Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1420 State: PUBLISHED Published: 2011-03-28T16:00:00 Last Updated: 2024-08-06T22:28:41.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47036 - http://www.securityfocus.com/archive/1/517179/100/0/threaded - http://securityreason.com/securityalert/8169 - http://securitytracker.com/id?1025253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66323 - http://www.vupen.com/engli
securitytracker.com/id?1025253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66323 - http://www.vupen.com/english/advisories/2011/0783 - http://secunia.com/advisories/43893
CVE ID: CVE-2011-1421 State: PUBLISHED Published: 2011-04-22T10:00:00 Last Updated: 2024-08-06T22:28:41.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/1025 - http://securitytracker.com/id?1025383 - http://securityreason.com/securityalert/8214 - http://www.securityfocus.com/archive/1/517532/100/0/threaded - http://www.securityfocus.com/bid/47410 - http://sec
214 - http://www.securityfocus.com/archive/1/517532/100/0/threaded - http://www.securityfocus.com/bid/47410 - http://secunia.com/advisories/44237
CVE ID: CVE-2011-1422 State: PUBLISHED Published: 2011-04-22T10:00:00 Last Updated: 2024-08-06T22:28:41.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise (AAOP) 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025382 - http://www.securityfocus.com/bid/47408 - http://securityreason.com/securityalert/8215 - http://www.vupen.com/english/advisories/2011/1026 - http://www.securityfocus.com/archive/1/517534/100/
urityalert/8215 - http://www.vupen.com/english/advisories/2011/1026 - http://www.securityfocus.com/archive/1/517534/100/0/threaded - http://secunia.com/advisories/44236
CVE ID: CVE-2011-1423 State: PUBLISHED Published: 2011-05-05T01:00:00 Last Updated: 2024-08-06T22:28:40.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RSA Data Loss Prevention (DLP) Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/517763/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/67210 - http://securityreason.com/securityalert/8242 - http://www.securityfocus.com/bid/47642
CVE ID: CVE-2011-1424 State: PUBLISHED Published: 2011-05-24T23:00:00 Last Updated: 2024-08-06T22:28:41.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET Application Tracing. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8258 - http://www.securityfocus.com/archive/1/518003/100/0/threaded
CVE ID: CVE-2011-1425 State: PUBLISHED Published: 2011-04-03T01:00:00 Last Updated: 2024-08-06T22:28:41.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=692133 - http://www.vupen.com/english/advisories/2011/0855 - http://www.securitytracker.com/id?1025284 - http://www.debian.org/secur
p://www.vupen.com/english/advisories/2011/0855 - http://www.securitytracker.com/id?1025284 - http://www.debian.org/security/2011/dsa-2219 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:063 - http://www.securityfocus.com/bid/47135 - http://trac.webkit.org/changeset/79159 - http://www.vupen.com/english/advisories/2011/1010 - http://www.aleksey.com/pipermail/xmlsec/2011/009120.html - http://secunia.com/advisories/44423 - http://git.gnome.org/browse/xmlsec/commit/?id=2d5eddcc4163ea050cf3a3a1a25452bb5124f780 - http://www.redhat.com/support/errata/RHSA-2011-0486.html - http://git.gnome.org/browse/xmlsec/commit/?id=35eaacde6093d6711339754fc2146341b8b9f5fa - http://www.vupen.com/engli
ml - http://git.gnome.org/browse/xmlsec/commit/?id=35eaacde6093d6711339754fc2146341b8b9f5fa - http://www.vupen.com/english/advisories/2011/1172 - http://secunia.com/advisories/44167 - http://secunia.com/advisories/43920 - https://bugs.webkit.org/show_bug.cgi?id=52688 - http://www.vupen.com/english/advisories/2011/0858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66506
CVE ID: CVE-2011-1426 State: PUBLISHED Published: 2011-04-18T18:00:00 Last Updated: 2024-08-06T22:28:41.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, launches a default handler for the filename specified in the first argument, which allows remote attackers to execute arbitrary code via a .rnx filename corresponding to a crafted RNX file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/517470/100/0/threaded - http://service.real.com/realplayer/security/04122011_player/en/ - http
curityfocus.com/archive/1/517470/100/0/threaded - http://service.real.com/realplayer/security/04122011_player/en/ - http://securitytracker.com/id?1025351 - http://www.vupen.com/english/advisories/2011/0979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66728 - http://www.securityfocus.com/bid/47335 - http://zerodayinitiative.com/advisories/ZDI-11-122/
CVE ID: CVE-2011-1427 State: PUBLISHED Published: 2011-03-15T17:00:00 Last Updated: 2024-08-06T22:28:41.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Language parameter to Pages/login.aspx, (2) HeaderWarning parameter to Troubleshooting/DiagnosticReport.asp, or (3) User-Agent header to troubleshooting/speedtest.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/516881/100/0/threaded - http://www.securityfocus.com/bid/46762 - http://www.securityfocus.com/archive/1/516880/1
