Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3984 State: PUBLISHED Published: 2011-10-24T17:00:00 Last Updated: 2024-08-06T23:53:32.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "web form entries." Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000082 - http://osvdb.org/76403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70468 - http://jvn.jp/en/jp/JVN80971236/index.html
CVE ID: CVE-2011-3985 State: PUBLISHED Published: 2011-11-09T23:00:00Z Last Updated: 2024-09-16T16:48:25.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Plume before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000083 - http://jvn.jp/en/jp/JVN08307791/index.html
CVE ID: CVE-2011-3986 State: PUBLISHED Published: 2011-11-03T17:00:00Z Last Updated: 2024-09-17T04:28:45.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Pligg before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN04013920/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000084
CVE ID: CVE-2011-3987 State: PUBLISHED Published: 2011-11-03T17:00:00 Last Updated: 2024-08-06T23:53:32.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: dtsoftbus01.sys in DAEMON Tools Lite before 4.41.3, Pro Standard before 4.41.0315, and Pro Advanced before 4.41.0315 allows local users to cause a denial of service (system crash) via an invalid DeviceIoControl request to \\.\dtsoftbusctl. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70597 - http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20111020 - http://jvn.jp/en/jp/JVN07414354/index.html - http://www.securityfocus.com/bid/50106 - http://jvndb.
cgi?FFRRA-20111020 - http://jvn.jp/en/jp/JVN07414354/index.html - http://www.securityfocus.com/bid/50106 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000085 - http://archives.neohapsis.com/archives/bugtraq/2011-10/0101.html - http://secunia.com/advisories/46416
CVE ID: CVE-2011-3988 State: PUBLISHED Published: 2011-10-21T18:00:00 Last Updated: 2024-08-06T23:53:32.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://svn.ec-cube.net/open_trac/ticket/1502 - http://www.ec-cube.net/info/weakness/weakness.php?id=38 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70625 - http://www.securityfocus.com/bid/50140 - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000087.html - http://www.ec-cube.net/rele
.securityfocus.com/bid/50140 - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000087.html - http://www.ec-cube.net/release/detail.php?release_id=286 - http://jvn.jp/en/jp/JVN44496332/index.html - http://osvdb.org/76399 - http://secunia.com/advisories/46446
CVE ID: CVE-2011-3989 State: PUBLISHED Published: 2011-11-04T21:00:00 Last Updated: 2024-08-06T23:53:32.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in DBD::mysqlPP 0.04 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000086.html - http://www.securityfocus.com/bid/50139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70680 - http://jvn.jp/en/jp/JVN51216285/index.html
CVE ID: CVE-2011-3990 State: PUBLISHED Published: 2011-12-22T20:00:00Z Last Updated: 2024-09-17T00:35:54.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in plugin/comment.inc.php in PukiWiki Plus! 1.4.7plus-u2-i18n and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000107 - http://jvn.jp/en/jp/JVN76515037/index.html - http://pukiwiki.cafelounge.net/plus/?%E9%96%8B%E7%99%BA%E6%97%A5%E8%A8%98%2F2011-12-19
CVE ID: CVE-2011-3991 State: PUBLISHED Published: 2011-11-04T21:00:00 Last Updated: 2024-08-06T23:53:32.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in FFFTP 1.98a and earlier allows local users to execute arbitrary code via unspecified functions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71020 - http://sourceforge.jp/projects/ffftp/wiki/Security - http://secunia.com/advisories/46649 - http://jvn.jp/en/jp/JVN62336482/index.html - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000091.html - http://www.securityfocus.com/bid/50412
CVE ID: CVE-2011-3992 State: PUBLISHED Published: 2011-11-03T17:00:00 Last Updated: 2024-08-06T23:53:32.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC548, and DWL-3200AP with firmware before 2.55RC549 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000092 - http://osvdb.org/76628 - http://www.securityfocus.com/bid/50405 - http://jvn.jp/en/jp/JVN72640744/index.html - http://www.dlin
