Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
long bstrFileName argument to the OpenScreen method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43116 - http://www.securityfocus.com/bid/47596 - http://secunia.com/secunia_research/2011-37/ - http://www.vupen.com/english/advisories/2011/1116 - http://ics-cert.us-cert.gov/advisories/ICSA-12-249-03 - http://secunia.com/advisories/42928 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-137-02.pdf - http://www.vupen.com/english/advisories/2011/1115 - http://www.indusoft.com/hotfixes/hotfixes.php - http://secunia.com/secunia_research/2011-36/ - http://www.advantechdirect.com/eMarketingPrograms/AStudio_Patch/AStudio7.0_Patch_Final.htm
CVE ID: CVE-2011-0341 State: PUBLISHED Published: 2011-05-13T17:00:00 Last Updated: 2024-09-16T15:43:03.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the pdfmoz_onmouse function in apps/mozilla/moz_main.c in the MuPDF plug-in 2008.09.02 for Firefox allows remote attackers to execute arbitrary code via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/72177 - http://secunia.com/secunia_research/2011-38/ - http://secunia.com/advisories/43739 - http://www.vupen.com/english/advisories/2011/1191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67298 - http://www.securityfocus.com/bid/477
advisories/2011/1191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67298 - http://www.securityfocus.com/bid/47739
CVE ID: CVE-2011-0342 State: PUBLISHED Published: 2011-09-02T16:00:00 Last Updated: 2024-08-06T21:51:07.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the (1) Open, (2) Close, or (3) SetCurrentLanguage method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44875 - http://secunia.com/secunia_research/2011-61/ - http://ics-cert.us-cert.gov/advisories/ICSA-11-273-02 - http://www.indusoft.com/hotfixes/hotfixes.php - ht
ch/2011-61/ - http://ics-cert.us-cert.gov/advisories/ICSA-11-273-02 - http://www.indusoft.com/hotfixes/hotfixes.php - http://www.securityfocus.com/bid/49403
CVE ID: CVE-2011-0343 State: PUBLISHED Published: 2011-01-28T15:00:00 Last Updated: 2024-08-06T21:51:08.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608491 - http://www.securityfocus.com/archive/1/515955/100/0/threaded - https://lists.balabit.com/pipermail/syslog-ng-anno
8491 - http://www.securityfocus.com/archive/1/515955/100/0/threaded - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html - http://www.securityfocus.com/bid/45988
CVE ID: CVE-2011-0344 State: PUBLISHED Published: 2011-03-08T21:00:00 Last Updated: 2024-08-06T21:51:08.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in unspecified CGI programs in the Unified Maintenance Tool web interface in the embedded web server in the Communication Server (CS) in Alcatel-Lucent OmniPCX Enterprise before R9.0 H1.301.50 allow remote attackers to execute arbitrary code via crafted HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43588 - http://www.securityfocus.com/bid/46640 - http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&L
p://www.securityfocus.com/bid/46640 - http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011001.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/65849 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=896 - http://www.vupen.com/english/advisories/2011/0549
CVE ID: CVE-2011-0345 State: PUBLISHED Published: 2011-03-08T21:00:00 Last Updated: 2024-08-06T21:51:07.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43507 - http://securityreason.com/securityalert/8122 - http://www.securityfocus.com/archive/1/516768/100/0/threaded - http://www.vupen.com/english/advisories/2011/0548 - http://seclists.org/fulld
ocus.com/archive/1/516768/100/0/threaded - http://www.vupen.com/english/advisories/2011/0548 - http://seclists.org/fulldisclosure/2011/Mar/8 - http://www.securityfocus.com/bid/46624 - http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011002.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/65848
CVE ID: CVE-2011-0346 State: PUBLISHED Published: 2011-01-07T22:00:00 Last Updated: 2024-10-21T16:15:49.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the DOM implementation and the BreakAASpecial and BreakCircularMemoryReferences functions, as demonstrated by cross_fuzz, aka "MSHTML Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.vupen.com/english/advi
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.vupen.com/english/advisories/2011/0026 - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://lcamtuf.blogspot.com/2011/01/announcing-crossfuzz-potential-0-day-in.html - http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64482 - http://www.securityfocus.com/bid/45639 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018 - http://archiv
yfocus.com/bid/45639 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018 - http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0698.html - http://www.securityfocus.com/archive/1/515506/100/0/threaded - http://lcamtuf.coredump.cx/cross_fuzz/known_vuln.txt - http://www.securitytracker.com/id?1024940 - http://lcamtuf.coredump.cx/cross_fuzz/msie_crash.txt - http://www.kb.cert.org/vuls/id/427980 - http://lcamtuf.coredump.cx/cross_fuzz/fuzzer_timeline.txt
