deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-1726
Published: 2011-05-03
Description: Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6700&w=2; http://osvdb.org/72060; http://secunia.com/advisories/44322
CVE: CVE-2011-1727
Published: 2011-05-03
Description: Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6700&w=2; http://osvdb.org/72061; http://secunia.com/advisories/44322
CVE: CVE-2011-1739
Published: 2011-05-03
Description: The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances via an NFS mount request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/44307; http://security.FreeBSD.org/advisories/FreeBSD-SA-11:01.mountd.asc; http://securitytracker.com/id?1025425
CVE: CVE-2011-1846
Published: 2011-05-03
Description: IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly revoke role membership from groups, which allows remote authenticated users to execute non-DDL statements by leveraging previous inherited possession of a role, a different vulnerability than CVE-2011-0757.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/44229; http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC71263; http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC71375
CVE: CVE-2011-1847
Published: 2011-05-03
Description: IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly enforce privilege requirements for table access, which allows remote authenticated users to modify SYSSTAT.TABLES statistics columns via an UPDATE statement.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/44229; http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC71413; http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC72119
CVE: CVE-2011-1303
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 does not properly handle floating objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=61502; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13705
CVE: CVE-2011-1304
Published: 2011-05-03
Description: Unspecified vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to bypass the pop-up blocker via vectors related to plug-ins.
CVSS Score: 5.0 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=70538; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14399
CVE: CVE-2011-1305
Published: 2011-05-03
Description: Race condition in Google Chrome before 11.0.696.57 on Linux and Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to linked lists and a database.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-362
References: http://code.google.com/p/chromium/issues/detail?id=70589; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14305
CVE: CVE-2011-1434
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 does not ensure thread safety during handling of MIME data, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=71586; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67141
CVE: CVE-2011-1435
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-276
References: http://code.google.com/p/chromium/issues/detail?id=72523; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67142
CVE: CVE-2011-1436
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 on Linux does not properly interact with the X Window System, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=72910; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14749
CVE: CVE-2011-1437
Published: 2011-05-03
Description: Multiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to float rendering.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://code.google.com/p/chromium/issues/detail?id=73526; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67144
CVE: CVE-2011-1438
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 allows remote attackers to bypass the Same Origin Policy via vectors involving blobs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=74653; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67145
CVE: CVE-2011-1439
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 on Linux does not properly isolate renderer processes, which has unspecified impact and remote attack vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=74763; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67146
CVE: CVE-2011-1440
Published: 2011-05-03
Description: Use-after-free vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the ruby element and Cascading Style Sheets (CSS) token sequences.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=75186; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html
CVE: CVE-2011-1441
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 does not properly perform a cast of an unspecified variable during handling of floating select lists, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-704
References: http://code.google.com/p/chromium/issues/detail?id=75347; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67148
CVE: CVE-2011-1442
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a denial of service (node tree corruption) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=75801; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67149
CVE: CVE-2011-1443
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 does not properly implement layering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=76001; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67150
CVE: CVE-2011-1444
Published: 2011-05-03
Description: Race condition in the sandbox launcher implementation in Google Chrome before 11.0.696.57 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-362
References: http://code.google.com/p/chromium/issues/detail?id=76542; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; http://www.debian.org/security/2011/dsa-2245
CVE: CVE-2011-1445
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 does not properly handle SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: http://code.google.com/p/chromium/issues/detail?id=76646; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67152
CVE: CVE-2011-1446
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 allows remote attackers to spoof the URL bar via vectors involving (1) a navigation error or (2) an interrupted load.
CVSS Score: 5.8 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=76666; http://code.google.com/p/chromium/issues/detail?id=77507; http://code.google.com/p/chromium/issues/detail?id=78031
CVE: CVE-2011-1447
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=76966; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67154
CVE: CVE-2011-1448
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 does not properly perform height calculations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=77130; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67155
CVE: CVE-2011-1449
Published: 2011-05-03
Description: Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=77346; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html
CVE: CVE-2011-1450
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 does not properly present file dialogs, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling pointers."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=77349; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67157
CVE: CVE-2011-1451
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling pointers."
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=77463; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html
CVE: CVE-2011-1452
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 allows user-assisted remote attackers to spoof the URL bar via vectors involving a redirect and a manual reload.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=77786; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67159
CVE: CVE-2011-1454
Published: 2011-05-03
Description: Use-after-free vulnerability in the DOM id handling functionality in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=79199; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67160
CVE: CVE-2011-1455
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 does not properly handle PDF documents with multipart encoding, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: http://code.google.com/p/chromium/issues/detail?id=79361; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67161
CVE: CVE-2011-1456
Published: 2011-05-03
Description: Google Chrome before 11.0.696.57 does not properly handle PDF forms, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=79364; http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/67162
CVE: CVE-2011-1604
Published: 2011-05-03
Description: Memory leak in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (memory consumption and process failure) via a malformed SIP message, aka Bug ID CSCti42904.
