deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-3490
Published: 2011-09-16
Description: Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long command to port 11234, as demonstrated with the TF command.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/scadapro_1-adv.txt; http://securityreason.com/securityalert/8382; http://www.exploit-db.com/exploits/17848
CVE: CVE-2011-3491
Published: 2011-09-16
Description: Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative Content-Length field.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/movicon_1-adv.txt; http://osvdb.org/75494; http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf
CVE: CVE-2011-3492
Published: 2011-09-16
Description: Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/daqfactory_1-adv.txt; http://osvdb.org/75496; http://www.exploit-db.com/exploits/17855
CVE: CVE-2011-3493
Published: 2011-09-16
Description: Multiple stack-based buffer overflows in the DH_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) domain, (2) report_domain, (3) register_datahub, or (4) slave commands.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/cogent_1-adv.txt; http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-03.pdf; http://aluigi.altervista.org/adv/cogent_1-adv.txt
CVE: CVE-2011-3494
Published: 2011-09-16
Description: WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long StyleTemplate element in a QUO, SUM or POR file, which triggers a stack-based buffer overflow, or (2) a long Font->FaceName field (aka FaceName element), which triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/esignal_1-adv.txt; http://secunia.com/advisories/45966; http://aluigi.altervista.org/adv/esignal_1-adv.txt
CVE: CVE-2011-3495
Published: 2011-09-16
Description: Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the (1) RF, (2) wF, (3) UF, or (4) NF command.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://aluigi.altervista.org/adv/scadapro_1-adv.txt; http://securityreason.com/securityalert/8382; http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf
CVE: CVE-2011-3496
Published: 2011-09-16
Description: service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) BF, (2) OF, or (3) EF command.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://aluigi.altervista.org/adv/scadapro_1-adv.txt; http://securityreason.com/securityalert/8382; http://www.exploit-db.com/exploits/17848
CVE: CVE-2011-3497
Published: 2011-09-16
Description: service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.
CVSS Score: 10.0 (HIGH)
CWE: CWE-200
References: http://aluigi.altervista.org/adv/scadapro_1-adv.txt; http://securityreason.com/securityalert/8382; http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf
CVE: CVE-2011-3498
Published: 2011-09-16
Description: Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/movicon_1-adv.txt; http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf; https://exchange.xforce.ibmcloud.com/vulnerabilities/69788
CVE: CVE-2011-3499
Published: 2011-09-16
Description: Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/movicon_3-adv.txt; http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf; https://exchange.xforce.ibmcloud.com/vulnerabilities/69789
CVE: CVE-2011-3500
Published: 2011-09-16
Description: Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in an HTTP request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://aluigi.altervista.org/adv/cogent_2-adv.txt; http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-03.pdf; http://aluigi.altervista.org/adv/cogent_2-adv.txt
CVE: CVE-2011-3501
Published: 2011-09-16
Description: Integer overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial of service (crash) via a negative or large Content-Length value.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://aluigi.altervista.org/adv/cogent_3-adv.txt; http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-03.pdf; http://aluigi.altervista.org/adv/cogent_3-adv.txt
CVE: CVE-2011-3502
Published: 2011-09-16
Description: The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request with a trailing (1) space or (2) %2e (encoded dot).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://aluigi.altervista.org/adv/cogent_4-adv.txt; http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-03.pdf; http://aluigi.altervista.org/adv/cogent_4-adv.txt
CVE: CVE-2011-3503
Published: 2011-09-16
Description: Untrusted search path vulnerability in eSignal 10.6.2425.1208, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse JRS_UT.dll that is located in the same folder as a .quo (QUOTE) file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/75458; http://secunia.com/advisories/45966; https://exchange.xforce.ibmcloud.com/vulnerabilities/69786
CVE: CVE-2011-1740
Published: 2011-09-19
Description: EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain.
CVSS Score: 7.7 (HIGH)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2011-09/0076.html; http://secunia.com/advisories/45988; http://secunia.com/advisories/46002
CVE: CVE-2011-2738
Published: 2011-09-19
Description: Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor (Ionix ACM) 2.3 and earlier, Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) 3.2.0.2 and earlier, IP Management Suite (Ionix IP) 8.1.1.1 and earlier, and other Ionix products; allow remote attackers to execute arbitrary code via crafted packets to TCP port 9002, aka Bug IDs CSCtn42961 and CSCtn64922, related to a buffer overflow.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/45979; http://secunia.com/advisories/46016; http://secunia.com/advisories/46052
CVE: CVE-2011-2834
Published: 2011-09-19
Description: Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-415
References: http://code.google.com/p/chromium/issues/detail?id=93472; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
CVE: CVE-2011-2835
Published: 2011-09-19
Description: Race condition in Google Chrome before 14.0.835.163 allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the certificate cache.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-362
References: http://code.google.com/p/chromium/issues/detail?id=49377; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75536
CVE: CVE-2011-2836
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 does not require Infobar interaction before use of the Windows Media Player plug-in, which makes it easier for remote attackers to have an unspecified impact via crafted Flash content.
