Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Own competition at CanSecWest 2011. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0654 - http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates.html - http://secunia.com/advisories/44151 - http://www.securityfocus.com/bid/46849 - http://www.securitytracker.com/id?1025212 - http://support.apple.com/kb/HT4596 - http://osvdb.org/71182 - http://www.debian.org/security/2011/dsa-2192 - http://lists.apple.com/archives/security-announce/2011//Apr/msg00002.html - http://lists.apple.com/archives/security-announce/2011//Apr/msg00001.html - http://www.zerodayinitiative.com/advisories/ZDI-11-104 - http://www.blackbe
/security-announce/2011//Apr/msg00001.html - http://www.zerodayinitiative.com/advisories/ZDI-11-104 - http://www.blackberry.com/btsc/KB26132 - http://www.vupen.com/english/advisories/2011/0984 - http://www.vupen.com/english/advisories/2011/0645 - http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 - http://secunia.com/advisories/43782 - http://support.apple.com/kb/HT4607 - http://www.vupen.com/english/advisories/2011/0671 - http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html - http://www.zdnet.com/blog/security/pwn2own-2011-blackberry-falls-to-webkit-browser-attack/8401 - http://secunia.com/advisories/43748 - http://www.securityfocus.com/archive/1/517513/100/0/t
webkit-browser-attack/8401 - http://secunia.com/advisories/43748 - http://www.securityfocus.com/archive/1/517513/100/0/threaded - http://secunia.com/advisories/44154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66052 - http://secunia.com/advisories/43735
CVE ID: CVE-2011-1291 State: PUBLISHED Published: 2011-03-25T19:00:00 Last Updated: 2024-08-06T22:21:34.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "buffer error." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0765 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14544 - http://secunia.com/advisories/43859 - http://www.securityfocus.com/bid/47029 - http://googlechro
re.oval%3Adef%3A14544 - http://secunia.com/advisories/43859 - http://www.securityfocus.com/bid/47029 - http://googlechromereleases.blogspot.com/2011/03/stable-channel-update.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/66298 - http://code.google.com/p/chromium/issues/detail?id=72517
CVE ID: CVE-2011-1292 State: PUBLISHED Published: 2011-03-25T19:00:00 Last Updated: 2024-08-06T22:21:34.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0765 - http://www.debian.org/security/2011/dsa-2245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66299 - http://secunia.com/advisories/43859 - http://www.securityfocus.com/bid/47029 - http://goog
d.com/vulnerabilities/66299 - http://secunia.com/advisories/43859 - http://www.securityfocus.com/bid/47029 - http://googlechromereleases.blogspot.com/2011/03/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=73216 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13876
CVE ID: CVE-2011-1293 State: PUBLISHED Published: 2011-03-25T19:00:00 Last Updated: 2024-08-06T22:21:33.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the HTMLCollection implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0765 - http://www.debian.org/security/2011/dsa-2245 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Secu
T4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://secunia.com/advisories/43859 - http://www.securityfocus.com/bid/47029 - http://googlechromereleases.blogspot.com/2011/03/stable-channel-update.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/66300 - http://support.apple.com/kb/HT4999 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14367 - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html - http://code.google.com/p/chromium/issues/detail?id=73595
CVE ID: CVE-2011-1294 State: PUBLISHED Published: 2011-03-25T19:00:00 Last Updated: 2024-08-06T22:21:33.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 10.0.648.204 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0765 - http://code.google.com/p/chromium/issues/detail?id=74562 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14376 - htt
ues/detail?id=74562 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66301 - http://secunia.com/advisories/43859 - http://www.securityfocus.com/bid/47029 - http://googlechromereleases.blogspot.com/2011/03/stable-channel-update.html
CVE ID: CVE-2011-1295 State: PUBLISHED Published: 2011-03-25T19:00:00 Last Updated: 2024-08-06T22:21:34.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not properly handle node parentage, which allows remote attackers to cause a denial of service (DOM tree corruption), conduct cross-site scripting (XSS) attacks, or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0765 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://secunia.com/adviso
sories/2011/0765 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://secunia.com/advisories/43859 - http://www.securityfocus.com/bid/47029 - http://googlechromereleases.blogspot.com/2011/03/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14269 - http://support.apple.com/kb/HT4999 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66302 - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html - http://code.google.com/p/chromium/issues/detail?id=74991
CVE ID: CVE-2011-1296 State: PUBLISHED Published: 2011-03-25T19:00:00 Last Updated: 2024-08-06T22:21:33.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0765 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http
rity-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://secunia.com/advisories/43859 - http://www.securityfocus.com/bid/47029 - http://googlechromereleases.blogspot.com/2011/03/stable-channel-update.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/66303 - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT4808 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14636 - http://code.google.com/p/chromium/issues/detail?id=75170 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-1298 State: PUBLISHED Published: 2019-11-06T18:47:56 Last Updated: 2024-08-06T22:21:34.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore::GraphicsContext::fillRect function. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=75155 - http://trac.webkit.org/changeset/80579 - http://trac.webkit.org/changeset/81431
CVE ID: CVE-2011-1300 State: PUBLISHED Published: 2011-04-15T19:00:00 Last Updated: 2024-08-06T22:21:34.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome before 10.0.648.205 on Windows, allows remote attackers to execute arbitrary code via unspecified vectors, related to an "off-by-three" error. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/1006 - http://code.goog
alyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/1006 - http://code.google.com/p/angleproject/source/detail?r=611 - http://www.securitytracker.com/id?1025377 - http://code.google.com/p/chromium/issues/detail?id=70070 - http://secunia.com/advisories/44141 - http://www.securityfocus.com/bid/47377 - https://bugzilla.mozilla.org/show_bug.cgi?id=623791 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66766 - http://www.mozilla.org/security/announce/2011/mfsa2011-17.html - http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14466
CVE ID: CVE-2011-1301 State: PUBLISHED Published: 2011-04-15T19:00:00 Last Updated: 2024-08-06T22:21:34.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/1006 - http://code.google.com/p/chromium/issues/detail?id=75629 - http://www.securitytracker.com/id?1025377 - http://secunia.com/advisories/44141 - http://www.securityfocus.com/bid/47377 - http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html -
- http://www.securityfocus.com/bid/47377 - http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/66767 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14509
