Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3157 State: PUBLISHED Published: 2011-10-19T15:00:00 Last Updated: 2024-08-06T23:22:27.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1225. Additional Analyst Notes: - CVE Program Container: References: - https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c03058866 - http://securitytracker.com/id?1026195
CVE ID: CVE-2011-3158 State: PUBLISHED Published: 2011-10-19T15:00:00 Last Updated: 2024-08-06T23:22:27.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1226. Additional Analyst Notes: - CVE Program Container: References: - https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c03058866 - http://securitytracker.com/id?1026195
CVE ID: CVE-2011-3159 State: PUBLISHED Published: 2011-10-19T15:00:00 Last Updated: 2024-08-06T23:22:27.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1227. Additional Analyst Notes: - CVE Program Container: References: - https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c03058866 - http://securitytracker.com/id?1026195
CVE ID: CVE-2011-3160 State: PUBLISHED Published: 2011-10-19T15:00:00 Last Updated: 2024-08-06T23:22:27.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1228. Additional Analyst Notes: - CVE Program Container: References: - https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c03058866 - http://securitytracker.com/id?1026195
CVE ID: CVE-2011-3161 State: PUBLISHED Published: 2011-10-19T15:00:00 Last Updated: 2024-08-06T23:22:27.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1229. Additional Analyst Notes: - CVE Program Container: References: - https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c03058866 - http://securitytracker.com/id?1026195
CVE ID: CVE-2011-3162 State: PUBLISHED Published: 2011-10-19T15:00:00 Last Updated: 2024-08-06T23:22:27.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1296. Additional Analyst Notes: - CVE Program Container: References: - https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c03058866 - http://securitytracker.com/id?1026195
CVE ID: CVE-2011-3163 State: PUBLISHED Published: 2011-10-23T10:00:00 Last Updated: 2024-08-06T23:22:27.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP MFP Digital Sending Software 4.9x through 4.91.21 allows local users to obtain sensitive workflow-metadata information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=131914362310845&w=2 - http://securityreason.com/securityalert/8479 - http://www.securityfocus.com/bid/50297 - http://marc.info/?l=bugtraq&m=131914362310845&w=2 - http://secunia.com/advisories/46532
CVE ID: CVE-2011-3164 State: PUBLISHED Published: 2011-11-04T21:00:00 Last Updated: 2024-08-06T23:22:27.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP-UX Containers (formerly HP-UX Secure Resource Partitions (SRP)) A.03.00, A.03.00.002, and A.03.01, when running with patch PHKL_42310, allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50396 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14429 - http://secunia.com/advisories/46617 - http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?do
Adef%3A14429 - http://secunia.com/advisories/46617 - http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03057703&ac.admitted=1319830121212.876444892.199480143 - http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03057703&ac.admitted=1319830121212.876444892.199480143 - http://www.securitytracker.com/id?1026250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71001
CVE ID: CVE-2011-3165 State: PUBLISHED Published: 2011-11-02T17:00:00 Last Updated: 2024-08-06T23:22:27.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1208. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026260 - http://marc.info/?l=bugtraq&m=132017799623289&w=2 - http://securityreason.com/securityalert/8484 - http://marc.info/?l=bugtraq&m=132017799623289&w=2
CVE ID: CVE-2011-3166 State: PUBLISHED Published: 2011-11-02T17:00:00 Last Updated: 2024-08-06T23:22:27.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1209. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026260 - http://marc.info/?l=bugtraq&m=132017799623289&w=2 - http://securityreason.com/securityalert/8484 - http://marc.info/?l=bugtraq&m=132017799623289&w=2
CVE ID: CVE-2011-3167 State: PUBLISHED Published: 2011-11-02T17:00:00 Last Updated: 2024-08-06T23:22:27.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026260 - http://marc.info/?l=bugtraq&m=132017799623289&w=2 - http://securityreason.com/securityalert/8484 - http://marc.info/?l=bugtraq&m=132017799623289&w=2
CVE ID: CVE-2011-3168 State: PUBLISHED Published: 2011-11-07T20:00:00 Last Updated: 2024-08-06T23:22:27.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the POP and IMAP service implementations in HP TCP/IP Services 5.6 and 5.7 for OpenVMS allows remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01908983 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01908983 - http://www.securitytracker.com/id?1026279
CVE ID: CVE-2011-3169 State: PUBLISHED Published: 2011-11-07T20:00:00 Last Updated: 2024-08-06T23:22:27.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SMTP service implementation in HP TCP/IP Services 5.6 and 5.7 for OpenVMS allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01915145 - http://www.securitytracker.com/id?1026277 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01915145
CVE ID: CVE-2011-3170 State: PUBLISHED Published: 2011-08-19T17:00:00 Last Updated: 2024-08-06T23:22:27.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than CVE-2011-2896. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1207-1 - https://bugzilla.redhat.com/show_bug.cgi?id=727800 - http://www.debian.org/security/2011/dsa-2354 - http://secunia.
