Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://secunia.com/advisories/47065 - http://www.irfanview.com/history_old.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/71891
CVE ID: CVE-2011-5234 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user.php in Social Network Community 2 allows remote attackers to execute arbitrary SQL commands via the userId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71877 - http://secunia.com/advisories/47289 - http://www.osvdb.org/77950 - http://packetstormsecurity.org/files/107972/social2-sql.txt
CVE ID: CVE-2011-5235 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71884 - http://www.osvdb.org/77949 - http://secunia.com/advisories/47272 - http://www.mnogosearch.org/doc33/msearch-changelog.html#changelog-3-3-12 - http://www.securityfocus.com/bid/51113
CVE ID: CVE-2011-5236 State: PUBLISHED Published: 2012-11-06T11:00:00Z Last Updated: 2024-09-17T00:42:10.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moneris eSelectPlus 2.03 PHP API does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.unrest.ca/peerjacking
CVE ID: CVE-2011-5237 State: PUBLISHED Published: 2012-11-06T11:00:00Z Last Updated: 2024-09-17T03:18:49.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.unrest.ca/peerjacking
CVE ID: CVE-2011-5238 State: PUBLISHED Published: 2012-11-06T11:00:00Z Last Updated: 2024-09-16T22:25:27.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: google-checkout-php-sample-code before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.unrest.ca/peerjacking - https://code.google.com/p/google-checkout-php-sample-code/downloads/detail?name=checkout-php-1.3.2.zip
CVE ID: CVE-2011-5239 State: PUBLISHED Published: 2012-11-06T11:00:00Z Last Updated: 2024-09-17T03:58:59.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: CiviCRM 4.0.5 and 4.1.1 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.unrest.ca/peerjacking
CVE ID: CVE-2011-5240 State: PUBLISHED Published: 2012-11-06T11:00:00Z Last Updated: 2024-09-16T17:47:58.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Magento 1.5 and 1.6.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.unrest.ca/peerjacking
CVE ID: CVE-2011-5241 State: PUBLISHED Published: 2012-11-06T11:00:00Z Last Updated: 2024-09-17T03:08:35.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Services_Twitter 0.6.3 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.unrest.ca/peerjacking
CVE ID: CVE-2011-5242 State: PUBLISHED Published: 2012-11-06T11:00:00Z Last Updated: 2024-09-17T00:45:39.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: tmhOAuth before 0.61 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.unrest.ca/peerjacking - https://github.com/themattharris/tmhOAuth/blob/master/README.md
CVE ID: CVE-2011-5243 State: PUBLISHED Published: 2012-11-06T11:00:00Z Last Updated: 2024-09-16T20:47:12.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: TwitterOAuth does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.unrest.ca/peerjacking
CVE ID: CVE-2011-5244 State: PUBLISHED Published: 2012-11-19T11:00:00 Last Updated: 2024-08-07T00:30:46.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=643882 - http
dditional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=643882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80271 - http://www.openwall.com/lists/oss-security/2011/03/04/21 - http://git.gnome.org/browse/evince/commit/?id=d4139205b010 - https://security.gentoo.org/glsa/201701-57 - http://git.gnome.org/browse/evince/commit/?id=439c5070022e
CVE ID: CVE-2011-5245 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-07T00:30:46.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE) injection attack, a similar vulnerability to CVE-2012-0818. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=785631 - http://www.osvdb.org/78680 - http://rhn.redhat.com/errata/RHSA-2012-1059.html - https://issues.jboss.o
