deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-0130
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0131
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0132
Published: 2011-03-03
Description: Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets (CSS) 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0133
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with pseudo-elements, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0134
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0135
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0136
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0137
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0138
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0139
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html; http://support.apple.com/kb/HT4554
CVE: CVE-2011-0140
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0141
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0142
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0143
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0144
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0145
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0146
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0147
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0148
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0149
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly parse HTML elements associated with document namespaces, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to a "dangling pointer" and iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0150
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0151
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0152
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0153
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0154
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows and Apple iOS, does not properly implement the .sort function for JavaScript arrays, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0155
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0156
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0164
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0165
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html; http://support.apple.com/kb/HT4554
CVE: CVE-2011-0168
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0170
Published: 2011-03-03
Description: Heap-based buffer overflow in ImageIO in CoreGraphics in Apple iTunes before 10.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted International Color Consortium (ICC) profile in a JPEG image.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=897; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0191
Published: 2011-03-03
Description: Buffer overflow in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with JPEG encoding.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html
CVE: CVE-2011-0192
Published: 2011-03-03
Description: Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF Internet Fax image file that has been compressed using CCITT Group 4 encoding, related to the EXPAND2D macro in libtiff/tif_fax3.h.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blackberry.com/btsc/KB27244; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html
CVE: CVE-2011-1073
Published: 2011-03-04
Description: crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary file and (2) perform MD5 checksum comparisons on arbitrary pairs of files via two symlink attacks on /tmp/crontab.XXXXXXXXXX temporary files.
CVSS Score: 1.9 (LOW)
CWE: CWE-59
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8897&w=2; http://openwall.com/lists/oss-security/2011/02/28/14; http://openwall.com/lists/oss-security/2011/02/28/6
CVE: CVE-2011-1074
Published: 2011-03-04
Description: crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8897&w=2; http://openwall.com/lists/oss-security/2011/02/28/14; http://openwall.com/lists/oss-security/2011/02/28/6
CVE: CVE-2009-3028
Published: 2011-03-07
Description: The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of arbitrary files and possibly execute arbitrary code via the DownloadAndInstall method.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/36679; http://www.osvdb.org/57893; http://www.securityfocus.com/bid/36346
CVE: CVE-2011-0064
Published: 2011-03-07
Description: The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via crafted OpenType font data that triggers use of an incorrect index.
CVSS Score: 6.8 (MEDIUM)
References: http://cgit.freedesktop.org/harfbuzz/commit/?id=a6a79df5fe2ed2cd307e7a991346faee164e70d9; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056065.html; http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
CVE: CVE-2011-0279
Published: 2011-03-07
Description: HP Multifunction Peripheral (MFP) Digital Sending Software (DSS) 4.91.00 does not properly configure authentication settings of managed devices within device templates, which allows attackers to access these devices via actions that were intended to require authentication.
CVSS Score: 2.1 (LOW)
CWE: CWE-287
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104; http://secunia.com/advisories/43618; http://www.securityfocus.com/bid/46679