Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3460 State: PUBLISHED Published: 2012-02-02T18:00:00 Last Updated: 2024-08-06T23:37:47.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PNG file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://support.apple.com/kb/HT5261 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://lists.apple.com/archives/security-announce/2012/May/msg00005.html
CVE ID: CVE-2011-3461 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:11.898Z Description: No description available.
CVE ID: CVE-2011-3462 State: PUBLISHED Published: 2012-02-02T18:00:00Z Last Updated: 2024-09-17T02:42:01.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows remote attackers to obtain sensitive information contained in new backups by spoofing this storage object, a different vulnerability than CVE-2010-1803. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE ID: CVE-2011-3463 State: PUBLISHED Published: 2012-02-02T18:00:00Z Last Updated: 2024-09-16T22:51:05.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebDAV Sharing in Apple Mac OS X 10.7.x before 10.7.3 does not properly perform authentication, which allows local users to gain privileges by leveraging access to (1) the server or (2) a bound directory. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE ID: CVE-2011-3464 State: PUBLISHED Published: 2012-07-22T17:00:00 Last Updated: 2024-08-06T23:37:47.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49660 - http://secunia.com/advisories/47827 - http://security.gentoo.org/glsa/glsa-201206-15.xml - http://www.libpng.org/pub/png/libpng.html
CVE ID: CVE-2011-3465 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:12.276Z Description: No description available.
CVE ID: CVE-2011-3466 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:12.656Z Description: No description available.
CVE ID: CVE-2011-3467 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:13.076Z Description: No description available.
CVE ID: CVE-2011-3468 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:13.468Z Description: No description available.
CVE ID: CVE-2011-3469 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:13.869Z Description: No description available.
CVE ID: CVE-2011-3470 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:14.230Z Description: No description available.
CVE ID: CVE-2011-3471 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:14.587Z Description: No description available.
CVE ID: CVE-2011-3472 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:14.992Z Description: No description available.
CVE ID: CVE-2011-3473 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:15.395Z Description: No description available.
CVE ID: CVE-2011-3474 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:15.786Z Description: No description available.
CVE ID: CVE-2011-3475 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:16.160Z Description: No description available.
CVE ID: CVE-2011-3476 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3477 State: PUBLISHED Published: 2018-02-19T19:00:00 Last Updated: 2024-08-06T23:37:47.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local users to cause a denial of service (system crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47822 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20111109_00
CVE ID: CVE-2011-3478 State: PUBLISHED Published: 2012-01-25T15:00:00 Last Updated: 2024-08-06T23:37:47.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote attackers to execute arbitrary code via a crafted session on TCP port 5631. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/78532 - https://www.exploit-db.com/exploits/38599/ - http://www.securityfocus.com/bid/51592 - http://www.symantec.com/security_res
tps://www.exploit-db.com/exploits/38599/ - http://www.securityfocus.com/bid/51592 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00 - http://www.zerodayinitiative.com/advisories/ZDI-12-018/ - http://secunia.com/advisories/48092
CVE ID: CVE-2011-3479 State: PUBLISHED Published: 2012-01-25T15:00:00 Last Updated: 2024-08-06T23:37:47.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), uses world-writable permissions for product-installation files, which allows local users to gain privileges by modifying a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00 - http://secunia.com/advisories/48092 - http://www.securityfocus.com/bi
vid=security_advisory&year=2012&suid=20120124_00 - http://secunia.com/advisories/48092 - http://www.securityfocus.com/bid/51593
CVE ID: CVE-2011-3480 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3481 State: PUBLISHED Published: 2011-09-14T17:00:00 Last Updated: 2024-08-06T23:37:47.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://git.cyrusimap.org/cyrus-imapd/commit/?id=6e776956a1a9dfa58eacdd0ddd52644009eac9e5 - http://bugzilla.cyrusimap.org/show_bug.cgi?id=3463 - http://bugzilla.cyrusimap.org/show_bug.cgi?id=2772
52644009eac9e5 - http://bugzilla.cyrusimap.org/show_bug.cgi?id=3463 - http://bugzilla.cyrusimap.org/show_bug.cgi?id=2772 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69842 - http://www.redhat.com/support/errata/RHSA-2011-1508.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:037
