deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-2929
Published: 2011-08-29
Description: The template selection functionality in actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which allows remote attackers to render arbitrary views via a crafted URL, related to a "filter skipping vulnerability."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://groups.google.com/group/rubyonrails-security/msg/cbbbba6e4f7eaf61?dmode=source&output=gplain; http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065109.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html
CVE: CVE-2011-2930
Published: 2011-08-29
Description: Multiple SQL injection vulnerabilities in the quote_table_name method in the ActiveRecord adapters in activerecord/lib/active_record/connection_adapters/ in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allow remote attackers to execute arbitrary SQL commands via a crafted column name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://groups.google.com/group/rubyonrails-security/msg/b1a85d36b0f9dd30?dmode=source&output=gplain; http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html; http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6
CVE: CVE-2011-2931
Published: 2011-08-29
Description: Cross-site scripting (XSS) vulnerability in the strip_tags helper in actionpack/lib/action_controller/vendor/html-scanner/html/node.rb in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a tag with an invalid name.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://groups.google.com/group/rubyonrails-security/msg/fd41ab62966e0fd1?dmode=source&output=gplain; http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065109.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065137.html
CVE: CVE-2011-2932
Published: 2011-08-29
Description: Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a malformed Unicode string, related to a "UTF-8 escaping vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://groups.google.com/group/rubyonrails-security/msg/f1d2749773db9f21?dmode=source&output=gplain; http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065114.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065189.html
CVE: CVE-2011-3186
Published: 2011-08-29
Description: CRLF injection vulnerability in actionpack/lib/action_controller/response.rb in Ruby on Rails 2.3.x before 2.3.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the Content-Type header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: http://groups.google.com/group/rubyonrails-security/msg/bbe342e43abaa78c?dmode=source&output=gplain; http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065137.html; http://secunia.com/advisories/45921
CVE: CVE-2011-3187
Published: 2011-08-29
Description: The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip.rb in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header in requests from IP addresses on a Class C network, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/fulldisclosure/2011-02/0337.html; http://webservsec.blogspot.com/2011/02/ruby-on-rails-vulnerability.html; http://www.openwall.com/lists/oss-security/2011/08/17/1
CVE: CVE-2011-0228
Published: 2011-08-29
Description: The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an arbitrary domain.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2011//Jul/msg00004.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00005.html; http://secunia.com/advisories/45369
CVE: CVE-2011-2555
Published: 2011-08-29
Description: Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtr76182.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://securitytracker.com/id?1025872; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8ad3f.shtml; http://www.securityfocus.com/bid/48932
CVE: CVE-2011-1769
Published: 2011-08-29
Description: SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs context variable access.
CVSS Score: 1.2 (LOW)
CWE: CWE-189
References: http://openwall.com/lists/oss-security/2011/05/20/2; http://secunia.com/advisories/44802; http://sourceware.org/git/?p=systemtap.git%3Ba=commit%3Bh=fa2e3415185a28542d419a641ecd6cddd52e3cd9
CVE: CVE-2011-1781
Published: 2011-08-29
Description: SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs stack unwinding (aka backtracing).
CVSS Score: 1.2 (LOW)
CWE: CWE-189
References: http://openwall.com/lists/oss-security/2011/05/20/2; http://secunia.com/advisories/44802; http://sourceware.org/git/?p=systemtap.git%3Ba=commit%3Bh=fa2e3415185a28542d419a641ecd6cddd52e3cd9
CVE: CVE-2006-7244
Published: 2011-08-31
Description: Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=948ee23a2a400672b1751cfc646a7467741e9b2e#patch18; http://www.openwall.com/lists/oss-security/2011/03/22/7; http://www.openwall.com/lists/oss-security/2011/03/28/6
CVE: CVE-2009-5063
Published: 2011-08-31
Description: Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length.  NOTE: this is due to an incomplete fix for CVE-2006-7244.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-401
References: http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=948ee23a2a400672b1751cfc646a7467741e9b2e#patch18; http://secunia.com/advisories/49660; http://security.gentoo.org/glsa/glsa-201206-15.xml
CVE: CVE-2011-1576
Published: 2011-08-31
Description: The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products, allows remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2011-0927.html; http://www.redhat.com/support/errata/RHSA-2011-1090.html; http://www.redhat.com/support/errata/RHSA-2011-1106.html
CVE: CVE-2011-2524
Published: 2011-08-31
Description: Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in a URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://git.gnome.org/browse/libsoup/tree/NEWS; http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063431.html; http://secunia.com/advisories/47299
CVE: CVE-2011-2577
Published: 2011-08-31
Description: Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service (crash) via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq46500.
