2011-09-06T15:00:00 Last Updated: 2024-08-06T23:08:23.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=726552 - http://www.redhat.com/support/errata/RHSA-2011-1321.html - http://openwall.com/lists/oss-security/2011/07/29/1 - http:
- http://www.redhat.com/support/errata/RHSA-2011-1321.html - http://openwall.com/lists/oss-security/2011/07/29/1 - http://securitytracker.com/id?1025876 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=17dd759c67f21e34f2156abcf415e1f60605a188 - http://openwall.com/lists/oss-security/2011/07/28/13 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.4 - http://www.securityfocus.com/bid/48929 - http://marc.info/?l=bugtraq&m=139447903326211&w=2
CVE ID: CVE-2011-2724 State: PUBLISHED Published: 2011-09-06T16:00:00 Last Updated: 2024-08-06T23:08:23.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547. Additional Analyst Notes: - CVE Program Container: References: - http://git.samba.org/?p=cifs-utils.git%3Ba=commit%3Bh=1e7a32924b22d1f786b6f490ce85906
E Program Container: References: - http://git.samba.org/?p=cifs-utils.git%3Ba=commit%3Bh=1e7a32924b22d1f786b6f490ce8590656f578f91 - http://www.redhat.com/support/errata/RHSA-2011-1220.html - https://bugzilla.redhat.com/show_bug.cgi?id=726691 - http://secunia.com/advisories/45798 - http://www.securitytracker.com/id?1025984 - http://openwall.com/lists/oss-security/2011/07/29/9 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:148 - http://comments.gmane.org/gmane.linux.kernel.cifs/3827 - http://www.redhat.com/support/errata/RHSA-2011-1221.html
CVE ID: CVE-2011-2725 State: PUBLISHED Published: 2014-02-04T19:00:00 Last Updated: 2024-08-06T23:08:23.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via .. (dot dot) sequences in a zip file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00002.html - http://seclists.org/fulldisclosure/2011/Oct/351 - https://bugzilla.redhat.com/show_bug.cgi?id=725764 - https://bugzilla.novell.com/show_bug.cgi?id=708268 - http://packetstormsecurity.com/files/105610/Ark-2.16-Directory-Trave
ttps://bugzilla.novell.com/show_bug.cgi?id=708268 - http://packetstormsecurity.com/files/105610/Ark-2.16-Directory-Traversal.html - http://www.ubuntu.com/usn/USN-1276-1
CVE ID: CVE-2011-2726 State: PUBLISHED Published: 2019-11-15T16:21:51 Last Updated: 2024-08-06T23:08:23.951Z Vendors: drupal core Products: drupal core Problem Types: UNKNOWN_TYPE Description: An access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the ability to attach File upload fields to any entity type in the system or has the ability to point individual File upload fields to the private file directory in comments, and the parent node is denied access, non-privileged users can still download the file attached to the comment if they know or guess its direct URL. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debia
or guess its direct URL. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2726 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2726 - https://access.redhat.com/security/cve/cve-2011-2726 - http://www.openwall.com/lists/oss-security/2012/03/19/10 - http://www.openwall.com/lists/oss-security/2012/03/20/14 - https://www.drupal.org/node/1231510
CVE ID: CVE-2011-2727 State: PUBLISHED Published: 2014-12-30T02:00:00 Last Updated: 2024-08-06T23:08:23.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22857
CVE ID: CVE-2011-2728 State: PUBLISHED Published: 2012-12-21T02:00:00Z Last Updated: 2024-08-06T23:08:23.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://cpansearch.perl.org/src/FLORA/perl-5.14.2/pod/perldelta.pod - http://perl5.git.perl.org/perl.git/commit/1af4051e077438976a4c12a0622feaf6715bec77 - https://blogs.oracle.com/sunsecurity/entry/cve_2011_2728_denial_
l.git/commit/1af4051e077438976a4c12a0622feaf6715bec77 - https://blogs.oracle.com/sunsecurity/entry/cve_2011_2728_denial_of1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069752.html - http://www.securityfocus.com/bid/49858 - http://secunia.com/advisories/46172 - https://bugzilla.redhat.com/show_bug.cgi?id=742987
CVE ID: CVE-2011-2729 State: PUBLISHED Published: 2011-08-15T21:00:00 Last Updated: 2024-08-06T23:08:23.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/69161 - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00024.h
ange.xforce.ibmcloud.com/vulnerabilities/69161 - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00024.html - http://svn.apache.org/viewvc?view=revision&revision=1153824 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://securitytracker.com/id?1025925 - http://people.apache.org/~markt/patches/2011-08-12-cve2011-2729-tc5.patch - http://tomcat.apache.org/security-7.html - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=730400 - http://www.redhat.com/support/errata/RHSA-2011-1291.html - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - http://svn.apache.org/viewvc?view=revision&revision=1152701 - http://svn.apache.org/v
