Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-5330 State: PUBLISHED Published: 2019-06-11T20:46:05.000Z Last Updated: 2025-10-21T23:45:35.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSync firmware. For example, Nanostation5 (Air OS) is affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/14146 - https://community.ubnt.com/t5/airM
r: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/14146 - https://community.ubnt.com/t5/airMAX-General-Discussion/AirOS-Security-Exploit-Updated-Firmware/td-p/212974
CVE ID: CVE-2010-5331 State: PUBLISHED Published: 2019-07-27T21:38:21 Last Updated: 2024-08-07T04:17:10.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 2.6.34, a range check issue in drivers/gpu/drm/radeon/atombios.c could cause an off by one (buffer overflow) problem. NOTE: At least one Linux maintainer believes that this CVE is incorrectly assigned and should be rejected because the value is hard coded and are not user-controllable where it is used Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/0031c41be5c529f8329e327b63cde92ba1284842 - https://git.kernel.org/cgit/linux/kernel/git/torvalds
m/torvalds/linux/commit/0031c41be5c529f8329e327b63cde92ba1284842 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0031c41be5c529f8329e327b63cde92ba1284842 - https://mirrors.edge.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 - https://support.f5.com/csp/article/K33183814?utm_source=f5support&amp%3Butm_medium=RSS - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-5331
CVE ID: CVE-2010-5332 State: PUBLISHED Published: 2019-07-27T21:38:33 Last Updated: 2024-08-07T04:17:10.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 2.6.37, an out of bounds array access happened in drivers/net/mlx4/port.c. When searching for a free entry in either mlx4_register_vlan() or mlx4_register_mac(), and there is no free entry, the loop terminates without updating the local variable free thus causing out of array bounds access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/0926f91083f34d047abc74f1ca4fa6a9c161f7db - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/
linux/commit/0926f91083f34d047abc74f1ca4fa6a9c161f7db - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0926f91083f34d047abc74f1ca4fa6a9c161f7db - https://mirrors.edge.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - https://support.f5.com/csp/article/K04146019 - https://support.f5.com/csp/article/K04146019?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2010-5333 State: PUBLISHED Published: 2019-09-13T15:40:58 Last Updated: 2024-08-07T04:17:10.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in Integard Pro and Home before 2.0.0.9037 and 2.2.x before 2.2.0.9037 has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. An SEH-overwrite buffer overflow already existed for the vulnerable software. This CVE is to track an alternate exploitation method, utilizing an EIP-overwrite buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/14941 - https://github.com/rapid7/metasploit-fra
VE Program Container: References: - https://www.exploit-db.com/exploits/14941 - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/integard_password_bof.rb - https://www.exploit-db.com/exploits/15016 - https://purpl3f0xsec.tech/2019/08/04/osce-prep-integard.html - https://github.com/purpl3-f0x/OSCE-prep/blob/master/eip_integard.py
CVE ID: CVE-2010-5334 State: PUBLISHED Published: 2019-10-11T10:36:18 Last Updated: 2024-08-07T04:17:10.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (_c to basic/index.html) is not properly sanitised and can therefore be exploited to browse the partition where IceWarp is installed (or the whole system) and read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.gosecurity.ch/fachartikel/168-gosecurity-advisory-2010120601 - https://
CVE Program Container: References: - https://www.gosecurity.ch/fachartikel/168-gosecurity-advisory-2010120601 - https://vuldb.com/?id.142994
CVE ID: CVE-2010-5335 State: PUBLISHED Published: 2019-10-11T10:36:09 Last Updated: 2024-08-07T04:17:10.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (script to basic/minimizer/index.php) is not properly sanitised and can therefore be exploited to browse the partition where IceWarp is installed (or the whole system) and read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.gosecurity.ch/fachartikel/168-gosecurity-advisory-20101206