CVE ID: CVE-2011-3482 State: PUBLISHED Published: 2011-09-20T10:00:00 Last Updated: 2024-08-06T23:37:47.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/09/14/10 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6139 - http://www.openwall.com/lists/oss-security/2011/09/14/9 - https://oval.cisecur
shark.org/bugzilla/show_bug.cgi?id=6139 - http://www.openwall.com/lists/oss-security/2011/09/14/9 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14886 - http://www.openwall.com/lists/oss-security/2011/09/14/5 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:138 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=38430 - https://bugzilla.redhat.com/show_bug.cgi?id=737783 - http://www.openwall.com/lists/oss-security/2011/09/13/1 - http://www.wireshark.org/security/wnpa-sec-2011-16.html
CVE ID: CVE-2011-3483 State: PUBLISHED Published: 2011-09-20T10:00:00 Last Updated: 2024-08-06T23:37:47.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed capture file that leads to an invalid root tvbuff, related to a "buffer exception handling vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/09/14/10 - http://www.openwall.com/lists/oss-security/2011/09/14/9 - http://www.openwall.com/lists/oss-security/2011/09/14/5 - http://www.wireshark.org/security/wnpa-sec-2011-14.html - https://b
//www.openwall.com/lists/oss-security/2011/09/14/5 - http://www.wireshark.org/security/wnpa-sec-2011-14.html - https://bugzilla.redhat.com/show_bug.cgi?id=737785 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:138 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6135 - http://www.openwall.com/lists/oss-security/2011/09/13/1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14971
CVE ID: CVE-2011-3484 State: PUBLISHED Published: 2011-09-20T10:00:00 Last Updated: 2024-08-06T23:37:47.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unxorFrame function in epan/dissectors/packet-opensafety.c in the OpenSafety dissector in Wireshark 1.6.x before 1.6.2 does not properly validate a certain frame size, which allows remote attackers to cause a denial of service (loop and application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/09/14/10 - http://www.openwall.com/lists/oss-security/2011/09/14/9 - http://www.openwall.com/lists/oss-security/2011/09/14/5 - http://a
://www.openwall.com/lists/oss-security/2011/09/14/9 - http://www.openwall.com/lists/oss-security/2011/09/14/5 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=38213 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6138 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:138 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15062 - http://www.wireshark.org/security/wnpa-sec-2011-12.html - http://www.openwall.com/lists/oss-security/2011/09/13/1 - https://bugzilla.redhat.com/show_bug.cgi?id=737787
CVE ID: CVE-2011-3486 State: PUBLISHED Published: 2011-09-16T14:00:00 Last Updated: 2024-08-06T23:37:47.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/69765 - http://securityreason.com/securityalert/8380 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-06.pdf - http://osvdb.org/75495 - http://aluigi.altervista.org/adv/twincat_1-adv.txt
CVE ID: CVE-2011-3487 State: PUBLISHED Published: 2011-09-16T14:00:00 Last Updated: 2024-08-06T23:37:47.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42706/ - http://securityreason.com/securityalert/8384 - http://aluigi.altervista.org/adv/plantvisor_1-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/69762
CVE ID: CVE-2011-3488 State: PUBLISHED Published: 2011-09-16T14:00:00Z Last Updated: 2024-09-17T04:00:24.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Equis MetaStock 11 and earlier allows remote attackers to execute arbitrary code via a malformed (1) mwc chart, (2) mws chart, (3) mwt template, or (4) mwl layout. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/metastock_1-adv.txt
CVE ID: CVE-2011-3489 State: PUBLISHED Published: 2011-09-16T14:00:00 Last Updated: 2024-08-06T23:37:47.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted rna packet with a long string to TCP port 4446 that triggers (1) "a memset zero overflow" or (2) an out-of-bounds read, related to improper handling of a 32-bit size field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/69808 - http://securityreason.com/securityalert/8383 - http://www.securityfocus.com/bid/49
.ibmcloud.com/vulnerabilities/69808 - http://securityreason.com/securityalert/8383 - http://www.securityfocus.com/bid/49608 - http://aluigi.altervista.org/adv/rslogix_1-adv.txt
CVE ID: CVE-2011-3490 State: PUBLISHED Published: 2011-09-16T14:00:00 Last Updated: 2024-08-06T23:37:47.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long command to port 11234, as demonstrated with the TF command. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8382 - http://www.exploit-db.com/exploits/17848 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf - http://aluigi.altervista.org/adv/scadapro_1-ad
48 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf - http://aluigi.altervista.org/adv/scadapro_1-adv.txt