?l=bugtraq&m=132215163318824&w=2 - http://svn.apache.org/viewvc?view=revision&revision=1152701 - http://svn.apache.org/viewvc?view=revision&revision=1153379 - http://www.securityfocus.com/archive/1/519263/100/0/threaded - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://mail-archives.apache.org/mod_mbox/commons-dev/201108.mbox/%3C4E451B2B.9090108%40apache.org%3E - https://issues.apache.org/jira/browse/DAEMON-214 - http://www.securityfocus.com/bid/49143 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19450 - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - http://secunia.com/advisories/46030 - http://tomcat.apa
ef%3A19450 - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - http://secunia.com/advisories/46030 - http://tomcat.apache.org/security-5.html - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - http://www.redhat.com/support/errata/RHSA-2011-1292.html - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://mail-archives.apache.org/mod_mbox/tomcat-announce/201108.mbox/%3C4E45221D.1020306%40apache.org%3E - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14743 - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lis
che.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2011-2730 State: PUBLISHED Published: 2012-12-05T17:00:00 Last Updated: 2024-08-06T23:08:23.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a (1) name attribute in a (a) spring:hasBindErrors tag; (2) path attribute in a (b) spring:bind or (c) spring:nestedpath tag; (3) arguments, (4) code, (5) text, (6) var, (7) scope, or (8) message attribute in a (d) spring:message or (e) spring:theme tag; or (9) var, (10) scope, or
6) var, (7) scope, or (8) message attribute in a (d) spring:message or (e) spring:theme tag; or (9) var, (10) scope, or (11) value attribute in a (f) spring:transform tag, aka "Expression Language Injection." Additional Analyst Notes: - CVE Program Container: References: - http://support.springsource.com/security/cve-2011-2730 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677814 - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-2013-0198.html - http://rhn.redhat.com/errata/RHSA-2013-0195.html - http://rhn.redhat.com/errata/RHSA-2013-0221.html - http://www.debian.org/security/2012/dsa-2504 - http://rhn.redhat.com/errata/RHSA-2013-0196.html - http://se
-0221.html - http://www.debian.org/security/2012/dsa-2504 - http://rhn.redhat.com/errata/RHSA-2013-0196.html - http://secunia.com/advisories/55155 - http://rhn.redhat.com/errata/RHSA-2013-0193.html - http://secunia.com/advisories/51984 - http://secunia.com/advisories/52054 - http://rhn.redhat.com/errata/RHSA-2013-0191.html - http://rhn.redhat.com/errata/RHSA-2013-0533.html - http://rhn.redhat.com/errata/RHSA-2013-0197.html - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://www.securitytracker.com/id/1029151 - http://rhn.redhat.com/errata/RHSA-2013-0194.html - https://docs.google.com/document/d/1dc1xxO8UMFaGLOwgkykYdghGWm_2Gn0iCrxFsympqcE/edit
CVE ID: CVE-2011-2731 State: PUBLISHED Published: 2012-12-05T17:00:00 Last Updated: 2024-08-06T23:08:23.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread. Additional Analyst Notes: - CVE Program Container: References: - http://support.springsource.com/security/cve-2011-2731 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677814 - http://secunia.com/advisories/55155 - http://www.securitytracker.com/id/1029151
CVE ID: CVE-2011-2732 State: PUBLISHED Published: 2012-12-05T17:00:00Z Last Updated: 2024-08-06T23:08:23.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677814 - http://support.springsource.com/security/cve-2011-2732
CVE ID: CVE-2011-2733 State: PUBLISHED Published: 2011-08-18T23:00:00 Last Updated: 2024-08-06T23:08:23.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users to bypass intended access restrictions via vectors related to knowledge of the originally used authentication information and unspecified other session information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49574 - http://www.securityfocus.com/archive/1/5
- CVE Program Container: References: - http://www.securityfocus.com/bid/49574 - http://www.securityfocus.com/archive/1/519346/100/0/threaded - http://securityreason.com/securityalert/8344
