deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-4042
Published: 2012-04-03
Description: An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer.
CVSS Score: 9.3 (HIGH)
References: http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257; http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf; https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440
CVE: CVE-2011-4043
Published: 2012-04-03
Description: Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code via a large value for an integer parameter, leading to a buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257; http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf; https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440
CVE: CVE-2011-4044
Published: 2012-04-03
Description: An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods.
CVSS Score: 5.8 (MEDIUM)
References: http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257; http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf; https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440
CVE: CVE-2011-4045
Published: 2012-04-03
Description: Buffer overflow in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to cause a denial of service via a crafted HTML document.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257; http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf; https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440
CVE: CVE-2011-4535
Published: 2012-04-03
Description: Buffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and earlier, ScadaTEC ModbusTagServer 4.1.1.81 and earlier, and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ZIP file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://sourceforge.net/projects/tpabbrevia/files/Abbrevia%204.0.zip/download; http://www.us-cert.gov/control_systems/pdf/ICSA-11-362-01.pdf; http://sourceforge.net/projects/tpabbrevia/files/Abbrevia%204.0.zip/download
CVE: CVE-2012-1335
Published: 2012-04-05
Description: Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1336 and CVE-2012-1337.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120404-webex; http://www.securitytracker.com/id?1026888; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120404-webex
CVE: CVE-2012-1336
Published: 2012-04-05
Description: Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1335 and CVE-2012-1337.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120404-webex; http://www.securitytracker.com/id?1026888; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120404-webex
CVE: CVE-2012-1337
Published: 2012-04-05
Description: Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1335 and CVE-2012-1336.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120404-webex; http://www.securitytracker.com/id?1026888; https://exchange.xforce.ibmcloud.com/vulnerabilities/74606
CVE: CVE-2008-7309
Published: 2012-04-05
Description: Insoshi before 20080920 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the ForumPost user_id value via a modified URL, related to a "mass assignment" vulnerability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://blog.mhartl.com/2008/09/21/finding-and-fixing-mass-assignment-problems-in-rails-applications/; http://railspikes.com/2008/9/22/is-your-rails-application-safe-from-mass-assignment; http://blog.mhartl.com/2008/09/21/finding-and-fixing-mass-assignment-problems-in-rails-applications/
CVE: CVE-2008-7310
Published: 2012-04-05
Description: Spree 0.2.0 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the Order state value and bypass the intended payment step via a modified URL, related to a "mass assignment" vulnerability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://railspikes.com/2008/9/22/is-your-rails-application-safe-from-mass-assignment; http://spreecommerce.com/blog/2008/09/16/security-vulnerability-mass-assignment-of-order-params/; http://railspikes.com/2008/9/22/is-your-rails-application-safe-from-mass-assignment
CVE: CVE-2008-7311
Published: 2012-04-05
Description: The session cookie store implementation in Spree 0.2.0 uses a hardcoded config.action_controller_session hash value (aka secret key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging an application that contains this value within the config/environment.rb file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://spreecommerce.com/blog/2008/08/12/security-vulernability-session-cookie-store/; http://support.spreehq.org/issues/show/63; http://spreecommerce.com/blog/2008/08/12/security-vulernability-session-cookie-store/
CVE: CVE-2012-0132
Published: 2012-04-05
Description: Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 9.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/48677; http://www.securityfocus.com/archive/1/522204; http://www.securityfocus.com/bid/52880
CVE: CVE-2012-0128
Published: 2012-04-05
Description: HP Onboard Administrator (OA) before 3.50 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/archive/1/522176; http://www.securityfocus.com/bid/52862; http://www.securitytracker.com/id?1026889
CVE: CVE-2012-0129
Published: 2012-04-05
Description: HP Onboard Administrator (OA) before 3.50 allows remote attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors.
CVSS Score: 7.6 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/archive/1/522176; http://www.securityfocus.com/bid/52862; http://www.securitytracker.com/id?1026889
CVE: CVE-2012-0130
Published: 2012-04-05
Description: HP Onboard Administrator (OA) before 3.50 allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/archive/1/522176; http://www.securityfocus.com/bid/52862; http://www.securitytracker.com/id?1026889
CVE: CVE-2012-0249
Published: 2012-04-05
Description: Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.
CVSS Score: 3.3 (LOW)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078794.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078926.html
CVE: CVE-2012-0250
Published: 2012-04-05
Description: Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.
CVSS Score: 3.3 (LOW)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078794.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078926.html
CVE: CVE-2012-0255
Published: 2012-04-05
Description: The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078794.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078926.html
CVE: CVE-2012-0131
Published: 2012-04-05
Description: Distributed Computing Environment (DCE) 1.8 and 1.9 on HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03261413; http://secunia.com/advisories/48687; http://www.securityfocus.com/bid/52860
CVE: CVE-2011-5000
Published: 2012-04-05
Description: The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field.  NOTE: there may be limited scenarios in which this issue is relevant.
