Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
aq&m=132872385320240&w=2 - http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue - http://rhn.redhat.com/errata/RHSA-2012-0508.html - http://secunia.com/advisories/45791 - http://www.securitytracker.com/id/1029190 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:058 - http://secunia.com/advisories/47998 - http://marc.info/?l=bugtraq&m=134254957702612&w=2 - http://secunia.com/advisories/49198 - http://www.redhat.com/support/errata/RHSA-2012-0006.html - http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/ - http://www.opera.com/docs/changelogs/windows/1160/ - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg000
http://www.opera.com/docs/changelogs/windows/1160/ - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html - http://marc.info/?l=bugtraq&m=133728004526190&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14752 - http://www.opera.com/docs/changelogs/unix/1151/ - http://www.opera.com/docs/changelogs/mac/1151/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-006 - http://marc.info/?l=bugtraq&m=133365109612558&w=2 - http://www.opera.com/docs/changelogs/unix/1160/ - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html - http://support.apple.com/kb/HT5281 - http://marc.info/?l=bug
ereleases.blogspot.com/2011/10/chrome-stable-release.html - http://support.apple.com/kb/HT5281 - http://marc.info/?l=bugtraq&m=133728004526190&w=2 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html - https://bugzilla.novell.com/show_bug.cgi?id=719047 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 - http://vnhacker.blogspot.com/2011/09/beast.html - http://www.ubuntu.com/usn/USN-1263-1 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - http://secunia.com/advisories/55350 - http://marc.info/?l=bugtraq&m=134254957702612&w=2 - http://www.ibm.com/developerworks/java/jdk/alerts/ - https://cert-portal.sieme
c.info/?l=bugtraq&m=134254957702612&w=2 - http://www.ibm.com/developerworks/java/jdk/alerts/ - https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
CVE ID: CVE-2011-3390 State: PUBLISHED Published: 2011-09-06T15:00:00 Last Updated: 2024-08-06T23:29:56.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in IBM OpenAdmin Tool (OAT) before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the (1) informixserver, (2) host, or (3) port parameter in a login action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/519468/100/0/threaded - http://www.securityfocus.com/bid/49364 - http://voidroot.blogspot.com/2011/08/xss-in-ibm-open-admin-tool.html - http://securityreason.com/securit
com/bid/49364 - http://voidroot.blogspot.com/2011/08/xss-in-ibm-open-admin-tool.html - http://securityreason.com/securityalert/8370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69488
CVE ID: CVE-2011-3391 State: PUBLISHED Published: 2011-09-08T18:00:00 Last Updated: 2024-08-06T23:29:56.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity permission requirement for the Export Key File function, which allows remote authenticated users to read a key file by removing a disable attribute in the Security sub-menu. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/74831 - http://www.securityfocus.com/bid/49407 - http://securitytracker.com/id?1026004 - http://secunia.com/advisories/45871 - https://exchange.xforce.ibmcloud.com/vulnerabili
/securitytracker.com/id?1026004 - http://secunia.com/advisories/45871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69522 - http://www.ibm.com/support/docview.wss?uid=swg1PM38058
CVE ID: CVE-2011-3392 State: PUBLISHED Published: 2011-09-08T18:00:00 Last Updated: 2024-08-06T23:29:56.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the real_name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://holisticinfosec.org/content/view/184/45/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/69456 - http://www.securityfocus.com/bid/49347 - http://secunia.com/advisories/45787 - http://www.phorum.org/phorum5/read.php?64%2C149490%2C149490#msg-149490
CVE ID: CVE-2011-3393 State: PUBLISHED Published: 2011-09-15T15:00:00 Last Updated: 2024-08-06T23:29:56.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in findagent.php in MYRE Real Estate Software allow remote attackers to inject arbitrary web script or HTML via the (1) country1, (2) state1, or (3) city1 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secpod.org/advisories/SECPOD_MRS_SQL_XSS_Vuln.txt - http://securityreason.com/securityalert/8376
CVE ID: CVE-2011-3394 State: PUBLISHED Published: 2011-09-15T15:00:00 Last Updated: 2024-08-06T23:29:56.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secpod.org/advisories/SECPOD_MRS_SQL_XSS_Vuln.txt - http://securityreason.com/securityalert/8376
CVE ID: CVE-2011-3395 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3396 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T23:29:56.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "PowerPoint Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-094 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14665
CVE ID: CVE-2011-3397 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T23:29:56.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Time component in DATIME.DLL in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted web site that leverages an unspecified "binary behavior" in Internet Explorer, aka "Microsoft Time Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14735 - https://docs.micr
.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14735 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-090
CVE ID: CVE-2011-3398 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3399 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3400 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T23:29:56.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute arbitrary code via a crafted object in a file, aka "OLE Property Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14668 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-093
CVE ID: CVE-2011-3401 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T23:29:56.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: ENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .dvr-ms file, aka "Windows Media Player DVR-MS Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14281 - https://docs.microsoft.com/en-us/secu
.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14281 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-092
CVE ID: CVE-2011-3402 State: PUBLISHED Published: 2011-11-04T21:00:00.000Z Last Updated: 2025-10-22T00:05:48.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page, as exploited in the wild in November 2011 by Duqu, aka "TrueType Font Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
aka "TrueType Font Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/49121 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15645 - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - http://blogs.mcafee.com/mcafee-labs/the-day-of-the-golden-jackal-%E2%80%93-further-tales-of-the-stuxnet-files - http://www.securitytracker.com/id?1027039 - http://secunia.com/advisories/49122 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-087 - http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_duqu_the_pre