yst Notes: - CVE Program Container: References: - https://www.gosecurity.ch/fachartikel/168-gosecurity-advisory-2010120601 - https://vuldb.com/?id.142994
CVE ID: CVE-2010-5336 State: PUBLISHED Published: 2019-10-11T10:35:59 Last Updated: 2024-08-07T04:17:10.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the parameter username is persistent in 10.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602 - https://vuldb.com/?id.142993
CVE ID: CVE-2010-5337 State: PUBLISHED Published: 2019-10-11T10:35:50 Last Updated: 2024-08-07T04:17:10.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][controller] is non-persistent in 10.1.3 and 10.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602 - https://vuldb.com/?id.142993
CVE ID: CVE-2010-5338 State: PUBLISHED Published: 2019-10-11T10:35:42 Last Updated: 2024-08-07T04:17:10.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][action] is non-persistent in 10.1.3 and 10.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602 - https://vuldb.com/?id.142993
CVE ID: CVE-2010-5339 State: PUBLISHED Published: 2019-10-11T10:35:33 Last Updated: 2024-08-07T04:17:10.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][uid] is non-persistent in 10.1.3 and 10.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602 - https://vuldb.com/?id.142993
CVE ID: CVE-2010-5340 State: PUBLISHED Published: 2019-10-11T10:35:20 Last Updated: 2024-08-07T04:17:10.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter password is non-persistent in 10.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602 - https://vuldb.com/?id.142993
CVE ID: CVE-2011-0001 State: PUBLISHED Published: 2011-03-15T17:00:00 Last Updated: 2024-08-06T21:36:02.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown vectors related to a buffer overflow during iscsi login. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/op
m third party information. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://www.redhat.com/support/errata/RHSA-2011-0332.html - http://www.vupen.com/english/advisories/2011/0636 - http://lists.wpkg.org/pipermail/stgt/2011-March/004473.html - https://bugzilla.redhat.com/attachment.cgi?id=473779&action=diff - http://secunia.com/advisories/43706 - http://www.debian.org/security/2011/dsa-2209 - https://bugzilla.redhat.com/show_bug.cgi?id=667261 - http://secunia.com/advisories/43713 - http://www.securityfocus.com/bid/46817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66010 - http://www.se
13 - http://www.securityfocus.com/bid/46817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66010 - http://www.securitytracker.com/id?1025184
CVE ID: CVE-2011-0002 State: PUBLISHED Published: 2011-01-22T21:00:00 Last Updated: 2024-08-06T21:36:02.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-0170.html - http://secunia.com/advisories/43047 - http://securitytracker.com/id?1024960 - https://bugzilla.redhat.com/show_bug.cgi?id=643227 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053365.html
.redhat.com/show_bug.cgi?id=643227 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053365.html - http://secunia.com/advisories/42891 - http://www.securityfocus.com/bid/45791 - http://www.vupen.com/english/advisories/2011/0226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64677 - http://www.vupen.com/english/advisories/2011/0201 - http://secunia.com/advisories/42966 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - https://fedorahosted.org/libuser/browser/NEWS?rev=libuser-0.57 - http://www.vupen.com/english/advisories/2011/0184 - http://www.osvdb.org/70421 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:019 - http://lists.fedor
0184 - http://www.osvdb.org/70421 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:019 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053378.html
CVE ID: CVE-2011-0003 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-06T21:36:02.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/01/04/12 - http://www.vupen.com/english/advisories/2011/0017 - https://bugzilla.wikimedia.org/show_bug.cgi?id=26561 - http://www.osvdb.org/70272 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html - http://lists.wikimedia.org/pipermai