CVSS Score: 3.5 (LOW)
CWE: CWE-189
References: http://rhn.redhat.com/errata/RHSA-2012-0884.html; http://seclists.org/fulldisclosure/2011/Aug/2; http://site.pi3.com.pl/adv/ssh_1.txt
CVE: CVE-2012-0327
Published: 2012-04-05
Description: Cross-site scripting (XSS) vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN93406632/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000025; http://www.redmine.org/versions/42
CVE: CVE-2012-1777
Published: 2012-04-05
Description: SQL injection vulnerability in my.activation.php3 in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 allows remote attackers to execute arbitrary SQL commands via the state parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/files/111276/F5-FirePass-SSL-VPN-6.x-7.x-SQL-Injection.html; http://seclists.org/fulldisclosure/2012/Mar/324; http://secunia.com/advisories/48455
CVE: CVE-2012-1982
Published: 2012-04-05
Description: Cross-site scripting (XSS) vulnerability in my_admin/admin1_list_pages.php in SocialCMS 1.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the TR_title parameter in an edit action.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.webapp-security.com/wp-content/uploads/2012/03/SocialCMS-1.0.2-XSS-Persistent-and-Reflected-Vulnerabilities1.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/74540; http://www.webapp-security.com/wp-content/uploads/2012/03/SocialCMS-1.0.2-XSS-Persistent-and-Reflected-Vulnerabilities1.txt
CVE: CVE-2012-2053
Published: 2012-04-05
Description: The sudoers file in the Linux system configuration in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 does not require a password for executing commands as root, which allows local users to gain privileges via the sudo program, as demonstrated by the user account that executes PHP scripts, a different vulnerability than CVE-2012-1777.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/74813; https://www.sec-consult.com/files/20120328-0_F5_FirePass_SSL_VPN_unauthenticated_remote_root_v1.0.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/74813
CVE: CVE-2012-2054
Published: 2012-04-05
Description: Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes in the (1) Comment, (2) Document, (3) IssueCategory, (4) MembersController, (5) Message, (6) News, (7) TimeEntry, (8) Version, (9) Wiki, (10) UserPreference, or (11) Board model via a modified URL, related to a "mass assignment" vulnerability, a different vulnerability than CVE-2012-0327.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://www.redmine.org/boards/2/topics/29343; http://www.redmine.org/issues/10390; http://www.redmine.org/versions/42
CVE: CVE-2012-2055
Published: 2012-04-05
Description: GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the public_key[user_id] value via a modified URL for the public-key update form, related to a "mass assignment" vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-913
References: http://homakov.blogspot.com/2012/03/how-to.html; http://lwn.net/Articles/488702/; https://exchange.xforce.ibmcloud.com/vulnerabilities/74812
CVE: CVE-2011-3066
Published: 2012-04-05
Description: Skia, as used in Google Chrome before 18.0.1025.151, does not properly perform clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: http://code.google.com/p/chromium/issues/detail?id=106577; http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html; http://osvdb.org/81036
CVE: CVE-2011-3067
Published: 2012-04-05
Description: Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-346
References: http://code.google.com/p/chromium/issues/detail?id=117583; http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3068
Published: 2012-04-05
Description: Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to run-in boxes.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=117698; http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3069
Published: 2012-04-05
Description: Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to line boxes.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=117728; http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3070
Published: 2012-04-05
Description: Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Google V8 bindings.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=118185; http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html; http://osvdb.org/81040
CVE: CVE-2011-3071
Published: 2012-04-05
Description: Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=118273; http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3072
Published: 2012-04-05
Description: Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to pop-up windows.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-346
References: http://code.google.com/p/chromium/issues/detail?id=118467; http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html; http://osvdb.org/81042
CVE: CVE-2011-3073
Published: 2012-04-05
Description: Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG resources.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=118593; http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3074
Published: 2012-04-05
Description: Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of media.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=119281; http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3075
Published: 2012-04-05
Description: Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style-application commands.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=119525; http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3076
Published: 2012-04-05
Description: Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to focus handling.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=120037; http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3077
Published: 2012-04-05
Description: Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the script bindings, related to a "read-after-free" issue.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=120189; http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html; http://secunia.com/advisories/48732
CVE: CVE-2012-1237
Published: 2012-04-06
Description: Cross-site request forgery (CSRF) vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN44913777/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000029; http://oss.icz.co.jp/news/?p=501
CVE: CVE-2012-1238
Published: 2012-04-06
Description: Session fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack web sessions via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://jvn.jp/en/jp/JVN97200417/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000030; http://oss.icz.co.jp/news/?p=501
CVE: CVE-2012-1239
Published: 2012-04-06
Description: The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN92830293/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000028; http://www.toshibatec.co.jp/information/2012/20120405/
CVE: CVE-2012-1902
Published: 2012-04-06
Description: show_config_errors.php in phpMyAdmin 3.4.x before 3.4.10.2, when a configuration file does not exist, allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message about this missing file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079435.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079475.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079566.html
CVE: CVE-2012-0724
Published: 2012-04-06
Description: Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0725.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html; http://secunia.com/advisories/48732; http://www.adobe.com/support/security/bulletins/apsb12-07.html
CVE: CVE-2012-0725
Published: 2012-04-06
Description: Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0724.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html; http://secunia.com/advisories/48732; http://www.adobe.com/support/security/bulletins/apsb12-07.html
CVE: CVE-2011-3175
Published: 2012-04-09
Description: Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x6c request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://download.novell.com/Download?buildid=rs4B5jhWKf8~; http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5127930.html; http://www.exploit-db.com/exploits/19958