/osvdb.org/76628 - http://www.securityfocus.com/bid/50405 - http://jvn.jp/en/jp/JVN72640744/index.html - http://www.dlink-jp.com/page/sc/F/security_info20111028.html
CVE ID: CVE-2011-3993 State: PUBLISHED Published: 2011-11-03T17:00:00Z Last Updated: 2024-09-16T22:25:41.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, uses weak permissions, which allows remote authenticated users to modify files and settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN41032068/index.html - http://www.mtcms.jp/news/product/201110131921.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000093
CVE ID: CVE-2011-3994 State: PUBLISHED Published: 2011-11-03T17:00:00Z Last Updated: 2024-09-17T00:50:31.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, allows remote attackers to hijack the authentication of arbitrary users for requests that modify data. Additional Analyst Notes: - CVE Program Container: References: - http://www.mtcms.jp/news/product/201110131921.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000094 - http://jvn.jp/en/jp/JVN
tp://www.mtcms.jp/news/product/201110131921.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000094 - http://jvn.jp/en/jp/JVN56667137/index.html
CVE ID: CVE-2011-3995 State: PUBLISHED Published: 2011-11-03T10:00:00 Last Updated: 2024-08-06T23:53:32.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Twilight Frontier Touhou Hisouten 1.06 and earlier allows remote attackers to cause a denial of service (daemon crash) via unknown network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN50227837/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/71027 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000089
CVE ID: CVE-2011-3996 State: PUBLISHED Published: 2011-11-03T17:00:00 Last Updated: 2024-08-06T23:53:32.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service (service crash) via crafted TCP packets. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000095 - http://www.controlsystemworks.com/blogengine/post/CSWorks-2041151-security-release.aspx - http://jvn.jp/en/jp/JVN98649286/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/71079 - http://www.securityfocus.com/bid/50458 - http://www.controlsystemworks.com/Produc
e.ibmcloud.com/vulnerabilities/71079 - http://www.securityfocus.com/bid/50458 - http://www.controlsystemworks.com/ProductHistory.aspx - http://secunia.com/advisories/46625
CVE ID: CVE-2011-3997 State: PUBLISHED Published: 2011-11-09T20:00:00Z Last Updated: 2024-09-16T20:01:40.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000096 - http://jvn.jp/en/jp/JVN71349007/index.html
CVE ID: CVE-2011-3998 State: PUBLISHED Published: 2011-11-09T20:00:00Z Last Updated: 2024-09-17T00:37:11.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apple WebObjects 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN37223351/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000097
CVE ID: CVE-2011-3999 State: PUBLISHED Published: 2011-11-09T20:00:00Z Last Updated: 2024-09-17T01:47:04.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the RSS/Atom feed-reader implementation in Iwate Portal Bar allows remote attackers to inject arbitrary web script or HTML via a crafted feed. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000098 - http://jvn.jp/en/jp/JVN33861625/index.html
CVE ID: CVE-2011-4000 State: PUBLISHED Published: 2011-11-08T22:00:00 Last Updated: 2024-08-06T23:53:32.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN16901583/index.html - https://hermes.opensuse.org/messages/13154862 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000099 - http://secunia.com/advisories/47458 - https://hermes.opensuse.org/messages/13155433
CVE ID: CVE-2011-4001 State: PUBLISHED Published: 2011-12-01T11:00:00Z Last Updated: 2024-09-16T22:16:05.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to read and modify arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN80081509/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000075
CVE ID: CVE-2011-4002 State: PUBLISHED Published: 2011-11-30T02:00:00Z Last Updated: 2024-09-16T16:54:09.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000076 - http://jvn.jp/en/jp/JVN48839888/index.html
