deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-2023
Published: 2011-07-14
Description: Cross-site scripting (XSS) vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://rhn.redhat.com/errata/RHSA-2012-0103.html; http://securitytracker.com/id?1025766
CVE: CVE-2011-2220
Published: 2011-07-14
Description: Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://download.novell.com/Download?buildid=leLxi7tQACs~; http://secunia.com/advisories/45065; http://securityreason.com/securityalert/8305
CVE: CVE-2011-2505
Published: 2011-07-14
Description: libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the SESSION superglobal array via a crafted request, related to a "remote variable manipulation vulnerability."
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-94
References: http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062719.html; http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=7ebd958b2bf59f96fecd5b3322bdbd0b244a7967
CVE: CVE-2011-2506
Published: 2011-07-14
Description: setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the ability to modify the SESSION superglobal array.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062719.html; http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=0fbedaf5fd7a771d0885c6b7385d934fc90d0d7f
CVE: CVE-2011-2507
Published: 2011-07-14
Description: libraries/server_synchronize.lib.php in the Synchronize implementation in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly quote regular expressions, which allows remote authenticated users to inject a PCRE e (aka PREG_REPLACE_EVAL) modifier, and consequently execute arbitrary PHP code, by leveraging the ability to modify the SESSION superglobal array.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://0x6a616d6573.blogspot.com/2011/07/phpmyadmin-fud.html; http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html; http://ha.xxor.se/2011/07/phpmyadmin-3x-pregreplace-rce-poc.html
CVE: CVE-2011-2508
Published: 2011-07-14
Description: Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in a GLOBALS[mime_map][$meta->name][transformation] parameter.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-22
References: http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062719.html; http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=b434320eff8ca9c2fc1b043c1804f868341af9a7
CVE: CVE-2011-2510
Published: 2011-07-14
Description: Cross-site scripting (XSS) vulnerability in the RSS embedding feature in DokuWiki before 2011-05-25a Rincewind allows remote attackers to inject arbitrary web script or HTML via a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631818; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062380.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062389.html
CVE: CVE-2011-2526
Published: 2011-07-14
Description: Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8824&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2771&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8404&w=2
CVE: CVE-2011-1222
Published: 2011-07-17
Description: Buffer overflow in the Journal Based Backup (JBB) feature in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4, 5.5.x before 5.5.3, 6.x before 6.1.4, and 6.2.x before 6.2.2 on Windows and AIX allows local users to gain privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/45098; http://securitytracker.com/id?1025741; http://www.ibm.com/support/docview.wss?uid=swg1IC77049
CVE: CVE-2011-1223
Published: 2011-07-17
Description: Buffer overflow in the Alternate Data Stream (aka ADS or named stream) functionality in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4, 5.5.x before 5.5.3, 6.x before 6.1.4, and 6.2.x before 6.2.2 on Windows allows local users to gain privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/45098; http://securitytracker.com/id?1025741; http://www.ibm.com/support/docview.wss?uid=swg1IC77052
CVE: CVE-2011-2501
Published: 2011-07-17
Description: The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data.  NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=65e6d5a34f49acdb362a0625a706c6b914e670af; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062720.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html
CVE: CVE-2011-2690
Published: 2011-07-17
Description: Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html; http://secunia.com/advisories/45046
CVE: CVE-2011-2691
Published: 2011-07-17
Description: The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=9dad5e37aef295b4ef8dea39392b652deebc9261; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html
CVE: CVE-2011-2692
Published: 2011-07-17
Description: The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted PNG image that triggers the reading of uninitialized memory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=61a2d8a2a7b03023e63eae9a3e64607aaaa6d339; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
CVE: CVE-2011-2750
Published: 2011-07-17
