Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3369 State: PUBLISHED Published: 2011-09-30T17:00:00Z Last Updated: 2024-08-06T23:29:56.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: The add_conversation function in conversations.c in EtherApe before 0.9.12 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RPC packet, related to the get_rpc function in decode_proto.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/09/22/1 - http://secunia.com/advisories/45989 - http://www.openwall.com/lists/oss-security/2011/09/19/4 - http://sourceforge.net/tracker/?func=detail&aid=3309061&group_id=
p://www.openwall.com/lists/oss-security/2011/09/19/4 - http://sourceforge.net/tracker/?func=detail&aid=3309061&group_id=2712&atid=102712 - http://etherape.sourceforge.net/NEWS.html
CVE ID: CVE-2011-3370 State: PUBLISHED Published: 2019-11-12T13:59:18 Last Updated: 2024-08-06T23:29:56.732Z Vendors: statusnet Products: statusnet Problem Types: unspecified Description: statusnet before 0.9.9 has XSS Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-3370 - https://access.redhat.com/security/cve/cve-2011-3370 - https://seclists.org/oss-sec/2011/q3/488
CVE ID: CVE-2011-3371 State: PUBLISHED Published: 2011-10-02T20:00:00Z Last Updated: 2024-09-17T01:11:33.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in include/functions.php in PunBB before 1.3.6 allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) form_sent, (3) csrf_token, (4) req_confirm, or (5) delete parameter to delete.php, the (6) id, (7) form_sent, (8) csrf_token, (9) req_message, or (10) submit parameter to edit.php, the (11) action, (12) form_sent, (13) csrf_token, (14) req_email, or (15) request_pass parameter to login.php, the (16) email, (17) form_sent, (18) redirect_url, (19) cs
(14) req_email, or (15) request_pass parameter to login.php, the (16) email, (17) form_sent, (18) redirect_url, (19) csrf_token, (20) req_subject, (21) req_message, or (22) submit parameter to misc.php, the (23) action, (24) id, (25) form_sent, (26) csrf_token, (27) req_old_password, (28) req_new_password1, (29) req_new_password2, or (30) update parameter to profile.php, or the (31) action, (32) form_sent, (33) csrf_token, (34) req_username, (35) req_password1, (36) req_password2, (37) req_email1, (38) timezone, or (39) register parameter to register.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2011-09/0193.html
t Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2011-09/0193.html - https://github.com/downloads/punbb/punbb/punbb-1.3.6.zip - http://archives.neohapsis.com/archives/fulldisclosure/2011-09/0210.html - http://archives.neohapsis.com/archives/fulldisclosure/2011-09/0272.html - http://securitytracker.com/id?1026073 - https://github.com/punbb/punbb/commit/dd50a50a2760f10bd2d09814e30af4b36052ca6d - http://www.openwall.com/lists/oss-security/2011/09/18/1 - http://punbb.informer.com/forums/topic/24427/multiple-xss-vulnerabilities/ - http://punbb.informer.com/forums/topic/24430/punbb-136/ - http://www.openwall.com/lists/oss-security/2011/09/22/3
CVE ID: CVE-2011-3372 State: PUBLISHED Published: 2011-12-24T19:00:00Z Last Updated: 2024-09-17T00:45:46.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command. Additional Analyst Notes: - CVE Program Container: References: - http://cyrusimap.org/mediawiki/index.php/Latest_Updates - https://bugzilla.redhat.com/show_bug.cgi?id=740822 - http://www.redhat.com/support/errata/RHSA-2011-1508.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:149 - http://secunia.c
/support/errata/RHSA-2011-1508.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:149 - http://secunia.com/advisories/46093 - http://git.cyrusimap.org/cyrus-imapd/commit/?id=77903669e04c9788460561dd0560b9c916519594 - http://securitytracker.com/id?1026363 - http://secunia.com/secunia_research/2011-68 - http://www.debian.org/security/2011/dsa-2318
CVE ID: CVE-2011-3373 State: PUBLISHED Published: 2019-11-25T22:43:40 Last Updated: 2024-08-06T23:29:56.791Z Vendors: drupal6-views_bulk_operations Products: drupal6-views_bulk_operations Problem Types: Cross-Site Scripting Description: Drupal Views Builk Operations (VBO) module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the vocabulary has had user tagging enabled and the "Modify node taxonomy terms" action is used. A remote attacker could provide a specially-crafted URL that could lead to cross-site scripting (XSS) attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3373 - https://acces
Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3373 - https://access.redhat.com/security/cve/cve-2011-3373 - https://www.openwall.com/lists/oss-security/2011/09/22/4 - https://www.securityfocus.com/bid/49727
CVE ID: CVE-2011-3374 State: PUBLISHED Published: 2019-11-25T23:13:02 Last Updated: 2024-08-06T23:29:56.887Z Vendors: apt Products: apt Problem Types: Other Description: It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-3374 - https://access.redhat.com/security/cve/cve-2011-3374 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642480 - https://snyk.io/vuln/SNYK-LINUX-APT-116518 - https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3374.html - https://secli
o/vuln/SNYK-LINUX-APT-116518 - https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3374.html - https://seclists.org/fulldisclosure/2011/Sep/221 - https://ubuntu.com/security/CVE-2011-3374
CVE ID: CVE-2011-3375 State: PUBLISHED Published: 2012-01-19T02:00:00 Last Updated: 2024-08-06T23:29:56.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2401 - http://tomcat.apache.org/security-7.html - http://tomcat.apache.org/security-6.html
CVE ID: CVE-2011-3376 State: PUBLISHED Published: 2011-11-11T21:00:00 Last Updated: 2024-08-06T23:29:56.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privileges by using an untrusted web application to access the Manager application's functionality. Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc?view=revision&revision=1176588 - http://tomcat.apache.org/security-7.html - http://www.securityfocus.com/bid/50603 - http://svn.apache.org/viewv
176588 - http://tomcat.apache.org/security-7.html - http://www.securityfocus.com/bid/50603 - http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/core/DefaultInstanceManager.java?r1=1176588&r2=1176587&pathrev=1176588
CVE ID: CVE-2011-3377 State: PUBLISHED Published: 2014-02-05T19:00:00 Last Updated: 2024-08-06T23:29:56.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy (SOP) and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same second-level domain, but a different sub-domain than the targeted domain. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=742515 - http://rhn.redhat.com/errata/RHSA-2011-1441.html - http://dbhole.wordpress
/bugzilla.redhat.com/show_bug.cgi?id=742515 - http://rhn.redhat.com/errata/RHSA-2011-1441.html - http://dbhole.wordpress.com/2011/11/08/icedtea-web-1-0-6-and-1-1-4-security-releases-released/ - http://www.osvdb.org/76940 - http://lists.opensuse.org/opensuse-updates/2012-03/msg00028.html - http://www.debian.org/security/2012/dsa-2420 - http://www.securityfocus.com/bid/50610 - http://www.ubuntu.com/usn/USN-1263-1
CVE ID: CVE-2011-3378 State: PUBLISHED Published: 2011-12-24T19:00:00 Last Updated: 2024-08-06T23:29:56.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to (1) the regionSwab function, (2) the headerLoad function, and (3) multiple functions in rpmio/rpmpgp.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=741612 - https://bugzilla.r
st Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=741612 - https://bugzilla.redhat.com/show_bug.cgi?id=741606 - http://rpm.org/wiki/Releases/4.9.1.2#Security - http://www.mandriva.com/security/advisories?name=MDVSA-2011:143 - http://www.openwall.com/lists/oss-security/2011/09/27/3 - http://www.redhat.com/support/errata/RHSA-2011-1349.html - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00000.html - http://www.ubuntu.com/usn/USN-1695-1 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691 - http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=11a7
ttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691 - http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=11a7e5d95a8ca8c7d4eaff179094afd8bb74fc3f - http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=a48f0e20cbe2ababc88b2fc52fb7a281d6fc1656
CVE ID: CVE-2011-3379 State: PUBLISHED Published: 2011-11-03T15:00:00 Last Updated: 2024-08-06T23:29:56.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages and custom autoloaders. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=741020 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://svn.php.net/viewvc/?view=revision&revision=317183 -
.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://svn.php.net/viewvc/?view=revision&revision=317183 - https://bugs.php.net/bug.php?id=55475 - http://www.securityfocus.com/archive/1/519770/30/0/threaded - http://securityreason.com/securityalert/8525 - http://www.byte.nl/blog/2011/09/23/security-bug-in-is_a-function-in-php-5-3-7-5-3-8/ - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
