Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4849 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies used by help.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72224 - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windo
bmcloud.com/vulnerabilities/72224 - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE ID: CVE-2011-4850 State: PUBLISHED Published: 2011-12-16T11:00:00Z Last Updated: 2024-09-17T02:06:21.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by help.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-cap
parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE ID: CVE-2011-4851 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in server/google-tools/ and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72226 - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_w
ce.ibmcloud.com/vulnerabilities/72226 - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE ID: CVE-2011-4852 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:35.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 generates web pages containing external links in response to GET requests with query strings for enterprise/mobile-monitor/ and certain other files, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72
Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72095 - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE ID: CVE-2011-4853 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:35.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 includes an RFC 1918 IP address within a web page, which allows remote attackers to obtain potentially sensitive information by reading this page, as demonstrated by smb/user/list-data/items-per-page/ and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72094 - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-
2094 - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE ID: CVE-2011-4854 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Type data in HTML META elements, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving the get_enabled_product_icon program. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/v
d by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72093 - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE ID: CVE-2011-4855 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:35.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving admin/customer-service-plan/list/reset-search/true/ and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/v
d by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72092 - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE ID: CVE-2011-4856 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving admin/health/parameters and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72091 - http://xss.cx/kb/p
: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72091 - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE ID: CVE-2011-4857 State: PUBLISHED Published: 2011-12-16T19:00:00 Last Updated: 2024-08-07T00:16:34.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://forums.winamp.com/showthread.php?t=332010 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72054 - h
y/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72054 - http://secunia.com/advisories/46882
CVE ID: CVE-2011-4858 State: PUBLISHED Published: 2012-01-05T19:00:00 Last Updated: 2024-08-07T00:16:35.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py - http://www.debian.org/security/2012/dsa-2401 - http://www.nruns.com/_downloads/advisory2812
lob/master/HashtablePOC.py - http://www.debian.org/security/2012/dsa-2401 - http://www.nruns.com/_downloads/advisory28122011.pdf - http://rhn.redhat.com/errata/RHSA-2012-0325.html - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0078.html - http://www.securityfocus.com/bid/51200 - https://bugzilla.redhat.com/show_bug.cgi?id=750521 - http://secunia.com/advisories/48791 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18886 - http://tomcat.apache.org/tomcat-7.0-doc/changelog.html - http://rhn.redhat.com/errata/RHSA-2012-0075.html - http://rhn.redhat.com/errata/RHSA-2012-0074.html - http://secunia.com/advisories
redhat.com/errata/RHSA-2012-0075.html - http://rhn.redhat.com/errata/RHSA-2012-0074.html - http://secunia.com/advisories/48549 - http://rhn.redhat.com/errata/RHSA-2012-0089.html - http://secunia.com/advisories/54971 - http://secunia.com/advisories/48790 - http://secunia.com/advisories/55115 - http://www.kb.cert.org/vuls/id/903934 - http://mail-archives.apache.org/mod_mbox/tomcat-announce/201112.mbox/%3c4EFB9800.5010106%40apache.org%3e - http://marc.info/?l=bugtraq&m=133294394108746&w=2 - http://marc.info/?l=bugtraq&m=132871655717248&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0406.html - http://marc.info/?l=bugtraq&m=133294394108746&w=2 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 -
012-0406.html - http://marc.info/?l=bugtraq&m=133294394108746&w=2 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://marc.info/?l=bugtraq&m=132871655717248&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0076.html - http://rhn.redhat.com/errata/RHSA-2012-0077.html - http://www.ocert.org/advisories/ocert-2011-003.html
CVE ID: CVE-2011-4859 State: PUBLISHED Published: 2011-12-17T11:00:00 Last Updated: 2024-08-07T00:16:35.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for
(11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf - http://reversemode.com/index.php?option=com_content&task=view&id=80&Itemid=1 - http://www.securityfocus.com/bid/51605 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-018-01.pdf - http://secunia.com/advisories/47723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72587 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-346-01.pdf
CVE ID: CVE-2011-4860 State: PUBLISHED Published: 2011-12-17T11:00:00Z Last Updated: 2024-09-16T20:38:01.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) generates the password for the fwupgrade account by performing a calculation on the MAC address, which makes it easier for remote attackers to obtain access via a (1) ARP request message or (2) Neighbor Solicitation message. Additional Analyst Notes: - CVE Program Container: References: - http://reversemode.com/index.php?option=com_content&task=view&id=80&Itemid=1
CVE ID: CVE-2011-4861 State: PUBLISHED Published: 2011-12-17T11:00:00Z Last Updated: 2024-09-16T18:24:28.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The modbus_125_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) allows remote attackers to install arbitrary firmware updates via a MODBUS 125 function code to TCP port 502. Additional Analyst Notes: - CVE Program Container: References: - http://reversemode.com/index.php?option=com_content&task=view&id=80&Itemid=1
CVE ID: CVE-2011-4862 State: PUBLISHED Published: 2011-12-25T01:00:00 Last Updated: 2024-08-07T00:16:35.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html - http://secunia.com/advisories/47399 - http://www.de