Description: NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://aluigi.org/adv/nfr_2-adv.txt; http://secunia.com/advisories/45071; http://securityreason.com/securityalert/8309
CVE: CVE-2011-2751
Published: 2011-07-17
Description: SQL injection vulnerability in Parodia before 6.809 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/45093; http://www.kb.cert.org/vuls/id/246310; http://secunia.com/advisories/45093
CVE: CVE-2011-2752
Published: 2011-07-17
Description: CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify or add preference values via a \n (newline) character, a different vulnerability than CVE-2010-4555.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-94
References: http://rhn.redhat.com/errata/RHSA-2012-0103.html; http://www.debian.org/security/2011/dsa-2291; http://www.mandriva.com/security/advisories?name=MDVSA-2011:123
CVE: CVE-2011-2753
Published: 2011-07-17
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://rhn.redhat.com/errata/RHSA-2012-0103.html; http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=revision&revision=14119; http://www.debian.org/security/2011/dsa-2291
CVE: CVE-2011-2754
Published: 2011-07-17
Description: Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager (WCM) and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/45106; http://www.ibm.com/support/docview.wss?uid=swg21503959; http://secunia.com/advisories/45106
CVE: CVE-2011-2755
Published: 2011-07-17
Description: Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.kb.cert.org/vuls/id/543310; http://www.kb.cert.org/vuls/id/543310
CVE: CVE-2011-2756
Published: 2011-07-17
Description: FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://www.kb.cert.org/vuls/id/543310; http://www.kb.cert.org/vuls/id/543310
CVE: CVE-2011-2757
Published: 2011-07-17
Description: Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the FILENAME parameter.  NOTE: this might overlap the US-CERT VU#543310 issue.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/17503/; http://www.exploit-db.com/exploits/17503/
CVE: CVE-2011-2758
Published: 2011-07-17
Description: IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a crafted URL.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://secunia.com/advisories/45107; http://www.ibm.com/support/docview.wss?crawler=1&uid=swg1IO14060; http://www.ibm.com/support/docview.wss?uid=swg1IO14060
CVE: CVE-2011-2759
Published: 2011-07-17
Description: The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?crawler=1&uid=swg1IO14165; http://www.ibm.com/support/docview.wss?uid=swg1IO14165; http://www.ibm.com/support/docview.wss?uid=swg24030320
CVE: CVE-2011-2760
Published: 2011-07-17
Description: Brocade BigIron RX switches allow remote attackers to bypass ACL rules by using 179 as the source port of a packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/73869; http://secunia.com/advisories/45217; http://www.kb.cert.org/vuls/id/853246
CVE: CVE-2010-4655
Published: 2011-07-18
Description: net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability for an ethtool ioctl call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b00916b189d13a615ff05c[PII_REDACTED]992fcda3; http://openwall.com/lists/oss-security/2011/01/24/9; http://openwall.com/lists/oss-security/2011/01/25/3
CVE: CVE-2010-4656
Published: 2011-07-18
Description: The iowarrior_write function in drivers/usb/misc/iowarrior.c in the Linux kernel before 2.6.37 does not properly allocate memory, which might allow local users to trigger a heap-based buffer overflow, and consequently cause a denial of service or gain privileges, via a long report.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3ed780117dbe5acb64280d218f0347f238dafed0; http://openwall.com/lists/oss-security/2011/01/24/9; http://openwall.com/lists/oss-security/2011/01/25/3
CVE: CVE-2010-3271
Published: 2011-07-18
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative console) in IBM WebSphere Application Server (WAS) 7.0.0.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that disable certain security options via an Edit action to console/adminSecurityDetail.do followed by a save action to console/syncworkspace.do.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://securityreason.com/securityalert/8281; http://www.coresecurity.com/content/IBM-WebSphere-CSRF; http://www.exploit-db.com/exploits/17404
CVE: CVE-2011-0548
Published: 2011-07-18
Description: Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security (SMS) 6.x through 8.x, Symantec Brightmail and Messaging Gateway before 9.5.1, and Symantec Data Loss Prevention (DLP) before 10.5.3 and 11.x before 11.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .prz file.  NOTE: this may overlap CVE-2011-1217.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/44779; http://securitytracker.com/id?1025594; http://securitytracker.com/id?1025595
CVE: CVE-2011-0726
Published: 2011-07-18