g.cgi?id=785631 - http://www.osvdb.org/78680 - http://rhn.redhat.com/errata/RHSA-2012-1059.html - https://issues.jboss.org/browse/RESTEASY-647 - http://rhn.redhat.com/errata/RHSA-2012-1056.html - http://rhn.redhat.com/errata/RHSA-2012-1058.html - http://www.securityfocus.com/bid/51766 - http://rhn.redhat.com/errata/RHSA-2012-0519.html - http://secunia.com/advisories/50084 - http://rhn.redhat.com/errata/RHSA-2014-0371.html - http://rhn.redhat.com/errata/RHSA-2012-1057.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72808 - http://rhn.redhat.com/errata/RHSA-2012-0441.html - http://secunia.com/advisories/47832 - http://secunia.com/advisories/57719 - http://secunia.com/advisories/577
441.html - http://secunia.com/advisories/47832 - http://secunia.com/advisories/57719 - http://secunia.com/advisories/57716 - http://rhn.redhat.com/errata/RHSA-2014-0372.html - https://issues.jboss.org/browse/RESTEASY/fixforversion/12318708 - http://rhn.redhat.com/errata/RHSA-2012-1125.html
CVE ID: CVE-2011-5247 State: PUBLISHED Published: 2020-01-08T22:35:27 Last Updated: 2024-08-07T00:30:47.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/archive/1/525003
CVE ID: CVE-2011-5249 State: PUBLISHED Published: 2014-05-14T19:00:00 Last Updated: 2024-08-07T00:30:46.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the events page in the System iNtrusion Analysis and Reporting Environment (SNARE) for Linux agent before 1.7.0 allows remote attackers to inject arbitrary web script or HTML via a logged shell command. Additional Analyst Notes: - CVE Program Container: References: - http://rpmfind.net/linux/RPM/sourceforge/s/sn/snare/Snare%20for%20Linux/1.7.0/SnareLinux-1.7.0-0.i386.html - http://archives.neohapsis.com/archives/bugtraq/2012-12/0077.html
CVE ID: CVE-2011-5250 State: PUBLISHED Published: 2020-01-08T22:38:43 Last Updated: 2024-08-07T00:30:46.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Snare for Linux before 1.7.0 has CSRF in the web interface. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80613 - https://www.securityfocus.com/archive/1/525002
CVE ID: CVE-2011-5251 State: PUBLISHED Published: 2012-12-31T20:00:00Z Last Updated: 2024-09-17T01:16:04.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter in a lostpw action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vbulletin.com/forum/showthread.php/381014-Potential-Phishing-Vector?p=2166441
CVE ID: CVE-2011-5252 State: PUBLISHED Published: 2013-01-12T02:00:00 Last Updated: 2024-08-07T00:30:46.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47398 - http://www.mavitunasecurity.com/open-redirection-vulnerability-in-orchard/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/72110 - http://ar
.com/open-redirection-vulnerability-in-orchard/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/72110 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0023.html - http://www.securityfocus.com/bid/51260 - http://orchard.codeplex.com/discussions/283667
CVE ID: CVE-2011-5253 State: PUBLISHED Published: 2013-01-12T02:00:00 Last Updated: 2024-08-07T00:30:46.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dl Download Ticket Service 0.3 through 0.9 allows remote attackers to login as an arbitrary user by supplying an authorization header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72252 - http://secunia.com/advisories/47466 - http://www.thregr.org/~wavexx/software/dl/NEWS.html - http://www.securityfocus.com/bid/51347
CVE ID: CVE-2011-5254 State: PUBLISHED Published: 2013-01-12T02:00:00Z Last Updated: 2024-09-16T22:25:12.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Connections plugin before 0.7.1.6 for WordPress has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47390 - http://wordpress.org/extend/plugins/connections/changelog/ - http://www.osvdb.org/78063 - http://www.securityfocus.com/bid/51204
CVE ID: CVE-2011-5255 State: PUBLISHED Published: 2013-01-31T02:00:00 Last Updated: 2024-08-07T00:30:46.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/login in X3 CMS 0.4.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, (2) username, or (3) password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.infoserve.de/system/files/advisories/INFOSERVE-ADV2011-04.txt - http://www.securityfocus.com/bid/51346 - http://www.x3cms.net/en/news/article/dae363948eb4b27f8b02a84ca054c3fc/release_0.4.3.1 - https://exchange.xforce.ibmcloud.com/vul
