Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-2940 State: PUBLISHED Published: 2011-08-25T14:00:00 Last Updated: 2024-08-06T23:15:31.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/19/6 - http://securitytracker.com/id?1025959 - http://www.openwall.com/lists/oss-security/2011/08/19/18 - https://bugzilla.redhat.com/show_bug.cgi?id=732068 - http://stunnel.org/?page=sdf_ChangeLog - http://www.securityfocus.com/bid/49254 - http://www.stunnel.
ug.cgi?id=732068 - http://stunnel.org/?page=sdf_ChangeLog - http://www.securityfocus.com/bid/49254 - http://www.stunnel.org/pipermail/stunnel-announce/2011-August/000059.html - http://www.osvdb.org/74600 - http://secunia.com/advisories/45705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69318
CVE ID: CVE-2011-2941 State: PUBLISHED Published: 2014-02-26T15:00:00 Last Updated: 2024-08-06T23:15:31.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the initialURI parameter. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2011-1822.html
CVE ID: CVE-2011-2942 State: PUBLISHED Published: 2013-06-08T10:00:00Z Last Updated: 2024-08-06T23:15:32.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Red Hat patch to the __br_deliver function in net/bridge/br_forward.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging connectivity to a network interface that uses an Ethernet bridge device. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=730917 - http://www.openwall.com/lists/oss-security/
ontainer: References: - https://bugzilla.redhat.com/show_bug.cgi?id=730917 - http://www.openwall.com/lists/oss-security/2011/10/24/3
CVE ID: CVE-2011-2943 State: PUBLISHED Published: 2011-08-29T17:00:00 Last Updated: 2024-08-06T23:15:32.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: The irc_msg_who function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted nickname that is not properly handled in a WHO response. Additional Analyst Notes: - CVE Program Container: References: - http://pidgin.im/news/security/?id=53 - http://developer.pidgin.im/viewmtn/revision/info/5c2dba4a7e2e76
r: References: - http://pidgin.im/news/security/?id=53 - http://developer.pidgin.im/viewmtn/revision/info/5c2dba4a7e2e76b76e7f472b88953a4316706d43 - http://www.openwall.com/lists/oss-security/2011/08/22/2 - http://secunia.com/advisories/45663 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69340 - http://secunia.com/advisories/45916 - https://bugzilla.redhat.com/show_bug.cgi?id=722939 - http://www.securityfocus.com/bid/49268 - http://developer.pidgin.im/viewmtn/revision/diff/5749f9193063800d27bef75c2388f6f9cc2f7f37/with/5c2dba4a7e2e76b76e7f472b88953a4316706d43/libpurple/protocols/irc/msgs.c
f/5749f9193063800d27bef75c2388f6f9cc2f7f37/with/5c2dba4a7e2e76b76e7f472b88953a4316706d43/libpurple/protocols/irc/msgs.c - http://securitytracker.com/id?1025961 - http://www.openwall.com/lists/oss-security/2011/08/20/2
CVE ID: CVE-2011-2944 State: PUBLISHED Published: 2014-08-12T20:00:00 Last Updated: 2024-08-06T23:15:31.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52156 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73471 - http://packetstormsecurity.org/files/110166/The-Uploader-2.0.4-Eng-Ita-Remote-File-Upload.html - http://osvdb.org/79508 - http://secunia.com/advisories/48141 - http://sourceforge.net/p/theuploader/news
e-Upload.html - http://osvdb.org/79508 - http://secunia.com/advisories/48141 - http://sourceforge.net/p/theuploader/news/2011/07/the-uploader-205-released - http://www.exploit-db.com/exploits/18518
CVE ID: CVE-2011-2945 State: PUBLISHED Published: 2011-08-18T23:00:00 Last Updated: 2024-08-06T23:15:32.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted SIPR stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025943 - http://service.real.com/realplayer/security/08162011_player/en/
CVE ID: CVE-2011-2946 State: PUBLISHED Published: 2011-08-18T23:00:00 Last Updated: 2024-08-06T23:15:32.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025943 - http://service.real.com/realplayer/security/08162011_player/en/
CVE ID: CVE-2011-2947 State: PUBLISHED Published: 2011-08-18T23:00:00 Last Updated: 2024-08-06T23:15:31.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zone via a local HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025943 - http://zerodayinitiative.com/advisories/ZDI-11-269/ - http://service.real.com/realplayer/security/08162011_player/en/
CVE ID: CVE-2011-2948 State: PUBLISHED Published: 2011-08-18T23:00:00 Last Updated: 2024-08-06T23:15:31.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-11-268/ - http://www.securitytracker.com/id?1025943 - http://ser
ferences: - http://zerodayinitiative.com/advisories/ZDI-11-268/ - http://www.securitytracker.com/id?1025943 - http://service.real.com/realplayer/security/08162011_player/en/
CVE ID: CVE-2011-2949 State: PUBLISHED Published: 2011-08-18T23:00:00 Last Updated: 2024-08-06T23:15:31.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via crafted ID3v2 tags in an MP3 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025943 - http://service.real.com/realplayer/security/08162011_player/en/ - http://zerodayinitiative.com/advisories/ZDI-11-267/
