rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-2522 
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-29T20:00:00.000Z
CVE-2011-2523 
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
Problem types: description: UNKNOWN_TYPE
Affected products: vendor: vsftpd
product: vsftpd
Published: 2019-11-27T20:36:53.000Z
CVE-2011-2524 
Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in a URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-31T23:00:00.000Z
CVE-2011-2525 
The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T02:00:00.000Z
CVE-2011-2526 
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-14T23:00:00.000Z
CVE-2011-2527 
The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-21T15:00:00.000Z
CVE-2011-2528 
Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly serious vulnerability." NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-0720.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-19T20:00:00.000Z
CVE-2011-2529 
chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not properly handle '\0' characters in SIP packets, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-06T19:00:00.000Z
CVE-2011-2530 
Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Automation RSLinx Classic before 2.58 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed .eds file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-22T21:00:00.000Z
CVE-2011-2531 
Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of service (data truncation) by sending a large amount of data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-22T21:00:00.000Z
CVE-2011-2532 
The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial of service (infinite loop) via invalid JSON data, as demonstrated by truncated data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-22T21:00:00.000Z
CVE-2011-2533 
The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-22T23:00:00.000Z
CVE-2011-2534 
Buffer overflow in the clusterip_proc_write function in net/ipv4/netfilter/ipt_CLUSTERIP.c in the Linux kernel before 2.6.39 might allow local users to cause a denial of service or have unspecified other impact via a crafted write operation, related to string data that lacks a terminating '\0' character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-22T23:00:00.000Z
CVE-2011-2535 
chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted frame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-06T19:00:00.000Z
CVE-2011-2536 
chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x before 1.4.41.2, 1.6.2.x before 1.6.2.18.2, and 1.8.x before 1.8.4.4, and Asterisk Business Edition C.3.x before C.3.7.3, disregards the alwaysauthreject option and generates different responses for invalid SIP requests depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-06T19:00:00.000Z
CVE-2011-2538 
Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands.
Problem types: description: Other
Affected products: vendor: Cisco
product: Cisco Video Communications Server (VCS)
Published: 2019-10-28T20:19:09.000Z
CVE-2011-2543 
Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause a denial of service (endpoint reboot or process crash) or possibly execute arbitrary code via a long location parameter to the getxml program, aka Bug ID CSCtq46496.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T10:00:00.000Z
CVE-2011-2544 
Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a crafted Call ID, as demonstrated by resultant cross-site request forgery (CSRF) attacks that change passwords or cause a denial of service, aka Bug ID CSCtq46488.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T10:00:00.000Z
CVE-2011-2545 
Cross-site scripting (XSS) vulnerability in the SIP implementation on the Cisco SPA8000 and SPA8800 before 6.1.11, SPA2102 and SPA3102 before 5.2.13, and SPA 500 series IP phones before 7.4.9 allows remote attackers to inject arbitrary web script or HTML via the FROM field of an INVITE message, aka Bug IDs CSCtr27277, CSCtr27256, CSCtr27274, and CSCtr14715.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-13T20:00:00.000Z
CVE-2011-2546 
SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-28T22:00:00.000Z
CVE-2011-2547 
The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-28T22:00:00.000Z
CVE-2011-2549 
Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers (ASR) 9000 series devices allows remote attackers to cause a denial of service (line-card reload) via an IPv4 packet, aka Bug ID CSCtr26695.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-28T22:00:00.000Z
CVE-2011-2555 
Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtr76182.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-29T20:00:00.000Z
CVE-2011-2560 
The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x does not properly handle idle TCP connections, which allows remote attackers to cause a denial of service (memory consumption and restart) by making many connections, aka Bug ID CSCtf97162.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-29T15:00:00.000Z
CVE-2011-2561 
The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point (MTP), which allows remote attackers to cause a denial of service (service outage) via a crafted call, aka Bug ID CSCtc61990.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-29T15:00:00.000Z
CVE-2011-2562 
Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (service outage) via a SIP INVITE message, aka Bug ID CSCth43256.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-29T15:00:00.000Z
CVE-2011-2563 
Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth26669.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-29T15:00:00.000Z
CVE-2011-2564 
Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth19417.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-29T15:00:00.000Z
CVE-2011-2569 
Cisco Nexus OS (aka NX-OS) 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line options, which allows local users to gain privileges via unspecified vectors, aka Bug IDs CSCtf40008, CSCtg18363, CSCtr44645, CSCts10195, and CSCts10188.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-27T21:00:00.000Z
CVE-2011-2577 
Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service (crash) via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq46500.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-31T23:00:00.000Z
CVE-2011-2578 
Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption) via malformed SIP packets on a NAT interface, aka Bug ID CSCts12366.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2011-2581 
The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, and NX-OS before 5.0(3)U1(2a) on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending packets, aka Bug IDs CSCto09813 and CSCtr61490.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-14T15:00:00.000Z
CVE-2011-2583 
Cisco Unified Contact Center Express (aka CCX) 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case, aka Bug ID CSCth33834.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2011-2584 
Cisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1) allows remote attackers to access the (1) Encoders and Pull Configurations, (2) Push Configurations, (3) Video Encoding Formats, and (4) Transcoding administration pages, and cause a denial of service (live event outage) or obtain potentially sensitive information, via unspecified vectors, aka Bug ID CSCto73758.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-20T00:00:00.000Z
CVE-2011-2585 
Cisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1) allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-20T00:00:00.000Z
CVE-2011-2586 
The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assisted remote attackers to cause a denial of service (device crash) via a malformed HTTP response to a request for service installation, aka Bug ID CSCts12249.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2011-2587 
Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media player 1.1.x before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real Media file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-27T01:29:00.000Z
CVE-2011-2588 
Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted AVI media file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-27T01:29:00.000Z
CVE-2011-2589 
Heap-based buffer overflow in the SendLogAction method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 might allow remote attackers to execute arbitrary code via a long argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-09T22:00:00.000Z
CVE-2011-2590 
The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-09T22:00:00.000Z
CVE-2011-2591 
Multiple buffer overflows in the Provideo ActiveX controls allow remote attackers to execute arbitrary code via crafted input fields, as demonstrated by (1) a long strIp argument to the voice method in 2way.dll in the alarm 1.0.3.1 ActiveX control, (2) a network response to AXPlayer.ocx in the GMAXPlayer 2.0.8.2 ActiveX control, the (3) UserName or (4) Password parameter to AXPlayer.ocx in the GMAXPlayer 2.0.8.2 ActiveX control, (5) a long Id parameter to the GetString method in PAxPlayer.ocx in the PAxPlayer 3.0.0.9 ActiveX control, or (6) a long strAdr parameter to the ConnectIPCam method in PAxPlayer.ocx in the PAxPlayer 3.0.0.9 ActiveX control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-05T21:00:00.000Z
CVE-2011-2592 
Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a long CSEC HTTP response header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T14:00:00.000Z
CVE-2011-2593 
Integer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a crafted Content-Length HTTP header, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-12T20:00:00.000Z
CVE-2011-2594 
Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist (.KPL) file with a long Title field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-02T16:00:00.000Z
CVE-2011-2595 
Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a (1) String or (2) Int tag in a FotoSlate Project (aka PLP) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-14T17:00:00.000Z
CVE-2011-2597 
The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of service (infinite loop) via malformed packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-07T19:00:00.000Z
CVE-2011-2598 
The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtain screenshots of the windows of arbitrary desktop applications via vectors involving an SVG filter, an IFRAME element, and uninitialized data in graphics memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T15:26:00.000Z
CVE-2011-2599 
Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T15:26:00.000Z
CVE-2011-2600 
The GPU support functionality in Windows XP does not properly restrict rendering time, which allows remote attackers to cause a denial of service (system crash) via vectors involving WebGL and (1) shader programs or (2) complex 3D geometry, as demonstrated by using Mozilla Firefox or Google Chrome to visit the lots-of-polys-example.html test page in the Khronos WebGL SDK.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T15:26:00.000Z
CVE-2011-2601 
The GPU support functionality in Mac OS X does not properly restrict rendering time, which allows remote attackers to cause a denial of service (desktop hang) via vectors involving WebGL and (1) shader programs or (2) complex 3D geometry, as demonstrated by using Mozilla Firefox or Google Chrome to visit the lots-of-polys-example.html test page in the Khronos WebGL SDK.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T15:26:00.000Z
CVE-2011-2602 
The NVIDIA Geforce 310 driver 6.14.12.7061 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T15:26:00.000Z
CVE-2011-2603 
The NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of service (desktop hang) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T15:26:00.000Z
CVE-2011-2604 
The Intel G41 driver 6.14.10.5355 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T15:26:00.000Z
CVE-2011-2605 
CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing a \n (newline) character, which is not properly handled in a JavaScript "document.cookie =" expression, a different vulnerability than CVE-2011-2374.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2606 
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2607 
Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165513.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2608 
ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2609 
Opera before 11.50 does not properly restrict data: URIs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z
CVE-2011-2610 
Unspecified vulnerability in Opera before 11.50 has unknown impact and attack vectors, related to a "moderately severe issue."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-01T10:00:00.000Z