ww.x3cms.net/en/news/article/dae363948eb4b27f8b02a84ca054c3fc/release_0.4.3.1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72279 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0066.html - http://x3cms.bzr.sourceforge.net/bzr/x3cms/revision/977 - http://x3cms.bzr.sourceforge.net/bzr/x3cms/revision/984 - http://secunia.com/advisories/46748 - http://osvdb.org/78220
CVE ID: CVE-2011-5256 State: PUBLISHED Published: 2013-02-12T20:00:00Z Last Updated: 2024-09-16T19:09:21.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the tooltips in LimeSurvey before 1.91+ Build 11379-20111116, when viewing survey results, allows remote attackers to inject arbitrary web script or HTML via unknown parameters. Additional Analyst Notes: - CVE Program Container: References: - http://limesurvey.svn.sourceforge.net/viewvc/limesurvey/source/limesurvey/docs/release_notes.txt?view=markup - http://secunia.com/advisories/46831
CVE ID: CVE-2011-5257 State: PUBLISHED Published: 2013-02-12T20:00:00Z Last Updated: 2024-09-16T21:08:57.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) twitter_id parameter related to the Twitter widget and (2) facebook_id parameter related to the Facebook widget. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46658 - http://www.osvdb.org/76712 - http://docs.appthemes.com/classipress/classipress-version-3-1-5/ - http://www.exploit-db.com/exploits/18053
CVE ID: CVE-2011-5258 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-07T00:30:46.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.6.11.2 allow remote attackers to inject arbitrary web script or HTML via the (1) uniqcode or (2) isAdmin parameter to index.php; or the (3) PATH_INFO to lib/controllers/centralcontroller.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_orangehrm.html - http://www.securityfocus.com/archive/1/520684/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/71568 -
p://www.securityfocus.com/archive/1/520684/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/71568 - http://osvdb.org/show/osvdb/77417 - http://www.securityfocus.com/bid/50857 - http://osvdb.org/show/osvdb/77416 - http://secunia.com/advisories/47014 - http://blog.orangehrm.com/2011/12/09/security-vulnerabilities-fixed-with-orangehrm-26112/
CVE ID: CVE-2011-5259 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-07T00:30:46.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib/controllers/CentralController.php in OrangeHRM before 2.6.11.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_orangehrm.html - http://www.securityfocus.com/archive/1/520684/100/0/threaded - http://osvdb.org/show/osvdb/77418 - http://www.securityfocus.com/bid/50857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71569 - http://sec
77418 - http://www.securityfocus.com/bid/50857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71569 - http://secunia.com/advisories/47014 - http://blog.orangehrm.com/2011/12/09/security-vulnerabilities-fixed-with-orangehrm-26112/
CVE ID: CVE-2011-5260 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-07T00:30:46.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SAP/BW/DOC/METADATA in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/dsecrg-11-037-sap-bw-doc-multiple-xss/ - http://dsecrg.com/pages/vul/show.php?id=337 - http://www.securityfocus.com/archive/1/520555/100/0/threaded - http://www.sdn.sap.com/irj/scn/index?rid=/webcontent/uuid/50316177-762d-2f10-0993-a2206cc349b4
CVE ID: CVE-2011-5261 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-07T00:30:46.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in serverreport.cgi in Axis M10 Series Network Cameras M1054 firmware 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the pageTitle parameter to admin/showReport.shtml. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47037 - http://metzgersecurity.blogspot.com/2011/11/xss-vulnerability-axis-m10-series.html - http://www.securityfocus.com/bid/50968 - http://osvdb.org/77395 - https://exchange.xforce.ibmcloud
xis-m10-series.html - http://www.securityfocus.com/bid/50968 - http://osvdb.org/77395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71687
CVE ID: CVE-2011-5262 State: PUBLISHED Published: 2013-02-12T20:00:00Z Last Updated: 2024-09-16T18:02:52.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in prodpage.cfm in SonicWALL Aventail allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18122 - http://www.securityfocus.com/bid/50702 - http://www.osvdb.org/77484