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html - http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-January/000093.html - http://www.openwall.com/lists/oss-security/2011/01/04/6 - http://secunia.com/advisories/42810 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64476 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html
CVE ID: CVE-2011-0004 State: PUBLISHED Published: 2011-01-10T19:18:00 Last Updated: 2024-08-06T21:36:02.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Piwik before 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/01/06/1 - http://openwall.com/lists/oss-security/2011/01/06/15 - http://www.securityfocus.com/bid/45659 - http://www.vupen.com/english/advisories/2011/0013 - http://piwik.org/blog/2011/01/professional-security-audit-in-piwik/ - http://piwik.org/blog/2011/01/piwik-
s/2011/0013 - http://piwik.org/blog/2011/01/professional-security-audit-in-piwik/ - http://piwik.org/blog/2011/01/piwik-1-1-security-advisory/ - http://piwik.org/blog/2011/01/piwik-1-1-2/ - http://secunia.com/advisories/42809 - http://osvdb.org/70310
CVE ID: CVE-2011-0005 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-06T21:36:02.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the com_search module for Joomla! 1.0.x through 1.0.15 allows remote attackers to inject arbitrary web script or HTML via the ordering parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64539 - http://yehg.net/lab/pr0js/advisories/joomla/core/%5Bjoomla_1.0.x~15%5D_cross_site_scripting - http://osvdb.org/70369 - http://www.securityfocus.com/bid/45679 - http://www.securityfocus.com/archive/1/5155
cripting - http://osvdb.org/70369 - http://www.securityfocus.com/bid/45679 - http://www.securityfocus.com/archive/1/515590/100/0/threaded - http://packetstormsecurity.org/files/view/97273/joomla1015-xss.txt - http://www.securityfocus.com/archive/1/515553/100/0/threaded
CVE ID: CVE-2011-0006 State: PUBLISHED Published: 2012-06-21T23:00:00Z Last Updated: 2024-08-06T21:36:02.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ima_lsm_rule_init function in security/integrity/ima/ima_policy.c in the Linux kernel before 2.6.37, when the Linux Security Modules (LSM) framework is disabled, allows local users to bypass Integrity Measurement Architecture (IMA) rules in opportunistic circumstances by leveraging an administrator's addition of an IMA rule for LSM. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/01/06/18 - https://bugzilla.redhat.com/show_bug.cgi?id=667912 - http://git.kern
www.openwall.com/lists/oss-security/2011/01/06/18 - https://bugzilla.redhat.com/show_bug.cgi?id=667912 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=867c20265459d30a01b021a9c1e81fb4c5832aa9 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - https://github.com/torvalds/linux/commit/867c20265459d30a01b021a9c1e81fb4c5832aa9
CVE ID: CVE-2011-0007 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-06T21:36:02.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: pimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite arbitrary files via a symlink attack on (1) pimd.dump when a USR1 signal is sent, or (2) pimd.cache when USR2 is sent. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2147 - http://secunia.com/advisories/42793 - http://www.openwall.com/lists/oss-security/2011/01/07/3 - http://www.openwall.com/lists/oss-security/2011/01/07/4 - http://secunia.com/advisories/42759 - https://exchange.xforc
- http://www.openwall.com/lists/oss-security/2011/01/07/4 - http://secunia.com/advisories/42759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64528 - http://www.securityfocus.com/bid/45715 - http://www.vupen.com/english/advisories/2011/0113 - http://www.osvdb.org/70305
CVE ID: CVE-2011-0008 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:36:02.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. NOTE: this vulnerability exists because of a CVE-2009-0034 regression. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:018
l Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:018 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053263.html - http://www.vupen.com/english/advisories/2011/0199 - https://bugzilla.redhat.com/show_bug.cgi?id=668843 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64965 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053341.html - http://www.vupen.com/english/advisories/2011/0195 - http://secunia.com/advisories/42968
