rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-4932 
Eval injection vulnerability in ip_cms/modules/standard/content_management/actions.php in ImpressPages CMS 1.0.12 and possibly other versons before 1.0.13 allows remote attackers to execute arbitrary code via the cm_group parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-06T21:00:00.000Z
CVE-2011-4937 
Joomla! 1.7.1 has core information disclosure due to inadequate error checking.
Problem types: description: information disclosure
Affected products: vendor: Joomla!
product: Joomla!
Published: 2020-02-04T12:18:11.000Z
CVE-2011-4938 
Multiple cross-site scripting (XSS) vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter to (1) index.php and (2) loader.php.
Problem types: description: Cross-Site Scripting
Affected products: vendor: Ariadne
product: Ariadne
Published: 2020-02-11T20:04:38.000Z
CVE-2011-4939 
The pidgin_conv_chat_rename_user function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by changing a nickname while in an XMPP chat room.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-15T10:00:00.000Z
CVE-2011-4940 
The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer 7 via UTF-7 encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-27T10:00:00.000Z
CVE-2011-4941 
Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-18T18:00:00.000Z
CVE-2011-4942 
Multiple cross-site scripting (XSS) vulnerabilities in admin/configuration.php in Geeklog before 1.7.1sr1 allow remote attackers to inject arbitrary web script or HTML via the (1) subgroup or (2) conf_group parameters.  NOTE: this vulnerability might require a user-assisted attack or a bypass of a CSRF protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-09T21:00:00.000Z
CVE-2011-4943 
ImpressPages CMS v1.0.12 has Unspecified Remote Code Execution (fixed in v1.0.13)
Problem types: description: Remote Code Execution
Affected products: vendor: ImpressPages CMS
product: ImpressPages CMS
Published: 2020-01-22T12:11:39.000Z
CVE-2011-4944 
Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-27T23:00:00.000Z
CVE-2011-4945 
PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-01T23:00:00.000Z
CVE-2011-4946 
SQL injection vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote attackers to execute arbitrary SQL commands via the user_field parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-31T22:00:00.000Z
CVE-2011-4947 
Cross-site request forgery (CSRF) vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the user_include parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-31T22:00:00.000Z
CVE-2011-4948 
Directory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) in the type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-31T22:00:00.000Z
CVE-2011-4949 
SQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/with_db/loaddetails.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-31T22:00:00.000Z
CVE-2011-4950 
Cross-site scripting (XSS) vulnerability in phpgwapi/js/jscalendar/test.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-31T22:00:00.000Z
CVE-2011-4951 
Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-31T22:00:00.000Z
CVE-2011-4952 
cobbler: Web interface lacks CSRF protection when using Django framework
Problem types: description: UNKNOWN_TYPE
Affected products: vendor: cobbler
product: cobbler
Published: 2019-11-19T15:29:47.000Z
CVE-2011-4953 
The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safe_load function, as demonstrated using Puppet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-27T01:00:00.000Z
CVE-2011-4954 
cobbler has local privilege escalation via the use of insecure location for PYTHON_EGG_CACHE
Problem types: description: Local privilege escalation due use of insecure (world writable) location for PYTHON_EGG_CACHE cache
Affected products: vendor: cobbler
product: cobbler
Published: 2019-11-19T15:41:37.000Z
CVE-2011-4955 
Multiple cross-site scripting (XSS) vulnerabilities in ui_stats.php in the bSuite plugin before 5 alpha 3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) s or (2) p parameters to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-20T22:00:00.000Z
