Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3127 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T23:22:27.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69172 - http://secunia.com/advisories/49138 - http://wordpress.org/news/2011/05/wordpress-3-1-3/ - http://www.debian.o
s/69172 - http://secunia.com/advisories/49138 - http://wordpress.org/news/2011/05/wordpress-3-1-3/ - http://www.debian.org/security/2012/dsa-2470
CVE ID: CVE-2011-3128 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T23:22:27.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/69171 - http://www.securityfocus.com/bid/47995 - http://secunia.com/advisories/49138 - http://wordpress.org/news/2011/05/wordpress-3-1-3/ - http://core.trac.wordpress.org/changeset/18023/branches/3.1 - http://www.deb
rdpress.org/news/2011/05/wordpress-3-1-3/ - http://core.trac.wordpress.org/changeset/18023/branches/3.1 - http://www.debian.org/security/2012/dsa-2470
CVE ID: CVE-2011-3129 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T23:22:27.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47995 - http://secunia.com/advisories/49138 - http://wordpress.org/news/2011/05/wordpress-3-1-3/ - http://www.debian.org/security/2012/dsa-2470
CVE ID: CVE-2011-3130 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T23:22:27.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-includes/taxonomy.php in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Taxonomy query hardening," possibly involving SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47995 - http://secunia.com/advisories/49138 - http://wordpress.org/news/2011/05/wordpress-3-1-3/ - http://www.debian.org/security/2012/dsa-2470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69169
CVE ID: CVE-2011-3131 State: PUBLISHED Published: 2012-12-13T11:00:00Z Last Updated: 2024-09-16T23:45:36.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/hg/staging/xen-4.1-testing.hg/rev/84e3706df07a - http://www.debian.org/security/2012/dsa-2582 - http://secunia.com/advisories/45622 - http://old-list-archives.xen.org/archives/html/xen-devel/2011-08/msg00450.htm
82 - http://secunia.com/advisories/45622 - http://old-list-archives.xen.org/archives/html/xen-devel/2011-08/msg00450.html - http://secunia.com/advisories/51468 - http://old-list-archives.xen.org/archives/html/xen-devel/2011-06/msg01106.html - http://www.securityfocus.com/bid/49146
CVE ID: CVE-2011-3132 State: PUBLISHED Published: 2011-09-02T16:00:00 Last Updated: 2024-08-06T23:22:27.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories/default.jsp - http://www.securitytracker.com/id?1025999 - http://secunia.com/advisories/45864 - http://www.tibco.com/multimedia/spotfir
ttp://www.securitytracker.com/id?1025999 - http://secunia.com/advisories/45864 - http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt
CVE ID: CVE-2011-3133 State: PUBLISHED Published: 2011-09-02T16:00:00 Last Updated: 2024-08-06T23:22:27.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories/default.jsp - http://www.securitytracker.com/id?1025999 - http://secunia.com/advisories/45864 - http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-1
com/id?1025999 - http://secunia.com/advisories/45864 - http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt
CVE ID: CVE-2011-3134 State: PUBLISHED Published: 2011-09-02T16:00:00 Last Updated: 2024-08-06T23:22:27.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories/default.jsp - http://www.securitytracker.com/id?1025999 - http://secunia.com/advisories/45864 - http://www.tibco.com/multimedia/spotfire_advisory_20
uritytracker.com/id?1025999 - http://secunia.com/advisories/45864 - http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt
CVE ID: CVE-2011-3135 State: PUBLISHED Published: 2011-08-12T17:00:00 Last Updated: 2024-08-06T23:22:27.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Runtime in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45555 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69205 - http://www.ibm.com/support/docview.wss?uid=swg24029498 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV03074 - http://www.ibm.co
.com/support/docview.wss?uid=swg24029498 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV03074 - http://www.ibm.com/support/docview.wss?uid=swg24029497
CVE ID: CVE-2011-3136 State: PUBLISHED Published: 2011-08-12T17:00:00Z Last Updated: 2024-09-16T23:11:30.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has unknown impact and attack vectors, aka APAR IV03048. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45555 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV03048 - http://www.ibm.com/support/docview.wss?uid=swg24029498 - http://www.ibm.com/support/docview.wss?uid=swg24
=swg1IV03048 - http://www.ibm.com/support/docview.wss?uid=swg24029498 - http://www.ibm.com/support/docview.wss?uid=swg24029497
CVE ID: CVE-2011-3137 State: PUBLISHED Published: 2011-08-12T17:00:00 Last Updated: 2024-08-06T23:22:27.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has unknown impact and attack vectors, aka APAR IV03050. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV03050 - http://secunia.com/advisories/45555 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69204 - http://www.ibm.com/support/docview.wss?uid=sw
ories/45555 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69204 - http://www.ibm.com/support/docview.wss?uid=swg24029498 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69203 - http://www.ibm.com/support/docview.wss?uid=swg24029497