CVE ID: CVE-2011-5263 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-07T00:30:46.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RetrieveMailExamples in SAP NetWeaver 7.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the server parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45708 - http://www.securityfocus.com/bid/49266/info - https://exchange.xforce.ibmcloud.com/vulnerabilities/69331 - http://dsecrg.com/pages/vul/show.php?id=330 - http://www.securityfocus.com/archive/1/520551/100/0/threaded - http://www.sdn.sap.com/ir
com/pages/vul/show.php?id=330 - http://www.securityfocus.com/archive/1/520551/100/0/threaded - http://www.sdn.sap.com/irj/scn/index?rid=/webcontent/uuid/50316177-762d-2f10-0993-a2206cc349b4
CVE ID: CVE-2011-5264 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-07T00:30:46.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lazyest-backup.php in the Lazyest Backup plugin before 0.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xml_or_all parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/lazyest-backup/changelog/ - http://www.osvdb.org/77493 - http://plugins.trac.wordpress.org/changeset?reponame=&new=470737%40lazyest-backup&old=468541%40lazyest-backup - http://www.securityfocus.com/bid/50900 - http://se
t?reponame=&new=470737%40lazyest-backup&old=468541%40lazyest-backup - http://www.securityfocus.com/bid/50900 - http://secunia.com/advisories/47092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71650
CVE ID: CVE-2011-5265 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-07T00:30:46.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cached_image.php in the Featurific For WordPress plugin 1.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the snum parameter. NOTE: this has been disputed by a third party. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-04/0120.html - http://www.securityfocus.com/bid/50779 - http://www.securityfocus.com/archive/1/520625/100/0/threaded - http://osvdb.org/77337 - https://exchange.
om/bid/50779 - http://www.securityfocus.com/archive/1/520625/100/0/threaded - http://osvdb.org/77337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71468
CVE ID: CVE-2011-5266 State: PUBLISHED Published: 2020-01-08T22:43:52 Last Updated: 2024-08-07T00:30:46.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Imperva SecureSphere Web Application Firewall (WAF) before 12-august-2010 allows SQL injection filter bypass. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2011/May/163
CVE ID: CVE-2011-5267 State: PUBLISHED Published: 2013-11-05T18:00:00Z Last Updated: 2024-09-16T22:19:55.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as used in WikiWig 5.01 and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) to_p_dict or (2) to_r_list parameter. NOTE: this issue might be related to the htmlarea plugin and CVE-2013-5670. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/09/01/3 - http://www.autosectools.com/Advisories/WikiWig.5.
eferences: - http://www.openwall.com/lists/oss-security/2013/09/01/3 - http://www.autosectools.com/Advisories/WikiWig.5.01_Persistent-Reflected.Cross-site.Scripting_139.html - http://www.openwall.com/lists/oss-security/2013/09/01/1 - http://www.exploit-db.com/exploits/16988 - http://www.osvdb.org/71070
CVE ID: CVE-2011-5268 State: PUBLISHED Published: 2013-12-24T19:00:00 Last Updated: 2024-08-07T00:30:46.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service (file descriptor consumption and crash) via multiple failed SSL handshakes, a different vulnerability than CVE-2013-4550. NOTE: this issue was SPLIT from CVE-2013-4550 because it is a different type of issue. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/122274.html - https://projects.duckcorp.org/issues/261 - http
fedoraproject.org/pipermail/package-announce/2013-November/122274.html - https://projects.duckcorp.org/issues/261 - https://projects.duckcorp.org/versions/13 - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/121868.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/122278.html - http://www.openwall.com/lists/oss-security/2014/01/02/9