rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-1283 
The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 does not ensure that an unspecified array index has a non-negative value before performing read and write operations, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvSetConsoleNumberOfCommand Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-13T23:00:00.000Z
CVE-2011-1284 
Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvWriteConsoleOutput Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-13T23:00:00.000Z
CVE-2011-1285 
The regular-expression functionality in Google Chrome before 10.0.648.127 does not properly implement reentrancy, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T01:00:00.000Z
CVE-2011-1286 
Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger incorrect access to memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T01:00:00.000Z
CVE-2011-1288 
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-21T23:00:00.000Z
CVE-2011-1290 
Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers to execute arbitrary code via unknown vectors related to CSS "style handling," nodesets, and a length value, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T21:00:00.000Z
CVE-2011-1291 
Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "buffer error."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-25T19:00:00.000Z
CVE-2011-1292 
Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-25T19:00:00.000Z
CVE-2011-1293 
Use-after-free vulnerability in the HTMLCollection implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-25T19:00:00.000Z
CVE-2011-1294 
Google Chrome before 10.0.648.204 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-25T19:00:00.000Z
CVE-2011-1295 
WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not properly handle node parentage, which allows remote attackers to cause a denial of service (DOM tree corruption), conduct cross-site scripting (XSS) attacks, or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-25T19:00:00.000Z
CVE-2011-1296 
Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-25T19:00:00.000Z
CVE-2011-1298 
An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore::GraphicsContext::fillRect function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T18:47:56.000Z
CVE-2011-1300 
The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome before 10.0.648.205 on Windows, allows remote attackers to execute arbitrary code via unspecified vectors, related to an "off-by-three" error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-15T19:00:00.000Z
CVE-2011-1301 
Use-after-free vulnerability in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-15T19:00:00.000Z
CVE-2011-1302 
Heap-based buffer overflow in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-15T19:00:00.000Z
CVE-2011-1303 
Google Chrome before 11.0.696.57 does not properly handle floating objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1304 
Unspecified vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to bypass the pop-up blocker via vectors related to plug-ins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1305 
Race condition in Google Chrome before 11.0.696.57 on Linux and Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to linked lists and a database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T22:00:00.000Z
CVE-2011-1306 
Unspecified vulnerability in the Scratchpad application in Google Chrome OS before R10 0.10.156.46 Beta has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1307 
The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log directory, which allows local users to have unintended access to log files via standard filesystem operations, a different vulnerability than CVE-2009-1173.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1308 
Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1309 
The Plug-in component in IBM WebSphere Application Server (WAS) before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1310 
The Administrative Scripting Tools component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when tracing is enabled, places wsadmin command parameters into the (1) wsadmin.traceout and (2) trace.log files, which allows local users to obtain potentially sensitive information by reading these files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1311 
The Security component in IBM WebSphere Application Server (WAS) before 7.0.0.15, when a J2EE 1.4 application is used, determines the security role mapping on the basis of the ibm-application-bnd.xml file instead of the intended ibm-application-bnd.xmi file, which might allow remote authenticated users to gain privileges in opportunistic circumstances by requesting a service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1312 
The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended access restrictions by mapping a (1) user or (2) group to an administrator role.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1313 
Double free vulnerability in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote backend IIOP servers to cause a denial of service (S0C4 ABEND and storage corruption) by rejecting IIOP requests at opportunistic time instants, as demonstrated by requests associated with an ORB_Request::getACRWorkElementPtr function call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1314 
The Service Integration Bus (SIB) messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (daemon hang) by performing close operations via network connections to a queue manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1315 
Memory leak in the messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via network connections associated with a NULL return value from a synchronous JMS receive call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1316 
The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (worker thread exhaustion and UDP messaging outage) by sending many UDP messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1317 
Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by sending many JSP requests that trigger large responses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1318 
