rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-4862 
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-25T01:00:00.000Z
CVE-2011-4863 
The Tencent QQPimSecure (com.tencent.qqpimsecure) application 3.0.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS/MMS messages and a contact list via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-25T02:00:00.000Z
CVE-2011-4864 
The Tencent MobileQQ (com.tencent.mobileqq) application 2.2 for Android does not properly protect data, which allows remote attackers to read or modify messages and a friends list via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-25T02:00:00.000Z
CVE-2011-4865 
The Tencent WBlog (com.tencent.WBlog) 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-25T02:00:00.000Z
CVE-2011-4866 
The Kaixin001 (com.kaixin001.activity) application 1.3.1 and 1.3.3 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a cleartext password via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-25T02:00:00.000Z
CVE-2011-4867 
The Tencent QQPhoto (com.tencent.qqphoto) application 0.97 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a password hash via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-25T02:00:00.000Z
CVE-2011-4868 
The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets related to a lease-status update.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-15T02:00:00.000Z
CVE-2011-4869 
validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-20T11:00:00.000Z
CVE-2011-4870 
Multiple buffer overflows in the (1) GUIControls, (2) BatchObjSrv, and (3) BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, allow remote attackers to execute arbitrary code via a long string in a property value, a different issue than CVE-2011-3141.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-08T00:00:00.000Z
CVE-2011-4871 
Open Automation Software OPC Systems.NET before 5.0 allows remote attackers to cause a denial of service via a malformed .NET RPC packet on TCP port 58723.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-18T10:00:00.000Z
CVE-2011-4872 
Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a crafted application that uses the android.permission.ACCESS_WIFI_STATE permission to call the toString method on the WifiConfiguration class.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-05T11:00:00.000Z
CVE-2011-4873 
Unspecified vulnerability in the server in Certec EDV atvise before 2.1 allows remote attackers to cause a denial of service (daemon crash) via crafted requests to TCP port 4840.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-19T15:00:00.000Z
CVE-2011-4874 
Use-after-free vulnerability in MICROSYS PROMOTIC before 8.1.7 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (data corruption and application crash) via a crafted project (aka .pra) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-13T10:00:00.000Z
CVE-2011-4875 
Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute arbitrary code via vectors related to Unicode strings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-03T20:00:00.000Z
CVE-2011-4876 
Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute, read, create, modify, or delete arbitrary files via a .. (dot dot) in a string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-03T20:00:00.000Z
CVE-2011-4877 
HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to cause a denial of service (application crash) by sending crafted data over TCP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-03T20:00:00.000Z
CVE-2011-4878 
Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to read arbitrary files via a ..%5c (dot dot backslash) in a URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-03T20:00:00.000Z
CVE-2011-4879 
miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not properly handle URIs beginning with a 0xfa character, which allows remote attackers to read data from arbitrary memory locations or cause a denial of service (application crash) via a crafted POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-03T20:00:00.000Z
CVE-2011-4880 
Directory traversal vulnerability in the web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to read arbitrary files via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-13T10:00:00.000Z
CVE-2011-4881 
The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly check return values from functions, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-13T10:00:00.000Z
CVE-2011-4882 
The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to cause a denial of service (application exit) via an unspecified command in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-13T10:00:00.000Z
CVE-2011-4883 
The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly validate values in HTTP requests, which allows remote attackers to cause a denial of service (resource consumption) via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-13T10:00:00.000Z
CVE-2011-4885 
PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-30T01:00:00.000Z
CVE-2011-4887 
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-09-11T14:00:00.000Z
CVE-2011-4889 
The javax.naming.directory.AttributeInUseException class in the Virtual Member Manager in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.43, 7.0 before 7.0.0.21, and 8.0 before 8.0.0.2 does not properly update passwords on a configuration using Tivoli Directory Server, which might allow remote attackers to gain access to an application by leveraging knowledge of an old password. IBM X-Force ID: 72581.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-08T23:00:00.000Z
CVE-2011-4890 
The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a subquery.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-21T11:00:00.000Z
CVE-2011-4894 
Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-23T02:00:00.000Z
CVE-2011-4895 
Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-23T02:00:00.000Z
CVE-2011-4896 
Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-23T02:00:00.000Z
CVE-2011-4897 
Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-23T02:00:00.000Z
CVE-2011-4898 
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on whether the MySQL credentials are valid, which makes it easier for remote attackers to conduct brute-force attacks via a series of requests with different uname and pwd parameters.  NOTE: the vendor disputes the significance of this issue; also, it is unclear whether providing intentionally vague error messages during installation would be reasonable from a usability perspective
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-30T17:00:00.000Z
CVE-2011-4899 
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which allows remote attackers to configure an arbitrary database via the dbhost and dbname parameters, and subsequently conduct static code injection and cross-site scripting (XSS) attacks via (1) an HTTP request or (2) a MySQL query.  NOTE: the vendor disputes the significance of this issue; however, remote code execution makes the issue important in many realistic environments
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-30T17:00:00.000Z
CVE-2011-4900 
TYPO3 before 4.5.4 allows Information Disclosure in the backend.
Problem types: description: Other
Affected products: vendor: TYPO3
product: TYPO3
Published: 2019-11-06T16:46:02.000Z
CVE-2011-4901 
TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to extract arbitrary information from the TYPO3 database.
Problem types: description: Other
Affected products: vendor: TYPO3
product: TYPO3
Published: 2019-11-06T16:49:21.000Z
CVE-2011-4902 
TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to delete arbitrary files on the webserver.
Problem types: description: General Configuration Problem
Affected products: vendor: TYPO3
product: TYPO3
Published: 2019-11-06T16:53:14.000Z
CVE-2011-4903 
Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the RemoveXSS function.
