Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1607 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:37:24.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote authenticated users to upload files to arbitrary directories via a modified pathname in an upload request, aka Bug ID CSCti81603. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67127 - http://secunia.com/advisories/44331 - http://archives.neohapsis.c
//exchange.xforce.ibmcloud.com/vulnerabilities/67127 - http://secunia.com/advisories/44331 - http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.html - http://www.securitytracker.com/id?1025449 - http://www.vupen.com/english/advisories/2011/1122 - http://www.securityfocus.com/bid/47608 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtml
CVE ID: CVE-2011-1609 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:37:25.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5)su1, 8.0 before 8.0(3), and 8.5 before 8.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtg85647. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44331 - http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.html - http://www.securitytracker.com/id?1025449 - http://ww
archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.html - http://www.securitytracker.com/id?1025449 - http://www.vupen.com/english/advisories/2011/1122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67125 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtml - http://www.securityfocus.com/bid/47605
CVE ID: CVE-2011-1610 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:37:24.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5)su4, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1)su1 allow remote attackers to execute arbitrary SQL commands via the (1) f, (2) l, or (3) n parameter, aka Bug ID CSCtj42064. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-11-143/ - http://secunia.com
t Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-11-143/ - http://secunia.com/advisories/44331 - http://www.securityfocus.com/archive/1/517727/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.html - http://www.securitytracker.com/id?1025449 - http://www.vupen.com/english/advisories/2011/1122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67126 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtml - http://www.securityfocus.com/bid/47607
CVE ID: CVE-2011-1613 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:37:24.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0, 7.0 before 7.0.98.216, and 7.0.1xx before 7.0.112.0 allows remote attackers to cause a denial of service (device reload) via a sequence of ICMP packets, aka Bug ID CSCth74426. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47606 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7950e.shtml - http://www.securitytracker.com/id?1025448 - http://secunia.com/advi
s/products_security_advisory09186a0080b7950e.shtml - http://www.securitytracker.com/id?1025448 - http://secunia.com/advisories/44384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67128 - http://www.vupen.com/english/advisories/2011/1123
CVE ID: CVE-2011-1623 State: PUBLISHED Published: 2011-06-02T20:00:00 Last Updated: 2024-08-06T22:37:24.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Media Processing Software before 1.2 on Media Experience Engine (MXE) 5600 devices has a default root password, which makes it easier for context-dependent attackers to obtain access via (1) the local console, (2) an SSH session, or (3) a TELNET session, aka Bug ID CSCto77737. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/72721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67760 - http://www.securityfocus.com/bid/48078 - http://www.cisco.com/en/US/products/products_security_ad
ulnerabilities/67760 - http://www.securityfocus.com/bid/48078 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80122.shtml - http://www.securitytracker.com/id?1025590
CVE ID: CVE-2011-1624 State: PUBLISHED Published: 2011-08-18T18:00:00Z Last Updated: 2024-09-16T17:49:27.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2(58)SE, when a login banner is configured, allows remote attackers to cause a denial of service (device reload) by establishing two SSH2 sessions, aka Bug ID CSCto62631. Additional Analyst Notes: - CVE Program Container: References: - https://supportforums.cisco.com/message/3356210 - http://www.cisco.com/en/US/docs/switches/lan/cisco_ie3000/software/release/12.2_58_se/release/notes/OL24335.html
CVE ID: CVE-2011-1625 State: PUBLISHED Published: 2011-08-18T18:00:00Z Last Updated: 2024-09-17T01:31:23.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching (DLSw) feature is configured, allows remote attackers to cause a denial of service (device crash) by sending a sequence of malformed packets and leveraging a "narrow timing window," aka Bug ID CSCtf74999, a different vulnerability than CVE-2007-0199, CVE-2008-1152, and CVE-2009-0629. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/cable/cmts/release/notes/12_2sc/uBR7200/122_33_SCF/caveats.html
CVE ID: CVE-2011-1637 State: PUBLISHED Published: 2011-06-02T20:00:00 Last Updated: 2024-08-06T22:37:24.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025588 - http://secunia.com/advisories/44814/ - http://www.securityfocus.com/bid/48075 - http://osvdb.org/72719 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.shtml - https:/
http://osvdb.org/72719 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/67743
CVE ID: CVE-2011-1640 State: PUBLISHED Published: 2011-10-22T01:00:00Z Last Updated: 2024-09-16T23:05:53.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ethernet-lldp component in Cisco IOS 12.2 before 12.2(33)SXJ1 does not properly support a large number of LLDP Management Address (MA) TLVs, which allows remote attackers to cause a denial of service (device crash) via crafted LLDPDUs, aka Bug ID CSCtj22354. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXJ.html