CVSS Score: 7.8 (HIGH)
References: http://securityreason.com/securityalert/8387; http://securityreason.com/securityalert/8389; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b91395.shtml
CVE: CVE-2011-2899
Published: 2011-08-31
Description: pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-20
References: http://cvs.savannah.gnu.org/viewvc/foomatic-gui/foomatic/pysmb.py?root=foomatic-gui&r1=1.2&r2=1.3&view=patch; http://secunia.com/advisories/45744; http://www.redhat.com/support/errata/RHSA-2011-1196.html
CVE: CVE-2011-3190
Published: 2011-08-31
Description: Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information by causing the connector to interpret a request body as a new request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8824&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2771&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8404&w=2
CVE: CVE-2011-0342
Published: 2011-09-02
Description: Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the (1) Open, (2) Close, or (3) SetCurrentLanguage method.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://ics-cert.us-cert.gov/advisories/ICSA-11-273-02; http://secunia.com/advisories/44875; http://secunia.com/secunia_research/2011-61/
CVE: CVE-2011-1944
Published: 2011-09-02
Description: Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://git.gnome.org/browse/libxml2/commit/?id=d7958b21e7f8c447a26bb2436f08402b2c308be4; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
CVE: CVE-2011-2594
Published: 2011-09-02
Description: Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist (.KPL) file with a long Title field.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/45264; http://www.securityfocus.com/bid/49342; https://exchange.xforce.ibmcloud.com/vulnerabilities/69451
CVE: CVE-2011-2762
Published: 2011-09-02
Description: The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) allows remote attackers to bypass authentication via unspecified data associated with a "true" authentication status, related to AMF data and the LSRoom_Remoting.authenticate function in gateway.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://securityreason.com/securityalert/8364; http://www.kb.cert.org/vuls/id/213486; http://www.securestate.com/Documents/LifeSize_Room_Advisory.txt
CVE: CVE-2011-2763
Published: 2011-09-02
Description: The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitrary commands via a modified request to the LSRoom_Remoting.doCommand function in gateway.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/8363; http://securityreason.com/securityalert/8527; http://www.exploit-db.com/exploits/17743
CVE: CVE-2011-2903
Published: 2011-09-02
Description: Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command line argument. NOTE: this is only a vulnerability in limited scenarios in which tcptrack is "configured as a handler for other applications." This issue might not qualify for inclusion in CVE.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://seclists.org/oss-sec/2011/q3/293; http://www.openwall.com/lists/oss-security/2011/08/31/1; http://www.rhythm.cx/~steve/devel/tcptrack/
CVE: CVE-2011-3132
Published: 2011-09-02
Description: Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/45864; http://www.securitytracker.com/id?1025999; http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt
CVE: CVE-2011-3133
Published: 2011-09-02
Description: Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack web sessions via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/45864; http://www.securitytracker.com/id?1025999; http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt
CVE: CVE-2011-3134
Published: 2011-09-02
Description: Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/45864; http://www.securitytracker.com/id?1025999; http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt
CVE: CVE-2009-5086
Published: 2011-09-02
Description: Cross-site scripting (XSS) vulnerability in Appliance Configuration Manager (ACM) in Juniper IDP 4.1 before 4.1r3 and 4.2 before 4.2r1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN44642341/index.html; http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000071.html; http://s-tools1.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2009-01-191&viewMode=view
CVE: CVE-2011-3385
Published: 2011-09-02
Description: Cross-site scripting (XSS) vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unknown vectors, a different vulnerability than CVE-2006-2307.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN02134508/index.html; http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000067.html; http://jvn.jp/en/jp/JVN02134508/index.html
CVE: CVE-2011-0311
Published: 2011-09-02
Description: The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read.
