deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-1970
Published: 2011-08-10
Description: The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which allows remote attackers to cause a denial of service (service outage) via a query for a nonexistent domain, aka "DNS Uninitialized Memory Corruption Vulnerability."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-058; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12870
CVE: CVE-2011-1971
Published: 2011-08-10
Description: The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse file metadata, which allows local users to cause a denial of service (reboot) via a crafted file, aka "Windows Kernel Metadata Parsing DOS Vulnerability."
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-399
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-068; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12663; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-068
CVE: CVE-2011-1972
Published: 2011-08-10
Description: Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-060; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12852
CVE: CVE-2011-1974
Published: 2011-08-10
Description: NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "NDISTAPI Elevation of Privilege Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/48996; http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-062
CVE: CVE-2011-1975
Published: 2011-08-10
Description: Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an Excel .xlsx file, aka "Data Access Components Insecure Library Loading Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-059; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12936
CVE: CVE-2011-1976
Published: 2011-08-10
Description: Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7460&w=2; http://www.securityfocus.com/bid/49033; http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE: CVE-2011-1977
Published: 2011-08-10
Description: The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart Control Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-066; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12970
CVE: CVE-2011-1978
Published: 2011-08-10
Description: Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Socket Restriction Bypass Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-069; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12901; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-069
CVE: CVE-2011-1979
Published: 2011-08-10
Description: Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-060; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12659
CVE: CVE-2011-2130
Published: 2011-08-10
Description: Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2134, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
CVE: CVE-2011-2134
Published: 2011-08-10
Description: Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
CVE: CVE-2011-2137
Published: 2011-08-10
Description: Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2414, and CVE-2011-2415.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
CVE: CVE-2011-3125
Published: 2011-08-10
Description: Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Various security hardening."
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/49138; http://wordpress.org/news/2011/05/wordpress-3-1-3/; http://www.debian.org/security/2012/dsa-2470
CVE: CVE-2011-3126
Published: 2011-08-10
Description: WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/49138; http://wordpress.org/news/2011/05/wordpress-3-1-3/; http://www.debian.org/security/2012/dsa-2470
CVE: CVE-2011-3127
Published: 2011-08-10
Description: WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/49138; http://wordpress.org/news/2011/05/wordpress-3-1-3/; http://www.debian.org/security/2012/dsa-2470
CVE: CVE-2011-3128
Published: 2011-08-10
Description: WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://core.trac.wordpress.org/changeset/18023/branches/3.1; http://secunia.com/advisories/49138; http://wordpress.org/news/2011/05/wordpress-3-1-3/
CVE: CVE-2011-3129
Published: 2011-08-10
Description: The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/49138; http://wordpress.org/news/2011/05/wordpress-3-1-3/; http://www.debian.org/security/2012/dsa-2470
CVE: CVE-2011-3130
Published: 2011-08-10
Description: wp-includes/taxonomy.php in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Taxonomy query hardening," possibly involving SQL injection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/49138; http://wordpress.org/news/2011/05/wordpress-3-1-3/; http://www.debian.org/security/2012/dsa-2470
CVE: CVE-2011-2135
Published: 2011-08-10
Description: Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2140, CVE-2011-2417, and CVE-2011-2425.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
CVE: CVE-2011-2136
Published: 2011-08-10
Description: Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2138 and CVE-2011-2416.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
CVE: CVE-2011-2138
Published: 2011-08-10
Description: Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2416.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
CVE: CVE-2011-2139
Published: 2011-08-10
Description: Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
CVE: CVE-2011-2140
Published: 2011-08-10
Description: Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
CVE: CVE-2011-2414
Published: 2011-08-10
Description: Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2415.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
CVE: CVE-2011-2415
Published: 2011-08-10
Description: Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2414.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
CVE: CVE-2011-2416
Published: 2011-08-10
Description: Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2138.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
CVE: CVE-2011-2417
Published: 2011-08-10
Description: Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
CVE: CVE-2011-2425
Published: 2011-08-10
Description: Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2417.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
CVE: CVE-2010-4308
Published: 2011-08-11
Description: Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-4309.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-19.html; http://www.us-cert.gov/cas/techalerts/TA11-222A.html; http://www.adobe.com/support/security/bulletins/apsb11-19.html
CVE: CVE-2010-4309
Published: 2011-08-11
Description: Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-4308.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-19.html; http://www.us-cert.gov/cas/techalerts/TA11-222A.html; http://www.adobe.com/support/security/bulletins/apsb11-19.html
CVE: CVE-2011-1357
Published: 2011-08-11
Description: Cross-site scripting (XSS) vulnerability in agentDetect.jsp in the web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 before 6.3.0.5, 7.0 before 7.0.0.5, and 7.5 before 7.5.0.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg1IV01657; https://exchange.xforce.ibmcloud.com/vulnerabilities/69040; http://www.ibm.com/support/docview.wss?uid=swg1IV01657
CVE: CVE-2011-2131
Published: 2011-08-11
Description: Adobe Photoshop 12.0 in Creative Suite 5 (CS5) and 12.1 in Creative Suite 5.1 (CS5.1) allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted GIF file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/8347; http://www.adobe.com/support/security/bulletins/apsb11-22.html; http://www.us-cert.gov/cas/techalerts/TA11-222A.html
CVE: CVE-2011-2132
Published: 2011-08-11
Description: Adobe Flash Media Server (FMS) before 3.5.7, and 4.x before 4.0.3, allows attackers to cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-20.html; http://www.us-cert.gov/cas/techalerts/TA11-222A.html; http://www.adobe.com/support/security/bulletins/apsb11-20.html
CVE: CVE-2011-2133
Published: 2011-08-11
Description: Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and RoboHelp Server 8 and 9, allows remote attackers to inject arbitrary web script or HTML via the URI, related to template_stock/whutils.js.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/8334; http://www.adobe.com/support/security/bulletins/apsb11-23.html; http://www.us-cert.gov/cas/techalerts/TA11-222A.html
CVE: CVE-2011-2404
Published: 2011-08-11
Description: A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8119&w=2; http://securityreason.com/securityalert/8332; http://securityreason.com/securityalert/8348
CVE: CVE-2011-2405
Published: 2011-08-11
Description: The HP ProLiant SL Advanced Power Manager (SL-APM) with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02950841; http://secunia.com/advisories/45521; http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02950841
CVE: CVE-2011-2406
Published: 2011-08-11
Description: Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1409&w=2; http://securityreason.com/securityalert/8333; http://www.securityfocus.com/bid/49096
CVE: CVE-2011-2407
Published: 2011-08-11
Description: Unspecified vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to obtain access via unknown vectors.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1409&w=2; http://securityreason.com/securityalert/8333; http://www.securityfocus.com/bid/49096
CVE: CVE-2011-2408
Published: 2011-08-11
Description: Cross-site scripting (XSS) vulnerability in the Contacts application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02937744; http://secunia.com/advisories/45543; http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02937744
CVE: CVE-2011-2409
Published: 2011-08-11
Description: Cross-site scripting (XSS) vulnerability in the Calendar application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02945437; http://secunia.com/advisories/45543; http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02945437
CVE: CVE-2011-2419
Published: 2011-08-11
Description: IML32.dll in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-19.html; http://www.us-cert.gov/cas/techalerts/TA11-222A.html; http://www.adobe.com/support/security/bulletins/apsb11-19.html
CVE: CVE-2011-2420
Published: 2011-08-11
Description: Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-19.html; http://www.us-cert.gov/cas/techalerts/TA11-222A.html; http://www.adobe.com/support/security/bulletins/apsb11-19.html