Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4873 State: PUBLISHED Published: 2012-01-19T15:00:00Z Last Updated: 2024-09-16T22:25:33.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the server in Certec EDV atvise before 2.1 allows remote attackers to cause a denial of service (daemon crash) via crafted requests to TCP port 4840. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-018-02.pdf - http://aluigi.altervista.org/adv/atvise_1-adv.txt - http://www.securityfocus.com/bid/51553 - http://secunia.com/advisories/47638
CVE ID: CVE-2011-4874 State: PUBLISHED Published: 2012-04-13T10:00:00 Last Updated: 2024-08-07T00:16:35.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in MICROSYS PROMOTIC before 8.1.7 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (data corruption and application crash) via a crafted project (aka .pra) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.promotic.eu/en/pmdoc/News.htm#ver80107 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-03.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/74846 - http://www.securityfocus.com/bid/52988
CVE ID: CVE-2011-4875 State: PUBLISHED Published: 2012-02-03T20:00:00 Last Updated: 2024-08-07T00:16:35.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute arbitrary code via vectors related to Unicode strings. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02.pdf - http://w
es: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02.pdf - http://www.osvdb.org/77380 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02A.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf - http://www.exploit-db.com/exploits/18166 - http://aluigi.org/adv/winccflex_1-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/71449 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf
CVE ID: CVE-2011-4876 State: PUBLISHED Published: 2012-02-03T20:00:00 Last Updated: 2024-08-07T00:16:35.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute, read, create, modify, or delete arbitrary files via a .. (dot dot) in a string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46997 - http://
a string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46997 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02.pdf - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02A.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf - http://www.exploit-db.com/exploits/18166 - http://aluigi.org/adv/winccflex_1-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/71450 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf - http://www.osvdb.org/77381
CVE ID: CVE-2011-4877 State: PUBLISHED Published: 2012-02-03T20:00:00 Last Updated: 2024-08-07T00:16:35.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to cause a denial of service (application crash) by sending crafted data over TCP. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02.pdf - http://www.us-cert.gov
ram Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02.pdf - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02A.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf - http://www.exploit-db.com/exploits/18166 - http://aluigi.org/adv/winccflex_1-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/71451 - http://www.osvdb.org/77382 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf
CVE ID: CVE-2011-4878 State: PUBLISHED Published: 2012-02-03T20:00:00 Last Updated: 2024-08-07T00:16:35.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to read arbitrary files via a ..%5c (dot dot backslash) in a URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02.pdf -
alyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02.pdf - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02A.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf - http://www.exploit-db.com/exploits/18166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71452 - http://aluigi.org/adv/winccflex_1-adv.txt - http://www.osvdb.org/77383 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf
CVE ID: CVE-2011-4879 State: PUBLISHED Published: 2012-02-03T20:00:00 Last Updated: 2024-08-07T00:16:35.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not properly handle URIs beginning with a 0xfa character, which allows remote attackers to read data from arbitrary memory locations or cause a denial of service (application crash) via a crafted POST request. Additional Analyst Notes: - CVE Program Conta
cause a denial of service (application crash) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02.pdf - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02A.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf - http://www.exploit-db.com/exploits/18166 - http://aluigi.org/adv/winccflex_1-adv.txt - http://www.osvdb.org/77384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71453 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf
CVE ID: CVE-2011-4880 State: PUBLISHED Published: 2012-04-13T10:00:00Z Last Updated: 2024-09-16T16:29:00.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to read arbitrary files via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-01.pdf
CVE ID: CVE-2011-4881 State: PUBLISHED Published: 2012-04-13T10:00:00Z Last Updated: 2024-09-16T16:02:35.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly check return values from functions, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-01.pdf
