Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
5-1 - http://www.osvdb.org/82748 - http://ubuntu.com/usn/usn-1465-2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76113 - http://www.securityfocus.com/bid/53828
CVE ID: CVE-2011-4410 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4411 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4412 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4413 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4414 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4415 State: PUBLISHED Published: 2011-11-08T11:00:00 Last Updated: 2024-08-07T00:09:18.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, does not restrict the size of values of environment variables, which allows local users to cause a denial of service (memory consumption or NULL pointer dereference) via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, related to (1) the "len +=" statement and (2) the apr_pcalloc function call, a different vulnerability t
request header, related to (1) the "len +=" statement and (2) the apr_pcalloc function call, a different vulnerability than CVE-2011-3607. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/DemoExploit.html - http://www.gossamer-threads.com/lists/apache/dev/403775 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/
CVE ID: CVE-2011-4416 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4417 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4418 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4419 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4420 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4421 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4422 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4423 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4424 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4425 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4426 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4427 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4428 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4429 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4430 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4431 State: PUBLISHED Published: 2011-11-10T00:00:00 Last Updated: 2024-08-07T00:09:18.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a .. (dot dot) in the command_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2011-017.txt - http://securityreason.com/securityalert/8530
CVE ID: CVE-2011-4432 State: PUBLISHED Published: 2011-11-10T00:00:00 Last Updated: 2024-08-07T00:09:18.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2011-017.txt - http://securityreason.com/securityalert/8530
CVE ID: CVE-2011-4433 State: REJECTED Published: 2012-12-11T11:00:00Z Last Updated: 2024-09-16T22:14:47.860Z Description: No description available.
CVE ID: CVE-2011-4434 State: PUBLISHED Published: 2011-11-11T21:00:00Z Last Updated: 2024-09-16T16:58:05.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a (1) macro or (2) scripting feature in an application, as demonstrated by Microsoft Office applications and the SANDBOX_INERT and LOAD_IGNORE_CODE_AUTHZ_LEVEL flags. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/2532445
CVE ID: CVE-2011-4435 State: PUBLISHED Published: 2011-11-11T21:00:00 Last Updated: 2024-08-07T00:09:18.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-server component in the Consolidation and Analysis Engine (CAE) Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1PM41190 - http://secunia.com/advisories/46487 - http://www.securitytracker.com/id?1026278
CVE ID: CVE-2011-4436 State: PUBLISHED Published: 2011-11-12T00:00:00Z Last Updated: 2024-09-17T03:03:29.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface on the Dell KACE K2000 System Deployment Appliance allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/193529 - http://www.kace.com/support/kb/index.php?action=artikel&id=1120&artlang=en
CVE ID: CVE-2011-4447 State: PUBLISHED Published: 2012-08-06T16:00:00Z Last Updated: 2024-09-17T01:51:06.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functionality of BSDDB, which allows context-dependent attackers to obtain unencrypted private keys from Bitcoin wallet files by bypassing the BSDDB interface and reading entries that are marked for deletion. Additional Analyst Notes: - CVE Program Container: References: - https://bitcointalk.org/index.php?topic=51604.0 - https://en.bitcoin.it/wiki/CVEs - https://bitcointalk.org/index.php?topic=