CVE ID: CVE-2011-4004 State: PUBLISHED Published: 2011-10-27T21:00:00Z Last Updated: 2024-09-17T02:11:41.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ATAS32 processing functionality in the Cisco WebEx Recording Format (WRF) player T26 before SP49 EP40 and T27 before SP28 allows remote attackers to execute arbitrary code via a crafted WRF file. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111026-webex
CVE ID: CVE-2011-4005 State: PUBLISHED Published: 2011-11-03T10:00:00 Last Updated: 2024-08-06T23:53:32.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Services Ready Platform Configuration Utility web interface on the Cisco Small Business SRP521W, SRP526W, and SRP527W with firmware before 1.1.24 and the Small Business SRP541W, SRP546W, and SRP547W with firmware before 1.2.1 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands, aka Bug ID CSCtr45124. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content
tr45124. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111102-srp500 - http://secunia.com/advisories/46664 - http://www.securitytracker.com/id?1026266 - http://www.securityfocus.com/bid/50495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71103
CVE ID: CVE-2011-4006 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T23:53:32.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ESMTP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service (CPU consumption) via an unspecified closing sequence, aka Bug ID CSCtt32565. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027008 - http://www.cisco.com/web/software/283878312/88166/ASA-851-Interim-Release-Notes.html
CVE ID: CVE-2011-4007 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T23:53:32.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handle the "set mpls experimental imposition" command, which allows remote attackers to cause a denial of service (device crash) via network traffic that triggers (1) fragmentation or (2) reassembly, aka Bug ID CSCtr56576. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/ios/ios_xe/3/release/notes/asr1k_caveats_33s.html - http://www.securitytracker.com/id?1027005
CVE ID: CVE-2011-4012 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T23:53:32.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.0, 15.0, and 15.1, when a Policy Feature Card 3C (PFC3C) is used, does not create a fragment entry during processing of an ICMPv6 ACL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtj90091. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXJ.html - http://www.securitytracker.com/id?1027005
CVE ID: CVE-2011-4014 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T23:53:32.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TAC Case Attachment tool in Cisco Wireless Control System (WCS) 7.0 allows remote authenticated users to read arbitrary files under webnms/Temp/ via unspecified vectors, aka Bug ID CSCtq86807. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/wireless/wcs/release/notes/WCS_RN7_0_230.html - http://www.securitytracker.com/id?1027011
CVE ID: CVE-2011-4015 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T23:53:32.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 15.2S allows remote attackers to cause a denial of service (interface queue wedge) via malformed UDP traffic on port 465, aka Bug ID CSCts48300. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/ios/15_2s/release/notes/15_2s_caveats_15_2_2s.html - http://www.securitytracker.com/id?1027005
CVE ID: CVE-2011-4016 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T23:53:32.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PPP implementation in Cisco IOS 12.2 and 15.0 through 15.2, when Point-to-Point Termination and Aggregation (PTA) and L2TP are used, allows remote attackers to cause a denial of service (device crash) via crafted network traffic, aka Bug ID CSCtf71673. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html - http://www.securitytracker.com/id?1027005
CVE ID: CVE-2011-4019 State: PUBLISHED Published: 2012-05-03T10:00:00Z Last Updated: 2024-09-16T22:36:25.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco IOS 12.4 and 15.0 through 15.2, and Cisco Unified Communications Manager (CUCM) 7.x, allows remote attackers to cause a denial of service (memory consumption) via a crafted response to a SIP SUBSCRIBE message, aka Bug IDs CSCto93837 and CSCtj61883. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/web/software/282074295/90289/cucm-readme-715bsu5.pdf - http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151TCAVS.html
