Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1565 State: PUBLISHED Published: 2011-04-05T15:00:00 Last Updated: 2024-08-06T22:28:41.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to (1) read (opcode 0x3) or (2) create or write (opcode 0x2) arbitrary files via ..\ (dot dot backslash) sequences to TCP port 12401. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46936 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf - http://securityreason.com/securityalert/8178 - http://sec
/www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf - http://securityreason.com/securityalert/8178 - http://secunia.com/advisories/43849 - http://www.vupen.com/english/advisories/2011/0741 - http://www.exploit-db.com/exploits/17024 - http://aluigi.org/adv/igss_1-adv.txt
CVE ID: CVE-2011-1566 State: PUBLISHED Published: 2011-04-05T15:00:00 Last Updated: 2024-08-06T22:28:41.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to execute arbitrary programs via ..\ (dot dot backslash) sequences in opcodes (1) 0xa and (2) 0x17 to TCP port 12397. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46936 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf - http://aluigi.org/adv/igss_8-adv.txt - http://secunia.com/advisories/43849 - http://
stems/pdf/ICS-ALERT-11-080-03.pdf - http://aluigi.org/adv/igss_8-adv.txt - http://secunia.com/advisories/43849 - http://www.vupen.com/english/advisories/2011/0741 - http://www.exploit-db.com/exploits/17024
CVE ID: CVE-2011-1567 State: PUBLISHED Published: 2011-04-05T15:00:00 Last Updated: 2024-08-06T22:28:41.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted (1) ListAll, (2) Write File, (3) ReadFile, (4) Delete, (5) RenameFile, and (6) FileInfo commands in an 0xd opcode; (7) the Add, (8) ReadFile, (9) Write File, (10) Rename, (11) Delete, and (12) Add commands in an RMS report templates (0x7) opcode; and (13) 0x4 command in an STDR
(10) Rename, (11) Delete, and (12) Add commands in an RMS report templates (0x7) opcode; and (13) 0x4 command in an STDREP request (0x8) opcode to TCP port 12401. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46936 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf - http://aluigi.org/adv/igss_2-adv.txt - http://secunia.com/advisories/43849 - http://aluigi.org/adv/igss_4-adv.txt - http://www.vupen.com/english/advisories/2011/0741 - http://www.exploit-db.com/exploits/17024 - http://aluigi.org/adv/igss_5-adv.txt - http://securityreason.com/securityalert/8179 - http://securityreason.com/securityalert/8251 - http://aluigi.org/
v.txt - http://securityreason.com/securityalert/8179 - http://securityreason.com/securityalert/8251 - http://aluigi.org/adv/igss_3-adv.txt - http://aluigi.org/adv/igss_7-adv.txt
CVE ID: CVE-2011-1568 State: PUBLISHED Published: 2011-04-05T15:00:00 Last Updated: 2024-08-06T22:28:41.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated using the RMS Reports Delete command, related to the logging of messages to GSST.LOG. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://
ails are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46936 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf - http://secunia.com/advisories/43849 - http://www.vupen.com/english/advisories/2011/0741 - http://www.exploit-db.com/exploits/17024 - http://aluigi.org/adv/igss_6-adv.txt - http://securityreason.com/securityalert/8182
CVE ID: CVE-2011-1569 State: PUBLISHED Published: 2011-04-05T15:00:00 Last Updated: 2024-08-06T22:28:41.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via (1) a trailing ".", (2) a trailing space, or (3) mixed case in the FileNameAttach parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46927 - http://www.exploit-db.com/exploits/17011 - http://www.securityfocus.com/archive/1/517085/100/0/threaded - http://securityreason.com/securityalert/8180 - http://soroush.secproject.com/blog/2011/01/unrestrict
85/100/0/threaded - http://securityreason.com/securityalert/8180 - http://soroush.secproject.com/blog/2011/01/unrestricted_file_download_v1_0/ - http://osvdb.org/71250 - http://secunia.com/advisories/43792 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66177
CVE ID: CVE-2011-1570 State: PUBLISHED Published: 2011-05-07T19:00:00Z Last Updated: 2024-09-16T20:58:25.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to inject arbitrary web script or HTML via a message title, a different vulnerability than CVE-2004-2030. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/04/08/5 - http://openwall.com/lists/oss-security/2011/04/11/9 - http://issues.liferay.com/browse/LPS-12628 - http://issues.liferay.com/browse/LPS-13250