s://bitcointalk.org/index.php?topic=51604.0 - https://en.bitcoin.it/wiki/CVEs - https://bitcointalk.org/index.php?topic=51474.0 - http://bitcoin.org/releases/2011/11/21/v0.5.0.html
CVE ID: CVE-2011-4448 State: PUBLISHED Published: 2012-09-05T20:00:00Z Last Updated: 2024-09-16T16:44:00.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in actions/usersettings/usersettings.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to execute arbitrary SQL commands via the default_comment_display parameter in an update action. Additional Analyst Notes: - CVE Program Container: References: - http://wush.net/trac/wikka/changeset/1820 - http://wush.net/trac/wikka/ticket/1097
CVE ID: CVE-2011-4449 State: PUBLISHED Published: 2012-09-05T20:00:00Z Last Updated: 2024-09-16T20:21:27.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file extensions that are typically absent from an Apache HTTP Server TypesConfig file, which makes it easier for remote attackers to execute arbitrary PHP code by placing this code in a file whose name has multiple extensions, as demonstrated by a (1) .mm or (2) .vpp file. Additional Analyst Notes: - CVE Program Container: References: - http://wush.net/trac/wikka/ticket/1097 - http://wush.net/trac/wikka/changeset/182
- CVE Program Container: References: - http://wush.net/trac/wikka/ticket/1097 - http://wush.net/trac/wikka/changeset/1822
CVE ID: CVE-2011-4450 State: PUBLISHED Published: 2012-09-05T20:00:00Z Last Updated: 2024-09-16T19:51:52.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in handlers/files.xml/files.xml.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to read or delete arbitrary files via a non-initial .. (dot dot) in the file parameter, as demonstrated by the /../../wikka.config.php pathname in a download action. Additional Analyst Notes: - CVE Program Container: References: - http://wush.net/trac/wikka/changeset/1828 - http://wush.net/trac/wikka/ticket/1097
CVE ID: CVE-2011-4451 State: PUBLISHED Published: 2012-09-05T20:00:00Z Last Updated: 2024-09-16T20:52:22.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to write arbitrary PHP code to the spamlog_path file via the User-Agent HTTP header in an addcomment request. NOTE: the vendor disputes this issue because the rendering of the spamlog_path file never uses the PHP interpreter Additional Analyst Notes: - CVE Program Container: References: - http://wush.net/trac/wikka/ticket/1098
CVE ID: CVE-2011-4452 State: PUBLISHED Published: 2012-09-05T20:00:00Z Last Updated: 2024-09-16T22:46:47.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the AdminUsers component in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to hijack the authentication of administrators for requests that remove arbitrary user accounts via a delete operation, as demonstrated by an {{image}} action. Additional Analyst Notes: - CVE Program Container: References: - http://wush.net/trac/wikka/changeset/1832 - http://wush.net/trac/wikka/ticket/1098 - http://wush.net/trac/wikka/changeset/1819 - http://wush.net/trac/wikka/ticket/1097
CVE ID: CVE-2011-4453 State: PUBLISHED Published: 2011-12-22T15:00:00Z Last Updated: 2024-09-16T19:51:19.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP create_function function. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18243/ - http://www.exploit-db.com/exploits/18149/ - http://www.pmwiki.org/wiki/PITS/01271
CVE ID: CVE-2011-4454 State: PUBLISHED Published: 2019-11-20T18:57:55 Last Updated: 2024-08-07T00:09:18.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting vulnerabilities in Tiki 8.0 RC1 and earlier allow remote attackers to inject arbitrary web script or HTML via the path info to (1) tiki-remind_password.php, (2) tiki-index.php, (3) tiki-login_scr.php, or (4) tiki-index. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/107082/Tiki-Wiki-CMS-Groupware-Cross-Site-Scripting.html
CVE ID: CVE-2011-4455 State: PUBLISHED Published: 2019-11-20T18:57:57 Last Updated: 2024-08-07T00:09:18.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting vulnerabilities in Tiki 7.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the path info to (1) tiki-admin_system.php, (2) tiki-pagehistory.php, (3) tiki-removepage.php, or (4) tiki-rename_page.php. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/107082/Tiki-Wiki-CMS-Groupware-Cross-Site-Scripting.html
CVE ID: CVE-2011-4456 State: REJECTED Published: 2011-11-16T19:00:00Z Last Updated: 2024-09-16T17:14:41.200Z Description: No description available.