CVE ID: CVE-2011-0347 State: PUBLISHED Published: 2011-01-07T22:00:00 Last Updated: 2024-08-06T21:51:08.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI display and have unspecified other impact via vectors related to the DOM implementation, as demonstrated by cross_fuzz. Additional Analyst Notes: - CVE Program Container: References: - http://lcamtuf.blogspot.com/2011/01/announcing-crossfuzz-potential-0-day-in.html - http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx - https://exchange.xforce.ibmcloud.com/vuln
assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/64571 - http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0698.html - http://www.securityfocus.com/archive/1/515506/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12514 - http://www.microsoft.com/technet/security/advisory/2490606.mspx - http://lcamtuf.coredump.cx/cross_fuzz/fuzzer_timeline.txt - http://lcamtuf.coredump.cx/cross_fuzz/msie_display.jpg
CVE ID: CVE-2011-0348 State: PUBLISHED Published: 2011-01-28T21:13:00 Last Updated: 2024-08-06T21:51:07.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before 12.4(22)MDA5, and 12.4(24)MDA before 12.4(24)MDA3 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to bypass intended access restrictions and intended billing restrictions by sending HTTP traffic to a restricted destination after sending HTTP traffic to an unrestricted destination, aka Bug ID CSCtk35917. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocu
ination, aka Bug ID CSCtk35917. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46022 - http://www.vupen.com/english/advisories/2011/0229 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml - http://osvdb.org/70720 - http://secunia.com/advisories/43052 - http://securitytracker.com/id?1024992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64936
CVE ID: CVE-2011-0349 State: PUBLISHED Published: 2011-01-28T21:13:00 Last Updated: 2024-08-06T21:51:08.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to cause a denial of service (device hang or reload) via crafted TCP packets, aka Bug ID CSCth17178, a different vulnerability than CVE-2011-0350. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46026 - http://www.vupen.com/english/advisories/2011/0229 - http://www.cisco.com/en/US/products/products_security_advisory09186
http://www.vupen.com/english/advisories/2011/0229 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml - http://secunia.com/advisories/43052 - http://securitytracker.com/id?1024992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64937 - http://osvdb.org/70721
CVE ID: CVE-2011-0350 State: PUBLISHED Published: 2011-01-28T21:13:00 Last Updated: 2024-08-06T21:51:07.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to cause a denial of service (device hang or reload) via crafted TCP packets, aka Bug ID CSCth41891, a different vulnerability than CVE-2011-0349. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0229 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml - http://osvdb.org/7072
2011/0229 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml - http://osvdb.org/70722 - http://secunia.com/advisories/43052 - http://www.securityfocus.com/bid/46028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64938 - http://securitytracker.com/id?1024992
CVE ID: CVE-2011-0352 State: PUBLISHED Published: 2011-01-24T17:00:00 Last Updated: 2024-08-06T21:51:08.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the web-based management interface on the Cisco Linksys WRT54GC router with firmware before 1.06.1 allows remote attackers to cause a denial of service (device crash) via a long string in a POST request. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000007.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64850 - http://tools.cisco.com/security/center/viewAlert.x?alertId=22228 - http://www.vupen.com/english/advisories/2011/0205 - ht
ttp://tools.cisco.com/security/center/viewAlert.x?alertId=22228 - http://www.vupen.com/english/advisories/2011/0205 - http://jvn.jp/en/jp/JVN26605630/index.html - http://secunia.com/advisories/43017
CVE ID: CVE-2011-0354 State: PUBLISHED Published: 2011-02-03T15:00:00 Last Updated: 2024-08-06T21:51:08.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account, which makes it easier for remote attackers to obtain access via an unspecified login method. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025017 - http://tools.cisco.com/security/center/viewAlert.x?alertId=22314 - http://securityreason.com/securityalert/8060 - http://www.securityfocus.com/bid/46107 -
nter/viewAlert.x?alertId=22314 - http://securityreason.com/securityalert/8060 - http://www.securityfocus.com/bid/46107 - http://www.kb.cert.org/vuls/id/436854 - http://www.cisco.com/en/US/products/ps11422/products_security_advisory09186a0080b69541.shtml - http://www.exploit-db.com/exploits/16100 - http://secunia.com/advisories/43158
CVE ID: CVE-2011-0355 State: PUBLISHED Published: 2011-02-17T17:00:00 Last Updated: 2024-08-06T21:51:08.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Nexus 1000V Virtual Ethernet Module (VEM) 4.0(4) SV1(1) through SV1(3b), as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets, which allows guest OS users to cause a denial of service (ESX or ESXi host OS crash) by sending an 802.1Q tagged packet over an access vEthernet port, aka Cisco Bug ID CSCtj17451. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43084 - http://www.securityfocus.com/archive/1/516259/100/0/threaded - https://e
