Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4033 State: PUBLISHED Published: 2011-12-02T11:00:00Z Last Updated: 2024-09-17T00:31:42.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page - http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf - http://www.citect.com/index.php?optio
lnerability.page - http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf - http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695
CVE ID: CVE-2011-4034 State: PUBLISHED Published: 2011-12-02T11:00:00Z Last Updated: 2024-09-16T23:16:13.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page - http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf - http://www.
cada/en/login/historian-vulnerability.page - http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf - http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695
CVE ID: CVE-2011-4035 State: PUBLISHED Published: 2011-12-02T11:00:00 Last Updated: 2024-08-06T23:53:32.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71503 - http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page - http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-
electric.com/sites/scada/en/login/historian-vulnerability.page - http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf - http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695
CVE ID: CVE-2011-4036 State: PUBLISHED Published: 2011-12-02T11:00:00Z Last Updated: 2024-09-16T18:13:14.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page - http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf - http://www.citect.com/index.php?option=com_content&view=article&id=1656&I
t.gov/control_systems/pdf/ICSA-11-307-01.pdf - http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695
CVE ID: CVE-2011-4037 State: PUBLISHED Published: 2011-12-22T15:00:00Z Last Updated: 2024-09-16T19:51:21.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields of a project file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47078 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-298-01.pdf - http://securitytracker.com/id?1026388
CVE ID: CVE-2011-4038 State: PUBLISHED Published: 2012-02-10T19:00:00Z Last Updated: 2024-09-17T04:08:45.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-024-01.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-039-01.pdf - http://secunia.com/advisories/47742 - http://secunia.com/advisories/47
cert.gov/control_systems/pdf/ICSA-12-039-01.pdf - http://secunia.com/advisories/47742 - http://secunia.com/advisories/47933
CVE ID: CVE-2011-4039 State: PUBLISHED Published: 2012-02-10T19:00:00Z Last Updated: 2024-09-16T18:03:52.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows user-assisted remote attackers to execute arbitrary code via a malformed file that triggers a "write access violation." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-024-01.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-039-01.pdf - http://secunia.com/advisories/47742 - http://secunia.com/advisories/47933
CVE ID: CVE-2011-4040 State: PUBLISHED Published: 2011-11-21T11:00:00Z Last Updated: 2024-09-17T03:48:10.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/819630
CVE ID: CVE-2011-4041 State: PUBLISHED Published: 2012-02-06T20:00:00 Last Updated: 2024-08-06T23:53:32.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: webvrpcs.exe in Advantech/BroadWin WebAccess allows remote attackers to execute arbitrary code or obtain a security-code value via a long string in an RPC request to TCP port 4592. Additional Analyst Notes: - CVE Program Container: References: - http://reversemode.com/index.php?option=com_content&task=view&id=72&Itemid=1 - http://www.securityfocus.com/bid/47008 - http://www.reversemode.com/downloads/exploit_advantech.zip - http://www.us-cert.gov/control_systems/pdf/ICSA-11-094-02A.pdf - http://www.us-cert.gov/control_systems/p
dvantech.zip - http://www.us-cert.gov/control_systems/pdf/ICSA-11-094-02A.pdf - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-081-01.pdf - http://www.securityfocus.com/archive/1/517117 - http://www.reversemode.com/downloads/Scada_Trojans_Ruben_Rootedcon.pdf
CVE ID: CVE-2011-4042 State: PUBLISHED Published: 2012-04-03T01:00:00Z Last Updated: 2024-09-16T23:36:32.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf - http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257 - https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&I
n=com_content&view=article&id=244&Itemid=257 - https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440
CVE ID: CVE-2011-4043 State: PUBLISHED Published: 2012-04-03T01:00:00Z Last Updated: 2024-09-16T20:06:55.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code via a large value for an integer parameter, leading to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf - http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257 - https://support.pcvuescada.com/index.php?option=com_k
.com/index.php?option=com_content&view=article&id=244&Itemid=257 - https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440
CVE ID: CVE-2011-4044 State: PUBLISHED Published: 2012-04-03T01:00:00Z Last Updated: 2024-09-17T00:01:11.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf - http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257 - https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440