chive/1/516881/100/0/threaded - http://www.securityfocus.com/bid/46762 - http://www.securityfocus.com/archive/1/516880/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/65941 - http://securityreason.com/securityalert/8135
CVE ID: CVE-2011-1428 State: PUBLISHED Published: 2011-03-16T22:00:00Z Last Updated: 2024-09-17T02:16:44.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and earlier does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL chat server via an arbitrary certificate, related to incorrect use of the GnuTLS API. Additional Analyst Notes: - CVE Program Container: References: - http://savannah.nongnu.org/patch/index.php?7459 - http://www.securityfocus.com/bid/46612 - http://git.savannah.gnu.org/gitweb/?p=weechat.git%3B
org/patch/index.php?7459 - http://www.securityfocus.com/bid/46612 - http://git.savannah.gnu.org/gitweb/?p=weechat.git%3Ba=commit%3Bh=c265cad1c95b84abfd4e8d861f25926ef13b5d91 - http://archives.neohapsis.com/archives/fulldisclosure/2011-02/0671.html - http://secunia.com/advisories/43543
CVE ID: CVE-2011-1429 State: PUBLISHED Published: 2011-03-16T22:00:00 Last Updated: 2024-08-06T22:28:40.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-0959.html - http://secunia.com/advisories/44937 - http://securityreason.com/securityalert/8143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66015 - h
es/44937 - http://securityreason.com/securityalert/8143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66015 - http://seclists.org/fulldisclosure/2011/Mar/87 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061356.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061353.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061461.html - http://www.securityfocus.com/bid/46803
CVE ID: CVE-2011-1430 State: PUBLISHED Published: 2011-03-16T22:00:00 Last Updated: 2024-08-06T22:28:41.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: The STARTTLS implementation in the server in Ipswitch IMail 11.03 and earlier does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MAPG-8DBRD4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/659
ner: References: - http://www.kb.cert.org/vuls/id/MAPG-8DBRD4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65932 - http://www.osvdb.org/71020 - http://secunia.com/advisories/43676 - http://www.securityfocus.com/bid/46767 - http://www.kb.cert.org/vuls/id/555316 - http://www.vupen.com/english/advisories/2011/0609
CVE ID: CVE-2011-1431 State: PUBLISHED Published: 2011-03-16T22:00:00 Last Updated: 2024-08-06T22:28:40.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: The STARTTLS implementation in qmail-smtpd.c in qmail-smtpd in the netqmail-1.06-tls patch for netqmail 1.06 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65932 - http://ww
yst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65932 - http://www.kb.cert.org/vuls/id/MAPG-8D9M5Q - http://inoa.net/qmail-tls/vu555316.patch - http://www.postfix.org/CVE-2011-0411.html - http://www.vupen.com/english/advisories/2011/0612 - http://www.securityfocus.com/bid/46767 - http://www.kb.cert.org/vuls/id/555316 - http://www.securityfocus.com/archive/1/516901 - http://securityreason.com/securityalert/8144
CVE ID: CVE-2011-1432 State: PUBLISHED Published: 2011-03-16T22:00:00 Last Updated: 2024-08-06T22:28:41.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: The STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65932 - http://www.kb.cert.org/vuls/id/MAPG-8D9M6A - http://www.securityfo
/exchange.xforce.ibmcloud.com/vulnerabilities/65932 - http://www.kb.cert.org/vuls/id/MAPG-8D9M6A - http://www.securityfocus.com/bid/46767 - http://www.vupen.com/english/advisories/2011/0613 - http://www.kb.cert.org/vuls/id/555316
CVE ID: CVE-2011-1433 State: PUBLISHED Published: 2011-03-18T16:00:00 Last Updated: 2024-08-06T22:28:41.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS) before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the _UserLogin and _UserPW fields. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=6878 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66196 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revisi
878 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66196 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2011-1434 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:28:41.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 11.0.696.57 does not ensure thread safety during handling of MIME data, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=71586 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14196 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - https://exchange.xfor
.oval%3Adef%3A14196 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67141
CVE ID: CVE-2011-1435 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:28:41.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=72523 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67142
