Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_08.html - http://www.srware.net/forum/viewtopic.php?f=18&t=2190 - http://secunia.com/advisories/43342 - http://support.apple.com/kb/HT4999 - http://www.debian.org/security/2011/dsa-2166 - http://support.apple.com/kb/HT4808 - http://www.vupen.com/english/advisories/2011/0408 - http://www.securityfocus.com/bid/46262 - http://code.google.com/p/chromium/issues/detail?id=67234 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14320 - http://lists.apple.com/archives/sec
al.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14320 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0982 State: PUBLISHED Published: 2011-02-10T18:00:00 Last Updated: 2024-08-06T22:14:26.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 9.0.597.94 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG font faces. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_08.html - http://www.srware.net/forum/viewtopic.php?f=18&t=2190 - http://secunia.com/advisories/43342 - http://code.google.com/p/chromium/issues/detail?id=68120 - https://oval.cisecurity.org/reposito
a.com/advisories/43342 - http://code.google.com/p/chromium/issues/detail?id=68120 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14582 - http://www.securityfocus.com/bid/46262
CVE ID: CVE-2011-0983 State: PUBLISHED Published: 2011-02-10T18:00:00 Last Updated: 2024-08-06T22:14:26.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 9.0.597.94 does not properly handle anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43368 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://googl
ounce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_08.html - http://www.srware.net/forum/viewtopic.php?f=18&t=2190 - http://secunia.com/advisories/43342 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14543 - http://support.apple.com/kb/HT4999 - http://www.debian.org/security/2011/dsa-2166 - http://support.apple.com/kb/HT4808 - http://www.vupen.com/english/advisories/2011/0408 - http://www.securityfocus.com/bid/46262 - http://code.google.com/p/chromium/issues/detail?id=69556 - http://lists.apple.com/archives/security-announce
bid/46262 - http://code.google.com/p/chromium/issues/detail?id=69556 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0984 State: PUBLISHED Published: 2011-02-10T18:00:00 Last Updated: 2024-08-06T22:14:26.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 9.0.597.94 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43368 - http://code.google.com/p/chromium/issues/detail?id=69970 - http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_08.html - http://www.srware.net/forum/viewtopic.php?f=18&t=2190 - http://secunia.com/advisories/43342 - https://oval.cisecurity
- http://www.srware.net/forum/viewtopic.php?f=18&t=2190 - http://secunia.com/advisories/43342 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14719 - http://www.debian.org/security/2011/dsa-2166 - http://www.vupen.com/english/advisories/2011/0408 - http://www.securityfocus.com/bid/46262
CVE ID: CVE-2011-0985 State: PUBLISHED Published: 2011-02-10T18:00:00 Last Updated: 2024-08-06T22:14:26.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 9.0.597.94 does not properly perform process termination upon memory exhaustion, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43368 - http://code.google.com/p/chromium/issues/detail?id=70456 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14506 - http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_08.html - http://www.srware.net/forum/viewtopi
- http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_08.html - http://www.srware.net/forum/viewtopic.php?f=18&t=2190 - http://secunia.com/advisories/43342 - http://www.debian.org/security/2011/dsa-2166 - http://www.vupen.com/english/advisories/2011/0408 - http://www.securityfocus.com/bid/46262
CVE ID: CVE-2011-0986 State: PUBLISHED Published: 2011-02-14T21:00:00 Last Updated: 2024-08-06T22:14:26.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65424 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=035d002db1e1201e73e560d7d98591563b506a83 - http://w
ourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=035d002db1e1201e73e560d7d98591563b506a83 - http://www.vupen.com/english/advisories/2011/0385 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054355.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:026 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054349.html - http://www.phpmyadmin.net/home_page/security/PMASA-2011-1.php - http://secunia.com/advisories/43478