CVE ID: CVE-2011-4457 State: PUBLISHED Published: 2011-11-17T23:00:00Z Last Updated: 2024-09-17T02:12:05.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: OWASP HTML Sanitizer (aka owasp-java-html-sanitizer) before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element. Additional Analyst Notes: - CVE Program Container: References: - http://owasp-java-html-sanitizer.googlecode.com/svn/trunk/CHANGE_LOG.html - http://code.google.com/p/owasp-java-html-sanitizer/wiki/CVE20114457
CVE ID: CVE-2011-4458 State: PUBLISHED Published: 2012-06-04T19:00:00 Last Updated: 2024-08-07T00:09:18.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-5092 and CVE-2011-5093. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html - http://secunia.com/advisories/49259 - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.h
0203.html - http://secunia.com/advisories/49259 - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html - http://www.securityfocus.com/bid/53660
CVE ID: CVE-2011-4459 State: PUBLISHED Published: 2012-06-04T19:00:00 Last Updated: 2024-08-07T00:09:18.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html - http://secunia.com/advisories/49259 - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html - http://lists.bestpractical.com/p
ies/49259 - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html - http://www.securityfocus.com/bid/53660
CVE ID: CVE-2011-4460 State: PUBLISHED Published: 2012-06-04T19:00:00 Last Updated: 2024-08-07T00:09:18.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html - http://secunia.com/advisories/49259 - http://osvdb.org/82136 - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html - https://exchange.xforce.ibmcloud
org/82136 - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75824 - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html - http://www.securityfocus.com/bid/53660
CVE ID: CVE-2011-4461 State: PUBLISHED Published: 2011-12-30T01:00:00 Last Updated: 2024-08-07T00:09:18.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=143387688830075&w=2 - https://security.netapp.com/advisory/ntap-20190307-0004/ - http://www.ubuntu.com/usn/USN-1429-1 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-
-20190307-0004/ - http://www.ubuntu.com/usn/USN-1429-1 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.nruns.com/_downloads/advisory28122011.pdf - http://secunia.com/advisories/48981 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www.securitytracker.com/id?1026475 - http://www.kb.cert.org/vuls/id/903934 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72017 - http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html - http://secunia.com/advisories/47408 - http://www.ocert.org/advisories/ocert-2011-003.html
CVE ID: CVE-2011-4462 State: PUBLISHED Published: 2011-12-30T01:00:00 Last Updated: 2024-08-07T00:09:18.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.nruns.com/_downloads/advisory28122011.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/72018 - http://www.kb.cert.org/vuls/id/903934 - http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.h
rabilities/72018 - http://www.kb.cert.org/vuls/id/903934 - http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html - http://secunia.com/advisories/47406 - http://www.ocert.org/advisories/ocert-2011-003.html
CVE ID: CVE-2011-4465 State: PUBLISHED Published: 2011-11-19T02:00:00 Last Updated: 2024-08-07T00:09:18.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Lotus Mobile Connect (LMC) 6.1.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden redirect URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg27020327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72337 - http://www.ibm.com/support/docview.wss?uid=swg1IV07148
CVE ID: CVE-2011-4486 State: PUBLISHED Published: 2012-03-01T01:00:00Z Last Updated: 2024-09-17T02:56:57.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6 before 8.6(2a)su1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.6(2a)su1 allow remote attackers to cause a denial of service (device reload) via a crafted SCCP registration, aka Bug ID CSCtu73538. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-
Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cucm
CVE ID: CVE-2011-4487 State: PUBLISHED Published: 2012-03-01T01:00:00Z Last Updated: 2024-09-17T00:26:09.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6 before 8.6(2a)su1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.6(2a)su1 allows remote attackers to execute arbitrary SQL commands via a crafted SCCP registration, aka Bug ID CSCtu73538. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdviso
Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cucm
CVE ID: CVE-2011-4496 State: PUBLISHED Published: 2011-11-21T11:00:00Z Last Updated: 2024-09-16T17:19:16.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Aviosoft DTV Player 1.0.1.2 allows remote attackers to execute arbitrary code via a crafted .plf (aka playlist) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/998403
CVE ID: CVE-2011-4497 State: PUBLISHED Published: 2011-11-21T11:00:00Z Last Updated: 2024-09-16T22:21:07.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: QIS_wizard.htm on the ASUS RT-N56U router with firmware before 1.0.1.4o allows remote attackers to obtain the administrator password via a flag=detect request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/200814
CVE ID: CVE-2011-4498 State: PUBLISHED Published: 2011-11-21T11:00:00Z Last Updated: 2024-09-17T04:15:11.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web console in Zenprise Device Manager 6.x through 6.1.8 allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.zenpriseportal.com/patches/ZP_SecPatch_618_9995.zip - http://www.kb.cert.org/vuls/id/584363
CVE ID: CVE-2011-4499 State: PUBLISHED Published: 2011-11-22T11:00:00Z Last Updated: 2024-09-17T02:33:03.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before 1.06.1 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.upnp-hacks.org/devices.html - http://www.kb.cert.org/vuls
alyst Notes: - CVE Program Container: References: - http://www.upnp-hacks.org/devices.html - http://www.kb.cert.org/vuls/id/357851
CVE ID: CVE-2011-4500 State: PUBLISHED Published: 2011-11-22T11:00:00Z Last Updated: 2024-09-16T21:02:51.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UPnP IGD implementation on the Cisco Linksys WRT54GX with firmware 2.00.05, when UPnP is enabled, configures the SOAP server to listen on the WAN port, which allows remote attackers to administer the firewall via SOAP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.upnp-hacks.org/devices.html - http://www.kb.cert.org/vuls/id/357851