CVE ID: CVE-2011-1436 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:28:40.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 11.0.696.57 on Linux does not properly interact with the X Window System, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14749 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - http://code.google.com/p/chromium/issues/detail?id=72910
CVE ID: CVE-2011-1437 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:28:41.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to float rendering. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=73526 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14601 - https://exchange.xforce.ibmcloud.com/vu
isecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67144
CVE ID: CVE-2011-1438 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:28:41.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 11.0.696.57 allows remote attackers to bypass the Same Origin Policy via vectors involving blobs. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14621 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67145 - http://code.google.com/p/chromium/issues/detail?id=74653
CVE ID: CVE-2011-1439 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:28:41.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 11.0.696.57 on Linux does not properly isolate renderer processes, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14300 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67146 - http://code.google.com/p/chromium/issues/detail?id=74763
CVE ID: CVE-2011-1440 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:28:41.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the ruby element and Cascading Style Sheets (CSS) token sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2245 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - https://oval.cisecurity.org/repository/search/definition/
apple.com/archives/Security-announce/2011//Oct/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14083 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://code.google.com/p/chromium/issues/detail?id=75186 - http://support.apple.com/kb/HT5000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67147
CVE ID: CVE-2011-1441 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:28:41.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 11.0.696.57 does not properly perform a cast of an unspecified variable during handling of floating select lists, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - http://code.google.com/p/chromium/issues/detail?id=75347 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
de.google.com/p/chromium/issues/detail?id=75347 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14646 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67148
CVE ID: CVE-2011-1442 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:28:41.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a denial of service (node tree corruption) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=75801 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67149 - https://oval.cisecurity.org/repository/search/defi
e.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67149 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13808
CVE ID: CVE-2011-1443 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:28:41.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 11.0.696.57 does not properly implement layering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14627 - http://code.google.com/p/chromium/issues/detail?id=76001 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - https://excha
mium/issues/detail?id=76001 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67150
CVE ID: CVE-2011-1444 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:28:40.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the sandbox launcher implementation in Google Chrome before 11.0.696.57 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2245 - http://code.google.com/p/chromium/issues/detail?id=76542 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
s.blogspot.com/2011/04/chrome-stable-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67151
CVE ID: CVE-2011-1445 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:28:41.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 11.0.696.57 does not properly handle SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - http://code.google.com/p/chromium/issues/detail?id=76646 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67152 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14557
CVE ID: CVE-2011-1446 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:28:41.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 11.0.696.57 allows remote attackers to spoof the URL bar via vectors involving (1) a navigation error or (2) an interrupted load. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=76666 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67153 - http://code.google.com/p