CVE ID: CVE-2011-4045 State: PUBLISHED Published: 2012-04-03T01:00:00Z Last Updated: 2024-09-17T02:37:27.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to cause a denial of service via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf - http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257 - https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440
CVE ID: CVE-2011-4046 State: PUBLISHED Published: 2011-11-12T00:00:00Z Last Updated: 2024-09-16T20:42:17.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext within a PHP script, which allows context-dependent attackers to obtain sensitive information by examining script source code. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/135606 - http://www.kace.com/support/kb/index.php?action=artikel&id=1120&artlang=en
CVE ID: CVE-2011-4047 State: PUBLISHED Published: 2011-11-12T00:00:00Z Last Updated: 2024-09-17T02:17:03.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dell KACE K2000 System Deployment Appliance allows remote attackers to execute arbitrary commands by leveraging database write access. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/589089 - http://www.kace.com/support/kb/index.php?action=artikel&id=1120&artlang=en
CVE ID: CVE-2011-4048 State: PUBLISHED Published: 2011-11-12T00:00:00 Last Updated: 2024-08-06T23:53:32.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dell KACE K2000 System Deployment Appliance has a default username and password for the read-only reporting account, which makes it easier for remote attackers to obtain sensitive information from the database by leveraging the default credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/702169 - https://support.software.dell.com/k2000-systems-deployment-appliance/kb/115560
CVE ID: CVE-2011-4050 State: PUBLISHED Published: 2011-12-27T02:00:00 Last Updated: 2024-08-06T23:53:32.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11200 allows remote attackers to cause a denial of service via a crafted packet to TCP port 12401. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71915 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-335-01.pdf - http://www.osvdb.org/77976
CVE ID: CVE-2011-4051 State: PUBLISHED Published: 2011-12-05T11:00:00Z Last Updated: 2024-09-17T00:01:05.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-319-01.pdf - http://www.indusoft.com/hotfixes/hotfixes.php - http://www.zerodayinitiative.com/advisories/ZDI-11-330/
CVE ID: CVE-2011-4052 State: PUBLISHED Published: 2011-12-05T11:00:00Z Last Updated: 2024-09-17T02:06:25.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows remote attackers to execute arbitrary code via a crafted 0x15 (aka Remove File) operation for a file with a long name. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-319-01.pdf - http://www.zerodayinitiative.com/advisories/ZDI-11-329/ - http://www.indusoft.com/hotfixes/hotfixes.php
CVE ID: CVE-2011-4053 State: PUBLISHED Published: 2012-01-19T15:00:00Z Last Updated: 2024-09-17T02:56:55.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) before 9.0.0.11291 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-353-01.pdf
CVE ID: CVE-2011-4054 State: PUBLISHED Published: 2011-12-08T11:00:00Z Last Updated: 2024-09-16T21:08:04.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows remote attackers to inject arbitrary web script or HTML via the postpreservationdata parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/713012 - http://www.kb.cert.org/vuls/id/MAPG-8MCH2B
CVE ID: CVE-2011-4055 State: PUBLISHED Published: 2012-01-08T00:00:00 Last Updated: 2024-08-06T23:53:32.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to execute arbitrary code via a long string in a parameter associated with the location URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-343-01.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/72117 - http://www.usdata.com/sea/factorylink/en/p_nav5.asp - http://www.securityfocus.com/bi
mcloud.com/vulnerabilities/72117 - http://www.usdata.com/sea/factorylink/en/p_nav5.asp - http://www.securityfocus.com/bid/51266
CVE ID: CVE-2011-4056 State: PUBLISHED Published: 2012-01-08T00:00:00Z Last Updated: 2024-09-16T19:24:21.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to create or overwrite arbitrary files via the save method. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-343-01.pdf - http://www.usdata.com/sea/factorylink/en/p_nav5.asp
CVE ID: CVE-2011-4057 State: PUBLISHED Published: 2012-01-13T18:00:00Z Last Updated: 2024-09-16T16:43:55.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions before 4.40 allows remote attackers to cause a denial of service (CodeMeter.exe crash) via certain crafted packets to TCP port 22350. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78223 - http://www.kb.cert.org/vuls/id/MAPG-8MYNFL - http://www.securityfocus.com/bid/51382 - http://www.kb.cert.org/vuls/id/659515 - http://jvn.jp/en/jp/JVN78901873/index.html - http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000003.html
ls/id/659515 - http://jvn.jp/en/jp/JVN78901873/index.html - http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000003.html - http://secunia.com/advisories/47497
CVE ID: CVE-2011-4060 State: PUBLISHED Published: 2011-10-18T01:00:00 Last Updated: 2024-08-06T23:53:32.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environment variables when a program is spawned from a setuid program, which allows local users to overwrite files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/518659 - http://www.qnx.com/developers/docs/6.5.0_sp1/index.jsp?topic=%2Fcom.qnx.doc.momentics_release_notes%2Frel_6.5.0_SP1.html - http://www.nth-dimension.org.uk/pu
