Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
a.com/advisories/46756 - http://openwall.com/lists/oss-security/2011/12/07/3 - http://trac.des.no/openpam/changeset/478/trunk/lib/openpam_configure.c - https://exchange.xforce.ibmcloud.com/vulnerabilities/71205 - http://osvdb.org/76945 - http://c-skills.blogspot.com/2011/11/openpam-trickery.html - http://openwall.com/lists/oss-security/2011/12/08/9 - http://secunia.com/advisories/46804
CVE ID: CVE-2011-4123 State: REJECTED Published: 2012-01-25T17:00:00Z Last Updated: 2024-09-17T04:09:33.253Z Description: No description available.
CVE ID: CVE-2011-4124 State: PUBLISHED Published: 2021-10-27T00:50:04 Last Updated: 2024-08-07T00:01:50.364Z Vendors: n/a Products: Calibre Problem Types: CWE-20 Description: Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and elevation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://git.zx2c4.com/calibre-mount-helper-exploit/about/ - https://www.openwall.com/lists/oss-security/2011/11/02/2 - https://bugs.launchpad.net/calibre/+bug/885027 - https://lwn.net/Articles/464824/
CVE ID: CVE-2011-4125 State: PUBLISHED Published: 2021-10-27T00:50:09 Last Updated: 2024-08-07T00:01:50.441Z Vendors: n/a Products: Calibre Problem Types: CWE-426 Description: A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root. Additional Analyst Notes: - CVE Program Container: References: - https://git.zx2c4.com/calibre-mount-helper-exploit/about/ - https://www.openwall.com/lists/oss-security/2011/11/02/2 - https://bugs.launchpad.net/calibre/+bug/885027 - https://lwn.net/Articles/464824/
CVE ID: CVE-2011-4126 State: PUBLISHED Published: 2021-10-27T00:50:15 Last Updated: 2024-08-07T00:01:50.489Z Vendors: n/a Products: Calibre Problem Types: CWE-367 Description: Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged users the ability to mount any device to anywhere. Additional Analyst Notes: - CVE Program Container: References: - https://git.zx2c4.com/calibre-mount-helper-exploit/about/ - https://www.openwall.com/lists/oss-security/2011/11/02/2 - https://bugs.launchpad.net/calibre/+bug/885027 - https://lwn.net/Articles/464824/
CVE ID: CVE-2011-4127 State: PUBLISHED Published: 2012-07-03T16:00:00 Last Updated: 2024-08-07T00:01:51.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/12/22/5 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html - http://secunia.com/advisories/48898 - http://git.kernel.org/?p=linux/kernel/git/torva
y-announce/2012-04/msg00021.html - http://secunia.com/advisories/48898 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ec8013beddd717d1740cfefb1a9b900deef85462 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0bfc96cb77224736dfa35c3c555d37b3646ef35e - https://bugzilla.redhat.com/show_bug.cgi?id=752375 - https://github.com/torvalds/linux/commit/0bfc96cb77224736dfa35c3c555d37b3646ef35e - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2 - https://github.com/torvalds/linux/commit/ec8013beddd717d1740cfefb1a9b900deef85462 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2011-4128 State: PUBLISHED Published: 2011-12-08T20:00:00 Last Updated: 2024-08-07T00:01:51.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash) via a large SessionTicket. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1418-1 - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=e82ef
://rhn.redhat.com/errata/RHSA-2012-0531.html - http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=e82ef4545e9e98cbcb032f55d7c750b81e3a0450 - http://openwall.com/lists/oss-security/2011/11/09/2 - http://secunia.com/advisories/48712 - http://www.gnu.org/software/gnutls/security.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077071.html - https://bugzilla.redhat.com/show_bug.cgi?id=752308 - http://rhn.redhat.com/errata/RHSA-2012-0488.html - http://secunia.com/advisories/48596 - http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=190cef6eed37d0e73a73c1e205eb31d45ab60a3c - http://www.mandriva.com/security/advisories?name=MDVSA-2012:045