CVE ID: CVE-2011-3491 State: PUBLISHED Published: 2011-09-16T14:00:00 Last Updated: 2024-08-06T23:37:47.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative Content-Length field. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/movicon_1-adv.txt - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/69787 - http://osvdb.org/75494
CVE ID: CVE-2011-3492 State: PUBLISHED Published: 2011-09-16T14:00:00 Last Updated: 2024-08-06T23:37:47.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/69764 - http://aluigi.altervista.org/adv/daqfactory_1-adv.txt - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-02.pdf - http://www.exploit-db.com/exploits/17855 - http://osvdb.org/75496
CVE ID: CVE-2011-3493 State: PUBLISHED Published: 2011-09-16T14:00:00Z Last Updated: 2024-09-16T20:46:36.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the DH_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) domain, (2) report_domain, (3) register_datahub, or (4) slave commands. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/cogent_1-adv.txt - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-03.pdf
CVE ID: CVE-2011-3494 State: PUBLISHED Published: 2011-09-16T14:00:00Z Last Updated: 2024-09-17T00:30:42.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long StyleTemplate element in a QUO, SUM or POR file, which triggers a stack-based buffer overflow, or (2) a long Font->FaceName field (aka FaceName element), which triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/esignal
y information. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/esignal_1-adv.txt - http://secunia.com/advisories/45966
CVE ID: CVE-2011-3495 State: PUBLISHED Published: 2011-09-16T17:00:00 Last Updated: 2024-08-06T23:37:47.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the (1) RF, (2) wF, (3) UF, or (4) NF command. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8382 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf - http://aluigi.altervista.org/adv/scadapro_1-adv.txt
CVE ID: CVE-2011-3496 State: PUBLISHED Published: 2011-09-16T17:00:00 Last Updated: 2024-08-06T23:37:47.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) BF, (2) OF, or (3) EF command. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8382 - http://www.exploit-db.com/exploits/17848 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf - http://aluigi.altervista.org/adv/scadapro_1-adv.txt
CVE ID: CVE-2011-3497 State: PUBLISHED Published: 2011-09-16T17:00:00 Last Updated: 2024-08-06T23:37:47.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8382 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf - http://aluigi.altervista.org/adv/scadapro_1-adv.txt
CVE ID: CVE-2011-3498 State: PUBLISHED Published: 2011-09-16T17:00:00 Last Updated: 2024-08-06T23:37:47.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/69788 - http://aluigi.altervista.org/adv/movicon_1-adv.txt - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf
CVE ID: CVE-2011-3499 State: PUBLISHED Published: 2011-09-16T17:00:00 Last Updated: 2024-08-06T23:37:47.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/movicon_3-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/69789 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf
CVE ID: CVE-2011-3500 State: PUBLISHED Published: 2011-09-16T17:00:00Z Last Updated: 2024-09-17T04:04:55.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/cogent_2-adv.txt - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-03.pdf
CVE ID: CVE-2011-3501 State: PUBLISHED Published: 2011-09-16T17:00:00Z Last Updated: 2024-09-16T19:36:44.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial of service (crash) via a negative or large Content-Length value. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/cogent_3-adv.txt - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-03.pdf
CVE ID: CVE-2011-3502 State: PUBLISHED Published: 2011-09-16T17:00:00Z Last Updated: 2024-09-16T20:03:44.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request with a trailing (1) space or (2) %2e (encoded dot). Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-03.pdf - http://aluigi.altervista.org/adv/cogent_4-adv.txt
CVE ID: CVE-2011-3503 State: PUBLISHED Published: 2011-09-16T17:00:00 Last Updated: 2024-08-06T23:37:47.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in eSignal 10.6.2425.1208, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse JRS_UT.dll that is located in the same folder as a .quo (QUOTE) file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45966 - http://osvdb.org/75458
ional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45966 - http://osvdb.org/75458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69786
CVE ID: CVE-2011-3504 State: PUBLISHED Published: 2011-09-29T00:00:00 Last Updated: 2024-08-06T23:37:47.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2012:076 - http://ubuntu.com/usn/usn-1320-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:074 - http://secunia.com/advisories/45532 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:075 - http://www.ffmpeg.org/releases/ffm