rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-3872 
Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent certificate, adds the Puppet master's certdnsnames values to the X.509 Subject Alternative Name field of the certificate, which allows remote attackers to spoof a Puppet master via a man-in-the-middle (MITM) attack against an agent that uses an alternate DNS name for the master, aka "AltNames Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-27T20:00:00.000Z
CVE-2011-3873 
Google Chrome before 14.0.835.202 does not properly implement shader translation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-04T20:00:00.000Z
CVE-2011-3874 
Stack-based buffer overflow in libsysutils in Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6 allows user-assisted remote attackers to execute arbitrary code via an application that calls the FrameworkListener::dispatchCommand method with the wrong number of arguments, as demonstrated by zergRush to trigger a use-after-free error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-27T15:00:00.000Z
CVE-2011-3875 
Google Chrome before 15.0.874.102 does not properly handle drag and drop operations on URL strings, which allows user-assisted remote attackers to spoof the URL bar via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3876 
Google Chrome before 15.0.874.102 does not properly handle downloading files that have whitespace characters at the end of a filename, which has unspecified impact and user-assisted remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3877 
Cross-site scripting (XSS) vulnerability in the appcache internals page in Google Chrome before 15.0.874.102 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3878 
Race condition in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to worker process initialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3879 
Google Chrome before 15.0.874.102 does not prevent redirects to chrome: URLs, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3880 
Google Chrome before 15.0.874.102 does not prevent use of an unspecified special character as a delimiter in HTTP headers, which has unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3881 
WebKit, as used in Google Chrome before 15.0.874.102 and Android before 4.4, allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors related to (1) the DOMWindow::clear function and use of a selection object, (2) the Object::GetRealNamedPropertyInPrototypeChain function and use of an __proto__ property, (3) the HTMLPlugInImageElement::allowedToLoadFrameURL function and use of a javascript: URL, (4) incorrect origins for XSLT-generated documents in the XSLTProcessor::createDocumentFromSource function, and (5) improper handling of synchronous frame loads in the ScriptController::executeIfJavaScriptURL function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3882 
Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to media buffers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3883 
Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to counters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3884 
Google Chrome before 15.0.874.102 does not properly address timing issues during DOM traversal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3885 
Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to stale Cascading Style Sheets (CSS) token-sequence data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3886 
Google V8, as used in Google Chrome before 15.0.874.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers out-of-bounds write operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3887 
Google Chrome before 15.0.874.102 does not properly handle javascript: URLs, which allows remote attackers to bypass intended access restrictions and read cookies via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3888 
Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to editing operations in conjunction with an unknown plug-in.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3889 
Heap-based buffer overflow in the Web Audio implementation in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3890 
Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to video source handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3891 
Google Chrome before 15.0.874.102 does not properly restrict access to internal Google V8 functions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-25T19:00:00.000Z
CVE-2011-3892 
Double free vulnerability in the Theora decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-11T11:00:00.000Z
CVE-2011-3893 
Google Chrome before 15.0.874.120 does not properly implement the MKV and Vorbis media handlers, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-11T11:00:00.000Z
CVE-2011-3894 
Google Chrome before 15.0.874.120 does not properly perform VP8 decoding, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-11T11:00:00.000Z
CVE-2011-3895 
Heap-based buffer overflow in the Vorbis decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-11T11:00:00.000Z
CVE-2011-3896 
Buffer overflow in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to shader variable mapping.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-11T11:00:00.000Z
CVE-2011-3897 
Use-after-free vulnerability in Google Chrome before 15.0.874.120 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to editing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-11T11:00:00.000Z
CVE-2011-3898 
Google Chrome before 15.0.874.120, when Java Runtime Environment (JRE) 7 is used, does not request user confirmation before applet execution begins, which allows remote attackers to have an unspecified impact via a crafted applet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-11T11:00:00.000Z
CVE-2011-3900 
Google V8, as used in Google Chrome before 15.0.874.121, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-17T23:00:00.000Z
CVE-2011-3901 
Android SQLite Journal before 4.0.1 has an information disclosure vulnerability.