CVE ID: CVE-2011-4022 State: PUBLISHED Published: 2012-05-03T10:00:00Z Last Updated: 2024-09-16T20:43:09.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sensor in Cisco Intrusion Prevention System (IPS) 7.0 and 7.1 allows remote attackers to cause a denial of service (file-handle exhaustion and mainApp hang) by making authentication attempts that exceed the configured limit, aka Bug ID CSCto51204. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/web/software/282549709/56954/IPS-7-1-3-E4_readme.txt
CVE ID: CVE-2011-4023 State: PUBLISHED Published: 2012-05-03T10:00:00Z Last Updated: 2024-09-17T02:00:51.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in libcmd in Cisco NX-OS 5.0 on Nexus switches allows remote authenticated users to cause a denial of service (memory consumption) via SNMP requests, aka Bug ID CSCtr65682. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/release/notes/Rel_5_0_3_N2_1/Nexus5000_Release_Notes_5_0_3_N2.html
CVE ID: CVE-2011-4024 State: PUBLISHED Published: 2011-10-21T18:00:00 Last Updated: 2024-08-06T23:53:32.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70406 - http://securityreason.com/securityalert/8477 - http://osvdb.org/76135 - http://www.securityfocus.com/bid/50011 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:053 - http://secunia.com/advisories/46311 - http:/
d/50011 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:053 - http://secunia.com/advisories/46311 - http://www.exploit-db.com/exploits/18005 - http://www.ocsinventory-ng.org/fr/accueil/nouvelles/version-2-0-2-stable.html
CVE ID: CVE-2011-4026 State: PUBLISHED Published: 2011-10-21T18:00:00 Last Updated: 2024-08-06T23:53:32.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70432 - http://www.exploit-db.com/exploits/17946 - http://www.securityfocus.com/bid/50025
CVE ID: CVE-2011-4028 State: PUBLISHED Published: 2012-07-03T19:00:00Z Last Updated: 2024-09-16T18:54:10.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists. Additional Analyst Notes: - CVE Program Container: References: - http://cgit.freedesktop.org/xorg/xserver/commit/?id=6ba44b91e37622ef8c146d8f2ac92d708a18ed34 - http://lists.freedesktop.org/archives/xorg/2011-October/053680.html - http://secunia.com/advisories/46460 - http://rhn.redhat.com/errata/RHSA
top.org/archives/xorg/2011-October/053680.html - http://secunia.com/advisories/46460 - http://rhn.redhat.com/errata/RHSA-2012-0939.html - http://secunia.com/advisories/49579
CVE ID: CVE-2011-4029 State: PUBLISHED Published: 2012-07-03T19:00:00Z Last Updated: 2024-09-17T03:18:31.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (removed execution permission) via a symlink attack on a temporary lock file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.freedesktop.org/archives/xorg/2011-October/053680.html - http://cgit.freedesktop.org/xorg/xserver/commit/?id=b67581cf825940fdf52bf2e0af4330e695d724a4 - http://secunia.com/adviso
http://cgit.freedesktop.org/xorg/xserver/commit/?id=b67581cf825940fdf52bf2e0af4330e695d724a4 - http://secunia.com/advisories/46460 - http://rhn.redhat.com/errata/RHSA-2012-0939.html - http://secunia.com/advisories/49579
CVE ID: CVE-2011-4030 State: PUBLISHED Published: 2011-10-10T10:00:00 Last Updated: 2024-08-06T23:53:32.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0 - http://secunia.com/advisories/46323 - http://www.securityfocus.com/bid/50287 - http://plone.org/products/plone-hotfix/releases
/secunia.com/advisories/46323 - http://www.securityfocus.com/bid/50287 - http://plone.org/products/plone-hotfix/releases/20110928 - http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zip
CVE ID: CVE-2011-4031 State: PUBLISHED Published: 2012-05-09T10:00:00Z Last Updated: 2024-09-16T23:46:23.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the asfrtp_parse_packet function in libavformat/rtpdec_asf.c in FFmpeg before 0.8.3 allows remote attackers to execute arbitrary code via a crafted ASF packet. Additional Analyst Notes: - CVE Program Container: References: - http://technet.microsoft.com/en-us/security/msvr/msvr11-012 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=c2a2ad133eb9d42361804a568dee336992349a5e - http://git.videolan.org/?p=ffmpeg.git%3Ba=shortlog%3Bh=n0.8.3