CVE ID: CVE-2011-2734 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-2735 State: PUBLISHED Published: 2011-08-23T21:00:00 Last Updated: 2024-08-06T23:08:23.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.1 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted message over TCP. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8352 - http://secunia.com/advisories/45703 - http://securitytracker.com/id?1025958 - http://www.securityfocus.com/bid/49238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69296 - http://www.securityfocus.co
w.securityfocus.com/bid/49238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69296 - http://www.securityfocus.com/archive/1/519371/100/0/threaded
CVE ID: CVE-2011-2736 State: PUBLISHED Published: 2011-08-25T14:00:00 Last Updated: 2024-08-06T23:08:23.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSA enVision 4.x before 4 SP4 P3 places cleartext administrative credentials in Task Escalation e-mail messages, which allows remote attackers to obtain sensitive information by sniffing the network or leveraging access to a recipient mailbox. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/519395/100/0/threaded - http://securityreason.com/securityalert/8350 - http://www.securitytracker.com/id?1025979
CVE ID: CVE-2011-2737 State: PUBLISHED Published: 2011-08-25T14:00:00 Last Updated: 2024-08-06T23:08:23.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSA enVision 3.x and 4.x before 4 SP4 P3 allows remote attackers to read arbitrary files via unspecified vectors, related to an "arbitrary file retrieval vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/519395/100/0/threaded - http://securityreason.com/securityalert/8350 - http://www.securitytracker.com/id?1025979
CVE ID: CVE-2011-2738 State: PUBLISHED Published: 2011-09-17T10:00:00 Last Updated: 2024-08-06T23:08:23.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor (Ionix ACM) 2.3 and earlier, Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) 3.2.0.2 and earlier, IP Management Suite (Ionix IP) 8.1.1.1 and earlier, and other Ionix products; allow remote attackers to execute arbitrary code via crafted packets to TCP port 9
nd earlier, and other Ionix products; allow remote attackers to execute arbitrary code via crafted packets to TCP port 9002, aka Bug IDs CSCtn42961 and CSCtn64922, related to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46052 - http://www.securitytracker.com/id?1026048 - http://secunia.com/advisories/46053 - http://secunia.com/advisories/45979 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9351f.shtml - http://www.osvdb.org/75442 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69828 - http://secunia.com/advisories/46016 - http://www.securityfocus.com/bid/49627 - http://www.securityfocus.co
ities/69828 - http://secunia.com/advisories/46016 - http://www.securityfocus.com/bid/49627 - http://www.securityfocus.com/bid/49644 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9351e.shtml - http://www.securitytracker.com/id?1026059 - http://www.securitytracker.com/id?1026047 - http://www.securitytracker.com/id?1026046 - http://www.securityfocus.com/archive/1/519646/100/0/threaded
CVE ID: CVE-2011-2739 State: PUBLISHED Published: 2011-11-09T23:00:00 Last Updated: 2024-08-06T23:08:23.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of files with dangerous file types, which allows remote authenticated users to execute arbitrary code via an uploaded file. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8528 - http://www.securityfocus.com/archive/1/520372
CVE ID: CVE-2011-2740 State: PUBLISHED Published: 2011-11-09T23:00:00 Last Updated: 2024-08-06T23:08:23.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminate a user session upon a logout action, which makes it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8529 - http://www.securityfocus.com/archive/1/520381 - http://www.securitytracker.com/id?1026276
CVE ID: CVE-2011-2741 State: PUBLISHED Published: 2011-12-14T11:00:00 Last Updated: 2024-08-06T23:08:23.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly implement Device Recovery and Device Identification, which might allow remote attackers to bypass intended security restrictions on a (1) previously non-registered device or (2) registered device by sending unspecified "data elements." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026420 - http://www.securityfocus.com/archive/1/520850
CVE ID: CVE-2011-2742 State: PUBLISHED Published: 2011-12-14T11:00:00 Last Updated: 2024-08-06T23:08:23.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly perform forensic evaluation upon receipt of device tokens from mobile apps, which might allow remote attackers to bypass intended application restrictions via a mobile device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026420 - http://www.securityfocus.com/archive/1/520850