rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-4192 
kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands as demonstrated by "double quotes in kiwi_oemtitle of .profile."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-16T18:00:00.000Z
CVE-2011-4193 
Cross-site scripting (XSS) vulnerability in the overlay files tab in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted application, related to cloning.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-16T18:00:00.000Z
CVE-2011-4194 
Buffer overflow in Novell iPrint Server in Novell Open Enterprise Server 2 (OES2) through SP3 on Linux allows remote attackers to execute arbitrary code via a crafted attributes-natural-language field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T02:00:00.000Z
CVE-2011-4195 
kiwi before 4.98.05, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in an image name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-16T18:00:00.000Z
CVE-2011-4197 
etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows remote attackers to create sub-certificates for arbitrary subjects by leveraging the private key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-03T19:00:00.000Z
CVE-2011-4201 
remote_support.cgi in the Tadasoft Restorepoint 3.2 evaluation image allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) pid1 or (2) pid2 parameter in a stop_remote_support action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T11:00:00.000Z
CVE-2011-4202 
The Tadasoft Restorepoint 3.2 evaluation image uses weak permissions (www write access) for unspecified scripts, which allows local users to gain privileges by modifying a script file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T11:00:00.000Z
CVE-2011-4203 
CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-22T15:00:00.000Z
CVE-2011-4211 
The FakeFile implementation in the sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly control the opening of files, which allows local users to bypass intended access restrictions and create arbitrary files via ALLOWED_MODES and ALLOWED_DIRS changes within the code parameter to _ah/admin/interactive/execute, a different vulnerability than CVE-2011-1364.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-30T19:00:00.000Z
CVE-2011-4212 
The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent os.popen calls, which allows local users to bypass intended access restrictions and execute arbitrary commands via a dev_appserver.RestrictedPathFunction._original_os reference within the code parameter to _ah/admin/interactive/execute, a different vulnerability than CVE-2011-1364.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-30T19:00:00.000Z
CVE-2011-4213 
The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent use of the os module, which allows local users to bypass intended access restrictions and execute arbitrary commands via a file_blob_storage.os reference within the code parameter to _ah/admin/interactive/execute, a different vulnerability than CVE-2011-1364.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-30T19:00:00.000Z
CVE-2011-4214 
OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to bypass authentication and obtain administrator privileges via a crafted oozimsrememberme cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T19:00:00.000Z
CVE-2011-4215 
SQL injection vulnerability in lib/ooz_access.php in OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to execute arbitrary SQL commands via the cookieName variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T19:00:00.000Z
CVE-2011-4216 
Investintech.com SlimPDF Reader does not properly restrict write operations, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T19:00:00.000Z
CVE-2011-4217 
Investintech.com SlimPDF Reader does not properly restrict read operations during block data moves, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T19:00:00.000Z
CVE-2011-4218 
Investintech.com SlimPDF Reader does not prevent faulting-instruction data from affecting write operations, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T19:00:00.000Z
CVE-2011-4219 
Investintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch selection, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T19:00:00.000Z
CVE-2011-4220 
Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T19:00:00.000Z
CVE-2011-4221 
Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T19:00:00.000Z
CVE-2011-4222 
Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T19:00:00.000Z
CVE-2011-4223 
Unspecified vulnerability in Investintech.com Absolute PDF Server allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T19:00:00.000Z
CVE-2011-4231 
Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service (segmentation fault and device crash) via unspecified vectors, aka Bug ID CSCtq61128.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-03T10:00:00.000Z
CVE-2011-4232 
The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-03T10:00:00.000Z
CVE-2011-4237 
CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter, aka Bug ID CSCtu18693.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-03T10:00:00.000Z
CVE-2011-4244 
Heap-based buffer overflow in the RealVideo renderer in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4245 
The RealVideo renderer in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4246 
The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4247 
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4248 
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed AAC file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4249 
Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4250 
Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4251 
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4252 
The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4253 
Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4254 
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4255 
Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via an invalid codec name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4256 
The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4257 
The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4258 
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4259 