CVE ID: CVE-2011-2950 State: PUBLISHED Published: 2011-08-18T23:00:00 Last Updated: 2024-08-06T23:15:31.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted QCP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025943 - http://zerodayinitiative.com/advisories/ZDI-11-265/ - http://service.real.com/realplayer/security/08162011_player/en/ - http://www.securityfocus.com/bid/49172 - http://securityreason.com/securityal
/realplayer/security/08162011_player/en/ - http://www.securityfocus.com/bid/49172 - http://securityreason.com/securityalert/8388
CVE ID: CVE-2011-2951 State: PUBLISHED Published: 2011-08-18T23:00:00 Last Updated: 2024-08-06T23:15:32.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.0.0.1569 allows remote attackers to execute arbitrary code via a crafted raw_data_frame field in an AAC file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025943 - http://service.real.com/realplayer/security/08162011_player/en/ - http://zerodayinitiative.com/advisories/ZDI-11-266/
CVE ID: CVE-2011-2952 State: PUBLISHED Published: 2011-08-18T23:00:00 Last Updated: 2024-08-06T23:15:31.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via vectors related to a dialog box. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025943 - http://service.real.com/realplayer/security/08162011_player/en/
CVE ID: CVE-2011-2953 State: PUBLISHED Published: 2011-08-18T23:00:00 Last Updated: 2024-08-06T23:15:31.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified ActiveX control in the browser plugin in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors, related to an out-of-bounds condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025943 - http://service.real.com/realplayer/security/08162011_player/en/
CVE ID: CVE-2011-2954 State: PUBLISHED Published: 2011-08-18T23:00:00 Last Updated: 2024-08-06T23:15:32.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025943 - http://service.real.com/realplayer/security/08162011_player/en/
CVE ID: CVE-2011-2955 State: PUBLISHED Published: 2011-08-18T23:00:00 Last Updated: 2024-08-06T23:15:32.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via vectors related to a modal dialog. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025943 - http://service.real.com/realplayer/security/08162011_player/en/
CVE ID: CVE-2011-2956 State: PUBLISHED Published: 2011-07-28T18:00:00Z Last Updated: 2024-09-17T04:25:06.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: AzeoTech DAQFactory before 5.85 (Build 1842) does not perform authentication for certain signals, which allows remote attackers to cause a denial of service (system reboot or shutdown) via a signal. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-122-01.pdf - http://www.azeotech.com/revisionhistory.php
CVE ID: CVE-2011-2957 State: PUBLISHED Published: 2011-07-28T18:00:00 Last Updated: 2024-08-06T23:15:32.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 (CPR9 SR3) allows local users to execute arbitrary code via a crafted FactoryTalk Diagnostics Viewer (.ftd) configuration file, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://rockwellautomation.custhelp.com/app/answers/detail/a_id/448424 - http://www.securityfocus.com/bid/48962 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-175-01.pdf
CVE ID: CVE-2011-2958 State: PUBLISHED Published: 2011-07-28T18:00:00 Last Updated: 2024-08-06T23:15:32.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ecava IntegraXor before 3.60 (Build 4080) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/68896 - http://www.integraxor.com/blog/security-issue-xss-vulnerability-note - http://www.us-cert.gov/control_systems/pdf/ICSA-11-147-02.pdf
CVE ID: CVE-2011-2959 State: PUBLISHED Published: 2011-07-29T19:00:00Z Last Updated: 2024-09-16T18:49:15.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Open Database Connectivity (ODBC) service (Odbcixv9se.exe) in 7-Technologies Interactive Graphical SCADA System (IGSS) 9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet to TCP port 22202. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44345 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-119-01.pdf - http://www.osvdb.org/72117 - http://www.insomniasec.com/adv
p://www.us-cert.gov/control_systems/pdf/ICSA-11-119-01.pdf - http://www.osvdb.org/72117 - http://www.insomniasec.com/advisories/ISVA-110427.1.htm
CVE ID: CVE-2011-2960 State: PUBLISHED Published: 2011-07-29T19:00:00Z Last Updated: 2024-09-16T23:01:38.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-167-01.pdf - http://securitytracker.com/id?1025672 - http://secunia.com/advisories/45033 - http://www.sunwayland.com.cn/news_info_.asp?Nid=3593 - http://www.osvdb.org/73124 - http://www.cnvd.org.cn/vulner
5033 - http://www.sunwayland.com.cn/news_info_.asp?Nid=3593 - http://www.osvdb.org/73124 - http://www.cnvd.org.cn/vulnerability/CNVD-2011-05347
CVE ID: CVE-2011-2961 State: PUBLISHED Published: 2011-07-29T19:00:00Z Last Updated: 2024-09-17T00:11:31.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in AngelServer.exe 6.0.11.3 in Sunway pNetPower allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-167-01.pdf - http://securitytracker.com/id?1025673 - http://www.osvdb.org/73123 - http://www.cnvd.org.cn/vulnerability/CNVD-2011-05348 - http://secunia.com/advisories/44990 - http://www.sunwayland.com.cn/news_info_.as