CVE ID: CVE-2011-1643 State: PUBLISHED Published: 2011-08-29T15:00:00Z Last Updated: 2024-09-17T00:10:43.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session, aka Bug IDs CSCti81574, CSCto63060, CSCto72183, and CSCto73833. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f532.shtml
CVE ID: CVE-2011-1645 State: PUBLISHED Published: 2011-05-31T20:00:00 Last Updated: 2024-08-06T22:37:24.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute arbitrary code, via unspecified vectors, aka Bug ID CSCtn23871. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47988 - http://www.cisco.com/en/US/products/products_security_advisory09186a008
nces: - http://www.securityfocus.com/bid/47988 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml - http://www.securitytracker.com/id?1025565
CVE ID: CVE-2011-1646 State: PUBLISHED Published: 2011-05-31T20:00:00 Last Updated: 2024-08-06T22:37:24.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the (1) ping test parameter or (2) traceroute test parameter, aka Bug ID CSCtn23871. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml - http://www.securitytrack
ences: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml - http://www.securitytracker.com/id?1025565
CVE ID: CVE-2011-1647 State: PUBLISHED Published: 2011-05-31T20:00:00 Last Updated: 2024-08-06T22:37:24.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors, aka Bug ID CSCtn23871. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47985 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml - http://www
yfocus.com/bid/47985 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml - http://www.securitytracker.com/id?1025565
CVE ID: CVE-2011-1649 State: PUBLISHED Published: 2011-05-31T20:00:00 Last Updated: 2024-08-06T22:37:24.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Streamer application in Cisco Content Delivery System (CDS) with software 2.5.7, 2.5.8, and 2.5.9 before build 126 allows remote attackers to cause a denial of service (Web Engine crash) via a crafted URL, aka Bug IDs CSCtg67333 and CSCth25341. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f18b.shtml - http://www.securitytracker.com/id?1025564
CVE ID: CVE-2011-1651 State: PUBLISHED Published: 2011-05-31T20:00:00 Last Updated: 2024-08-06T22:37:24.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 packet, aka Bug ID CSCto45095. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025567 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f191.shtml
CVE ID: CVE-2011-1652 State: PUBLISHED Published: 2011-04-06T17:00:00Z Last Updated: 2024-09-16T20:41:51.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 service upon receipt of an IPv6 Router Advertisement (RA), and does not provide an option to ignore an unexpected RA, which allows remote attackers to conduct man-in-the-middle attacks on communication with external IPv4 servers via vectors involving RAs, a DHCPv6 server, and NAT-PT on the local network, aka a "SLAAC Attack." NOTE: it can be argued that preferring IPv6 complies with RFC 3484
nd NAT-PT on the local network, aka a "SLAAC Attack." NOTE: it can be argued that preferring IPv6 complies with RFC 3484, and that attempting to determine the legitimacy of an RA is currently outside the scope of recommended behavior of host operating systems Additional Analyst Notes: - CVE Program Container: References: - http://resources.infosecinstitute.com/slaac-attack/ - https://lists.immunityinc.com/pipermail/dailydave/20110404/000122.html
CVE ID: CVE-2011-1653 State: PUBLISHED Published: 2011-04-15T19:00:00 Last Updated: 2024-08-06T22:37:24.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter, (4) NonAssignedUserList, (5) DeleteReportLayout, (6) DeleteReports, and (7) RegenerateReport stored procedures. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66725 - http://www.zeroda
s: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66725 - http://www.zerodayinitiative.com/advisories/ZDI-11-128/ - http://secunia.com/advisories/44097 - http://securityreason.com/securityalert/8403 - http://www.securityfocus.com/bid/47355 - http://www.securityfocus.com/archive/1/517491/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-11-133/ - http://www.securityfocus.com/archive/1/517498/100/0/threaded - http://www.securityfocus.com/archive/1/517489/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-11-129/ - http://www.vupen.com/english/advisories/2011/0977 - http://securitytracker.com/id?1025353 - http://www.secur
I-11-129/ - http://www.vupen.com/english/advisories/2011/0977 - http://securitytracker.com/id?1025353 - http://www.securityfocus.com/archive/1/517490/100/0/threaded - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BCD065CEC-AFE2-4D9D-8E0B-BE7F6E345866%7D - http://www.zerodayinitiative.com/advisories/ZDI-11-134/ - http://www.securityfocus.com/archive/1/517496/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-11-132/ - http://www.zerodayinitiative.com/advisories/ZDI-11-131/ - http://www.securityfocus.com/archive/1/517497/100/0/threaded - http://www.securityfocus.com/archive/1/517494/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-11-130/ -
http://www.securityfocus.com/archive/1/517494/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-11-130/ - http://www.securityfocus.com/archive/1/517493/100/0/threaded
CVE ID: CVE-2011-1654 State: PUBLISHED Published: 2011-04-15T19:00:00 Last Updated: 2024-08-06T22:37:25.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense (TD) r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an upload request to FileUploadHandler.ashx. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66726 - http://www.vupen.com/english/advisories/2011/0977 -