CVE-2011-4956 
Cross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-27T21:00:00.000Z
CVE-2011-4957 
The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attackers to cause a denial of service (crash) via a comment with a crafted URL that triggers many recursive calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-27T21:00:00.000Z
CVE-2011-4958 
Cross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to template placeholders, as demonstrated by a request to (1) admin/reports/, (2) admin/comments/, (3) admin/, (4) admin/show/, (5) admin/assets/, and (6) admin/security/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-08T14:00:00.000Z
CVE-2011-4959 
SQL injection vulnerability in the addslashes method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6, when connected to a MySQL database using far east character encodings, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-17T17:00:00.000Z
CVE-2011-4960 
SQL injection vulnerability in the Folder::findOrMake method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-17T17:00:00.000Z
CVE-2011-4961 
SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote authenticated users with the EDIT_PERMISSIONS permission to gain administrator privileges via a TreeMultiselectField that includes admin groups when adding a user to the selected groups.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-17T17:00:00.000Z
CVE-2011-4962 
code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-17T17:00:00.000Z
CVE-2011-4963 
nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain "$index_allocation" sequences in a request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-26T19:00:00.000Z
CVE-2011-4966 
modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-12T22:00:00.000Z
CVE-2011-4967 
tog-Pegasus has a package hash collision DoS vulnerability
Problem types: description: xml hash table collision CPU usage DoS
Affected products: vendor: tog-pegasus
product: tog-pegasus
Published: 2019-11-19T15:10:58.000Z
CVE-2011-4968 
nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
Problem types: description: http proxy module does not verify peer identity of https origin server
Affected products: vendor: nginx
product: nginx
Published: 2019-11-19T15:18:17.000Z
CVE-2011-4969 
Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-08T22:00:00.000Z
CVE-2011-4970 
Multiple SQL injection vulnerabilities in LCG Disk Pool Manager (DPM) before 1.8.6, as used in EGI UDM, allow remote attackers to execute arbitrary SQL commands via the (1) r_token variable in the dpm_get_pending_req_by_token, (2) dpm_get_cpr_by_fullid, (3) dpm_get_cpr_by_surl, (4) dpm_get_cpr_by_surls, (5) dpm_get_gfr_by_fullid, (6) dpm_get_gfr_by_surl, (7) dpm_get_pfr_by_fullid, (8) dpm_get_pfr_by_surl, (9) dpm_get_req_by_token, (10) dpm_insert_cpr_entry, (11) dpm_insert_gfr_entry, (12) dpm_insert_pending_entry, (13) dpm_insert_pfr_entry, (14) dpm_insert_xferreq_entry, (15) dpm_list_cpr_entry, (16) dpm_list_gfr_entry, or (17) dpm_list_pfr_entry function; the (18) surl variable in the dpm_get_cpr_by_surl function; the (19) to_surl variable in the dpm_get_cpr_by_surls function; the (20) u_token variable in the dpm_get_pending_reqs_by_u_desc, (21) dpm_get_reqs_by_u_desc, (22) dpm_get_spcmd_by_u_desc, (23) dpm_insert_pending_entry, (24) dpm_insert_spcmd_entry, or (25) dpm_insert_xferreq_entry function; the (26) s_token variable in the dpm_get_spcmd_by_token, (27) dpm_insert_cpr_entry, (28) dpm_insert_gfr_entry, (29) dpm_insert_pfr_entry, (30) dpm_insert_spcmd_entry, (31) dpm_update_cpr_entry, (32) dpm_update_gfr_entry, or (33) dpm_update_pfr_entry function; or remote administrators to execute arbitrary SQL commands via the (34) poolname variable in the dpm_get_pool_entry, (35) dpm_insert_fs_entry, (36) dpm_insert_pool_entry, (37) dpm_insert_spcmd_entry, (38) dpm_list_fs_entry, or (39) dpm_update_spcmd_entry function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-13T14:00:00.000Z
CVE-2011-4971 
Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-12T18:00:00.000Z
CVE-2011-4972 
hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private files via a direct request.