CVE ID: CVE-2011-3138 State: PUBLISHED Published: 2011-08-12T17:00:00 Last Updated: 2024-08-06T23:22:27.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LTPA STS module support implementation in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 relies on a static instance of a Java Development Kit (JDK) class, which might allow attackers to bypass LTPA token signature verification by leveraging lack of thread safety. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV01318 - https://exchange.xforce.ibmcloud.c
Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV01318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69198 - http://www.ibm.com/support/docview.wss?uid=swg24029498 - http://www.ibm.com/support/docview.wss?uid=swg24029497
CVE ID: CVE-2011-3139 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3140 State: PUBLISHED Published: 2011-08-15T21:00:00 Last Updated: 2024-08-06T23:22:27.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Web Application Firewall, as used on the G400 IPS-G400-IB-1 and GX4004 IPS-GX4004-IB-2 appliances with update 31.030, does not properly handle query strings with multiple instances of the same parameter, which allows remote attackers to bypass intended intrusion prevention by dividing a dangerous parameter value into substrings, as demonstrated by a SQL statement that is split across multiple iid parameters and then sent to a .aspx file on an IIS web server. Additional Analyst Notes: - CVE Program Container: References: -
rs and then sent to a .aspx file on an IIS web server. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2011-006.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/67178 - http://securityreason.com/securityalert/8339 - http://www.securityfocus.com/bid/48370 - http://www.securityfocus.com/archive/1/518556/100/0/threaded - http://www.iss.net/security_center/reference/vuln/HTTP_Parameter_Abuse.htm - http://securitytracker.com/id?1025683
CVE ID: CVE-2011-3141 State: PUBLISHED Published: 2011-08-16T21:00:00Z Last Updated: 2024-09-17T00:26:06.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the InBatch BatchField ActiveX control for Invensys Wonderware InBatch 8.1 SP1, 9.0, and 9.0 SP1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44336 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-094-01.pdf - http://iom.invensys.com/EN/pdfLibrary/Final.Tech.Alert.141.pdf - http://www.osvdb.org/72182
CVE ID: CVE-2011-3142 State: PUBLISHED Published: 2011-08-16T21:00:00Z Last Updated: 2024-09-17T01:20:36.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute arbitrary code via a long second argument to the ValidateUser method. Additional Analyst Notes: - CVE Program Container: References: - http://www.scadahacker.com/exploits-wellintech-kvwebsvr.html - http://www.us-cert.gov/control_systems/pdf/ICSA-11-074-01.pdf - http://www.cnvd.org.cn/vulnerability/CNVD-2011-04541 - http://www.exploit-db.com/exploits/16936 - http://www.securityfocus.com/bid/
cnvd.org.cn/vulnerability/CNVD-2011-04541 - http://www.exploit-db.com/exploits/16936 - http://www.securityfocus.com/bid/46757 - http://www.osvdb.org/72889 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-066-01.pdf - http://www.kingview.com/news/detail.aspx?contentid=537
CVE ID: CVE-2011-3143 State: PUBLISHED Published: 2011-08-16T21:00:00 Last Updated: 2024-08-06T23:22:27.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified long strings that trigger heap memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/72989 - http://secunia.com/advisories/44955 - http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01.pdf - http://www.us-cert.gov/
//secunia.com/advisories/44955 - http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01A.pdf - http://www.securityfocus.com/bid/46312 - http://www.digitalbond.com/scadapedia/vulnerability-notes/heap-overflow-vulnerability/
CVE ID: CVE-2011-3144 State: PUBLISHED Published: 2011-08-16T21:00:00Z Last Updated: 2024-09-16T20:06:32.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44955 - http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01.pdf - http://www.osvdb.org/72987 - http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01A.pdf - http://www.digitalbo
pdf - http://www.osvdb.org/72987 - http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01A.pdf - http://www.digitalbond.com/scadapedia/vulnerability-notes/control-microsystems-cross-site-scripting-vulnerability/
CVE ID: CVE-2011-3145 State: PUBLISHED Published: 2019-04-22T15:35:58.852756Z Last Updated: 2024-09-16T22:51:14.054Z Severity: LOW (CVSS 3.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L) Vendors: n/a Products: n/a Problem Types: n/a Description: When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private. Additional Analyst Notes: - CVE Program Container: References: - http://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/558
CVE ID: CVE-2011-3146 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-09-16T23:46:10.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as a RsvgFilterPrimitive. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.gnome.org/pub/GNOME/sources/librsvg/2.34/librsvg-2.34.1.news - http://secunia.com/advisories/45877 - https://bugs.launchpad.net/ubunt
/GNOME/sources/librsvg/2.34/librsvg-2.34.1.news - http://secunia.com/advisories/45877 - https://bugs.launchpad.net/ubuntu/+source/librsvg/+bug/825497 - https://bugzilla.redhat.com/show_bug.cgi?id=734936 - http://rhn.redhat.com/errata/RHSA-2011-1289.html - https://bugzilla.gnome.org/show_bug.cgi?id=658014 - http://git.gnome.org/browse/librsvg/commit/?id=34c95743ca692ea0e44778e41a7c0a129363de84 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065739.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066127.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065730.html