CVE ID: CVE-2011-0009 State: PUBLISHED Published: 2011-01-25T18:00:00 Last Updated: 2024-08-06T21:36:02.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm for password hashes, which makes it easier for context-dependent attackers to determine cleartext passwords via a brute-force attack on the database. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2150 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=610850 - http://www.vupen.com/english/advisories/2011/0576 - https://bugzilla.redhat.com/show_bug.cgi?id=672250 - http://secun
- http://www.vupen.com/english/advisories/2011/0576 - https://bugzilla.redhat.com/show_bug.cgi?id=672250 - http://secunia.com/advisories/43438 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054740.html - http://lists.bestpractical.com/pipermail/rt-announce/2011-January/000185.html - http://osvdb.org/70661 - http://www.vupen.com/english/advisories/2011/0190 - http://www.vupen.com/english/advisories/2011/0475 - http://www.securityfocus.com/bid/45959 - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2011-0010 State: PUBLISHED Published: 2011-01-18T17:00:00 Last Updated: 2024-08-06T21:36:02.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0362 - http://www.sudo.ws/sudo/alerts/runas_group_pw.html - http://secunia.com/advisories/43068 - http://security.gentoo.org/glsa/glsa-201203-0
ws/sudo/alerts/runas_group_pw.html - http://secunia.com/advisories/43068 - http://security.gentoo.org/glsa/glsa-201203-06.xml - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593654 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:018 - http://www.sudo.ws/repos/sudo/rev/07d1b0ce530e - http://www.vupen.com/english/advisories/2011/0089 - http://www.vupen.com/english/advisories/2011/0212 - http://secunia.com/advisories/42949 - http://openwall.com/lists/oss-security/2011/01/11/3 - http://www.vupen.com/english/advisories/2011/0182 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053263.html - http://www.vupen.com/engl
11/0182 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053263.html - http://www.vupen.com/english/advisories/2011/0199 - http://www.ubuntu.com/usn/USN-1046-1 - http://www.redhat.com/support/errata/RHSA-2011-0599.html - http://openwall.com/lists/oss-security/2011/01/12/1 - http://www.osvdb.org/70400 - http://secunia.com/advisories/42886 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64636 - http://www.securityfocus.com/bid/45774 - http://openwall.com/lists/oss-security/2011/01/12/3 - http://secunia.com/advisories/43282 - http://lists.fedoraproject.org/pipermail/package-announce/2011-
ity/2011/01/12/3 - http://secunia.com/advisories/43282 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053341.html - http://www.sudo.ws/repos/sudo/rev/fe8a94f96542 - http://www.vupen.com/english/advisories/2011/0195 - https://bugzilla.redhat.com/show_bug.cgi?id=668879 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=609641 - http://secunia.com/advisories/42968
CVE ID: CVE-2011-0011 State: PUBLISHED Published: 2012-06-21T15:00:00 Last Updated: 2024-08-06T21:36:02.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43733 - http://www.openwall.com/lists/oss-security/2011/01/11/1 - http://www.openwall.com/lists/oss-security/2011/01/12/2 - http://secunia.com/advisories/44393 - http://www.openwall.com/lists/oss-security/2011/01/10/3 - http://rhn.redhat.com/errata/RHSA-2011-0345.html - ht
/44393 - http://www.openwall.com/lists/oss-security/2011/01/10/3 - http://rhn.redhat.com/errata/RHSA-2011-0345.html - http://www.osvdb.org/70992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65215 - http://secunia.com/advisories/42830 - http://ubuntu.com/usn/usn-1063-1 - https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/697197 - http://secunia.com/advisories/43272
CVE ID: CVE-2011-0012 State: PUBLISHED Published: 2011-04-18T17:00:00Z Last Updated: 2024-08-06T21:36:02.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025304 - http://www.redhat.com/support/errata/RHSA-2011-0426.html - http://www.vupen.com/english/advisories/2011/0899 - https://bugzilla.redhat.com/show_bug.cgi?id=639869 - http://www.securityfocus.com/bid/47269
CVE ID: CVE-2011-0013 State: PUBLISHED Published: 2011-02-18T23:00:00 Last Updated: 2024-08-06T21:36:02.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12878 - http://www.vupen.com/english/advisories/2011/0376 - https