CVE ID: CVE-2011-3380 State: PUBLISHED Published: 2011-11-17T19:00:00 Last Updated: 2024-08-06T23:29:56.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid KEY_LENGTH attribute, which is not properly handled by the error handling function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openswan.org/download/CVE-2011-3380/CVE-2011-3380.txt - http://secunia.com/advisories/46306 - http://www.redhat.com/support/errata/RHSA-2011-1356.html
CVE ID: CVE-2011-3381 State: PUBLISHED Published: 2011-09-08T18:00:00Z Last Updated: 2024-09-16T22:25:05.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN71435255/index.html - http://www.phorum.org/phorum5/read.php?64%2C147504 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000068
CVE ID: CVE-2011-3382 State: PUBLISHED Published: 2011-09-08T18:00:00Z Last Updated: 2024-09-16T22:20:49.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN71435255/index.html - http://www.phorum.org/phorum5/read.php?64%2C147504 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000068
CVE ID: CVE-2011-3383 State: PUBLISHED Published: 2011-10-24T17:00:00Z Last Updated: 2024-09-17T01:31:35.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "the web page to be output." Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN36684331/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000080
CVE ID: CVE-2011-3384 State: PUBLISHED Published: 2011-09-08T18:00:00Z Last Updated: 2024-09-16T22:40:40.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Sage add-on 1.3.10 and earlier for Firefox allows remote attackers to inject arbitrary web script or HTML via a crafted feed, a different vulnerability than CVE-2009-4102. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN30221194/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000069
CVE ID: CVE-2011-3385 State: PUBLISHED Published: 2011-09-02T17:00:00Z Last Updated: 2024-09-17T01:20:46.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unknown vectors, a different vulnerability than CVE-2006-2307. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN02134508/index.html - http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000067.html
CVE ID: CVE-2011-3386 State: PUBLISHED Published: 2011-09-02T23:00:00 Last Updated: 2024-08-06T23:29:56.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Medtronic Paradigm wireless insulin pump 512, 522, 712, and 722 allows remote attackers to modify the delivery of an insulin bolus dose and cause a denial of service (adverse human health effects) via unspecified vectors involving wireless communications and knowledge of the device's serial number, as demonstrated by Jerome Radcliffe at the Black Hat USA conference in August 2011. NOTE: the vendor has disputed the severity of this issue, saying "we believe the risk of deliberate, malicious, or unau
NOTE: the vendor has disputed the severity of this issue, saying "we believe the risk of deliberate, malicious, or unauthorized manipulation of medical devices is extremely low... we strongly believe it would be extremely difficult for a third-party to wirelessly tamper with your insulin pump... you would be able to detect tones on the insulin pump that weren't intentionally programmed and could intervene accordingly." Additional Analyst Notes: - CVE Program Container: References: - http://www.hanselman.com/blog/HackersCanKillDiabeticsWithInsulinPumpsFromAHalfMileAwayUmNoFactsVsJournalisticFearMongering.aspx - http://www.scmagazineus.com/black-hat-insulin-pumps-can-be-hacked/article/209106/
actsVsJournalisticFearMongering.aspx - http://www.scmagazineus.com/black-hat-insulin-pumps-can-be-hacked/article/209106/ - http://www.loop-blog.com/Blog_Full_Post?id=a09C000000Dbz3JIAR - http://sixuntilme.com/blog2/2011/08/hacked_jay_radcliffe_insulin_p.html - http://www.foxnews.com/scitech/2011/08/04/insulin-pumps-vulnerable-to-hacking/?test=faces - https://exchange.xforce.ibmcloud.com/vulnerabilities/69643 - http://www.informationweek.com/news/security/vulnerabilities/231600265 - http://www.darkreading.com/security/vulnerabilities/231300312/getting-root-on-the-human-body.html
CVE ID: CVE-2011-3387 State: PUBLISHED Published: 2011-09-02T23:00:00 Last Updated: 2024-08-06T23:29:56.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to validation of a length field at the wrong time, a different vulnerability than CVE-2011-0311. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/69641 - https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551 - http://www.redhat.com/support/er
m/vulnerabilities/69641 - https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551 - http://www.redhat.com/support/errata/RHSA-2011-1265.html