Problem types: description: Information Disclosure
Affected products: vendor: Google
product: Android
Published: 2020-02-12T19:43:12.000Z
CVE-2011-3903 
Google Chrome before 16.0.912.63 does not properly perform regex matching, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3904 
Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to bidirectional text (aka bidi) handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3905 
libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3906 
The PDF parser in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3907 
The view-source feature in Google Chrome before 16.0.912.63 allows remote attackers to spoof the URL bar via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3908 
Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3909 
The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property arrays, which allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3910 
Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3911 
Google Chrome before 16.0.912.63 does not properly handle PDF documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3912 
Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG filters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3913 
Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to Range handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3914 
The internationalization (aka i18n) functionality in Google V8, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3915 
Buffer overflow in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF fonts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3916 
Google Chrome before 16.0.912.63 does not properly handle PDF cross references, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3917 
Stack-based buffer overflow in FileWatcher in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T21:00:00.000Z
CVE-2011-3918 
The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs, which allows remote attackers to cause a denial of service (reboot loop) via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-07T15:00:00.000Z
CVE-2011-3919 
Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-07T11:00:00.000Z
CVE-2011-3921 
Use-after-free vulnerability in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving animation frames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-07T11:00:00.000Z
CVE-2011-3922 
Stack-based buffer overflow in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to glyph handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-07T11:00:00.000Z
CVE-2011-3923 
Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.
Problem types: description: Other
Affected products: vendor: Apache
product: Struts
Published: 2019-11-01T13:57:37.000Z
CVE-2011-3924 
Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM selections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-24T02:00:00.000Z
CVE-2011-3925 
Use-after-free vulnerability in the Safe Browsing feature in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors related to a navigation entry and an interstitial page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-24T02:00:00.000Z
CVE-2011-3926 
Heap-based buffer overflow in the tree builder in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-24T02:00:00.000Z
CVE-2011-3927 
Skia, as used in Google Chrome before 16.0.912.77, does not perform all required initialization of values, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-24T02:00:00.000Z
CVE-2011-3928 
Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-24T02:00:00.000Z
CVE-2011-3929 
The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly execute arbitrary code via a crafted DV file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-20T18:00:00.000Z
CVE-2011-3934 
Double free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-09T11:00:00.000Z
CVE-2011-3935 
The codec_get_buffer function in ffmpeg.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to a crafted image size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-09T11:00:00.000Z
CVE-2011-3936 
The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DV file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-20T18:00:00.000Z
CVE-2011-3937 
The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 has unspecified impact and attack vectors related to "width/height changing with frame threads."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-05T00:00:00.000Z
CVE-2011-3940 
nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted NSV file that triggers "use of uninitialized streams."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-20T18:00:00.000Z
CVE-2011-3941 
The decode_mb function in libavcodec/error_resilience.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index, which triggers an out-of-bounds write.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-09T11:00:00.000Z
CVE-2011-3944 
The smacker_decode_header_tree function in libavcodec/smacker.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Smacker data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-09T11:00:00.000Z
CVE-2011-3945 
The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted media file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-20T20:00:00.000Z
CVE-2011-3946 
The ff_h264_decode_sei function in libavcodec/h264_sei.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Supplemental enhancement information (SEI) data, which triggers an infinite loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-09T11:00:00.000Z
CVE-2011-3947 
Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MJPEG-B file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-20T18:00:00.000Z
CVE-2011-3949 
The dirac_unpack_idwt_params function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Dirac data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-09T11:00:00.000Z
CVE-2011-3950 
The dirac_decode_data_unit function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via a crafted value in the reference pictures number.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-09T11:00:00.000Z
CVE-2011-3951 
The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted stereo stream in a media file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-20T18:00:00.000Z
CVE-2011-3952 
The decode_init function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large palette size in a KMVC encoded file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-20T18:00:00.000Z