CVE ID: CVE-2011-4882 State: PUBLISHED Published: 2012-04-13T10:00:00Z Last Updated: 2024-09-17T03:18:01.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to cause a denial of service (application exit) via an unspecified command in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-01.pdf
CVE ID: CVE-2011-4883 State: PUBLISHED Published: 2012-04-13T10:00:00Z Last Updated: 2024-09-17T00:37:07.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly validate values in HTTP requests, which allows remote attackers to cause a denial of service (resource consumption) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-01.pdf
CVE ID: CVE-2011-4885 State: PUBLISHED Published: 2011-12-30T01:00:00 Last Updated: 2024-08-07T00:16:35.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www.securitytracker.com/id?1026473 - http://secunia.co
m/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www.securitytracker.com/id?1026473 - http://secunia.com/advisories/47404 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://www.nruns.com/_downloads/advisory28122011.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/72021 - http://www.exploit-db.com/exploits/18296 - http://www.debian.org/security/2012/dsa-2399 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:197 - http://www.exploit-db.com/exploits/18305 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html - http://marc.info/?l=bugtraq&m=13346920
05 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://secunia.com/advisories/48668 - http://www.redhat.com/support/errata/RHSA-2012-0019.html - http://www.securityfocus.com/bid/51193 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://www.kb.cert.org/vuls/id/903934 - http://svn.php.net/viewvc?view=revision&revision=321003 - http://svn.php.net/viewvc?view=revision&revision=321040 - http://rhn.redhat.com/errata/RHSA-2012-0071.html - http://marc.info/?l=bugtraq&m=132871655717248&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://arch
q&m=132871655717248&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html - http://support.apple.com/kb/HT5281 - http://marc.info/?l=bugtraq&m=132871655717248&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - http://www.ocert.org/advisories/ocert-2011-003.html
CVE ID: CVE-2011-4887 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-07T00:16:35.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field. Additional Analyst Notes: - CVE Program Container: References: - http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2012-002/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/73264 - http://www.securityfocus.com/bid/52064 - http://www.imperva.com/
://exchange.xforce.ibmcloud.com/vulnerabilities/73264 - http://www.securityfocus.com/bid/52064 - http://www.imperva.com/Services/adc_advisories_response_secureworks_CVE_2011_4887 - http://osvdb.org/79338 - http://secunia.com/advisories/48086
CVE ID: CVE-2011-4889 State: PUBLISHED Published: 2018-02-08T23:00:00 Last Updated: 2024-08-07T00:16:35.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The javax.naming.directory.AttributeInUseException class in the Virtual Member Manager in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.43, 7.0 before 7.0.0.21, and 8.0 before 8.0.0.2 does not properly update passwords on a configuration using Tivoli Directory Server, which might allow remote attackers to gain access to an application by leveraging knowledge of an old password. IBM X-Force ID: 72581. Additional Analyst Notes: - CVE Program Container: References: - https://www-304.ibm.com/support/docview.wss?uid=swg21
. Additional Analyst Notes: - CVE Program Container: References: - https://www-304.ibm.com/support/docview.wss?uid=swg21587015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72581
CVE ID: CVE-2011-4890 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-07T00:16:35.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a subquery. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC79861 - http://www.ibm.com/support/docview.wss?uid=swg27021052 - http://www-01.ibm.com/support/docview.wss?uid=swg27021052#if5 - http://www.securitytracker.com/id?1026555 - http://www-01.ibm.com/support/docvi
upport/docview.wss?uid=swg27021052#if5 - http://www.securitytracker.com/id?1026555 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC80675 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72651 - http://www.securityfocus.com/bid/51629 - http://secunia.com/advisories/47654
CVE ID: CVE-2011-4891 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2011-4892 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2011-4893 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2011-4894 State: PUBLISHED Published: 2011-12-23T02:00:00Z Last Updated: 2024-09-16T20:48:21.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections. Additional Analyst Notes: - CVE Program Container: References: - https://blog.torproject.org/blog/tor-02234-released-security-patches
CVE ID: CVE-2011-4895 State: PUBLISHED Published: 2011-12-23T02:00:00Z Last Updated: 2024-09-17T01:55:32.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building. Additional Analyst Notes: - CVE Program Container: References: - https://blog.torproject.org/blog/tor-02234-released-security-patches
CVE ID: CVE-2011-4896 State: PUBLISHED Published: 2011-12-23T02:00:00Z Last Updated: 2024-09-16T18:28:19.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port. Additional Analyst Notes: - CVE Program Container: References: - https://blog.torproject.org/blog/tor-02224-alpha-out