CVE ID: CVE-2011-0987 State: PUBLISHED Published: 2011-02-14T21:00:00 Last Updated: 2024-08-06T22:14:26.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user's execution of a SQL query by creating a bookmark. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0512 - http://www.vupen.com/english/advisories/2011/0570 - http://lists.fedoraproject.org/pipermail/package-announce/2011-Ma
- http://www.vupen.com/english/advisories/2011/0570 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054525.html - http://www.phpmyadmin.net/home_page/security/PMASA-2011-2.php - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=a5464b4daff0059cdf8c9e5f4d54a80e2dd2a5b0 - http://www.vupen.com/english/advisories/2011/0409 - http://www.vupen.com/english/advisories/2011/0381 - http://www.vupen.com/english/advisories/2011/0385 - http://secunia.com/advisories/43391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65390 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054355.html - http://www.debian.org/
ies/65390 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054355.html - http://www.debian.org/security/2011/dsa-2167 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:026 - http://www.securityfocus.com/bid/46359 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054349.html - http://secunia.com/advisories/43324 - http://secunia.com/advisories/43478
CVE ID: CVE-2011-0988 State: PUBLISHED Published: 2011-04-18T17:00:00 Last Updated: 2024-08-06T22:14:26.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44039 - https://hermes.opensuse.org/messages/7849430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66618
CVE ID: CVE-2011-0989 State: PUBLISHED Published: 2011-04-13T21:00:00 Last Updated: 2024-08-06T22:14:26.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, does not properly restrict data types, which allows remote attackers to modify internal read-only data structures, and cause a denial of service (plugin crash) or corrupt the internal state of the security manager, via a crafted media file, as demonstrated by modifying a C# struct. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=667077
ct. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=667077 - http://www.securityfocus.com/bid/47208 - http://openwall.com/lists/oss-security/2011/04/06/14 - https://github.com/mono/mono/commit/035c8587c0d8d307e45f1b7171a0d337bb451f1e - http://secunia.com/advisories/44002 - http://www.mono-project.com/Vulnerabilities - http://secunia.com/advisories/44076 - http://lists.opensuse.org/opensuse-updates/2011-04/msg00024.html - http://www.vupen.com/english/advisories/2011/0904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66624
CVE ID: CVE-2011-0990 State: PUBLISHED Published: 2011-04-13T21:00:00 Last Updated: 2024-08-06T22:14:26.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to trigger a buffer overflow and modify internal data structures, and cause a denial of service (plugin crash) or corrupt the internal state of the security manager, via a crafted media file in which a thread makes a change after a type check but before a copy action. Additional Analyst Notes: - CVE Program Container: References: - https://bugzil
r a type check but before a copy action. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=667077 - http://www.securityfocus.com/bid/47208 - http://openwall.com/lists/oss-security/2011/04/06/14 - http://secunia.com/advisories/44002 - http://www.mono-project.com/Vulnerabilities - http://secunia.com/advisories/44076 - https://github.com/mono/mono/commit/2f00e4bbb2137130845afb1b2a1e678552fc8e5c - https://exchange.xforce.ibmcloud.com/vulnerabilities/66625 - http://lists.opensuse.org/opensuse-updates/2011-04/msg00024.html - http://www.vupen.com/english/advisories/2011/0904
CVE ID: CVE-2011-0991 State: PUBLISHED Published: 2011-04-13T21:00:00 Last Updated: 2024-08-06T22:14:26.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to finalizing and then resurrecting a DynamicMethod instance. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=660422 - https://github.com/mono/mono/commit/89d1455a80ef13cddee5d79ec00c06055da3085c - https://exchange.xforce.ibmcloud.com/vulnerabilities/66626