-1 - https://bugzilla.redhat.com/show_bug.cgi?id=727800 - http://www.debian.org/security/2011/dsa-2354 - http://secunia.com/advisories/46024 - http://www.securitytracker.com/id?1025980 - http://security.gentoo.org/glsa/glsa-201207-10.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2011:146 - http://secunia.com/advisories/45796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69380 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:147 - http://www.securityfocus.com/bid/49323 - http://cups.org/str.php?L3914
CVE ID: CVE-2011-3171 State: PUBLISHED Published: 2011-11-04T21:00:00 Last Updated: 2024-08-06T23:22:27.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49541 - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00015.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69686
nsuse.org/opensuse-security-announce/2011-09/msg00015.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69686 - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00016.html
CVE ID: CVE-2011-3172 State: PUBLISHED Published: 2018-06-08T13:00:00Z Last Updated: 2024-09-17T04:28:45.768Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: SUSE Products: SUSE Linux Enterprise Problem Types: CWE-304 Description: A vulnerability in pam_modules of SUSE Linux Enterprise allows attackers to log into accounts that should have been disabled. Affected releases are SUSE Linux Enterprise: versions prior to 12. Additional Analyst Notes: - CVE Program Container: References: - https://build.opensuse.org/request/show/80346 - https://bugzilla.suse.com/show_bug.cgi?id=707645
CVE ID: CVE-2011-3173 State: PUBLISHED Published: 2011-11-30T02:00:00Z Last Updated: 2024-09-16T17:33:47.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the GetDriverSettings function in nipplib.dll in the iPrint client in Novell Open Enterprise Server 2 (aka OES2) SP3 allows remote attackers to execute arbitrary code via a long (1) hostname or (2) port field. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5117031.html - https://bugzilla.novell.com/show_bug.cgi?id=707730 - http://www.zerodayinitiative.com/advisories/ZDI-11-309/ - http://support.novell.com/d
ovell.com/show_bug.cgi?id=707730 - http://www.zerodayinitiative.com/advisories/ZDI-11-309/ - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5117030.html - http://www.novell.com/support/viewContent.do?externalId=7009676
CVE ID: CVE-2011-3174 State: PUBLISHED Published: 2012-07-26T22:00:00Z Last Updated: 2024-09-16T19:15:18.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary code via a long bstrReplaceText parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7009570 - http://www.zerodayinitiative.com/advisories/ZDI-11-319/
CVE ID: CVE-2011-3175 State: PUBLISHED Published: 2012-04-09T20:00:00 Last Updated: 2024-08-06T23:22:27.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x6c request. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=7010044 - http://download.novell.com/Download?buildid=rs4B5jhWKf8~ - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?