CVE ID: CVE-2011-1302 State: PUBLISHED Published: 2011-04-15T19:00:00 Last Updated: 2024-08-06T22:21:34.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/1006 - http://www.securitytracker.com/id?1025377 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14737 - http://secunia.com/advisories/44141 - http://www.securityfocus.com/bid/47377 - https://exchange.xforce.ibmcloud.com/vulner
tp://secunia.com/advisories/44141 - http://www.securityfocus.com/bid/47377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66768 - http://code.google.com/p/chromium/issues/detail?id=78524 - http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html
CVE ID: CVE-2011-1303 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:21:34.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 11.0.696.57 does not properly handle floating objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer." Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=61502 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13705
CVE ID: CVE-2011-1304 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:21:34.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to bypass the pop-up blocker via vectors related to plug-ins. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14399 - http://code.google.com/p/chromium/issues/detail?id=70538 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html
CVE ID: CVE-2011-1305 State: PUBLISHED Published: 2011-05-03T22:00:00 Last Updated: 2024-08-06T22:21:34.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Google Chrome before 11.0.696.57 on Linux and Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to linked lists and a database. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14305 - http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html - http://code.google.com/p/chromium/issues/detail?id=70589
CVE ID: CVE-2011-1306 State: PUBLISHED Published: 2011-03-08T21:00:00 Last Updated: 2024-08-06T22:21:34.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Scratchpad application in Google Chrome OS before R10 0.10.156.46 Beta has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/03/chrome-os-beta-channel-update.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65991
CVE ID: CVE-2011-1307 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-17T02:01:18.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log directory, which allows local users to have unintended access to log files via standard filesystem operations, a different vulnerability than CVE-2009-1173. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM20021 - http://www.securityfocus.com/bid/46736 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www.vupen.com/english/adviso
ityfocus.com/bid/46736 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www.vupen.com/english/advisories/2011/0564
CVE ID: CVE-2011-1308 State: PUBLISHED Published: 2011-03-08T21:00:00 Last Updated: 2024-08-06T22:21:34.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM20393 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65992 - http://www.securityfocus.com/bid/46736 - http://www-01.ibm.com/support/docview
orce.ibmcloud.com/vulnerabilities/65992 - http://www.securityfocus.com/bid/46736 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www.vupen.com/english/advisories/2011/0564
CVE ID: CVE-2011-1309 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-17T04:03:50.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Plug-in component in IBM WebSphere Application Server (WAS) before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM22860 - http://www.securityfocus.com/bid/46736 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www.vupen.com/english/advisories/2011/0564
CVE ID: CVE-2011-1310 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-16T16:28:37.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administrative Scripting Tools component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when tracing is enabled, places wsadmin command parameters into the (1) wsadmin.traceout and (2) trace.log files, which allows local users to obtain potentially sensitive information by reading these files. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM18736 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2011-1311 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-16T22:55:32.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security component in IBM WebSphere Application Server (WAS) before 7.0.0.15, when a J2EE 1.4 application is used, determines the security role mapping on the basis of the ibm-application-bnd.xml file instead of the intended ibm-application-bnd.xmi file, which might allow remote authenticated users to gain privileges in opportunistic circumstances by requesting a service. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM25455 - http://www-01.ibm.com/suppo
Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM25455 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2011-1312 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-17T02:16:02.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended access restrictions by mapping a (1) user or (2) group to an administrator role. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PK88606 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2011-1313 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-16T20:01:53.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote backend IIOP servers to cause a denial of service (S0C4 ABEND and storage corruption) by rejecting IIOP requests at opportunistic time instants, as demonstrated by requests associated with an ORB_Request::getACRWorkElementPtr function call. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM17170 - http://www-01.ibm.com/support/docvi
Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM17170 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2011-1314 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-17T00:31:53.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Service Integration Bus (SIB) messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (daemon hang) by performing close operations via network connections to a queue manager. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM19834
CVE ID: CVE-2011-1315 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-17T03:42:43.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via network connections associated with a NULL return value from a synchronous JMS receive call. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM23626 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2011-1316 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-17T02:56:44.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (worker thread exhaustion and UDP messaging outage) by sending many UDP messages. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM23115 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2011-1317 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-16T20:52:42.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by sending many JSP requests that trigger large responses. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM19500 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2011-1318 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-17T01:55:58.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in org.apache.jasper.runtime.JspWriterImpl.response in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by accessing a JSP page of an application that is repeatedly stopped and restarted. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM23029 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2011-1319 State: PUBLISHED Published: 2011-03-08T21:00:00Z Last Updated: 2024-09-16T18:29:37.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote authenticated users to cause a denial of service (memory consumption) by using a Lightweight Third-Party Authentication (LTPA) token for authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM18644 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463