Problem types: description: Cross-Site Scripting
Affected products: vendor: TYPO3
product: TYPO3
Published: 2019-11-06T16:55:59.000Z
CVE-2011-4904 
TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services.
Problem types: description: Other
Affected products: vendor: TYPO3
product: TYPO3
Published: 2019-11-06T16:58:37.000Z
CVE-2011-4905 
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-05T16:00:00.000Z
CVE-2011-4906 
Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.
Problem types: description: Arbitrary PHP Code Execution
Affected products: vendor: Joomla!
product: Tiny browser included with TinyMCE 3.0
Published: 2020-02-12T20:59:29.000Z
CVE-2011-4907 
Joomla! 1.5x through 1.5.12: Missing JEXEC Check
Problem types: description: Path Disclosure
Affected products: vendor: Joomla!
product: Joomla!
Published: 2020-01-15T13:59:57.000Z
CVE-2011-4908 
TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.
Problem types: description: Arbitrary File Upload
Affected products: vendor: Joomla!
product: TinyBrowser Plugin
Published: 2020-02-12T21:17:10.000Z
CVE-2011-4909 
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.5.12 allow remote attackers to inject arbitrary web script or HTML via the HTTP_REFERER header to (1) components/com_content/views/article/tmpl/form.php, (2) components/com_user/controller.php, (3) plugins/system/legacy/html.php, or (4) templates/beez/html/com_content/article/form.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-07T21:00:00.000Z
CVE-2011-4910 
Cross-site scripting (XSS) vulnerability in Joomla! before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-07T21:00:00.000Z
CVE-2011-4911 
Joomla! before 1.5.12 does not perform a JEXEC check in unspecified files, which allows remote attackers to obtain the installation path via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-07T21:00:00.000Z
CVE-2011-4912 
Joomla! com_mailto 1.5.x through 1.5.13 has an automated mail timeout bypass.
Problem types: description: mail timeout bypass
Affected products: vendor: Joomla!
product: Joomla!
Published: 2020-02-04T13:23:19.000Z
CVE-2011-4913 
The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT_DEST_NSAP and FAC_CCITT_SRC_NSAP fields, which allows remote attackers to (1) cause a denial of service (integer underflow, heap memory corruption, and panic) via a small length value in data sent to a ROSE socket, or (2) conduct stack-based buffer overflow attacks via a large length value in data sent to a ROSE socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-21T23:00:00.000Z
CVE-2011-4914 
The ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain data-length values are consistent with the amount of data sent, which might allow remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) via crafted data to a ROSE socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-21T23:00:00.000Z
CVE-2011-4915 
fs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /proc/interrupts.
Problem types: description: Path Disclosure
Affected products: vendor: n/a
product: Linux kernel
Published: 2020-02-20T17:03:06.000Z
CVE-2011-4916 
Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ and /dev/tty*.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: Linux Kernel
Published: 2022-07-12T20:36:25.000Z
CVE-2011-4917 
In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: Linux kernel
Published: 2022-04-18T16:20:43.000Z
CVE-2011-4918 
Multiple cross-site scripting (XSS) vulnerabilities in Elxis CMS 2009.2, 2009.3 and 2009.3 Aphrodite before revision 2684 allow remote attackers to inject arbitrary web script or HTML via the (1) task parameter to elxis/index.php, and (2) PATH_INFO to elxis/administrator/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-29T01:00:00.000Z
CVE-2011-4919 
mpack 1.6 has information disclosure via eavesdropping on mails sent by other users
Problem types: description: info disclosure
Affected products: vendor: mpack
product: mpack
Published: 2019-11-19T15:34:13.000Z
CVE-2011-4920 
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitrary web script or HTML via the URL to (1) e107_images/thumb.php or (2) rate.php, (3) resend_name parameter to e107_admin/users.php, and (4) link BBCode in user signatures.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-04T19:00:00.000Z
CVE-2011-4921 
SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-04T19:00:00.000Z
CVE-2011-4922 
cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-08T10:00:00.000Z
CVE-2011-4923 
Cross-site scripting (XSS) vulnerability in View.pm in BackupPC 3.0.0, 3.1.0, 3.2.0, 3.2.1, and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the num parameter in a view action to index.cgi, related to the log file viewer, a different vulnerability than CVE-2011-3361.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-18T00:00:00.000Z
CVE-2011-4924 
Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform sanitization. NOTE: this issue exists because of an incomplete fix for CVE-2010-1104
Problem types: description: Incomplete upstream patch for CVE-2010-1104 issue
Affected products: vendor: zope
product: zope2, zope3
Published: 2019-11-25T17:03:14.000Z
CVE-2011-4925 
Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-13T02:00:00.000Z
CVE-2011-4926 
Cross-site scripting (XSS) vulnerability in adminimize/adminimize_page.php in the Adminimize plugin before 1.7.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-29T01:00:00.000Z
CVE-2011-4927 
Unspecified vulnerability in the bazaar repository adapter in Redmine 1.0.x before 1.0.5 allows remote authenticated users to obtain sensitive information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-08T18:00:00.000Z
CVE-2011-4928 
Cross-site scripting (XSS) vulnerability in the textile formatter in Redmine before 1.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-08T18:00:00.000Z
CVE-2011-4929 
Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attackers to execute arbitrary commands via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-08T18:00:00.000Z
CVE-2011-4930 
Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-10T17:00:00.000Z
CVE-2011-4931 
gpw generates shorter passwords than required
Problem types: description: UNKNOWN_TYPE
Affected products: vendor: gpw
product: gpw
Published: 2019-10-29T13:05:03.000Z