ommitdiff%3Bh=190cef6eed37d0e73a73c1e205eb31d45ab60a3c - http://www.mandriva.com/security/advisories?name=MDVSA-2012:045 - http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5596 - http://openwall.com/lists/oss-security/2011/11/09/4 - http://rhn.redhat.com/errata/RHSA-2012-0429.html
CVE ID: CVE-2011-4129 State: PUBLISHED Published: 2012-10-22T23:00:00Z Last Updated: 2024-08-07T00:01:50.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) services/twitter/twitter-contact-view.c and (2) services/twitter/twitter-item-view.c in libsocialweb before 0.25.20 automatically connect to Twitter when no Twitter account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=752022 - http://git.gnome.org/browse/libsocialweb/commit/?id=0086bfbfc07345438123a87957e0bc12226e2b94 - http://git.gnome.org/browse
tp://git.gnome.org/browse/libsocialweb/commit/?id=0086bfbfc07345438123a87957e0bc12226e2b94 - http://git.gnome.org/browse/libsocialweb/commit/?id=8982cf504cf3767761fe85d9558beab3d9da5bec - http://www.openwall.com/lists/oss-security/2011/11/09/5 - http://www.openwall.com/lists/oss-security/2011/11/09/3
CVE ID: CVE-2011-4130 State: PUBLISHED Published: 2011-12-06T11:00:00Z Last Updated: 2024-08-07T00:01:50.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.proftpd.org/show_bug.cgi?id=3711 - http://www.zerodayinitiative.com/advisories/ZDI-11-328/ - http://www.proftpd.org/docs/NEWS-1.3.3g - http://www.securityfocus.com/bid/50631
CVE ID: CVE-2011-4131 State: PUBLISHED Published: 2012-05-17T10:00:00 Last Updated: 2024-08-07T00:01:50.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html - http://secunia.com/advisories/48898 - http://www.openwall.com/lists/oss-security/2011/11/12/1 - https://bugzilla.redhat.com/show_bug.cgi?id=747106 - http://git
ttp://www.openwall.com/lists/oss-security/2011/11/12/1 - https://bugzilla.redhat.com/show_bug.cgi?id=747106 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bf118a342f10dafe44b14451a1392c3254629a1f - http://rhn.redhat.com/errata/RHSA-2012-1541.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081280.html - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html - http://rhn.redhat.com/errata/RHSA-2012-0862.html - https://github.com/torvalds/linux/commit/bf118a342f10dafe44b14451a1392c3254629a1f - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2
CVE ID: CVE-2011-4132 State: PUBLISHED Published: 2012-01-27T15:00:00 Last Updated: 2024-08-07T00:01:51.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a denial of service (assertion error and kernel oops) via an ext3 or ext4 image with an "invalid log first block value." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=8762202dd0d6e46854f786bdb6fb3780a1625efe - http:
ernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=8762202dd0d6e46854f786bdb6fb3780a1625efe - http://secunia.com/advisories/48898 - http://securitytracker.com/id?1026325 - http://www.securityfocus.com/bid/50663 - http://www.openwall.com/lists/oss-security/2011/11/11/6 - http://xorl.wordpress.com/2011/12/08/cve-2011-4132-linux-kernel-jbdjbd2-local-dos/ - https://bugzilla.redhat.com/show_bug.cgi?id=753341 - http://www.openwall.com/lists/oss-security/2011/11/13/4 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2011-4133 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:50.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=170002 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=8f031d5431c1204197b1482fd6c63bc87a19a476
CVE ID: CVE-2011-4134 State: PUBLISHED Published: 2012-01-19T19:00:00Z Last Updated: 2024-09-16T16:49:05.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allows remote attackers to execute arbitrary code via a crafted 0x2f packet. Additional Analyst Notes: - CVE Program Container: References: - http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200980&sliceId=1 - http://www.securityfocus.com/bid/48927 - http://www.flexerasoftware.com/pl/12982.htm - http://zerodayinitiative.com/advisories/ZDI-11-244/