CVE ID: CVE-2011-4897 State: PUBLISHED Published: 2011-12-23T02:00:00Z Last Updated: 2024-09-16T16:53:14.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value. Additional Analyst Notes: - CVE Program Container: References: - https://blog.torproject.org/blog/tor-02225-alpha-out
CVE ID: CVE-2011-4898 State: PUBLISHED Published: 2012-01-30T17:00:00Z Last Updated: 2024-09-16T16:24:04.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on whether the MySQL credentials are valid, which makes it easier for remote attackers to conduct brute-force attacks via a series of requests with different uname and pwd parameters. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether providing intentionally vague error messages during installation would be reasonable from
e; also, it is unclear whether providing intentionally vague error messages during installation would be reasonable from a usability perspective Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18417 - https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt - http://archives.neohapsis.com/archives/bugtraq/2012-01/0150.html
CVE ID: CVE-2011-4899 State: PUBLISHED Published: 2012-01-30T17:00:00Z Last Updated: 2024-09-16T19:05:06.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which allows remote attackers to configure an arbitrary database via the dbhost and dbname parameters, and subsequently conduct static code injection and cross-site scripting (XSS) attacks via (1) an HTTP request or (2) a MySQL query. NOTE: the vendor disputes the significance of this issue; however, remote code execution makes the issue important in many realistic en
r disputes the significance of this issue; however, remote code execution makes the issue important in many realistic environments Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18417 - https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt - http://archives.neohapsis.com/archives/bugtraq/2012-01/0150.html
CVE ID: CVE-2011-4900 State: PUBLISHED Published: 2019-11-06T16:46:02 Last Updated: 2024-08-07T00:16:35.165Z Vendors: TYPO3 Products: TYPO3 Problem Types: Other Description: TYPO3 before 4.5.4 allows Information Disclosure in the backend. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4900 - https://typo3.org/security/advisory/typo3-core-sa-2011-001/#Information_Disclosure
CVE ID: CVE-2011-4901 State: PUBLISHED Published: 2019-11-06T16:49:21 Last Updated: 2024-08-07T00:16:35.143Z Vendors: TYPO3 Products: TYPO3 Problem Types: Other Description: TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to extract arbitrary information from the TYPO3 database. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4901 - https://typo3.org/security/advisory/typo3-core-sa-2011-001/#Information_Disclosure
CVE ID: CVE-2011-4902 State: PUBLISHED Published: 2019-11-06T16:53:14 Last Updated: 2024-08-07T00:16:35.183Z Vendors: TYPO3 Products: TYPO3 Problem Types: General Configuration Problem Description: TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to delete arbitrary files on the webserver. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4902 - https://typo3.org/security/advisory/typo3-core-sa-2011-001/#Unserialize
CVE ID: CVE-2011-4903 State: PUBLISHED Published: 2019-11-06T16:55:59 Last Updated: 2024-08-07T00:16:35.140Z Vendors: TYPO3 Products: TYPO3 Problem Types: Cross-Site Scripting Description: Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the RemoveXSS function. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4903 - https://typo3.org/security/advisory/typo3-core-sa-2011-001/#XSS
CVE ID: CVE-2011-4904 State: PUBLISHED Published: 2019-11-06T16:58:37 Last Updated: 2024-08-07T00:16:35.186Z Vendors: TYPO3 Products: TYPO3 Problem Types: Other Description: TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4904 - https://typo3.org/security/advisory/typo3-core-sa-2011-001/#Missing_Access_Control
CVE ID: CVE-2011-4905 State: PUBLISHED Published: 2012-01-05T16:00:00Z Last Updated: 2024-08-07T00:16:35.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50904 - http://svn.apache.org/viewvc?view=revision&revision=1209700 - http://openwall.com/lists/oss-security/2011/12/25/6 - http://openwall.com/lists/oss-security/2011/12/25/2 - https://issues.apache.org/jira/browse/AMQ-3294 - http://s
2/25/6 - http://openwall.com/lists/oss-security/2011/12/25/2 - https://issues.apache.org/jira/browse/AMQ-3294 - http://svn.apache.org/viewvc?view=revision&revision=1211844 - http://secunia.com/advisories/47112
CVE ID: CVE-2011-4906 State: PUBLISHED Published: 2020-02-12T20:59:29 Last Updated: 2024-08-07T00:23:38.285Z Vendors: Joomla! Products: Tiny browser included with TinyMCE 3.0 Problem Types: Arbitrary PHP Code Execution Description: Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/12/25/7 - https://developer.joomla.org/security/news/301-20090722-core-file-upload.html - https://www.exploit-db.com/exploits/10183
CVE ID: CVE-2011-4907 State: PUBLISHED Published: 2020-01-15T13:59:57 Last Updated: 2024-08-07T00:23:38.546Z Vendors: Joomla! Products: Joomla! Problem Types: Path Disclosure Description: Joomla! 1.5x through 1.5.12: Missing JEXEC Check Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/12/25/7 - https://developer.joomla.org/security/news/301-20090722-core-file-upload.html