deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-4448
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to Networking.  NOTE: the previous information was obtained from the February 2011 CPU.  Oracle has not commented on claims from a downstream vendor that this issue involves "DNS cache poisoning by untrusted applets."
CVSS Score: 2.6 (LOW)
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html; http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html
CVE: CVE-2010-4450
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Solaris and Linux; 5.0 Update 27 and earlier for Solaris and Linux; and 1.4.2_29 and earlier for Solaris and Linux allows local standalone applications to affect confidentiality, integrity, and availability via unknown vectors related to Launcher.  NOTE: the previous information was obtained from the February 2011 CPU.  Oracle has not commented on claims from a downstream vendor that this issue is an untrusted search path vulnerability involving an empty LD_LIBRARY_PATH environment variable.
CVSS Score: 3.7 (LOW)
References: http://dbhole.wordpress.com/2011/02/15/icedtea-web-1-0-1-released/; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html
CVE: CVE-2010-4451
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, when using Java Update, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.
CVSS Score: 7.6 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2612&w=2; http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html
CVE: CVE-2010-4452
Published: 2011-02-17
Description: Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2612&w=2; http://secunia.com/advisories/44954
CVE: CVE-2010-4454
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound and unspecified APIs, a different vulnerability than CVE-2010-4462 and CVE-2010-4473.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6190&w=2
CVE: CVE-2010-4462
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound and unspecified APIs, a different vulnerability than CVE-2010-4454 and CVE-2010-4473.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6190&w=2
CVE: CVE-2010-4463
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 21 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2612&w=2; http://secunia.com/advisories/44954
CVE: CVE-2010-4465
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Swing.  NOTE: the previous information was obtained from the February 2011 CPU.  Oracle has not commented on claims from a downstream vendor that this issue is related to the lack of framework support by AWT event dispatch, and/or "clipboard access in Applets."
CVSS Score: 10.0 (HIGH)
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html; http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html
CVE: CVE-2010-4466
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, Solaris, and, Linux; 5.0 Update 27 and earlier for Windows; and 1.4.2_29 and earlier for Windows allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Deployment.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2
CVE: CVE-2010-4467
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 10 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2612&w=2; http://secunia.com/advisories/44954
CVE: CVE-2010-4468
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to JDBC.
CVSS Score: 4.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2612&w=2; http://secunia.com/advisories/44954
CVE: CVE-2010-4469
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot.  NOTE: the previous information was obtained from the February 2011 CPU.  Oracle has not commented on claims from a downstream vendor that this issue is heap corruption related to the Verifier and "backward jsrs."
CVSS Score: 10.0 (HIGH)
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6190&w=2
CVE: CVE-2010-4470
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs.  NOTE: the previous information was obtained from the February 2011 CPU.  Oracle has not commented on claims from a downstream vendor that this issue is related to "Features set on SchemaFactory not inherited by Validator."
CVSS Score: 5.0 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2
CVE: CVE-2010-4471
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to 2D.  NOTE: the previous information was obtained from the February 2011 CPU.  Oracle has not commented on claims from a downstream vendor that this issue is related to the exposure of system properties via vectors related to Font.createFont and exception text.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2
CVE: CVE-2010-4472
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect availability, related to XML Digital Signature and unspecified APIs.  NOTE: the previous information was obtained from the February 2011 CPU.  Oracle has not commented on claims from a downstream vendor that this issue involves the replacement of the "XML DSig Transform or C14N algorithm implementations."
CVSS Score: 2.6 (LOW)
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2
CVE: CVE-2010-4473
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound and unspecified APIs, a different vulnerability than CVE-2010-4454 and CVE-2010-4462.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6190&w=2
CVE: CVE-2010-4474
Published: 2011-02-17
Description: Unspecified vulnerability in the Java DB component in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows local users to affect confidentiality via unknown vectors related to Security, a similar vulnerability to CVE-2009-4269.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2612&w=2; http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html
CVE: CVE-2010-4475
Published: 2011-02-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Deployment, a different vulnerability than CVE-2010-4447.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6190&w=2
CVE: CVE-2010-4476
Published: 2011-02-17
Description: The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2[PII_REDACTED]072012e-308.