5.0_sp1/index.jsp?topic=%2Fcom.qnx.doc.momentics_release_notes%2Frel_6.5.0_SP1.html - http://www.nth-dimension.org.uk/pub/NDSA20110310.txt.asc - http://www.osvdb.org/71784 - http://www.qnx.com/developers/articles/rel_5189_46.html - http://www.securityfocus.com/bid/46838 - http://www.securityfocus.com/archive/1/516958 - http://securityreason.com/securityalert/8475
CVE ID: CVE-2011-4061 State: PUBLISHED Published: 2011-10-18T01:00:00 Last Updated: 2024-08-06T23:53:32.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in (1) db2rspgn and (2) kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DT_RPATH ELF header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/518659 - http://www.nth-dimension.org.uk/downloads.php?id=83 - http://www.securityfocus.com/bid/51181 - http://www.sec
1/518659 - http://www.nth-dimension.org.uk/downloads.php?id=83 - http://www.securityfocus.com/bid/51181 - http://www.securityfocus.com/bid/48514 - http://www.nth-dimension.org.uk/downloads.php?id=77 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14063 - http://securityreason.com/securityalert/8476
CVE ID: CVE-2011-4062 State: PUBLISHED Published: 2011-10-18T01:00:00 Last Updated: 2024-08-06T23:53:32.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the kernel in FreeBSD 7.3 through 9.0-RC1 allows local users to cause a denial of service (panic) or possibly gain privileges via a bind system call with a long pathname for a UNIX socket. Additional Analyst Notes: - CVE Program Container: References: - http://security.freebsd.org/patches/SA-11:05/unix2.patch - http://secunia.com/advisories/46202 - http://www.exploit-db.com/exploits/17908 - http://security.freebsd.org/advisories/FreeBSD-SA-11:05.unix.asc - http://secunia.com/advisories/46564 - http://www.sec
http://security.freebsd.org/advisories/FreeBSD-SA-11:05.unix.asc - http://secunia.com/advisories/46564 - http://www.securitytracker.com/id?1026106 - http://www.osvdb.org/75788 - http://www.securityfocus.com/bid/49862 - http://www.debian.org/security/2011/dsa-2325
CVE ID: CVE-2011-4063 State: PUBLISHED Published: 2011-10-21T10:00:00 Last Updated: 2024-08-06T23:53:32.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service (daemon crash) via a malformed request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026191 - http://securityreason.com/securityalert/8478 - http://secunia.com/advisories/46420 - http://www.securityfocus.com/archive/1/520141/100/0/threa
com/securityalert/8478 - http://secunia.com/advisories/46420 - http://www.securityfocus.com/archive/1/520141/100/0/threaded - http://www.securityfocus.com/bid/50177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70706 - http://downloads.digium.com/pub/security/AST-2011-012.html
CVE ID: CVE-2011-4064 State: PUBLISHED Published: 2011-11-01T19:00:00 Last Updated: 2024-08-06T23:53:32.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the setup interface in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to inject arbitrary web script or HTML via a crafted value. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2011-16.php - http://www.securityfocus.com/bid/50175 - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069235.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069237.html - http://s
11-November/069235.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069237.html - http://secunia.com/advisories/46874 - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069234.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:158 - http://securitytracker.com/id?1026199
CVE ID: CVE-2011-4066 State: PUBLISHED Published: 2011-11-04T21:00:00 Last Updated: 2024-08-06T23:53:32.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70686 - http://www.securitytracker.com/id?1026197 - http://www.exploit-db.com/exploits/17992
CVE ID: CVE-2011-4068 State: PUBLISHED Published: 2018-02-01T17:00:00 Last Updated: 2024-08-06T23:53:32.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The check_password function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password. Additional Analyst Notes: - CVE Program Container: References: - https://packetfence.org/bugs/view.php?id=1293 - https://packetfence.org/bugs/changelog_page.php?version_id=35
CVE ID: CVE-2011-4069 State: PUBLISHED Published: 2018-02-01T17:00:00 Last Updated: 2024-08-06T23:53:32.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username. Additional Analyst Notes: - CVE Program Container: References: - https://packetfence.org/bugs/view.php?id=1293 - https://packetfence.org/bugs/changelog_page.php?version_id=35
CVE ID: CVE-2011-4072 State: REJECTED Published: 2013-07-04T10:00:00Z Last Updated: 2024-09-16T20:37:31.670Z Description: No description available.
CVE ID: CVE-2011-4073 State: PUBLISHED Published: 2011-11-17T19:00:00 Last Updated: 2024-08-06T23:53:32.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related to the (1) quick_outI1_continue and (2) quick_outI1 functions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47342 - http://www.securityfocus.com/bid/50440 - http://www.debian.org/security/2011/dsa-2374 - http://secunia.com/advisories/46678 - http://www.openswan.