CVE ID: CVE-2011-4135 State: PUBLISHED Published: 2012-01-19T19:00:00Z Last Updated: 2024-09-16T20:47:46.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-1389. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45615 - http://www.zerodayinitiative.com/advisories/ZDI-11-272/ - http://www.securityfocus.com/bid/49191 - http://www.flexerasoftware.com/pl/13057.htm
iative.com/advisories/ZDI-11-272/ - http://www.securityfocus.com/bid/49191 - http://www.flexerasoftware.com/pl/13057.htm - http://www.ibm.com/support/docview.wss?uid=swg21577760 - http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200975&sliceId=1
CVE ID: CVE-2011-4136 State: PUBLISHED Published: 2011-10-19T10:00:00 Last Updated: 2024-08-07T00:01:50.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which allows remote attackers to modify a session by triggering use of a key that is equal to that session's identifier. Additional Analyst Notes: - CVE Program Container: References: - https://hermes.opensuse.org/messages/14700881 - http://www.debian.org/security/2011/dsa-2332 - https://bugzilla.redhat.com/show_bug.cgi?id=737366 - http:
ges/14700881 - http://www.debian.org/security/2011/dsa-2332 - https://bugzilla.redhat.com/show_bug.cgi?id=737366 - http://secunia.com/advisories/46614 - http://openwall.com/lists/oss-security/2011/09/11/1 - https://www.djangoproject.com/weblog/2011/sep/10/127/ - http://openwall.com/lists/oss-security/2011/09/13/2 - https://www.djangoproject.com/weblog/2011/sep/09/
CVE ID: CVE-2011-4137 State: PUBLISHED Published: 2011-10-19T10:00:00 Last Updated: 2024-08-07T00:01:50.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote attackers to cause a denial of service (resource consumption) via a URL associated with (1) a slow response, (2) a completed TCP connection with no application data sent, or (3) a large amount of application data, a related issue to CVE-2011-1521. Additional Analyst Notes: - CVE Program Container: References: - http:/
lication data, a related issue to CVE-2011-1521. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/09/15/5 - https://hermes.opensuse.org/messages/14700881 - http://www.debian.org/security/2011/dsa-2332 - https://bugzilla.redhat.com/show_bug.cgi?id=737366 - http://secunia.com/advisories/46614 - http://openwall.com/lists/oss-security/2011/09/11/1 - https://www.djangoproject.com/weblog/2011/sep/10/127/ - http://openwall.com/lists/oss-security/2011/09/13/2 - https://www.djangoproject.com/weblog/2011/sep/09/
CVE ID: CVE-2011-4138 State: PUBLISHED Published: 2011-10-19T10:00:00 Last Updated: 2024-08-07T00:01:51.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request, but then uses a GET request for the new target URL in the case of a redirect, which might allow remote attackers to trigger arbitrary GET requests with an unintended source IP address via a crafted Location header. Additional Analyst Notes: - CVE Program Container: References: - https://hermes.opensuse.org/messages/14700881 - http://www.debian.org/security/2011/d
E Program Container: References: - https://hermes.opensuse.org/messages/14700881 - http://www.debian.org/security/2011/dsa-2332 - https://bugzilla.redhat.com/show_bug.cgi?id=737366 - http://secunia.com/advisories/46614 - http://openwall.com/lists/oss-security/2011/09/11/1 - https://www.djangoproject.com/weblog/2011/sep/10/127/ - http://openwall.com/lists/oss-security/2011/09/13/2 - https://www.djangoproject.com/weblog/2011/sep/09/
CVE ID: CVE-2011-4139 State: PUBLISHED Published: 2011-10-19T10:00:00 Last Updated: 2024-08-07T00:01:50.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://hermes.opensuse.org/messages/14700881 - http://www.debian.org/security/2011/dsa-2332 - https://bugzilla.redhat.com/show_bug.cgi?id=737366 - http://secunia.com/advisories/46614 - http://openwall.com/lists/oss-security/2011/09/11/1 - https://www.