.org.cn/vulnerability/CNVD-2011-05348 - http://secunia.com/advisories/44990 - http://www.sunwayland.com.cn/news_info_.asp?Nid=3593
CVE ID: CVE-2011-2962 State: PUBLISHED Published: 2011-07-29T19:00:00 Last Updated: 2024-08-06T23:15:32.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via two unspecified ActiveX controls. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48976 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68988 - http://secunia.com/advisories/45476 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-195-01.pdf
CVE ID: CVE-2011-2963 State: PUBLISHED Published: 2011-07-29T19:00:00Z Last Updated: 2024-09-16T23:01:24.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service (crash) via a crafted packet to TCP port 10651. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46907 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdf
/www.us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdf - http://www.osvdb.org/72888 - http://www.exploit-db.com/exploits/17034
CVE ID: CVE-2011-2964 State: PUBLISHED Published: 2011-07-29T20:00:00 Last Updated: 2024-08-06T23:15:32.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: foomaticrip.c in foomatic-rip in foomatic-filters in Foomatic 4.0.6 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file, a different vulnerability than CVE-2011-2697. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:125 - http://www.openwall.com/lists/oss-security/2011/07/18/3 - http://www.openwall.com/lists/oss-security/2011/07/13/3 - https://bugzilla.redhat.com/show_bug.cgi?id=721001 - http://w
http://www.openwall.com/lists/oss-security/2011/07/13/3 - https://bugzilla.redhat.com/show_bug.cgi?id=721001 - http://www.openwall.com/lists/oss-security/2011/07/28/1 - http://www.ubuntu.com/usn/USN-1194-1 - http://www.redhat.com/support/errata/RHSA-2011-1110.html - http://secunia.com/advisories/45477 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68994 - https://bugzilla.novell.com/show_bug.cgi?id=698451 - http://security.gentoo.org/glsa/glsa-201203-07.xml - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2011-2965 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-2966 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-2967 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-2968 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-2969 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-2970 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-2971 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-2972 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-2973 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-2974 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-2975 State: PUBLISHED Published: 2011-08-01T20:00:00Z Last Updated: 2024-09-16T22:08:46.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data. Additional Analyst Notes: - CVE Program Container: References: - http://trac.osgeo.org/mapserver/ticket/3939 - http://lists.osgeo.org/pipermail/mapserver-users/2011-July/069430.html
CVE ID: CVE-2011-2976 State: PUBLISHED Published: 2011-08-09T19:00:00 Last Updated: 2024-08-06T23:15:32.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, and 3.4.x before 3.4.12 allows remote attackers to inject arbitrary web script or HTML via vectors involving a BUGLIST cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/69038 - https://bugzilla.mozilla.org/show_bug.cgi?id=660053 - http://secunia.com/advisories/45501 - http://www.bugzilla.org/security/3.4.11/ - http://www.osvdb.org/74303 - http://www.securi
secunia.com/advisories/45501 - http://www.bugzilla.org/security/3.4.11/ - http://www.osvdb.org/74303 - http://www.securityfocus.com/bid/49042
CVE ID: CVE-2011-2977 State: PUBLISHED Published: 2011-08-09T19:00:00 Last Updated: 2024-08-06T23:15:32.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files. NOTE: this issue exists because of a regression in 3.6. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45501 - http://www.osvdb.org/74302 - http://www.bugzilla.org/security/3.4.11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=660502 - ht
ww.osvdb.org/74302 - http://www.bugzilla.org/security/3.4.11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=660502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69037 - http://www.securityfocus.com/bid/49042
CVE ID: CVE-2011-2978 State: PUBLISHED Published: 2011-08-09T19:00:00 Last Updated: 2024-08-06T23:22:26.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 does not prevent changes to the confirmation e-mail address (aka old_email field) for e-mail change notifications, which makes it easier for remote attackers to perform arbitrary address changes by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/74301 - http://secunia.com/advisories/45501 - https://exch
: - CVE Program Container: References: - http://www.osvdb.org/74301 - http://secunia.com/advisories/45501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69036 - https://bugzilla.mozilla.org/show_bug.cgi?id=670868 - http://www.bugzilla.org/security/3.4.11/ - http://www.debian.org/security/2011/dsa-2322 - http://www.securityfocus.com/bid/49042