CVE ID: CVE-2011-3147 State: PUBLISHED Published: 2019-04-22T15:35:58.896898Z Last Updated: 2024-09-16T18:38:54.968Z Severity: LOW (CVSS 2.8 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://bazaar.launchpad.net/~hudson-openstack/nova/trunk/revision/1604
CVE ID: CVE-2011-3148 State: PUBLISHED Published: 2012-07-22T17:00:00 Last Updated: 2024-08-06T23:22:27.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1.1.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long string of white spaces at the beginning of the ~/.pam_environment file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/pam/+bug/874469 - http://security.gentoo.org/glsa/glsa-201206-31.xml - http://www.ubuntu.com/usn/USN-1237-1 - http://secunia.c
ug/874469 - http://security.gentoo.org/glsa/glsa-201206-31.xml - http://www.ubuntu.com/usn/USN-1237-1 - http://secunia.com/advisories/46583 - http://secunia.com/advisories/49711 - http://git.fedorahosted.org/git/?p=linux-pam.git%3Ba=commitdiff%3Bh=caf5e7f61c8d9288daa49b4f61962e6b1239121d
CVE ID: CVE-2011-3149 State: PUBLISHED Published: 2012-07-22T17:00:00 Last Updated: 2024-08-06T23:22:27.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when environment variable expansion can overflow, which allows local users to cause a denial of service (CPU consumption). Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201206-31.xml - http://www.ubuntu.com/usn/USN-1237-1 - http://secunia.com/advisories/46583 - http://secunia.com/advisories/49711 - https://bugs.launchpad.net/ubuntu/+sourc
1 - http://secunia.com/advisories/46583 - http://secunia.com/advisories/49711 - https://bugs.launchpad.net/ubuntu/+source/pam/+bug/874565 - http://git.fedorahosted.org/git/?p=linux-pam.git%3Ba=commitdiff%3Bh=109823cb621c900c07c4b6cdc99070d354d19444
CVE ID: CVE-2011-3150 State: PUBLISHED Published: 2011-11-29T17:00:00 Last Updated: 2024-08-06T23:22:27.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Software Center in Ubuntu 11.10, 11.04 10.10 does not properly validate server certificates, which allows remote attackers to execute arbitrary code or obtain sensitive information via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71430 - http://www.securityfocus.com/bid/50754 - http://www.ubuntu.com/usn/USN-1270-1 - http://secunia.com/advisories/46950
CVE ID: CVE-2011-3151 State: PUBLISHED Published: 2019-04-22T15:35:58.934686Z Last Updated: 2024-09-16T22:26:42.178Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: n/a Products: n/a Problem Types: n/a Description: The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://launchpadlibrarian.net/88098106/selinux_0.10~10.04.1.debdiff
CVE ID: CVE-2011-3152 State: PUBLISHED Published: 2014-04-27T20:00:00 Last Updated: 2024-08-06T23:22:27.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: DistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5 on Ubuntu 8.04 through 11.10 does not verify the GPG signature before extracting an upgrade tarball, which allows man-in-the-middle attackers to (1) create or overwrite arbitrary files via a directory traversal attack using a crafted tar file, or (2) bypass authentication via a crafted meta-release file. Additional Analyst Notes
attack using a crafted tar file, or (2) bypass authentication via a crafted meta-release file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71494 - http://www.ubuntu.com/usn/USN-1284-1 - http://www.osvdb.org/77642 - http://www.securityfocus.com/bid/50833 - https://bugs.launchpad.net/ubuntu/%2Bsource/update-manager/%2Bbug/881548 - http://secunia.com/advisories/47024
CVE ID: CVE-2011-3153 State: PUBLISHED Published: 2014-03-06T15:00:00 Last Updated: 2024-08-06T23:22:27.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: dmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary files via a symlink attack on ~/.dmrc. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/%2Bsource/lightdm/%2Bbug/883865 - http://www.ubuntu.com/usn/USN-1262-1 - http://bazaar.launchpad.net/~lightdm-team/lightdm/trunk/revision/1299
CVE ID: CVE-2011-3154 State: PUBLISHED Published: 2014-04-17T14:00:00 Last Updated: 2024-08-06T23:22:27.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: DistUpgrade/DistUpgradeViewKDE.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5 does not properly create temporary files, which allows local users to obtain the XAUTHORITY file content for a user via a symlink attack on the temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/881541 - http://www.ubuntu.com/usn/USN-1284-1 -
erences: - https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/881541 - http://www.ubuntu.com/usn/USN-1284-1 - http://secunia.com/advisories/47024
CVE ID: CVE-2011-3155 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T23:22:27.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Onboard Administrator (OA) 3.21 through 3.31 allows remote attackers to bypass intended access restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=131835356508182&w=2 - http://marc.info/?l=bugtraq&m=131835356508182&w=2 - http://securityreason.com/securityalert/8471
CVE ID: CVE-2011-3156 State: PUBLISHED Published: 2011-10-19T15:00:00 Last Updated: 2024-08-06T23:22:27.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1222. Additional Analyst Notes: - CVE Program Container: References: - https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c03058866 - http://securitytracker.com/id?1026195