Integer underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted width value in an MPG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4260 
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4261 
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted video dimensions in an MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4262 
Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-24T11:00:00.000Z
CVE-2011-4263 
Cross-site scripting (XSS) vulnerability in Schneider Electric PowerChute Business Edition before 8.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-07T19:00:00.000Z
CVE-2011-4264 
Cross-site scripting (XSS) vulnerability in Etomite before 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-08T11:00:00.000Z
CVE-2011-4265 
Cross-site scripting (XSS) vulnerability in phpWebSite before 1.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-08T11:00:00.000Z
CVE-2011-4266 
Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file, a different vulnerability than CVE-2011-3991.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-13T11:00:00.000Z
CVE-2011-4273 
Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to addgroup.asp; (2) the url parameter to goform/AddAccessLimit, related to addlimit.asp; or the (3) user (aka User ID) or (4) group parameter to goform/AddUser, related to adduser.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-03T10:00:00.000Z
CVE-2011-4274 
Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-2676.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-03T10:00:00.000Z
CVE-2011-4275 
Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181 and 1.2.0-RC-282 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted company name, (2) a crafted database server name, (3) a crafted CSV file, (4) a crafted copy-and-paste action, (5) the auth_user parameter in a suggest_pwd action to UI.php, (6) the c[menu] parameter to UniversalSearch.php, (7) the description parameter in a SearchFormToAdd_document_list action to UI.php, (8) the category parameter in an errors action to audit.php, or (9) the suggest_pwd parameter to UI.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-26T02:00:00.000Z
CVE-2011-4276 
The Bluetooth service (com/android/phone/BluetoothHeadsetService.java) in Android 2.3 before 2.3.6 allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-25T18:00:00.000Z
CVE-2011-4277 
Cross-site scripting (XSS) vulnerability in CourseForum ProjectForum 7.0.1.3038 allows remote attackers to inject arbitrary web script or HTML via a crafted name of an object within a more object on a wiki page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-03T17:00:00.000Z
CVE-2011-4278 
Cross-site scripting (XSS) vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4279 
Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles setting for course-profiles access control, which makes it easier for remote attackers to obtain potentially sensitive information via vectors involving use of a search engine, as demonstrated by the search functionality of Google, Yahoo!, Wrensoft Zoom, MSN, Yandex, and AltaVista.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4280 
Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.x before 2.0.2 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4281 
Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of (1) an activity or (2) a course.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4282 
Multiple cross-site scripting (XSS) vulnerabilities in the course-tags functionality in tag/coursetags_more.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) sort or (2) show parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4283 
Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise enrolment file in the course-files area, which allows remote attackers to obtain sensitive information via a request for imsenterprise-enrol.xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4284 
Moodle 2.0.x before 2.0.2 allows remote attackers to obtain sensitive information from a myprofile (aka My profile) block by visiting a user-context page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4285 
The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect setting of the moodle/course:delete capability, which allows remote authenticated users to delete arbitrary courses by leveraging the teacher role.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4286 
Multiple cross-site scripting (XSS) vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) Flash Video (aka FLV) files and (2) YouTube videos.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4287 
admin/uploaduser_form.php in Moodle 2.0.x before 2.0.3 does not force password changes for autosubscribed users, which makes it easier for remote attackers to obtain access by leveraging knowledge of the initial password of a new user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4288 
Moodle 1.9.x before 1.9.12 and 2.0.x before 2.0.3 does not properly implement associations between teachers and groups, which allows remote authenticated users to read quiz reports of arbitrary students by leveraging the teacher role.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4289 
Moodle 2.0.x before 2.0.3 does not recognize the configuration setting that makes e-mail addresses visible only to course members, which allows remote authenticated users to obtain sensitive address information by reading a full profile page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4290 
Multiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to URL encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4291 
Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted ratings operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4292 
Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted comments operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4293 
The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets (CSS) and JavaScript content, which allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z
CVE-2011-4294 
The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before 2.1.1 does not ensure that a continuation link refers to an http or https URL for the local Moodle instance, which might allow attackers to trick users into visiting arbitrary web sites via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-16T10:00:00.000Z