CVSS Score: 3.5 (LOW)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89602
CVE: CVE-2011-0541
Published: 2011-09-02
Description: fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=bf5ffb5fd8558bd799791834def431c0cee5a11f; http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html; http://www.openwall.com/lists/oss-security/2011/02/02/2
CVE: CVE-2011-0542
Published: 2011-09-02
Description: fusermount in fuse 2.8.5 and earlier does not perform a chdir to / before performing a mount or umount, which allows local users to unmount arbitrary directories via unspecified vectors.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=1e7607ff89c65b005f69e27aeb1649d624099873; http://www.openwall.com/lists/oss-security/2011/02/02/2; http://www.openwall.com/lists/oss-security/2011/02/03/5
CVE: CVE-2011-0543
Published: 2011-09-02
Description: Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-linux does not support the --no-canonicalize option, allows local users to bypass intended access restrictions and unmount arbitrary directories via a symlink attack.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=cbd3a2a84068aae6e3fe32939d88470d712dbf47; http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html; http://www.openwall.com/lists/oss-security/2011/02/02/2
CVE: CVE-2011-1411
Published: 2011-09-02
Description: Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-287
References: http://secunia.com/advisories/50994; http://shibboleth.internet2.edu/secadv/secadv_20110725.txt; http://www.debian.org/security/2011/dsa-2284
CVE: CVE-2011-2176
Published: 2011-09-02
Description: GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-287
References: http://cgit.freedesktop.org/NetworkManager/NetworkManager/plain/NEWS?h=NM_0_8; http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063665.html; http://secunia.com/advisories/44858
CVE: CVE-2011-3386
Published: 2011-09-02
Description: Unspecified vulnerability in Medtronic Paradigm wireless insulin pump 512, 522, 712, and 722 allows remote attackers to modify the delivery of an insulin bolus dose and cause a denial of service (adverse human health effects) via unspecified vectors involving wireless communications and knowledge of the device's serial number, as demonstrated by Jerome Radcliffe at the Black Hat USA conference in August 2011.  NOTE: the vendor has disputed the severity of this issue, saying "we believe the risk of deliberate, malicious, or unauthorized manipulation of medical devices is extremely low... we strongly believe it would be extremely difficult for a third-party to wirelessly tamper with your insulin pump... you would be able to detect tones on the insulin pump that weren't intentionally programmed and could intervene accordingly."
CVSS Score: 4.0 (MEDIUM)
References: http://sixuntilme.com/blog2/2011/08/hacked_jay_radcliffe_insulin_p.html; http://www.darkreading.com/security/vulnerabilities/231300312/getting-root-on-the-human-body.html; http://www.foxnews.com/scitech/2011/08/04/insulin-pumps-vulnerable-to-hacking/?test=faces
CVE: CVE-2011-3387
Published: 2011-09-02
Description: The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to validation of a length field at the wrong time, a different vulnerability than CVE-2011-0311.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://www.redhat.com/support/errata/RHSA-2011-1265.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/69641; https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551
CVE: CVE-2010-4831
Published: 2011-09-06
Description: Untrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows local users to gain privileges via a Trojan horse Wintab32.dll file in the current working directory.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-426
References: http://ftp.gnome.org/pub/gnome/sources/gtk+/2.21/gtk+-2.21.8.changes; http://git.gnome.org/browse/gtk+/commit/gdk/win32/gdkinput-win32.c?h=gtk-2-24&id=88f54ea47d4a55bbbf9e34a7a0502f365eb69ae5&ss=1; http://jvn.jp/en/jp/JVN58019849/index.html
CVE: CVE-2010-4833
Published: 2011-09-06
Description: Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows local users to gain privileges via a Trojan horse uxtheme.dll file in the current working directory, a different vulnerability than CVE-2010-4831.
CVSS Score: 9.3 (HIGH)
CWE: CWE-426
References: http://git.gnome.org/browse/gtk+/commit/modules/engines/ms-windows/xp_theme.c?h=gtk-2-24&id=d6e11a97e318158f5d210a0476870dfe14ed95e6; http://secunia.com/advisories/45815; http://www.securityfocus.com/bid/49449
CVE: CVE-2011-0258
Published: 2011-09-06
Description: Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image description associated with an mp4v tag in a movie file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/8368; http://support.apple.com/kb/HT4826; http://www.securityfocus.com/archive/1/519483/100/0/threaded
CVE: CVE-2011-1359
Published: 2011-09-06
Description: Directory traversal vulnerability in the administration console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41, 7.0 before 7.0.0.19, and 8.0 before 8.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/45749; http://www-01.ibm.com/support/docview.wss?uid=swg1PM45322; http://www.ibm.com/support/docview.wss?uid=swg21509257
CVE: CVE-2011-2654
Published: 2011-09-06
Description: The RPC implementation in the server in Novell Cloud Manager 1.1.2 before Patch 3 does not properly initialize objects, which allows remote attackers to execute arbitrary code by making RPC calls that leverage incorrect privileges associated with a partially initialized session.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://download.novell.com/Download?buildid=NSONlV5PqMo~; http://secunia.com/advisories/45845; http://www.securityfocus.com/bid/49432