m/mono/mono/commit/89d1455a80ef13cddee5d79ec00c06055da3085c - https://exchange.xforce.ibmcloud.com/vulnerabilities/66626 - https://bugzilla.novell.com/show_bug.cgi?id=667077 - http://www.securityfocus.com/bid/47208 - https://github.com/mono/mono/commit/3f8ee42b8c867d9a4c18c22657840d072cca5c3a - http://openwall.com/lists/oss-security/2011/04/06/14 - http://secunia.com/advisories/44002 - http://www.mono-project.com/Vulnerabilities - http://secunia.com/advisories/44076 - http://lists.opensuse.org/opensuse-updates/2011-04/msg00024.html - http://www.vupen.com/english/advisories/2011/0904 - https://github.com/mono/mono/commit/8eb1189099e02372fd45ca1c67230eccf1edddc0
CVE ID: CVE-2011-0992 State: PUBLISHED Published: 2011-04-13T21:00:00 Last Updated: 2024-08-06T22:14:26.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66627 - https://bugzilla.novell.com/show_bug.cgi?id=678515 - https://bugzilla.novell.com/show_bug.cgi?id=667077 - http://www.securityfocus.co
lla.novell.com/show_bug.cgi?id=678515 - https://bugzilla.novell.com/show_bug.cgi?id=667077 - http://www.securityfocus.com/bid/47208 - http://openwall.com/lists/oss-security/2011/04/06/14 - http://secunia.com/advisories/44002 - http://www.mono-project.com/Vulnerabilities - https://bugzilla.redhat.com/show_bug.cgi?id=694933 - https://github.com/mono/mono/commit/722f9890f09aadfc37ae479e7d946d5fc5ef7b91 - http://secunia.com/advisories/44076 - http://lists.opensuse.org/opensuse-updates/2011-04/msg00024.html - http://www.vupen.com/english/advisories/2011/0904
CVE ID: CVE-2011-0993 State: PUBLISHED Published: 2014-04-16T18:00:00 Last Updated: 2024-08-06T22:14:26.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95697 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html
CVE ID: CVE-2011-0994 State: PUBLISHED Published: 2011-04-10T01:29:00 Last Updated: 2024-08-06T22:14:26.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43975 - http://www.securitytracker.com/id?1025292 - http://www.securityfocus.com/bid/47144 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12064 - http://download.novell.com/Download?buildid=rCAgCcbPH9s~ - http://www.vupen.com/englis
%3Aorg.mitre.oval%3Adef%3A12064 - http://download.novell.com/Download?buildid=rCAgCcbPH9s~ - http://www.vupen.com/english/advisories/2011/0866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66548 - http://www.zerodayinitiative.com/advisories/ZDI-11-116/ - http://securityreason.com/securityalert/8194 - http://www.securityfocus.com/archive/1/517321/100/0/threaded
CVE ID: CVE-2011-0995 State: PUBLISHED Published: 2011-05-13T17:00:00 Last Updated: 2024-08-06T22:14:27.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=685928 - http://www.securityfocus.com/bid/47694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67263 - http://www.osvdb.org/72180 - http://secunia.com/advisories/44418 - http://support.novell.com/
om/vulnerabilities/67263 - http://www.osvdb.org/72180 - http://secunia.com/advisories/44418 - http://support.novell.com/security/cve/CVE-2011-0995.html
CVE ID: CVE-2011-0996 State: PUBLISHED Published: 2011-04-13T14:00:00 Last Updated: 2024-08-06T22:14:27.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message. Additional Analyst Notes: - CVE Program Container: References: - http://roy.marples.name/projects/dhcpcd/timeline - https://bugzilla.novell.com/show_bug.cgi?id=675052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66641 - http://roy.marples.name/archives/dhcpcd-discuss/2011/0326.html - http://secunia.com/advisories/44070 - http://roy.marples.name/projects/dhcpcd/changeset/c317b
d-discuss/2011/0326.html - http://secunia.com/advisories/44070 - http://roy.marples.name/projects/dhcpcd/changeset/c317b39786ac6c3a939dc711db7c78cf099859fd - http://www.securityfocus.com/bid/47272 - http://security.gentoo.org/glsa/glsa-201301-04.xml
CVE ID: CVE-2011-0997 State: PUBLISHED Published: 2011-04-08T15:00:00 Last Updated: 2024-08-06T22:14:27.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47176 - http://www.vupen.com/english/advisories/2011/0886 - http://secunia.com/advisories/44103 - http://www.redhat.com/support/e
