rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-1426 
The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, launches a default handler for the filename specified in the first argument, which allows remote attackers to execute arbitrary code via a .rnx filename corresponding to a crafted RNX file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-18T18:00:00.000Z
CVE-2011-1427 
Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Language parameter to Pages/login.aspx, (2) HeaderWarning parameter to Troubleshooting/DiagnosticReport.asp, or (3) User-Agent header to troubleshooting/speedtest.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-15T17:00:00.000Z
CVE-2011-1428 
Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and earlier does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL chat server via an arbitrary certificate, related to incorrect use of the GnuTLS API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-16T22:00:00.000Z
CVE-2011-1429 
Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-16T22:00:00.000Z
CVE-2011-1430 
The STARTTLS implementation in the server in Ipswitch IMail 11.03 and earlier does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-16T22:00:00.000Z
CVE-2011-1431 
The STARTTLS implementation in qmail-smtpd.c in qmail-smtpd in the netqmail-1.06-tls patch for netqmail 1.06 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-16T22:00:00.000Z
CVE-2011-1432 
The STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-16T22:00:00.000Z
CVE-2011-1433 
The (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS) before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the _UserLogin and _UserPW fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-18T16:00:00.000Z
CVE-2011-1434 
Google Chrome before 11.0.696.57 does not ensure thread safety during handling of MIME data, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1435 
Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1436 
Google Chrome before 11.0.696.57 on Linux does not properly interact with the X Window System, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1437 
Multiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to float rendering.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1438 
Google Chrome before 11.0.696.57 allows remote attackers to bypass the Same Origin Policy via vectors involving blobs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1439 
Google Chrome before 11.0.696.57 on Linux does not properly isolate renderer processes, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1440 
Use-after-free vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the ruby element and Cascading Style Sheets (CSS) token sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1441 
Google Chrome before 11.0.696.57 does not properly perform a cast of an unspecified variable during handling of floating select lists, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1442 
Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a denial of service (node tree corruption) or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1443 
Google Chrome before 11.0.696.57 does not properly implement layering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1444 
Race condition in the sandbox launcher implementation in Google Chrome before 11.0.696.57 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1445 
Google Chrome before 11.0.696.57 does not properly handle SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1446 
Google Chrome before 11.0.696.57 allows remote attackers to spoof the URL bar via vectors involving (1) a navigation error or (2) an interrupted load.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1447 
Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1448 
Google Chrome before 11.0.696.57 does not properly perform height calculations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1449 
Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1450 
Google Chrome before 11.0.696.57 does not properly present file dialogs, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling pointers."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1451 
Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling pointers."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1452 
Google Chrome before 11.0.696.57 allows user-assisted remote attackers to spoof the URL bar via vectors involving a redirect and a manual reload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1453 
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-21T23:00:00.000Z
CVE-2011-1454 
Use-after-free vulnerability in the DOM id handling functionality in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1455 
Google Chrome before 11.0.696.57 does not properly handle PDF documents with multipart encoding, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1456 
Google Chrome before 11.0.696.57 does not properly handle PDF forms, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1457 
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-21T23:00:00.000Z
CVE-2011-1459 
The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service (crash) via the htmlpluginelement.cpp plugin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-05T22:16:57.000Z
CVE-2011-1460 
WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-05T22:04:15.000Z
CVE-2011-1462 
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-21T23:00:00.000Z
CVE-2011-1464 
Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-20T01:00:00.000Z
CVE-2011-1465 
The SPDY implementation in net/http/http_network_transaction.cc in Google Chrome before 11.0.696.14 drains the bodies from SPDY responses, which might allow remote SPDY servers to cause a denial of service (application exit) by canceling a stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-20T01:00:00.000Z
CVE-2011-1466 
Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-20T01:00:00.000Z
CVE-2011-1467 
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-20T01:00:00.000Z
CVE-2011-1468 
Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-20T01:00:00.000Z
CVE-2011-1469 
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-20T01:00:00.000Z
CVE-2011-1470 
The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-20T01:00:00.000Z
CVE-2011-1471 
Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-20T01:00:00.000Z
CVE-2011-1472 
The Nokia E75 phone with firmware before 211.12.01 allows physically proximate attackers to bypass the Device Lock code by entering an unspecified button sequence at boot time.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-29T18:00:00.000Z
CVE-2011-1473 
OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-5094.  NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-16T21:00:00.000Z
CVE-2011-1474 
A locally locally exploitable DOS vulnerability was found in pax-linux versions 2.6.32.33-test79.patch, 2.6.38-test3.patch, and 2.6.37.4-test14.patch. A bad bounds check in arch_get_unmapped_area_topdown triggered by programs doing an mmap after a MAP_GROWSDOWN mmap will create an infinite loop condition without releasing the VM semaphore eventually leading to a system crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T18:44:27.000Z
CVE-2011-1475 
The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for requests from different users."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-08T15:00:00.000Z
CVE-2011-1476 
Integer underflow in the Open Sound System (OSS) subsystem in the Linux kernel before 2.6.39 on unspecified non-x86 platforms allows local users to cause a denial of service (memory corruption) by leveraging write access to /dev/sequencer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-21T23:00:00.000Z
CVE-2011-1477 
Multiple array index errors in sound/oss/opl3.c in the Linux kernel before 2.6.39 allow local users to cause a denial of service (heap memory corruption) or possibly gain privileges by leveraging write access to /dev/sequencer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-21T23:00:00.000Z
CVE-2011-1478 
The napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation in the Linux kernel before 2.6.38 does not reset the values of certain structure members, which might allow remote attackers to cause a denial of service (NULL pointer dereference) via a malformed VLAN frame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-23T10:00:00.000Z
CVE-2011-1479 
Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-21T23:00:00.000Z
CVE-2011-1480 
SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the chng_uid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-21T01:00:00.000Z
CVE-2011-1481 
Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sender_name or (2) sender_email parameter in a Feedback action to modules.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-21T01:00:00.000Z
CVE-2011-1482 
Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts or (2) grant the administrative privilege to a user account, related to a Referer check that uses a substring comparison.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-21T01:00:00.000Z
CVE-2011-1483 
wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-28T18:00:00.000Z
CVE-2011-1484 
jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-27T01:00:00.000Z
CVE-2011-1485 
Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-31T20:00:00.000Z
CVE-2011-1486 
libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash) by causing multiple threads to report errors at the same time.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-31T20:00:00.000Z
CVE-2011-1487 
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-11T18:00:00.000Z
CVE-2011-1488 
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time.
Problem types: description: Memory Leak
Affected products: vendor: rsyslog
product: rsyslog
Published: 2019-11-14T01:15:49.000Z
CVE-2011-1489 
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.
Problem types: description: Memory Leak
Affected products: vendor: rsyslog
product: rsyslog
Published: 2019-11-14T01:25:49.000Z
CVE-2011-1490 
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset
Problem types: description: Memory Leak
Affected products: vendor: rsyslog
product: rsyslog
Published: 2019-11-14T01:37:43.000Z