CVSS Score: 5.0 (MEDIUM)
References: http://blog.fortify.com/blog/2011/02/08/Double-Trouble; http://blogs.oracle.com/security/2011/02/security_alert_for_cve-2010-44.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053926.html
CVE: CVE-2010-3441
Published: 2011-02-18
Description: Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via (1) a crafted input file, related to the PUT0 and PUT1 output macros; (2) a crafted input file, related to the trim_title function; and possibly (3) a long -O option on a command line.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577014; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054015.html; http://moinejf.free.fr/abcm2ps-5.txt
CVE: CVE-2011-0453
Published: 2011-02-18
Description: F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI port.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://jvn.jp/en/jp/JVN71542734/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000013; http://osvdb.org/70898
CVE: CVE-2011-1042
Published: 2011-02-18
Description: Use-after-free vulnerability in flimflamd in flimflam in Google Chrome OS before 0.9.130.14 Beta allows user-assisted remote attackers to cause a denial of service (daemon crash) by providing the name of a hidden WiFi network that does not respond to connection attempts.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://code.google.com/p/chromium-os/issues/detail?id=8871; http://codereview.chromium.org/5255012; http://googlechromereleases.blogspot.com/2011/01/chrome-os-beta-channel-update.html
CVE: CVE-2010-4741
Published: 2011-02-18
Description: Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrary code via crafted data in a session on TCP port 54321.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://reversemode.com/index.php?option=com_content&task=view&id=70&Itemid=1; http://www.kb.cert.org/vuls/id/237495; http://www.kb.cert.org/vuls/id/MORO-8D9JX8
CVE: CVE-2010-4742
Published: 2011-02-18
Description: Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://reversemode.com/index.php?option=com_content&task=view&id=70&Itemid=1; http://www.metasploit.com/modules/exploit/windows/fileformat/moxa_mediadbplayback; http://www.osvdb.org/68986
CVE: CVE-2010-4743
Published: 2011-02-18
Description: Heap-based buffer overflow in the getarena function in abc2ps.c in abcm2ps before 5.9.13 might allow remote attackers to execute arbitrary code via a crafted ABC file, a different vulnerability than CVE-2010-3441.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577014; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054015.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054424.html
CVE: CVE-2010-4744
Published: 2011-02-18
Description: Multiple unspecified vulnerabilities in abcm2ps before 5.9.13 have unknown impact and attack vectors, a different issue than CVE-2010-3441.
CVSS Score: 10.0 (HIGH)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577014; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054015.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054424.html
CVE: CVE-2010-4649
Published: 2011-02-18
Description: Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large value of a certain structure member.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-190
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7182afea8d1afd432a17c18162cc3fd441d0da93; http://rhn.redhat.com/errata/RHSA-2011-0927.html; http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37
CVE: CVE-2011-0709
Published: 2011-02-18
Description: The br_mdb_ip_get function in net/bridge/br_multicast.c in the Linux kernel before 2.6.35-rc5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an IGMP packet, related to lack of a multicast table.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7f285fa78d4b81b8458f05e77fb6b46245121b4e; http://openwall.com/lists/oss-security/2011/02/16/1; http://openwall.com/lists/oss-security/2011/02/16/14
CVE: CVE-2011-0710
Published: 2011-02-18
Description: The task_show_regs function in arch/s390/kernel/traps.c in the Linux kernel before 2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=261cd298a8c363d7985e3482946edb4bfedacf98; http://openwall.com/lists/oss-security/2011/02/16/3; http://openwall.com/lists/oss-security/2011/02/16/9
CVE: CVE-2011-0712
Published: 2011-02-18
Description: Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120
References: http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=eaae55dac6b64c[PII_REDACTED]b294e69fc5311581; http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110215.bz2; http://www.openwall.com/lists/oss-security/2011/02/16/11
CVE: CVE-2011-1044
Published: 2011-02-18
Description: The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially filled, a different vulnerability than CVE-2010-4649.
CVSS Score: 2.1 (LOW)
CWE: CWE-909
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7182afea8d1afd432a17c18162cc3fd441d0da93; http://rhn.redhat.com/errata/RHSA-2011-0927.html; http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37
CVE: CVE-2010-4323
Published: 2011-02-19
Description: Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1, 10.3.2, and 11.0, and earlier versions, allows remote attackers to execute arbitrary code via a long TFTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/43379; http://securityreason.com/securityalert/8092; http://securityreason.com/securityalert/8094
CVE: CVE-2010-4328
Published: 2011-02-19
Description: Multiple stack-based buffer overflows in opt/novell/iprint/bin/ipsmd in Novell iPrint for Linux Open Enterprise Server 2 SP2 and SP3 allow remote attackers to execute arbitrary code via unspecified LPR opcodes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://download.novell.com/Download?buildid=KloKR_CmrBs~; http://osvdb.org/70852; http://secunia.com/advisories/43281
CVE: CVE-2011-0013
Published: 2011-02-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3566&w=2
CVE: CVE-2011-0014
Published: 2011-02-19
Description: ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-002.txt.asc; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
CVE: CVE-2011-0050
Published: 2011-02-19
Description: Cross-site scripting (XSS) vulnerability in the nonjs interface (interfaces/nonjs.pm) in CGI:IRC before 0.5.10 allows remote attackers to inject arbitrary web script or HTML via the R parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/70844; http://secunia.com/advisories/43217; http://securityreason.com/securityalert/8097
CVE: CVE-2011-0364
Published: 2011-02-19
Description: The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/43383; http://secunia.com/advisories/43393; http://securityreason.com/securityalert/8095
CVE: CVE-2011-0420
Published: 2011-02-19
Description: The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://securityreason.com/achievement_securityalert/94; http://securityreason.com/securityalert/8087
CVE: CVE-2011-0430
Published: 2011-02-19
Description: Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to cause a denial of service and execute arbitrary code via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/43371; http://secunia.com/advisories/43407; http://www.debian.org/security/2011/dsa-2168