CVE ID: CVE-2011-3388 State: PUBLISHED Published: 2011-09-06T19:00:00 Last Updated: 2024-08-06T23:29:56.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extended Validation and loading content from trusted sources in an unspecified sequence that causes the address field and page information dialog to contain security information based on the trusted site, instead of the insecure site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025997 - http://www.securityfocus.com/bid/49388 - http://osvdb.or
iner: References: - http://www.securitytracker.com/id?1025997 - http://www.securityfocus.com/bid/49388 - http://osvdb.org/74828 - http://www.opera.com/docs/changelogs/windows/1151/ - http://secunia.com/advisories/45791 - http://www.opera.com/docs/changelogs/unix/1151/ - http://www.opera.com/docs/changelogs/mac/1151/ - http://www.opera.com/support/kb/view/1000/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/69515
CVE ID: CVE-2011-3389 State: PUBLISHED Published: 2011-09-06T19:00:00 Last Updated: 2024-08-06T23:29:56.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST
hat uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/74829 - http://eprint.iacr.org/2004/111 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://isc.sans.edu/diary/SSL+TLS+part+3+/11635 - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://secunia.com/advisories/48692 - http://marc.info/?l=bugtraq&m=134254866602253&w=2 - http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf - http://marc.info/?l=bugtraq&m=133365109612558&w=2 - http://secunia.com/advisories/55322 - http://support.a
M_R4_EN.pdf - http://marc.info/?l=bugtraq&m=133365109612558&w=2 - http://secunia.com/advisories/55322 - http://support.apple.com/kb/HT5130 - https://bugzilla.redhat.com/show_bug.cgi?id=737506 - http://marc.info/?l=bugtraq&m=132750579901589&w=2 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html - http://www.securitytracker.com/id?1025997 - http://www.us-cert.gov/cas/techalerts/TA12-010A.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html - http://www.securityfocus.com/bid/49388 - http://ekoparty.org/2011/juliano-rizzo.php - http://downloads.asterisk.org/pub/secur
//www.securityfocus.com/bid/49388 - http://ekoparty.org/2011/juliano-rizzo.php - http://downloads.asterisk.org/pub/security/AST-2016-001.html - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://secunia.com/advisories/55351 - http://marc.info/?l=bugtraq&m=132750579901589&w=2 - http://www.kb.cert.org/vuls/id/864643 - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www.securityfocus.com/bid/49778 - http://www.debian.org/security/2012/dsa-2398 - http://secunia.com/advisories/48948 - http://support.
cus.com/bid/49778 - http://www.debian.org/security/2012/dsa-2398 - http://secunia.com/advisories/48948 - http://support.apple.com/kb/HT6150 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://technet.microsoft.com/security/advisory/2588513 - https://hermes.opensuse.org/messages/13155432 - http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx - http://www.redhat.com/support/errata/RHSA-2011-1384.html - http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx - http://www.opera.com/docs/changelogs/windows/1151/ - https://hermes.opensuse.org/messages/13154861 - http://
8513.aspx - http://www.opera.com/docs/changelogs/windows/1151/ - https://hermes.opensuse.org/messages/13154861 - http://eprint.iacr.org/2006/136 - http://secunia.com/advisories/48915 - http://security.gentoo.org/glsa/glsa-201203-02.xml - http://marc.info/?l=bugtraq&m=132872385320240&w=2 - http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html - http://secunia.com/advisories/48256 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://www.securitytracker.com/id?1026103 - http://support.apple.com/kb/HT4999 - http://www.imperialviolet.org/2011/09/23/chromeandbeast.html - http://support.apple.com/kb/HT5501 - http://www.insecure.cl/Beast-SSL.rar
alviolet.org/2011/09/23/chromeandbeast.html - http://support.apple.com/kb/HT5501 - http://www.insecure.cl/Beast-SSL.rar - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - http://support.apple.com/kb/HT5001 - http://www.opera.com/docs/changelogs/mac/1160/ - http://curl.haxx.se/docs/adv_20120124B.html - http://www.opera.com/support/kb/view/1004/ - http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html - http://www.securitytracker.com/id?1026704 - http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html - http://marc.info/?l=bugtraq&m=132872385320240&w=2 - http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue - http://rhn.redhat