n_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=973 - http://www.exploit-db.com/exploits/19958 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5127930.html
CVE ID: CVE-2011-3176 State: PUBLISHED Published: 2012-04-09T20:00:00 Last Updated: 2024-08-06T23:22:27.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x4c request. Additional Analyst Notes: - CVE Program Container: References: - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=974 - http://www.novell.com/support/viewContent.do?externalId=7010044 - http://download.novell.com/Download?buildid=rs4B5j
4 - http://www.novell.com/support/viewContent.do?externalId=7010044 - http://download.novell.com/Download?buildid=rs4B5jhWKf8~ - http://www.exploit-db.com/exploits/19959 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5127930.html
CVE ID: CVE-2011-3177 State: PUBLISHED Published: 2017-09-08T18:00:00 Last Updated: 2024-08-06T23:22:27.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yast/yast-core/commit/7fe2e3df308b8b6a901cb2cfd60f398df53219de - https://bugzilla.suse.com/show_bug.cgi?id=713661
CVE ID: CVE-2011-3178 State: PUBLISHED Published: 2018-03-20T18:00:00Z Last Updated: 2024-09-16T20:47:59.849Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: opensuse Products: openbuildservice Problem Types: shell code injection, CWE-78 Description: In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openSUSE/open-build-service/commit/cbfe2ed36dd77c0843702935dea7f914bb599201 - https://bugzilla.suse.com/show_bug.cgi?id=723788
CVE ID: CVE-2011-3179 State: PUBLISHED Published: 2011-12-08T11:00:00Z Last Updated: 2024-09-16T19:24:47.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read from arbitrary memory locations via a crafted command. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=7009634 - https://bugzilla.novell.com/show_bug.cgi?id=712158
CVE ID: CVE-2011-3180 State: PUBLISHED Published: 2014-04-16T18:00:00 Last Updated: 2024-08-06T23:22:27.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in the path of an overlay file, related to chown. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/11/02/4 - https://github.com/openSUSE/kiwi/commit/f0f74b3f6ac6d47f7919aa9db380c0ad41ffe55f# - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00015.html
CVE ID: CVE-2011-3181 State: PUBLISHED Published: 2011-08-29T17:00:00 Last Updated: 2024-08-06T23:22:27.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x before 3.3.10.4 and 3.4.x before 3.4.4 allow remote attackers to inject arbitrary web script or HTML via a (1) table name, (2) column name, or (3) index name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45990 - http://www.phpmyadmin.net/home_page/security/PMASA-2011-13.php - http://secunia.com/advisories/45709 - http://www.securityfocus.com/bid/49306 - http://www.debian.org/security
1-13.php - http://secunia.com/advisories/45709 - http://www.securityfocus.com/bid/49306 - http://www.debian.org/security/2012/dsa-2391 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065824.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065829.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:158 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065854.html - https://bugzilla.redhat.com/show_bug.cgi?id=733475
CVE ID: CVE-2011-3182 State: PUBLISHED Published: 2011-08-25T14:00:00 Last Updated: 2024-08-06T23:22:27.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger a buffer overflow by leveraging the ability to provide an arbitrary value for a function argument, related to (1) ext/curl/interface.c, (2) ext/date/lib/parse_date.c, (3) ext/date/lib/parse_iso_intervals.c, (4) ext/date/lib/parse_tz.c, (5) ext/date/lib/timelib.c, (6) ext/pdo_odbc/pdo_odbc
) ext/date/lib/parse_iso_intervals.c, (4) ext/date/lib/parse_tz.c, (5) ext/date/lib/timelib.c, (6) ext/pdo_odbc/pdo_odbc.c, (7) ext/reflection/php_reflection.c, (8) ext/soap/php_sdl.c, (9) ext/xmlrpc/libxmlrpc/base64.c, (10) TSRM/tsrm_win32.c, and (11) the strtotime function. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:165 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69430 - http://securityreason.com/achievement_securityalert/101 - http://www.openwall.com/lists/oss-security/2011/08/22/9 - htt