Memory leak in org.apache.jasper.runtime.JspWriterImpl.response in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by accessing a JSP page of an application that is repeatedly stopped and restarted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1319 
The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote authenticated users to cause a denial of service (memory consumption) by using a Lightweight Third-Party Authentication (LTPA) token for authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1320 
The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when the Tivoli Integrated Portal / embedded WebSphere Application Server (TIP/eWAS) framework is used, does not properly delete AuthCache entries upon a logout, which might allow remote attackers to access the server by leveraging an unattended workstation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1321 
The AuthCache purge implementation in the Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 does not purge a user from the PlatformCredential cache, which might allow remote authenticated users to gain privileges by leveraging a group membership specified in an old RACF Object (aka RACO).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1322 
The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via encrypted SOAP messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-08T21:00:00.000Z
CVE-2011-1323 
Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service (device reboot) via a crafted option that triggers access to an invalid memory location.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-09T19:00:00.000Z
CVE-2011-1324 
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-09T19:00:00.000Z
CVE-2011-1325 
Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-13T17:00:00.000Z
CVE-2011-1326 
Unspecified vulnerability on the La Fonera+ router with firmware before 1.7.0.1 allows remote attackers to cause a denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-13T22:00:00.000Z
CVE-2011-1327 
The Keystroke Encryption feature in Trend Micro Internet Security 2009 (aka Virus Buster 2009 and PC-cillin 2009) does not completely encrypt passwords, which allows local users to obtain sensitive information by leveraging a keylogger.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-20T22:00:00.000Z
CVE-2011-1328 
SQL injection vulnerability in RADVISION iVIEW Suite before 7.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-24T23:00:00.000Z
CVE-2011-1329 
WalRack 1.x before 1.1.9 and 2.x before 2.0.7 does not properly restrict file uploads, which allows remote attackers to execute arbitrary PHP code via vectors involving a double extension, as demonstrated by a .php.zzz file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-31T20:00:00.000Z
CVE-2011-1330 
Cross-site scripting (XSS) vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-22T22:00:00.000Z
CVE-2011-1331 
JustSystems Ichitaro 2005 through 2011, Ichitaro Government 6, Ichitaro Government 2006 through 2010, Ichitaro Portable, Ichitaro Pro, and Ichitaro Viewer allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document, as exploited in the wild in early 2011.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-18T22:00:00.000Z
CVE-2011-1332 
Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-6570.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-29T17:00:00.000Z
CVE-2011-1333 
Cross-site scripting (XSS) vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the bulletin board system."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-29T17:00:00.000Z
CVE-2011-1334 
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the mail system."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-29T17:00:00.000Z
CVE-2011-1335 
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user list functions."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-29T17:00:00.000Z
CVE-2011-1336 
Buffer overflow in ALZip 8.21 and earlier allows remote attackers to execute arbitrary code via a crafted mim file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-07T19:00:00.000Z
CVE-2011-1337 
Opera before 11.50 allows remote attackers to cause a denial of service (disk consumption) via invalid URLs that trigger creation of error pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-1338 
Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-11T20:00:00.000Z
CVE-2011-1339 
Cross-site scripting (XSS) vulnerability in Google Search Appliance before 5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-28T18:00:00.000Z
CVE-2011-1340 
Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the type_name parameter to Members/ipa/createObject.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-05T21:00:00.000Z
CVE-2011-1341 
Cross-site request forgery (CSRF) vulnerability in Aimluck Aipo before 4.0.4.0, and Aipo for ASP before 4.0.4.0, allows remote attackers to hijack the authentication of administrators for requests that modify data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-19T21:00:00.000Z
CVE-2011-1342 
SQL injection vulnerability in Aimluck Aipo before 5.1.1, and Aipo for ASP before 5.1.1, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-19T21:00:00.000Z
CVE-2011-1343 
SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via "dynamic SQL parameters."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-09T22:00:00.000Z
CVE-2011-1344 
Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA); and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag, related to text nodes, as demonstrated by Chaouki Bekrar during a Pwn2Own competition at CanSecWest 2011.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-10T20:00:00.000Z
CVE-2011-1345 
Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011, aka "Object Management Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-10T20:00:00.000Z
CVE-2011-1346 
Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Stephen Fewer as the second of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-10T20:00:00.000Z
CVE-2011-1347 
Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mode and create arbitrary files by leveraging access to a Low integrity process, as demonstrated by Stephen Fewer as the third of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-10T20:00:00.000Z
CVE-2011-1350 
The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-05T15:00:00.000Z