deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-3547
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Networking.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2
CVE: CVE-2011-3548
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to AWT.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2
CVE: CVE-2011-3549
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Swing.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2
CVE: CVE-2011-3550
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to AWT.
CVSS Score: 7.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2
CVE: CVE-2011-3551
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2
CVE: CVE-2011-3552
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote attackers to affect integrity via unknown vectors related to Networking.
CVSS Score: 2.6 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2
CVE: CVE-2011-3553
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote authenticated users to affect confidentiality, related to JAXWS.
CVSS Score: 3.5 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2
CVE: CVE-2011-3554
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2558&w=2
CVE: CVE-2011-3555
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, and 7 allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity and availability via unknown vectors.
CVSS Score: 6.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2612&w=2; http://osvdb.org/76508
CVE: CVE-2011-3556
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3557.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2
CVE: CVE-2011-3557
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3556.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html
CVE: CVE-2011-3558
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to HotSpot.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2612&w=2
CVE: CVE-2011-3560
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity, related to JSSE.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html
CVE: CVE-2011-3561
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
CVSS Score: 1.8 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2
CVE: CVE-2011-2584
Published: 2011-10-20
Description: Cisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1) allows remote attackers to access the (1) Encoders and Pull Configurations, (2) Push Configurations, (3) Video Encoding Formats, and (4) Transcoding administration pages, and cause a denial of service (live event outage) or obtain potentially sensitive information, via unspecified vectors, aka Bug ID CSCto73758.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111019-sns; http://www.securityfocus.com/bid/50282; https://exchange.xforce.ibmcloud.com/vulnerabilities/70757
CVE: CVE-2011-2585
Published: 2011-10-20
Description: Cisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1) allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111019-sns; http://www.securityfocus.com/bid/50285; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111019-sns
CVE: CVE-2011-3310
Published: 2011-10-20
Description: The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service Monitor, Cisco Unified Operations Manager, CiscoWorks QoS Policy Manager, and CiscoWorks Voice Manager, allows remote authenticated users to execute arbitrary commands via a crafted URL, aka Bug IDs CSCtq48990, CSCtq63992, CSCtq64011, CSCtq64019, CSCtr23090, and CSCtt25535.
CVSS Score: 9.0 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/46533; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111019-cs; http://www.securityfocus.com/bid/50284
CVE: CVE-2011-1527
Published: 2011-10-20
Description: The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629558; http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt; http://www.kb.cert.org/vuls/id/659251
CVE: CVE-2011-1528
Published: 2011-10-20
Description: The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors, related to the locked_check_p function.  NOTE: the Berkeley DB vector is covered by CVE-2011-4151.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.html; http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt; http://www.kb.cert.org/vuls/id/659251
CVE: CVE-2011-1529
Published: 2011-10-20
Description: The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger certain process_as_req errors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.html; http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt; http://www.kb.cert.org/vuls/id/659251
CVE: CVE-2011-4151
Published: 2011-10-20
Description: The krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4, when the db2 (aka Berkeley DB) back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors, a different vulnerability than CVE-2011-1528.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt; http://www.kb.cert.org/vuls/id/659251; https://exchange.xforce.ibmcloud.com/vulnerabilities/70891
CVE: CVE-2009-5102
Published: 2011-10-21
Description: SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL commands via the bpe_nid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/7761/; http://www.exploit-db.com/exploits/7761/
CVE: CVE-2009-5103
Published: 2011-10-21
Description: Cross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web script or HTML via the email variable.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.exploit-db.com/exploits/7761/; http://www.exploit-db.com/exploits/7761/
CVE: CVE-2010-4966
Published: 2011-10-21
Description: Cross-site scripting (XSS) vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrary web script or HTML via the query parameter in a Search action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://1337day.com/exploits/13067; http://1337day.com/exploits/13067
CVE: CVE-2010-4967
Published: 2011-10-21
Description: SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL commands via the artID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/65411; http://secunia.com/advisories/40152; http://www.exploit-db.com/exploits/13815
CVE: CVE-2011-0290
Published: 2011-10-21
Description: The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log into arbitrary user accounts associated with the same organization, and send messages, read messages, read contact lists, or cause a denial of service (login unavailability), via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/46370; http://securitytracker.com/id?1026179; http://www.blackberry.com/btsc/KB28524
CVE: CVE-2011-3340
Published: 2011-10-21
Description: SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://census-labs.com/news/2011/10/03/netvolution-referer-SQLi/; http://secunia.com/advisories/46255; http://www.securityfocus.com/archive/1/519984/100/0/threaded
