rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-2611 
Unspecified vulnerability in the printing functionality in Opera before 11.50 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2612 
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by progorod.ru.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2613 
The Array.prototype.join method in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a non-array object that contains initial holes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2614 
The SVG implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving a path on which many characters are drawn.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2615 
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application hang) via unknown content on a web page, as demonstrated by domiteca.com.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2616 
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (memory consumption) via unknown content on a web page, as demonstrated by test262.ecmascript.org.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2617 
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors related to selecting a text node, and closed pop-up windows, removed pop-up windows, and IFRAME elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2618 
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via web script that moves a (1) AUDIO element or (2) VIDEO element between windows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2619 
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a gradient with many stops, related to the implementation of CANVAS elements, SVG, and Cascading Style Sheets (CSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2620 
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving SVG animation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2621 
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors related to form layout.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2622 
Unspecified vulnerability in the Web Workers implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2623 
Unspecified vulnerability in the SVG BiDi implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash or hang) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2624 
Opera before 11.50 allows user-assisted remote attackers to cause a denial of service (application hang) via a large table, which is not properly handled during a print preview.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2625 
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a SELECT element that contains many OPTION elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2626 
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) by using "injected script" to set the SRC attribute of an IFRAME element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2627 
Unspecified vulnerability in the DOM implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by live.com.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2628 
Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to page unload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2629 
Unspecified vulnerability in Opera before 11.11 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by www.falk.de.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2630 
Opera before 11.11 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web page that is not properly handled during a reload occurring after the opening of a popup of the Easy Sticky Note extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2631 
The Cascading Style Sheets (CSS) implementation in Opera before 11.11 does not properly handle the column-count property, which allows remote attackers to cause a denial of service (infinite repaint loop and application hang) via a web page, as demonstrated by an unspecified Wikipedia page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2632 
Opera before 11.11 does not properly handle destruction of a Silverlight instance, which allows remote attackers to cause a denial of service (application crash) via a web page, as demonstrated by vod.onet.pl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2633 
Unspecified vulnerability in Opera before 11.11 allows remote attackers to cause a denial of service (application crash) via vectors involving a Certificate Revocation List (CRL) file, as demonstrated by the multicert-ca-02.crl file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2634 
Opera before 11.10 allows remote attackers to hijack (1) searches and (2) customizations via unspecified third party applications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2635 
The Cascading Style Sheets (CSS) implementation in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via vectors involving use of the :hover pseudo-class, in conjunction with transforms, for a floated element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2636 
Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by a certain Tomato Firmware page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2637 
Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by futura-sciences.com, seoptimise.com, and mitosyfraudes.org.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2638 
Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by games on zylom.com.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2639 
Opera before 11.10 does not properly handle hidden animated GIF images, which allows remote attackers to cause a denial of service (CPU consumption) via an image file that triggers continual repaints.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2640 
Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via an HTML document that has an empty parameter value for an embedded Java applet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2641 
Opera 11.11 allows remote attackers to cause a denial of service (application crash) by setting the FACE attribute of a FONT element within an IFRAME element after changing the SRC attribute of this IFRAME element to an about:blank value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2642 
Multiple cross-site scripting (XSS) vulnerabilities in the table Print view implementation in tbl_printview.php in phpMyAdmin before 3.3.10.3 and 3.4.x before 3.4.3.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-01T19:00:00.000Z
CVE-2011-2643 
Directory traversal vulnerability in sql.php in phpMyAdmin 3.4.x before 3.4.3.2, when configuration storage is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a MIME-type transformation parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-01T19:00:00.000Z
CVE-2011-2644 
Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an RPM info display.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-23T21:00:00.000Z
CVE-2011-2645 
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-23T21:00:00.000Z
CVE-2011-2646 