Description: The do_task_stat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the start_code and end_code fields in the /proc/#####/stat file for a process executing a PIE binary.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://downloads.avaya.com/css/P8/documents/100145416; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5883f57ca0008ffc93e09cbb9847a1928e50c6f3; http://rhn.redhat.com/errata/RHSA-2011-0833.html
CVE: CVE-2011-1093
Published: 2011-07-18
Description: The dccp_rcv_state_process function in net/dccp/input.c in the Datagram Congestion Control Protocol (DCCP) implementation in the Linux kernel before 2.6.38 does not properly handle packets for a CLOSED endpoint, which allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending a DCCP-Close packet followed by a DCCP-Reset packet.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://downloads.avaya.com/css/P8/documents/100145416; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=720dc34bbbe9493c7bd48b2243058b4e447a929d; http://openwall.com/lists/oss-security/2011/03/08/19
CVE: CVE-2011-1331
Published: 2011-07-18
Description: JustSystems Ichitaro 2005 through 2011, Ichitaro Government 6, Ichitaro Government 2006 through 2010, Ichitaro Portable, Ichitaro Pro, and Ichitaro Viewer allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document, as exploited in the wild in early 2011.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://jvn.jp/en/jp/JVN87239473/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000043; http://secunia.com/advisories/44956
CVE: CVE-2011-2761
Published: 2011-07-18
Description: Google Chrome 14.0.794.0 does not properly handle a reload of a page generated in response to a POST, which allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web site, related to GetWidget methods.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://code.google.com/p/chromium/issues/detail?id=86119; http://codereview.chromium.org/7189019; http://googlechromereleases.blogspot.com/2011/06/dev-channel-update_16.html
CVE: CVE-2011-0770
Published: 2011-07-19
Description: Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securitytracker.com/id?1025791; http://www.kb.cert.org/vuls/id/122054; http://www.securityfocus.com/bid/48694
CVE: CVE-2011-1355
Published: 2011-07-19
Description: Open redirect vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage parameter.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg1PM35701; http://www.ibm.com/support/docview.wss?uid=swg1PM42436; https://exchange.xforce.ibmcloud.com/vulnerabilities/68570
CVE: CVE-2011-1356
Published: 2011-07-19
Description: IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg1PM36620; http://www.ibm.com/support/docview.wss?uid=swg1PM42436; http://www.securityfocus.com/bid/48709
CVE: CVE-2011-1741
Published: 2011-07-19
Description: Stack-based buffer overflow in ftserver.exe in the OpenText Hummingbird Client Connector, as used in the Indexing Server in EMC Documentum eRoom 7.x before 7.4.3.f and other products, allows remote attackers to execute arbitrary code by sending a crafted message over TCP.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/8311; http://securitytracker.com/id?1025790; http://www.securityfocus.com/archive/1/518897/100/0/threaded
CVE: CVE-2011-2385
Published: 2011-07-19
Description: The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/73885; http://otrs.org/advisory/OSA-2011-02-en/; http://secunia.com/advisories/45227
CVE: CVE-2011-2528
Published: 2011-07-19
Description: Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly serious vulnerability." NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-0720.
CVSS Score: 7.5 (HIGH)
References: http://plone.org/products/plone-hotfix/releases/20110622; http://plone.org/products/plone/security/advisories/20110622; http://secunia.com/advisories/45056
CVE: CVE-2011-2744
Published: 2011-07-19
Description: Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F (encoded dot dot slash) in the action parameter to the default URI.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/73890; http://secunia.com/advisories/45184; http://securityreason.com/securityalert/8312
CVE: CVE-2011-2743
Published: 2011-07-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to (1) the default URI or (2) includes/javascript.php, or the (3) title or (4) body parameter to admin/help.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/73887; http://osvdb.org/73888; http://osvdb.org/73889
CVE: CVE-2011-2779
Published: 2011-07-19
Description: Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/122054; https://exchange.xforce.ibmcloud.com/vulnerabilities/68855; http://www.kb.cert.org/vuls/id/122054
CVE: CVE-2011-2780
Published: 2011-07-19
Description: Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, a different vulnerability than CVE-2011-2744.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/73891; http://secunia.com/advisories/45184; http://securityreason.com/securityalert/8312
CVE: CVE-2011-0226
Published: 2011-07-19
Description: Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html