cgi?id=737366 - http://secunia.com/advisories/46614 - http://openwall.com/lists/oss-security/2011/09/11/1 - https://www.djangoproject.com/weblog/2011/sep/10/127/ - http://openwall.com/lists/oss-security/2011/09/13/2 - https://www.djangoproject.com/weblog/2011/sep/09/
CVE ID: CVE-2011-4140 State: PUBLISHED Published: 2011-10-19T10:00:00 Last Updated: 2024-08-07T00:01:51.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page containing JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://hermes.opensuse.org/messages/14700881 - http://www.debian.org/security/2011/dsa-2332 - https://bugzilla.redhat.com/show_bug.cgi?id=73
se.org/messages/14700881 - http://www.debian.org/security/2011/dsa-2332 - https://bugzilla.redhat.com/show_bug.cgi?id=737366 - http://secunia.com/advisories/46614 - http://openwall.com/lists/oss-security/2011/09/11/1 - https://www.djangoproject.com/weblog/2011/sep/10/127/ - http://openwall.com/lists/oss-security/2011/09/13/2 - https://www.djangoproject.com/weblog/2011/sep/09/
CVE ID: CVE-2011-4141 State: PUBLISHED Published: 2011-12-17T02:00:00 Last Updated: 2024-08-07T00:01:50.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in EMC RSA SecurID Software Token 4.1 before 4.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Software Token file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2011-12/0089.html - http://secunia.com/advisories/45665 - http://securitytracker.com/id?1026426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71833
CVE ID: CVE-2011-4142 State: PUBLISHED Published: 2012-01-19T11:00:00Z Last Updated: 2024-09-17T01:21:43.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Search feature in EMC SourceOne Email Management 6.5 before 6.5.2.4033, 6.6 before 6.6.1.2194, and 6.7 before 6.7.2.2033 places cleartext credentials in log files, which allows local users to obtain sensitive information by reading these files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/521290
CVE ID: CVE-2011-4143 State: PUBLISHED Published: 2012-01-27T00:00:00Z Last Updated: 2024-09-16T22:25:06.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive information about environment variables in the web system via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/521375
CVE ID: CVE-2011-4144 State: PUBLISHED Published: 2012-02-02T02:00:00Z Last Updated: 2024-09-17T02:36:39.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 before P02 allows local users to obtain "highest super user privileges" by leveraging system administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-02/0005.html
CVE ID: CVE-2011-4145 State: REJECTED Published: 2013-06-27T21:00:00Z Last Updated: 2024-09-16T20:37:51.736Z Description: No description available.
CVE ID: CVE-2011-4146 State: REJECTED Published: 2013-06-27T21:00:00Z Last Updated: 2024-09-16T18:19:34.182Z Description: No description available.
CVE ID: CVE-2011-4147 State: REJECTED Published: 2013-06-27T21:00:00Z Last Updated: 2024-09-17T03:07:36.752Z Description: No description available.
CVE ID: CVE-2011-4148 State: REJECTED Published: 2013-06-27T21:00:00Z Last Updated: 2024-09-16T21:56:47.102Z Description: No description available.
CVE ID: CVE-2011-4149 State: REJECTED Published: 2013-06-27T21:00:00Z Last Updated: 2024-09-16T16:27:30.560Z Description: No description available.
CVE ID: CVE-2011-4150 State: REJECTED Published: 2013-06-27T21:00:00Z Last Updated: 2024-09-16T21:08:32.658Z Description: No description available.
CVE ID: CVE-2011-4151 State: PUBLISHED Published: 2011-10-20T21:00:00 Last Updated: 2024-08-07T00:01:51.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: The krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4, when the db2 (aka Berkeley DB) back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors, a different vulnerability than CVE-2011-1528. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/659251 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt - https://exchange.xforce.ibmcloud
t.org/vuls/id/659251 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/70891
CVE ID: CVE-2011-4153 State: PUBLISHED Published: 2012-01-18T20:00:00 Last Updated: 2024-08-07T00:01:50.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted string data, as demonstrated by the define function in zend_builtin_functions.c, and unspecified functions in ext/soap/php_sdl.c, ext/standard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com_dotnet/com_typeinfo.c, and main/php_open_temporary_file
dard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com_dotnet/com_typeinfo.c, and main/php_open_temporary_file.c. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=134012830914727&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www.exploit-db.com/exploits/18370/ - http://archives.neohapsis.com/archives/bugtraq/2012-01/0092.html - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00001.html - http://secunia.com/advisories/4866
6.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00001.html - http://secunia.com/advisories/48668 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://marc.info/?l=bugtraq&m=134012830914727&w=2 - http://cxsecurity.com/research/103
CVE ID: CVE-2011-4155 State: PUBLISHED Published: 2011-11-16T22:00:00 Last Updated: 2024-08-07T00:01:50.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4156. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520459 - http://securityreason.com/securityalert/8532 - http://www.securityfocus.com/archive/1/520459
CVE ID: CVE-2011-4156 State: PUBLISHED Published: 2011-11-16T22:00:00 Last Updated: 2024-08-07T00:01:51.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4155. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520459 - http://securityreason.com/securityalert/8532 - http://www.securityfocus.com/archive/1/520459