ists/oss-security/2011/04/11/9 - http://issues.liferay.com/browse/LPS-12628 - http://issues.liferay.com/browse/LPS-13250 - http://openwall.com/lists/oss-security/2011/03/29/1 - http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952
CVE ID: CVE-2011-1571 State: PUBLISHED Published: 2011-05-07T19:00:00Z Last Updated: 2024-09-17T00:56:46.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://issues.liferay.com/browse/LPS-14726 - http://openwall.com/lists/oss-security/2011/04/08/5 - http://openwall.com/lists/oss-security/2011/04/11/9 - http://openwall.com/lists/oss-security/2011/03/29/1 - http://issues.liferay.com/secure/
ists/oss-security/2011/04/11/9 - http://openwall.com/lists/oss-security/2011/03/29/1 - http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952
CVE ID: CVE-2011-1572 State: PUBLISHED Published: 2011-10-04T10:00:00 Last Updated: 2024-08-06T22:28:42.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/gitolite/browse_thread/thread/797a93ec26e1dcbc?pli=1 - http://seclists.org/oss-sec/2011/q2/209 - https://github.com/sitaramc/gitolite/commit/4ce00aef84d1ff7c35f7adbbb99a6241cfda00cc - http://www.debian.org/security/2011/dsa
//github.com/sitaramc/gitolite/commit/4ce00aef84d1ff7c35f7adbbb99a6241cfda00cc - http://www.debian.org/security/2011/dsa-2215 - http://seclists.org/oss-sec/2011/q2/197 - http://www.securityfocus.com/bid/46473 - https://bugzilla.redhat.com/show_bug.cgi?id=695568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65542
CVE ID: CVE-2011-1573 State: PUBLISHED Published: 2012-02-02T02:00:00 Last Updated: 2024-08-06T22:28:41.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2011-0927.html - http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.34 - http://openwall.com/lists/oss-security/
-2011-0927.html - http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.34 - http://openwall.com/lists/oss-security/2011/04/11/12 - https://bugzilla.redhat.com/show_bug.cgi?id=695383 - http://openwall.com/lists/oss-security/2011/04/11/4 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8170c35e738d62e9919ce5b109cf4ed66e95bde
CVE ID: CVE-2011-1574 State: PUBLISHED Published: 2011-05-09T22:00:00 Last Updated: 2024-08-06T22:28:41.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file. Additional Analyst Notes: - CVE Program Container: References: - https://www.ubuntu.com/usn/USN-1148-1/ - http://openwall.com/lists/oss-security/2011/04/11/13 - http://www.gentoo.org/security/en/glsa/glsa-201203-16.xml - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622091 - https://www.sec-consult.com/files/20110407-0_libmodplug_stackoverflow.txt - http://s
/cgi-bin/bugreport.cgi?bug=622091 - https://www.sec-consult.com/files/20110407-0_libmodplug_stackoverflow.txt - http://secunia.com/advisories/44870 - http://openwall.com/lists/oss-security/2011/04/11/6 - https://bugzilla.redhat.com/show_bug.cgi?id=695420 - http://securitytracker.com/id?1025480 - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commit%3Bh=aecef259828a89bb00c2e6f78e89de7363b2237b - http://secunia.com/advisories/48434 - http://www.debian.org/security/2011/dsa-2226 - http://securityreason.com/securityalert/8243 - https://rhn.redhat.com/errata/RHSA-2011-0477.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:085
CVE ID: CVE-2011-1575 State: PUBLISHED Published: 2011-05-23T22:00:00 Last Updated: 2024-08-06T22:28:41.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/04/11/14 - http://lists.opensuse.org/opensuse-security-announce/2
erences: - http://openwall.com/lists/oss-security/2011/04/11/14 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - https://bugzilla.redhat.com/show_bug.cgi?id=683221 - http://archives.pureftpd.org/archives.cgi?100:mss:3906:201103:cpeojfkblajnpinkeadd - http://lists.opensuse.org/opensuse-updates/2011-05/msg00029.html - http://secunia.com/advisories/43988 - http://openwall.com/lists/oss-security/2011/04/11/7 - http://secunia.com/advisories/44548 - http://openwall.com/lists/oss-security/2011/04/11/8 - http://openwall.com/lists/oss-security/2011/04/11/3 - http://www.pureftpd.org/project/pure-ftpd/news - https://bugzilla.novell.com/show_bug.cgi?id=686590 - http://archi