CVE: CVE-2011-4063
Published: 2011-10-21
Description: chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service (daemon crash) via a malformed request.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://downloads.digium.com/pub/security/AST-2011-012.html; http://secunia.com/advisories/46420; http://securityreason.com/securityalert/8478
CVE: CVE-2011-2677
Published: 2011-10-21
Description: Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified vectors related to manipulation of a URL.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://cs.cybozu.co.jp/information/20111005notice01.php; http://jvn.jp/en/jp/JVN84838479/index.html; http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000079.html
CVE: CVE-2011-2713
Published: 2011-10-21
Description: oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068160.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068198.html; http://lists.opensuse.org/opensuse-updates/2011-10/msg00019.html
CVE: CVE-2011-3988
Published: 2011-10-21
Description: SQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://jvn.jp/en/jp/JVN44496332/index.html; http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000087.html; http://osvdb.org/76399
CVE: CVE-2011-4024
Published: 2011-10-21
Description: Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/76135; http://secunia.com/advisories/46311; http://securityreason.com/securityalert/8477
CVE: CVE-2011-4026
Published: 2011-10-21
Description: SQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/17946; http://www.securityfocus.com/bid/50025; https://exchange.xforce.ibmcloud.com/vulnerabilities/70432
CVE: CVE-2011-1640
Published: 2011-10-22
Description: The ethernet-lldp component in Cisco IOS 12.2 before 12.2(33)SXJ1 does not properly support a large number of LLDP Management Address (MA) TLVs, which allows remote attackers to cause a denial of service (device crash) via crafted LLDPDUs, aka Bug ID CSCtj22354.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXJ.html; http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXJ.html
CVE: CVE-2011-2042
Published: 2011-10-22
Description: The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and database port via an unspecified request to UDP port 2638, aka Bug ID CSCsk35018.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_common_services_software/3.3/release/notes/cs33rel.html; http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_common_services_software/3.3/release/notes/cs33rel.html
CVE: CVE-2011-2057
Published: 2011-10-22
Description: The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle (1) a loop between a dot1x enabled port and an open-authentication dot1x enabled port and (2) a loop between a dot1x enabled port and a non-dot1x port, which allows remote attackers to cause a denial of service (traffic storm) via unspecified vectors that trigger many Spanning Tree Protocol (STP) Bridge Protocol Data Unit (BPDU) frames, aka Bug ID CSCtq36327.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXI_rebuilds.html; http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXI_rebuilds.html
CVE: CVE-2011-2058
Published: 2011-10-22
Description: The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle an external loop between a pair of dot1x enabled ports, which allows remote attackers to cause a denial of service (traffic storm) via unspecified vectors that trigger many unicast EAPoL Protocol Data Units (PDUs), aka Bug ID CSCtq36336.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXI_rebuilds.html; http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXI_rebuilds.html
CVE: CVE-2011-2059
Published: 2011-10-22
Description: The ipv6 component in Cisco IOS before 15.1(4)M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet containing a Hop-by-Hop (HBH) extension header (EH) with a 0x0c01050c value in the PadN option data, aka Bug ID CSCtq02219.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://blogs.cisco.com/security/1999tcp-redux-the-ipv6-flavor; http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=36606&signatureSubId=0; http://blogs.cisco.com/security/1999tcp-redux-the-ipv6-flavor
CVE: CVE-2011-2060
Published: 2011-10-22
Description: The platform-sw component on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 before 8.2(5.3), 8.3 before 8.3(2.20), and 8.4 before 8.4(2.1) does not properly handle non-ASCII characters in an interface description, which allows local users to cause a denial of service (reload without configuration) via a crafted description, aka Bug ID CSCtq50523.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html; http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html
CVE: CVE-2011-1478
Published: 2011-10-23
Description: The napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation in the Linux kernel before 2.6.38 does not reset the values of certain structure members, which might allow remote attackers to cause a denial of service (NULL pointer dereference) via a malformed VLAN frame.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=66c46d741e2e60f0e8b625b80edb0ab820c46d7a; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6d152e23ad1a7a5b40fef1f42e017d66e6115159; http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.38
CVE: CVE-2011-3163
Published: 2011-10-23
Description: HP MFP Digital Sending Software 4.9x through 4.91.21 allows local users to obtain sensitive workflow-metadata information via unspecified vectors.
CVSS Score: 1.2 (LOW)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0845&w=2; http://secunia.com/advisories/46532; http://securityreason.com/securityalert/8479
CVE: CVE-2011-3635
Published: 2011-10-23
Description: Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias (aka nickname).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://git.gnome.org/browse/empathy/commit/?id=739aca418457de752be13721218aaebc74bd9d36; http://osvdb.org/76485; http://secunia.com/advisories/46510
CVE: CVE-2011-4170
Published: 2011-10-23
Description: Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias (aka nickname) in a /me event, a different vulnerability than CVE-2011-3635.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.gnome.org/show_bug.cgi?id=662035; https://bugzilla.gnome.org/show_bug.cgi?id=662035
CVE: CVE-2011-2655
Published: 2011-10-24
Description: Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2656.
CVSS Score: 9.3 (HIGH)
References: http://download.novell.com/Download?buildid=Fz0LYfG9qCU~; http://www.novell.com/support/viewContent.do?externalId=7009489; http://www.securityfocus.com/bid/50303