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename in the list of testdrive modified files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-23T21:00:00.000Z
CVE-2011-2647 
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted archive name in the list of testdrive modified files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-23T21:00:00.000Z
CVE-2011-2648 
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a filter in a modified file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-23T21:00:00.000Z
CVE-2011-2649 
Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-23T21:00:00.000Z
CVE-2011-2650 
Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted pattern name that is included in an RPM info display.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-23T21:00:00.000Z
CVE-2011-2651 
Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-23T21:00:00.000Z
CVE-2011-2652 
Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted archive file list that is used in an overlay file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-23T21:00:00.000Z
CVE-2011-2653 
Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute arbitrary code by uploading an executable file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-08T11:00:00.000Z
CVE-2011-2654 
The RPC implementation in the server in Novell Cloud Manager 1.1.2 before Patch 3 does not properly initialize objects, which allows remote attackers to execute arbitrary code by making RPC calls that leverage incorrect privileges associated with a partially initialized session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-06T15:00:00.000Z
CVE-2011-2655 
Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2656.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-24T17:00:00.000Z
CVE-2011-2656 
Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2655.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-24T17:00:00.000Z
CVE-2011-2657 
Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary commands via a pathname in the first argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-26T22:00:00.000Z
CVE-2011-2658 
The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 provides access to the mscomct2.ocx file, which allows remote attackers to execute arbitrary code by leveraging unspecified mscomct2 flaws.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-26T22:00:00.000Z
CVE-2011-2660 
The modify_resolvconf_suse script in the vpnc package before 0.5.1-55.10.1 in SUSE Linux Enterprise Desktop 11 SP1 might allow remote attackers to execute arbitrary commands via a crafted DNS domain name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-06T16:00:00.000Z
CVE-2011-2661 
Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitrary web script or HTML via the (1) Directory.Item.name or (2) Directory.Item.displayName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T01:00:00.000Z
CVE-2011-2662 
Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE variable in a VCALENDAR attachment in an e-mail message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T01:00:00.000Z
CVE-2011-2663 
Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a VCALENDAR attachment in an e-mail message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T01:00:00.000Z
CVE-2011-2664 
Unspecified vulnerability in Check Point Multi-Domain Management / Provider-1 NGX R65, R70, R71, and R75, and SmartCenter during installation on non-Windows machines, allows local users on the MDS system to overwrite arbitrary files via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-08T20:00:00.000Z
CVE-2011-2665 
reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.3 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a SIP packet with a Contact header that lacks a < (less than) character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-06T19:00:00.000Z
CVE-2011-2666 
The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41.2 and 1.6.2.x through 1.6.2.18.2 does not enable the alwaysauthreject option, which allows remote attackers to enumerate account names by making a series of invalid SIP requests and observing the differences in the responses for different usernames, a different vulnerability than CVE-2011-2536.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-06T19:00:00.000Z
CVE-2011-2667 
Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-28T22:00:00.000Z
CVE-2011-2668 
Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header
Problem types: description: header mishandling
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-21T14:38:40.000Z
CVE-2011-2669 
Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates.
Problem types: description: DoS
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-21T14:41:39.000Z
CVE-2011-2670 
Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style Sheets
Problem types: description: XSS
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-01-13T13:33:20.000Z
CVE-2011-2671 
Unspecified vulnerability in Megalith 12th edition through 27th edition allows remote attackers to gain administrative privileges via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-15T17:00:00.000Z
CVE-2011-2672 
Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.98 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-20T10:00:00.000Z
CVE-2011-2673 
Cross-site scripting (XSS) vulnerability in BaserCMS before 1.6.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-02T01:00:00.000Z
CVE-2011-2674 
BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-02T01:00:00.000Z
CVE-2011-2675 
Cross-site scripting (XSS) vulnerability in Enkai-kun before 110916 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-10T10:00:00.000Z
CVE-2011-2676 
The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-03T10:00:00.000Z
CVE-2011-2677 
Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified vectors related to manipulation of a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-21T18:00:00.000Z
CVE-2011-2678 
The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITY\INTERACTIVE:F) for cvpnd.exe, which allows local users to gain privileges by replacing this executable file with an arbitrary program, aka Bug ID CSCtn50645. NOTE: this vulnerability exists because of a CVE-2007-4415 regression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-07T19:00:00.000Z
CVE-2011-2679 
Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-07T19:00:00.000Z
CVE-2011-2680 
Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the "server error response."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-07T19:00:00.000Z
CVE-2011-2681 
IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-07T19:00:00.000Z
CVE-2011-2682 
The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-07T19:00:00.000Z
CVE-2011-2683 
reseed seeds random numbers from an insecure HTTP request to random.org during installation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a man-in-the-middle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-23T18:00:00.000Z