1/3 - http://www.pureftpd.org/project/pure-ftpd/news - https://bugzilla.novell.com/show_bug.cgi?id=686590 - http://archives.pureftpd.org/archives.cgi?100:mss:3910:201103:cpeojfkblajnpinkeadd - https://github.com/jedisct1/pure-ftpd/commit/65c4d4ad331e94661de763e9b5304d28698999c4
CVE ID: CVE-2011-1576 State: PUBLISHED Published: 2011-08-31T23:00:00 Last Updated: 2024-08-06T22:28:41.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products, allows remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478. Additional Analyst Notes: - CVE Program Container: References: - http:/
n, a different vulnerability than CVE-2011-1478. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48907 - http://www.redhat.com/support/errata/RHSA-2011-1106.html - http://rhn.redhat.com/errata/RHSA-2011-0927.html - https://bugzilla.redhat.com/show_bug.cgi?id=695173 - http://www.redhat.com/support/errata/RHSA-2011-1090.html - http://www.securitytracker.com/id?1025853
CVE ID: CVE-2011-1577 State: PUBLISHED Published: 2011-05-03T19:00:00 Last Updated: 2024-08-06T22:28:41.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service (OOPS) or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on removable media. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66773 - http://securitytracker.com/id?1025355 - https://bugzilla.redhat.com/show_bug.cgi?id=695976 - h
m/vulnerabilities/66773 - http://securitytracker.com/id?1025355 - https://bugzilla.redhat.com/show_bug.cgi?id=695976 - http://openwall.com/lists/oss-security/2011/04/13/1 - http://www.securityfocus.com/bid/47343 - http://rhn.redhat.com/errata/RHSA-2011-0833.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061236.html - http://securityreason.com/securityalert/8238 - http://www.securityfocus.com/archive/1/517477/100/0/threaded - http://www.spinics.net/lists/mm-commits/msg83274.html - http://downloads.avaya.com/css/P8/documents/100145416 - http://openwall.com/lists/oss-security/2011/04/12/17
CVE ID: CVE-2011-1578 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-06T22:28:41.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66737 - http://lists.fedoraproject.
rogram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66737 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html - http://www.vupen.com/english/advisories/2011/0978 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html - http://www.securityfocus.com/bid/47354 - http://secunia.com/advisories/44142 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html - http://www.vupen.com/english/advisories/2011/1151 - http://www.debian.org/security/2011/dsa-2366 - https://bugzilla.redhat.com/show_bug.cgi?id=696360 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-April/000096.h
bugzilla.redhat.com/show_bug.cgi?id=696360 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-April/000096.html - http://www.vupen.com/english/advisories/2011/1100 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html - https://bugzilla.redhat.com/show_bug.cgi?id=695577 - http://openwall.com/lists/oss-security/2011/04/13/15 - https://bugzilla.wikimedia.org/show_bug.cgi?id=28235
CVE ID: CVE-2011-1579 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-06T22:28:41.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3 does not properly validate Cascading Style Sheets (CSS) token sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information by using the \2f\2a and \2a\2f hex strings to surround CSS comments. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html - https://bugzilla.wikimedia.org/show_
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html - https://bugzilla.wikimedia.org/show_bug.cgi?id=28450 - http://www.vupen.com/english/advisories/2011/0978 - http://www.mediawiki.org/wiki/Special:Code/MediaWiki/85856 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html - http://www.securityfocus.com/bid/47354 - http://secunia.com/advisories/44142 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html - http://www.vupen.com/english/advisories/2011/1151 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66738 - http://www.debian.org/security/2011/dsa-2366 - https://bugzilla.redhat.com/show_bug.cgi?id