ists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html - http://secunia.com/advisories/47399 - http://www.debian.org/security/2011/dsa-2375 - http://www.redhat.com/support/errata/RHSA-2011-1854.html - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.html - http://archives.neohapsis.com/archives/bugtraq/2011-12/0172.html - http://www.debian.org/security/2011/dsa-2372 - http://secunia.com/advisories/47359 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071640.html - http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006120.html - http://secunia.com/advisories/47374 - http://lists.freebsd.org/pipermail/freebsd-security/201
011-December/006120.html - http://secunia.com/advisories/47374 - http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006118.html - http://security.freebsd.org/advisories/FreeBSD-SA-11:08.telnetd.asc - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071627.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:195 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.html - http://osvdb.org/78020 - http://www.securitytracker.com/id?1026463 - http://lists.freebsd.org/pipermail
/msg00011.html - http://osvdb.org/78020 - http://www.securitytracker.com/id?1026463 - http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006117.html - http://secunia.com/advisories/47341 - http://www.redhat.com/support/errata/RHSA-2011-1852.html - http://www.redhat.com/support/errata/RHSA-2011-1853.html - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.html - http://security.freebsd.org/patches/SA-11:08/telnetd.patch - http://secunia.com/advisories/47357 - http://secunia.com/advisories/46239 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html - http://secunia.com/advisories/47397 - http://secunia.com/advisories/47373 - http://list
announce/2012-01/msg00002.html - http://secunia.com/advisories/47397 - http://secunia.com/advisories/47373 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00015.html - http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006119.html - http://secunia.com/advisories/47441 - http://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=665f1e73cdd9b38e2d2e11b8db9958a315935592 - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2011-008.txt - http://www.redhat.com/support/errata/RHSA-2011-1851.html - http://www.exploit-db.com/exploits/18280/ - http://secunia.com/advisories/47348 - http://www.securitytracker.com/id?1026460 - http://www.debian.org/security/2011/dsa-2
p://secunia.com/advisories/47348 - http://www.securitytracker.com/id?1026460 - http://www.debian.org/security/2011/dsa-2373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71970
CVE ID: CVE-2011-4863 State: PUBLISHED Published: 2012-01-25T02:00:00 Last Updated: 2024-08-07T00:16:34.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tencent QQPimSecure (com.tencent.qqpimsecure) application 3.0.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS/MMS messages and a contact list via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4863-vulnerability-in-QQPimSecure.html - http://secunia.com/advisories/48432
CVE ID: CVE-2011-4864 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-17T02:57:55.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tencent MobileQQ (com.tencent.mobileqq) application 2.2 for Android does not properly protect data, which allows remote attackers to read or modify messages and a friends list via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4864-vulnerability-in-MobileQQ.html
CVE ID: CVE-2011-4865 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-16T17:03:00.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tencent WBlog (com.tencent.WBlog) 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4865-vulnerability-in-WBlog-MicroBlogPad.html
CVE ID: CVE-2011-4866 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-17T04:25:42.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kaixin001 (com.kaixin001.activity) application 1.3.1 and 1.3.3 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a cleartext password via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4866-vulnerability-in-Kaixin001.html
CVE ID: CVE-2011-4867 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-17T02:36:36.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tencent QQPhoto (com.tencent.qqphoto) application 0.97 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a password hash via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4867-vulnerability-in-QQPhoto.html
CVE ID: CVE-2011-4868 State: PUBLISHED Published: 2012-01-15T02:00:00 Last Updated: 2024-08-07T00:16:35.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets related to a lease-status update. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/article/AA-00705 - https://www.isc.org/software/dhcp/advisories/cve-2011-4868 - https://deepthought.isc.org/article/
org/article/AA-00705 - https://www.isc.org/software/dhcp/advisories/cve-2011-4868 - https://deepthought.isc.org/article/AA-00595 - http://security.gentoo.org/glsa/glsa-201301-06.xml
CVE ID: CVE-2011-4869 State: PUBLISHED Published: 2011-12-20T11:00:00 Last Updated: 2024-08-07T00:16:34.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528. Additional Analyst Notes: - CVE Program Container: References: - http://unbound.nlnetlabs.nl/downloads/CVE-2011-4528.txt - http://secunia.com/advisories/47326 - http://www.kb.cert.org/vuls/id/209659 - https://exchange.xforce.ibmcloud.
28.txt - http://secunia.com/advisories/47326 - http://www.kb.cert.org/vuls/id/209659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71868 - http://www.debian.org/security/2011/dsa-2370 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071535.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071525.html - http://osvdb.org/77910
CVE ID: CVE-2011-4870 State: PUBLISHED Published: 2012-01-08T00:00:00Z Last Updated: 2024-09-17T00:20:29.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the (1) GUIControls, (2) BatchObjSrv, and (3) BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, allow remote attackers to execute arbitrary code via a long string in a property value, a different issue than CVE-2011-3141. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-332-01A.pdf - http://www.securityfocus.com/bid/51129
CVE ID: CVE-2011-4871 State: PUBLISHED Published: 2012-04-18T10:00:00Z Last Updated: 2024-09-16T16:37:50.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Automation Software OPC Systems.NET before 5.0 allows remote attackers to cause a denial of service via a malformed .NET RPC packet on TCP port 58723. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-012-01.pdf
CVE ID: CVE-2011-4872 State: PUBLISHED Published: 2012-02-05T11:00:00Z Last Updated: 2024-09-17T02:37:18.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a crafted application that uses the android.permission.ACCESS_WIFI_STATE permission to call the toString method on the WifiConfiguration class. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/7
fiConfiguration class. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/763355 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0002.html - http://secunia.com/advisories/47837 - http://blog.mywarwithentropy.com/2012/02/8021x-password-exploit-on-many-htc.html - http://www.securityfocus.com/bid/51790