rences: - http://secunia.com/advisories/43084 - http://www.securityfocus.com/archive/1/516259/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/65217 - http://securitytracker.com/id?1025030 - http://www.vupen.com/english/advisories/2011/0314 - http://www.securityfocus.com/bid/46247 - http://lists.vmware.com/pipermail/security-announce/2011/000118.html - http://securityreason.com/securityalert/8090 - http://www.osvdb.org/70837 - http://www.vmware.com/security/advisories/VMSA-2011-0002.html - http://www.cisco.com/en/US/docs/switches/datacenter/nexus1000/sw/4_0_4_s_v_1_3_c/release/notes/n1000v_rn.html - http://www.vupen.com/english/advisories/2011/0315
CVE ID: CVE-2011-0364 State: PUBLISHED Published: 2011-02-18T23:00:00 Last Updated: 2024-08-06T21:51:08.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8197 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml - http://www.securitytracker.com/id?1025088 - http://www.zerodayinitiative.com/advisories/ZDI-11-088 -
a0080b6cee6.shtml - http://www.securitytracker.com/id?1025088 - http://www.zerodayinitiative.com/advisories/ZDI-11-088 - http://www.securityfocus.com/archive/1/516505/100/0/threaded - http://securityreason.com/securityalert/8205 - http://secunia.com/advisories/43383 - http://securityreason.com/securityalert/8095 - http://www.securityfocus.com/bid/46420 - http://www.vupen.com/english/advisories/2011/0424 - http://secunia.com/advisories/43393 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65436
CVE ID: CVE-2011-0372 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:09.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025112 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml
CVE ID: CVE-2011-0373 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:09.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31685. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025112 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml
CVE ID: CVE-2011-0374 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31659. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025112 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml
CVE ID: CVE-2011-0375 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCth24671. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025112 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml
CVE ID: CVE-2011-0376 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug ID CSCte43876. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025112 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml
CVE ID: CVE-2011-0377 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:09.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address, aka Bug ID CSCth03605. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65616 - http://www.securitytracker.com/id?1025112 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml
CVE ID: CVE-2011-0378 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025112 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml
CVE ID: CVE-2011-0379 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:09.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x; and Cisco TelePresence Manager 1.2.x, 1.3.x, 1.4.x, 1.5.x, and 1.6.2 allows remote attackers to execute arbitrary code via a crafted Cisco Discovery Protocol packet, aka Bug IDs CSCtd75769, CSCtd75766, CSCtd75754, and CSCtd75761. Additional Analyst Notes: - CVE
covery Protocol packet, aka Bug IDs CSCtd75769, CSCtd75766, CSCtd75754, and CSCtd75761. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025111 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14f.shtml - http://www.securitytracker.com/id?1025114 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml - http://www.securitytracker.com/id?1025112 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml - http://www.securitytracker.com/id?1025113
CVE ID: CVE-2011-0380 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request, aka Bug ID CSCtc59562. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65618 - http://www.securityfocus.com/bid/46526 - http://www.securitytracker.com/id?1025111 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14f.shtml
CVE ID: CVE-2011-0381 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:09.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI interface, related to a "command injection vulnerability," aka Bug ID CSCtf97085. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46526 - http://www.securitytracker.com/id?1025111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65619 - http://www.cisco.com/en/US/products/products_security_advis
https://exchange.xforce.ibmcloud.com/vulnerabilities/65619 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14f.shtml
CVE ID: CVE-2011-0382 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a request to TCP port 443, related to a "command injection vulnerability," aka Bug ID CSCtf97221. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml - http://www.securitytracker.com/id?1025114 - http://www.securityfocus.com/bid/46522