d.com/vulnerabilities/66738 - http://www.debian.org/security/2011/dsa-2366 - https://bugzilla.redhat.com/show_bug.cgi?id=696360 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-April/000096.html - http://www.vupen.com/english/advisories/2011/1100 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html - https://bugzilla.redhat.com/show_bug.cgi?id=695577 - http://openwall.com/lists/oss-security/2011/04/13/15
CVE ID: CVE-2011-1580 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-06T22:28:41.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html - http://www.vupen.com/english/advisories/2011/0978 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html - http://www.securityfocus.com/bid/4
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html - http://www.securityfocus.com/bid/47354 - http://secunia.com/advisories/44142 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html - http://www.vupen.com/english/advisories/2011/1151 - http://www.debian.org/security/2011/dsa-2366 - https://bugzilla.redhat.com/show_bug.cgi?id=696360 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-April/000096.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/66739 - https://bugzilla.wikimedia.org/show_bug.cgi?id=28449 - http://www.vupen.com/english/advisories/2011/1100 - http://lists.fedoraproject.org/pipermail/package-an
g.cgi?id=28449 - http://www.vupen.com/english/advisories/2011/1100 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html - https://bugzilla.redhat.com/show_bug.cgi?id=695577 - http://openwall.com/lists/oss-security/2011/04/13/15
CVE ID: CVE-2011-1581 State: PUBLISHED Published: 2011-05-26T16:00:00Z Last Updated: 2024-08-06T22:28:41.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bond_select_queue function in drivers/net/bonding/bond_main.c in the Linux kernel before 2.6.39, when a network device with a large number of receive queues is installed but the default tx_queues setting is used, does not properly restrict queue indexes, which allows remote attackers to cause a denial of service (BUG and system crash) or possibly have unspecified other impact by sending network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/04/13/4 - h
Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/04/13/4 - http://securitytracker.com/id?1025558 - http://openwall.com/lists/oss-security/2011/04/13/16 - https://bugzilla.redhat.com/show_bug.cgi?id=696029 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fd0e435b0fe85622f167b84432552885a4856ac8
CVE ID: CVE-2011-1582 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:28:41.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1088, CVE-2011-1183, and CVE-2011-1419. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8256 - http://www.securityfocus.com/archive/1/518032/100/0/threade
References: - http://securityreason.com/securityalert/8256 - http://www.securityfocus.com/archive/1/518032/100/0/threaded - http://mail-archives.apache.org/mod_mbox/www-announce/201105.mbox/%3C4DD26E30.2060103%40apache.org%3E - http://www.vupen.com/english/advisories/2011/1255 - http://svn.apache.org/viewvc?view=revision&revision=1100832 - http://www.securityfocus.com/bid/47886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67515 - http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.14_%28released_12_May_2011%29
CVE ID: CVE-2011-1583 State: PUBLISHED Published: 2011-08-12T18:00:00 Last Updated: 2024-08-06T22:28:42.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel image that triggers (1) a buffer overflow during a decompression loop or (2) an out-of-bounds read in the loader involving unspecified length fields. Additional Analyst Notes: - CVE Program Container: References: - http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00483.html - http://rhn.redhat.com
ontainer: References: - http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00483.html - http://rhn.redhat.com/errata/RHSA-2011-0496.html - http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00491.html
CVE ID: CVE-2011-1584 State: PUBLISHED Published: 2011-06-08T10:00:00Z Last Updated: 2024-09-17T00:35:48.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: The updateFile function in inc/core/class.dc.media.php in the Media Manager in Dotclear before 2.2.3 does not properly restrict pathnames, which allows remote authenticated users to upload and execute arbitrary PHP code via the media_path or media_file parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/04/13/19 - http://openwall.com/lists/oss-security/2011/04/15/7 - http://openwall.com/li