CVSS Score: 7.5 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=51464; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75537
CVE: CVE-2011-2837
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 on Linux does not use the PIC and PIE compiler options for position-independent code, which has unspecified impact and attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=57908; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75538
CVE: CVE-2011-2838
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 does not properly consider the MIME type during the loading of a plug-in, which has unspecified impact and remote attack vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=75070; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75539
CVE: CVE-2011-2840
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to "unusual user interaction."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=78427; http://code.google.com/p/chromium/issues/detail?id=83031; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html
CVE: CVE-2011-2841
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=78639; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75541
CVE: CVE-2011-2842
Published: 2011-09-19
Description: The installer in Google Chrome before 14.0.835.163 on Mac OS X does not properly handle lock files, which has unspecified impact and attack vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=80680; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75542
CVE: CVE-2011-2843
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 does not properly handle media buffers, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: http://code.google.com/p/chromium/issues/detail?id=82438; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75543
CVE: CVE-2011-2844
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: http://code.google.com/p/chromium/issues/detail?id=85041; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75544
CVE: CVE-2011-2846
Published: 2011-09-19
Description: Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unload event handling.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=89219; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html
CVE: CVE-2011-2847
Published: 2011-09-19
Description: Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=89330; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html
CVE: CVE-2011-2848
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to the forward button.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=89564; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75548
CVE: CVE-2011-2849
Published: 2011-09-19
Description: The WebSockets implementation in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476
References: http://code.google.com/p/chromium/issues/detail?id=89795; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75549
CVE: CVE-2011-2850
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 does not properly handle Khmer characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: http://code.google.com/p/chromium/issues/detail?id=90134; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75551
CVE: CVE-2011-2851
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: http://code.google.com/p/chromium/issues/detail?id=90173; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75552
CVE: CVE-2011-2852
Published: 2011-09-19
Description: Off-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-193
References: http://code.google.com/p/chromium/issues/detail?id=91120; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75553
CVE: CVE-2011-2853
Published: 2011-09-19
Description: Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to plug-in handling.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=91197; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75555
CVE: CVE-2011-2854
Published: 2011-09-19
Description: Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "ruby / table style handing."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=92651; http://code.google.com/p/chromium/issues/detail?id=94800; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html
CVE: CVE-2011-2855
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-74
References: http://code.google.com/p/chromium/issues/detail?id=92959; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html
CVE: CVE-2011-2856
Published: 2011-09-19
Description: Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-346
References: http://code.google.com/p/chromium/issues/detail?id=93416; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75558
CVE: CVE-2011-2857
Published: 2011-09-19
Description: Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the focus controller.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=93420; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html
CVE: CVE-2011-2858
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 does not properly handle triangle arrays, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: http://code.google.com/p/chromium/issues/detail?id=95625; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75566
CVE: CVE-2011-2859
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 uses incorrect permissions for non-gallery pages, which has unspecified impact and attack vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-276
References: http://code.google.com/p/chromium/issues/detail?id=93497; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75561
CVE: CVE-2011-2860
Published: 2011-09-19
Description: Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to table styles.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=93587; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html
CVE: CVE-2011-2861
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 does not properly handle strings in PDF documents, which allows remote attackers to have an unspecified impact via a crafted document that triggers an incorrect read operation.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=93596; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75563
CVE: CVE-2011-2862
Published: 2011-09-19
Description: Google V8, as used in Google Chrome before 14.0.835.163, does not properly restrict access to built-in objects, which has unspecified impact and remote attack vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://code.google.com/p/chromium/issues/detail?id=93906; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75564
CVE: CVE-2011-2864
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 does not properly handle Tibetan characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: http://code.google.com/p/chromium/issues/detail?id=95563; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75565
CVE: CVE-2011-2874
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 does not perform an expected pin operation for a self-signed certificate during a session, which has unspecified impact and remote attack vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-295
References: http://code.google.com/p/chromium/issues/detail?id=95917; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75567
CVE: CVE-2011-2875
Published: 2011-09-19
Description: Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-843
References: http://code.google.com/p/chromium/issues/detail?id=95920; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://osvdb.org/75554
CVE: CVE-2011-3234
Published: 2011-09-19
Description: Google Chrome before 14.0.835.163 does not properly handle boxes, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: http://code.google.com/p/chromium/issues/detail?id=89991; http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html
CVE: CVE-2011-3345
Published: 2011-09-19
Description: ulp/sdp/sdp_proc.c in the ib_sdp module (aka ib_sdp.ko) in the ofa_kernel package in the InfiniBand driver implementation in OpenFabrics Enterprise Distribution (OFED) before 1.5.3 does not properly handle certain non-array variables, which allows local users to cause a denial of service (stack memory corruption and system crash) by reading the /proc/net/sdpstats file.
CVSS Score: 2.1 (LOW)
CWE: CWE-119
References: http://git.openfabrics.org/git?p=ofed_1_5/linux-2.6.git%3Ba=commit%3Bh=04bb801a31825d1559c4670253e1bea1291a1af8; http://secunia.com/advisories/45861; http://www.openwall.com/lists/oss-security/2011/09/06/3
CVE: CVE-2011-3423
Published: 2011-09-19
Description: Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/45976; http://securitytracker.com/id?1026051; http://www.osvdb.org/75396
CVE: CVE-2011-3424
Published: 2011-09-19
Description: Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to hijack web sessions via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/45976; http://securitytracker.com/id?1026051; http://www.osvdb.org/75397