4097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66726 - http://www.vupen.com/english/advisories/2011/0977 - http://securitytracker.com/id?1025353 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BCD065CEC-AFE2-4D9D-8E0B-BE7F6E345866%7D - http://www.securityfocus.com/bid/47357 - http://www.securityfocus.com/archive/1/517488/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-11-126/ - http://www.securityfocus.com/archive/1/517494/100/0/threaded
CVE ID: CVE-2011-1655 State: PUBLISHED Published: 2011-04-15T19:00:00 Last Updated: 2024-08-06T22:37:24.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 sends a cleartext response to unspecified getDBConfigSettings requests, which makes it easier for remote attackers to obtain database credentials, and subsequently execute arbitrary code, by sniffing the network, related to the UNCWS Web Service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/517492/100/0/threaded - http://secunia.c
: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/517492/100/0/threaded - http://secunia.com/advisories/44097 - http://www.vupen.com/english/advisories/2011/0977 - http://securitytracker.com/id?1025353 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BCD065CEC-AFE2-4D9D-8E0B-BE7F6E345866%7D - http://www.zerodayinitiative.com/advisories/ZDI-11-127/ - http://www.securityfocus.com/bid/47356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66727 - http://www.securityfocus.com/archive/1/517494/100/0/threaded
CVE ID: CVE-2011-1657 State: PUBLISHED Published: 2011-08-25T14:00:00 Last Updated: 2024-08-06T22:37:25.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) ZipArchive::addGlob and (2) ZipArchive::addPattern functions in ext/zip/php_zip.c in PHP 5.3.6 allow context-dependent attackers to cause a denial of service (application crash) via certain flags arguments, as demonstrated by (a) GLOB_ALTDIRFUNC and (b) GLOB_APPEND. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/07/01/6 - https://bugs.php.net/bug.php?id=54681 - http://support.apple.com/kb/HT5130 - http://www.mandriva.com/security/advisories?name=MDVSA-20
hp.net/bug.php?id=54681 - http://support.apple.com/kb/HT5130 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:165 - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/zip/php_zip.c?view=log - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://svn.php.net/viewvc/?view=revision&revision=310814 - http://securityreason.com/achievement_securityalert/100 - http://www.securityfocus.com/bid/49252 - http://www.openwall.com/lists/oss-security/2011/07/01/7 - http://www.openwall.com/lists/oss-security/2011/07/01/8 - http://securityreason.com/securityalert/8342 - http://www.securityfocus.com/archive/1/519385/100/0/threaded - https://exchange.xforce.ibmc
son.com/securityalert/8342 - http://www.securityfocus.com/archive/1/519385/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/69320
CVE ID: CVE-2011-1658 State: PUBLISHED Published: 2011-04-08T15:00:00 Last Updated: 2024-08-06T22:37:24.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a (1) setuid or (2) setgid program with this RPATH value, and then executing the program with a crafted value for the LD_PRELOAD environment variable, a different vulnerability than CVE-2010-3847 and CVE-2011-0536. NOTE: it is not expected that any standard operating-system di
erent vulnerability than CVE-2010-3847 and CVE-2011-0536. NOTE: it is not expected that any standard operating-system distribution would ship an applicable setuid or setgid program. Additional Analyst Notes: - CVE Program Container: References: - http://sourceware.org/bugzilla/show_bug.cgi?id=12393 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66820 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - https://bugzilla.redhat.com/show_bug.cgi?id=667974
CVE ID: CVE-2011-1659 State: PUBLISHED Published: 2011-04-08T15:00:00 Last Updated: 2024-08-06T22:37:24.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=681054 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 -
ug.cgi?id=681054 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://secunia.com/advisories/44353 - http://www.securitytracker.com/id?1025450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66819 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:178 - http://scarybeastsecurity.blogspot.com/2011/02/i-got-accidental-code-execution-via.html - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://code.google.com/p/chromium/issues/detail?id=48733 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:179 - http://sourceware.org/bugzilla/show_bug.cgi?id=12583 - http://sourceware.org/git/?p=glibc.gi
ories?name=MDVSA-2011:179 - http://sourceware.org/bugzilla/show_bug.cgi?id=12583 - http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=8126d90480fa3e0c5c5cd0d02cb1c93174b45485
CVE ID: CVE-2011-1660 State: PUBLISHED Published: 2011-04-10T01:00:00 Last Updated: 2024-08-06T22:37:25.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the DataDynamics.Reports.Web class library in GrapeCity Data Dynamics Reports before 1.6.2084.14 allow remote attackers to inject arbitrary web script or HTML via (1) the reportName or (2) uniqueId parameter to CoreViewerInit.js, or the (3) uniqueId or (4) traceLevel parameter to CoreController.js, as reachable by CoreHandler.ashx. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/517244/100/0/threaded - http://secunia.
s: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/517244/100/0/threaded - http://secunia.com/advisories/43953 - http://www.osvdb.org/71488 - http://www.gcpowertools.com/DownloadLatestVersion - http://securityreason.com/securityalert/8190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66545 - http://www.securityfocus.com/bid/47015