ns/2011/ms11-087 - http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_duqu_the_precursor_to_the_next_stuxnet.pdf - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13998 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-291-01E.pdf - http://www.securelist.com/en/blog/208193197/The_Mystery_of_Duqu_Part_Two - http://technet.microsoft.com/security/advisory/2639658 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039 - https://oval.cisecurity.org
12-034 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15290 - http://isc.sans.edu/diary/Duqu+Mitigation/11950 - http://www.symantec.com/connect/w32-duqu_status-updates_installer-zero-day-exploit - http://www.us-cert.gov/cas/techalerts/TA12-129A.html - http://blogs.technet.com/b/msrc/archive/2011/11/03/microsoft-releases-security-advisory-2639658.aspx
CVE ID: CVE-2011-3403 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T23:29:56.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet, aka "Record Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14702 - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-096
CVE ID: CVE-2011-3404 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T23:29:56.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly use the Content-Disposition HTTP header to control rendering of the HTTP response body, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Content-Disposition Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-099 - https://oval.cisecurity.org/repository/search/definition/oval%3
en-us/security-updates/securitybulletins/2011/ms11-099 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14614
CVE ID: CVE-2011-3405 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3406 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2025-01-21T18:21:42.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote authenticated users to execute arbitrary code via a crafted query that leverages incorrect memory initialization, aka "Active Directory Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP
on, aka "Active Directory Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-095 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14037
CVE ID: CVE-2011-3407 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3408 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T23:29:56.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Csrsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process device-event messages from low-integrity processes to high-integrity processes, which allows local users to gain privileges via a crafted application, aka "CSRSS Local Privilege Elevation Vulnerability." Additional Analyst Notes: - CVE
ivileges via a crafted application, aka "CSRSS Local Privilege Elevation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14598 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-097
CVE ID: CVE-2011-3409 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3410 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T23:29:56.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Out-of-bounds Array Index Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - http://www.kb.cert.org/vuls/id/361441 - http://www.securitytracker.com/id?1026414 - https://docs.microsoft.com/en-us/security-updates/securitybullet
id/361441 - http://www.securitytracker.com/id?1026414 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-091 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14750
CVE ID: CVE-2011-3411 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T23:29:56.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Invalid Pointer Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14346 - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - http://www.kb.cert.org/vuls/id/361441 - http://www.securitytracker.com/id?1026414 - https://docs.microsoft.
-347A.html - http://www.kb.cert.org/vuls/id/361441 - http://www.securitytracker.com/id?1026414 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-091
CVE ID: CVE-2011-3412 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T23:29:56.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect memory handling, aka "Publisher Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - http://www.kb.cert.org/vuls/id/361441 - http://www.securitytracker.com/id?1026414 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14808 - https://doc
/id?1026414 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14808 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-091
CVE ID: CVE-2011-3413 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T23:29:56.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an invalid OfficeArt record in a PowerPoint document, aka "OfficeArt Shape RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14581 - http://www.
References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14581 - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-094
CVE ID: CVE-2011-3414 State: PUBLISHED Published: 2011-12-30T01:00:00 Last Updated: 2024-08-06T23:29:56.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka "Collisions in HashTable May Cause DoS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - ht
ollisions in HashTable May Cause DoS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14588 - http://www.nruns.com/_downloads/advisory28122011.pdf - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-100 - http://www.kb.cert.org/vuls/id/903934 - http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html - http://www.ocert.org/advisories/ocert-2011-003.html
CVE ID: CVE-2011-3415 State: PUBLISHED Published: 2011-12-30T01:00:00 Last Updated: 2024-08-06T23:29:56.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted return URL, aka "Insecure Redirect in .NET Form Authentication Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN71256611/index.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
.jp/en/jp/JVN71256611/index.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14815 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-100 - http://www.securityfocus.com/bid/51202 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-003557
CVE ID: CVE-2011-3416 State: PUBLISHED Published: 2011-12-30T01:00:00 Last Updated: 2024-08-06T23:37:47.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote authenticated users to obtain access to arbitrary user accounts via a crafted username, aka "ASP.Net Forms Authentication Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14363 - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-
l%3Aorg.mitre.oval%3Adef%3A14363 - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-100
CVE ID: CVE-2011-3417 State: PUBLISHED Published: 2011-12-30T01:00:00 Last Updated: 2024-08-06T23:37:47.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0, when sliding expiry is enabled, does not properly handle cached content, which allows remote attackers to obtain access to arbitrary user accounts via a crafted URL, aka "ASP.NET Forms Authentication Ticket Caching Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-us/security-updates/se
eferences: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-100 - http://www.securityfocus.com/bid/51203 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14625
CVE ID: CVE-2011-3418 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-3419 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.