Problem types: description: Insecure Permissions
Affected products: vendor: CKSource
product: CKEditor Drupal module
Published: 2019-11-13T20:51:23.000Z
CVE-2011-4973 
Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-15T21:00:00.000Z
CVE-2011-5000 
The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field.  NOTE: there may be limited scenarios in which this issue is relevant.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-04T10:00:00.000Z
CVE-2011-5001 
Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 allows remote attackers to execute arbitrary code via a crafted IPC packet to TCP port 20101.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-25T01:00:00.000Z
CVE-2011-5002 
Multiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to execute arbitrary code via a .fdx or .fdxt file with long (1) Word, (2) Transition, (3) Location, (4) Extension, (5) SceneIntro, (6) TimeOfDay, and (7) Character elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-25T01:00:00.000Z
CVE-2011-5003 
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-25T01:00:00.000Z
CVE-2011-5004 
Unrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com_fabrik) component before 2.1.1 for Joomla! allows remote authenticated users with Manager privileges to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-25T01:00:00.000Z
CVE-2011-5005 
Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-25T01:00:00.000Z
CVE-2011-5006 
Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize value in a MOV file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-25T01:00:00.000Z
CVE-2011-5007 
Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-25T01:00:00.000Z
CVE-2011-5008 
Integer overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to execute arbitrary code via a large size value in the packet header, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-25T01:00:00.000Z
CVE-2011-5009 
The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a crafted Content-Length in an HTTP POST or (2) an invalid HTTP request method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-25T01:00:00.000Z
CVE-2011-5010 
apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-25T01:00:00.000Z
CVE-2011-5011 
Multiple cross-site request forgery (CSRF) vulnerabilities in xt:Commerce 3.0.4 SP2.1 and possibly earlier allow remote attackers to hijack the authentication of Admins for requests that (1) set a New user to Admin via the cID parameter to a statusconfirm action in admin/customers.php and (2) grant permissions to users via the cID parameter to a save action in admin/accounting.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-25T01:00:00.000Z
CVE-2011-5012 
Heap-based buffer overflow in the Reflection FTP Client (rftpcom.dll 7.2.0.106 and possibly other versions), as used in Attachmate Reflection 2008, Reflection 2011 R1 before 15.3.2.569 and R1 SP1 before, Reflection 2011 R2 before 15.4.1.327, Reflection Windows Client 7.2 SP1 before hotfix 7.2.1186, and Reflection 14.1 SP1 before 14.1.1.206, allows remote FTP servers to execute arbitrary code via a long directory name in a response to a LIST command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-25T01:00:00.000Z
CVE-2011-5018 
Koala Framework before 2011-11-21 has XSS via the request_uri parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-08T22:23:09.000Z
CVE-2011-5019 
Cross-site scripting (XSS) vulnerability in setup/index.php in Textpattern CMS 4.4.1, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the ddb parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-05T16:00:00.000Z
CVE-2011-5020 
An SQL Injection vulnerability exists in the ID parameter in Online TV Database 2011.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-10T18:13:08.000Z
CVE-2011-5021 
PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-29T02:00:00.000Z
CVE-2011-5022 
SQL injection vulnerability in search.php in Pligg CMS 1.1.2 allows remote attackers to execute arbitrary SQL commands via the status parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-29T11:00:00.000Z
CVE-2011-5023 
Cross-site scripting (XSS) vulnerability in Pligg CMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the search program, a different vulnerability than CVE-2011-3986.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-29T11:00:00.000Z
CVE-2011-5024 
Cross-site scripting (XSS) vulnerability in mmsearch/design in the Mailman/htdig integration patch for Mailman allows remote attackers to inject arbitrary web script or HTML via the config parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-29T11:00:00.000Z
CVE-2011-5025 
Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via (1) the tag parameter to editTag.yaws, (2) the index parameter to showOldPage.yaws, (3) the node parameter to allRefsToMe.yaws, or (4) the text parameter to editPage.yaws.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-29T11:00:00.000Z
CVE-2011-5026 
Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name parameter to index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-29T02:00:00.000Z
CVE-2011-5027 
Cross-site scripting (XSS) vulnerability in ZABBIX before 1.8.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the profiler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-29T22:00:00.000Z
CVE-2011-5028 
Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1_938 and earlier, as used in Novell Sentinel before 7.0.1.0, allows remote authenticated users to read arbitrary files via a .. (dot dot) in the filename parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-29T22:00:00.000Z
CVE-2011-5029 
Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.7.0 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entry parameter to delete.php or (2) category parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-29T22:00:00.000Z
CVE-2011-5030 
Cross-site scripting (XSS) vulnerability in the Meta tags quick module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors, probably related to "names of entity bundles."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-29T22:00:00.000Z
CVE-2011-5031 
Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) dfuserid and (2) dfpassword parameters.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-29T22:00:00.000Z
CVE-2011-5032 
WMDrive.sys 3.4.181.224 in WinMount 3.5.1018 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted 0x87342000 IOCTL request to the WMDriver device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-29T22:00:00.000Z