ttp://www.vupen.com/english/advisories/2011/0886 - http://secunia.com/advisories/44103 - http://www.redhat.com/support/errata/RHSA-2011-0840.html - http://secunia.com/advisories/44037 - https://bugzilla.redhat.com/show_bug.cgi?id=689832 - http://www.vupen.com/english/advisories/2011/0926 - http://marc.info/?l=bugtraq&m=133226187115472&w=2 - http://secunia.com/advisories/44127 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:073 - http://marc.info/?l=bugtraq&m=133226187115472&w=2 - http://www.vupen.com/english/advisories/2011/0909 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12812 - http://www.osvdb.org/71493 - http://secunia.com/adviso
epository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12812 - http://www.osvdb.org/71493 - http://secunia.com/advisories/44090 - http://secunia.com/advisories/44048 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058279.html - https://www.isc.org/software/dhcp/advisories/cve-2011-0997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66580 - http://www.vupen.com/english/advisories/2011/0879 - http://www.kb.cert.org/vuls/id/107886 - http://securitytracker.com/id?1025300 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593345 - http://www.vupen.com/englis
/slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593345 - http://www.vupen.com/english/advisories/2011/1000 - http://www.vupen.com/english/advisories/2011/0915 - http://www.vupen.com/english/advisories/2011/0965 - https://www.exploit-db.com/exploits/37623/ - http://security.gentoo.org/glsa/glsa-201301-06.xml - http://secunia.com/advisories/44180 - http://www.debian.org/security/2011/dsa-2217 - http://www.ubuntu.com/usn/USN-1108-1 - http://www.debian.org/security/2011/dsa-2216 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057888.html - http://www.redhat.com/support/errata/RHSA-2011-0428.html - http://secunia.com/advisories/44089
CVE ID: CVE-2011-0999 State: PUBLISHED Published: 2011-02-23T18:00:00 Last Updated: 2024-08-06T22:14:26.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: mm/huge_memory.c in the Linux kernel before 2.6.38-rc5 does not prevent creation of a transparent huge page (THP) during the existence of a temporary stack for an exec system call, which allows local users to cause a denial of service (memory consumption) or possibly have unspecified other impact via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/02/17/3 - http://www.securityfocus.com/bid/46442 - http://www.kernel.org/pub/linux/kernel/v2.6/tes
sts/oss-security/2011/02/17/3 - http://www.securityfocus.com/bid/46442 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a7d6e4ecdb7648478ddec76d30d87d03d6e22b31 - https://bugzilla.redhat.com/show_bug.cgi?id=678209 - http://openwall.com/lists/oss-security/2011/02/17/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65535
CVE ID: CVE-2011-10001 State: PUBLISHED Published: 2023-01-18T15:58:04.089Z Last Updated: 2024-08-07T00:30:47.003Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: iamdroppy Products: phoenixcf Problem Types: CWE-89 Description: A vulnerability was found in iamdroppy phoenixcf. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file content/2-Community/articles.cfm. The manipulation leads to sql injection. The patch is named d156faf8bc36cd49c3b10d3697ef14167ad451d8. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218491. Additional Analyst Notes: - CV
a patch to fix this issue. The associated identifier of this vulnerability is VDB-218491. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218491 - https://vuldb.com/?ctiid.218491 - https://github.com/iamdroppy/phoenixcf/commit/d156faf8bc36cd49c3b10d3697ef14167ad451d8
CVE ID: CVE-2011-10002 State: PUBLISHED Published: 2023-02-07T17:00:05.107Z Last Updated: 2024-08-07T00:30:46.837Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: weblabyrinth Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in weblabyrinth 0.3.1. This affects the function Labyrinth of the file labyrinth.inc.php. The manipulation leads to sql injection. Upgrading to version 0.3.2 is able to address this issue. The identifier of the patch is 60793fd8c8c4759596d3510641e96ea40e7f60e9. It is recommended to upgrade the affected component. The identifier VDB-220221 was assigned to this vulnerability. Additional
recommended to upgrade the affected component. The identifier VDB-220221 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220221 - https://vuldb.com/?ctiid.220221 - https://code.google.com/archive/p/weblabyrinth/issues/1 - https://github.com/rotelok/weblabyrinth/commit/60793fd8c8c4759596d3510641e96ea40e7f60e9 - https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/weblabyrinth/weblabyrinth-0.3.2.tar.gz