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.html; http://secunia.com/advisories/44331; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtml
CVE: CVE-2011-1605
Published: 2011-05-03
Description: Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su2, 8.0 before 8.0(3), and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP message, aka Bug ID CSCth39586.
CVSS Score: 7.8 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.html; http://secunia.com/advisories/44331; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtml
CVE: CVE-2011-1606
Published: 2011-05-03
Description: Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5)su1, 8.0 before 8.0(3), and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP message, aka Bug ID CSCtg62855.
CVSS Score: 7.8 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.html; http://secunia.com/advisories/44331; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtml
CVE: CVE-2011-1607
Published: 2011-05-03
Description: Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote authenticated users to upload files to arbitrary directories via a modified pathname in an upload request, aka Bug ID CSCti81603.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.html; http://secunia.com/advisories/44331; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtml
CVE: CVE-2011-1609
Published: 2011-05-03
Description: SQL injection vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5)su1, 8.0 before 8.0(3), and 8.5 before 8.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtg85647.
CVSS Score: 8.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.html; http://secunia.com/advisories/44331; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtml
CVE: CVE-2011-1610
Published: 2011-05-03
Description: Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5)su4, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1)su1 allow remote attackers to execute arbitrary SQL commands via the (1) f, (2) l, or (3) n parameter, aka Bug ID CSCtj42064.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.html; http://secunia.com/advisories/44331; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtml
CVE: CVE-2011-1613
Published: 2011-05-03
Description: Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0, 7.0 before 7.0.98.216, and 7.0.1xx before 7.0.112.0 allows remote attackers to cause a denial of service (device reload) via a sequence of ICMP packets, aka Bug ID CSCth74426.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/44384; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7950e.shtml; http://www.securityfocus.com/bid/47606
CVE: CVE-2011-1785
Published: 2011-05-03
Description: VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network traffic.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://kb.vmware.com/kb/1035108; http://lists.vmware.com/pipermail/security-announce/2011/000133.html; http://osvdb.org/72118
CVE: CVE-2011-1786
Published: 2011-05-03
Description: lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, allows remote attackers to cause a denial of service (daemon crash) via an Active Directory login attempt that provides a username containing an invalid byte sequence.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://kb.vmware.com/kb/1035108; http://lists.vmware.com/pipermail/security-announce/2011/000133.html; http://secunia.com/advisories/44349
CVE: CVE-2011-0340
Published: 2011-05-04
Description: Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers to execute arbitrary code via a long (1) InternationalOrder, (2) InternationalSeparator, or (3) LogFileName property value; or (4) a long bstrFileName argument to the OpenScreen method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://ics-cert.us-cert.gov/advisories/ICSA-12-249-03; http://secunia.com/advisories/42928; http://secunia.com/advisories/43116
CVE: CVE-2011-0714
Published: 2011-05-04
Description: Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 might allow remote attackers to cause a denial of service (crash) via malformed data in a packet, related to lockd and the svc_xprt_received function.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-399
References: http://openwall.com/lists/oss-security/2011/03/08/17; http://openwall.com/lists/oss-security/2011/03/09/1; https://bugzilla.redhat.com/show_bug.cgi?id=678144
CVE: CVE-2011-1209
Published: 2011-05-04
Description: IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.17 uses a weak WS-Security XML encryption algorithm, which makes it easier for remote attackers to obtain plaintext data from a (1) JAX-RPC or (2) JAX-WS Web Services request via unspecified vectors related to a "decryption attack."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM34841; http://www-01.ibm.com/support/docview.wss?uid=swg24029632; https://exchange.xforce.ibmcloud.com/vulnerabilities/67115
CVE: CVE-2011-1900
Published: 2011-05-04
Description: Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://www.indusoft.com/hotfixes/hotfixes.php; http://www.indusoft.com/hotfixes/hotfixes.php
CVE: CVE-2011-0756
Published: 2011-05-05
Description: The application server in Trustwave WebDefend Enterprise before 5.0 uses hardcoded console credentials, which makes it easier for remote attackers to read security-event data by using the remote console GUI to connect to the management port.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://securitytracker.com/id?1025447; https://www.trustwave.com/spiderlabs/advisories/TWSL2011-001.txt; http://securitytracker.com/id?1025447
CVE: CVE-2011-1207
Published: 2011-05-05
Description: The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a crafted Data argument, a different vulnerability than CVE-2007-3883.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-863
References: http://secunia.com/advisories/43399; http://secunia.com/advisories/43474; http://securitytracker.com/id?1025464
CVE: CVE-2011-1208
Published: 2011-05-05
Description: IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 (aka 6.3.49), and 6.5.x before 6.5 FP4 (aka 6.5.0.4) does not properly handle the (1) rpc_test_svc_readwrite and (2) rpc_test_svc_done commands, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted command.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/44380; http://securitytracker.com/id?1025451; http://www.ibm.com/support/docview.wss?uid=swg21496106