http://securityreason.com/achievement_securityalert/101 - http://www.openwall.com/lists/oss-security/2011/08/22/9 - http://www.securityfocus.com/bid/49249 - http://marc.info/?l=full-disclosure&m=131373057621672&w=2
CVE ID: CVE-2011-3183 State: PUBLISHED Published: 2020-01-14T20:08:24 Last Updated: 2024-08-06T23:22:27.751Z Vendors: Concrete CMS Products: Concrete CMS Problem Types: XSS Description: A Cross-Site Scripting (XSS) vulnerability exists in the rcID parameter in Concrete CMS 5.4.1.1 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/08/22/11
CVE ID: CVE-2011-3184 State: PUBLISHED Published: 2011-08-29T17:00:00 Last Updated: 2024-08-06T23:22:27.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service (incorrect memory access and application crash) via vectors involving a crafted server message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064943.html - http://www.openwall.com/lists/oss-security/2011/08/22/10 - https://o
ipermail/package-announce/2011-August/064943.html - http://www.openwall.com/lists/oss-security/2011/08/22/10 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18284 - http://developer.pidgin.im/viewmtn/revision/diff/5c2dba4a7e2e76b76e7f472b88953a4316706d43/with/16af0661899a978b4fedc1c165965b85009013d1/libpurple/protocols/msn/httpconn.c - https://exchange.xforce.ibmcloud.com/vulnerabilities/69341 - http://pidgin.im/news/security/?id=54 - http://secunia.com/advisories/45663 - http://www.openwall.com/lists/oss-security/2011/08/22/4 - http://www.openwall.com/lists/oss-security/2011/08/22/7 - http://lists.fedoraproject.org/pipermail/package-announce/2011-Sep
://www.openwall.com/lists/oss-security/2011/08/22/7 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065190.html - http://secunia.com/advisories/45916 - http://www.openwall.com/lists/oss-security/2011/08/22/12 - https://bugzilla.redhat.com/show_bug.cgi?id=732405 - http://www.securityfocus.com/bid/49268 - http://securitytracker.com/id?1025961 - http://developer.pidgin.im/viewmtn/revision/info/16af0661899a978b4fedc1c165965b85009013d1
CVE ID: CVE-2011-3185 State: PUBLISHED Published: 2011-08-29T17:00:00 Last Updated: 2024-08-06T23:22:27.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/69342 - http://www.openwall.com/lists/oss-security/2011/08/22/10 - http://www.securityfocus.com/archive/1/519391/100/0/threaded - http://developer.pidgin.im/viewmtn/revision/info/5749f9193063800d27bef75c2388f6f9cc2f7f37 - http://pidgin.im/news/security/?id=55 - http://s
gin.im/viewmtn/revision/info/5749f9193063800d27bef75c2388f6f9cc2f7f37 - http://pidgin.im/news/security/?id=55 - http://secunia.com/advisories/45663 - http://www.openwall.com/lists/oss-security/2011/08/22/7 - http://www.openwall.com/lists/oss-security/2011/08/22/ - http://www.openwall.com/lists/oss-security/2011/08/22/12 - http://www.insomniasec.com/advisories/ISVA-110822.1.htm - http://developer.pidgin.im/viewmtn/revision/diff/29484df15413fe3bbd21bbfcef26a55362055a81/with/5749f9193063800d27bef75c2388f6f9cc2f7f37/pidgin/gtkutils.c - http://www.securityfocus.com/bid/49268 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18324 - http://securitytracker.com
ttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18324 - http://securitytracker.com/id?1025961
CVE ID: CVE-2011-3186 State: PUBLISHED Published: 2011-08-29T18:00:00 Last Updated: 2024-08-06T23:22:27.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in actionpack/lib/action_controller/response.rb in Ruby on Rails 2.3.x before 2.3.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the Content-Type header. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/17/1 - http://www.openwall.com/lists/oss-security/2011/08/22/13 - https://bugzilla.redhat.com/show_bug.cgi?id=732156 - http://lists.fedoraproject.org/pipermail/package-anno