rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-3228 
QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3229 
Directory traversal vulnerability in Apple Safari before 5.1.1 allows remote attackers to execute arbitrary JavaScript code, in a Safari Extensions context, via a crafted safari-extension: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3230 
Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3231 
The SSL implementation in Apple Safari before 5.1.1 on Mac OS X before 10.7 accesses uninitialized memory during the processing of X.509 certificates, which allows remote web servers to execute arbitrary code via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3232 
YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-29T00:00:00.000Z
CVE-2011-3233 
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-3234 
Google Chrome before 14.0.835.163 does not properly handle boxes, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-17T10:00:00.000Z
CVE-2011-3235 
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-3236 
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-3237 
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-3238 
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-3239 
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-3241 
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-3242 
The Private Browsing feature in Apple Safari before 5.1.1 on Mac OS X does not properly recognize the Always value of the Block Cookies setting, which makes it easier for remote web servers to track users via a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3243 
Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5 and Safari before 5.1.1, allows remote attackers to inject arbitrary web script or HTML via vectors involving inactive DOM windows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3244 
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-3245 
The Keyboards component in Apple iOS before 5 displays the final character of an entered password during a subsequent use of a keyboard, which allows physically proximate attackers to obtain sensitive information by reading this character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3246 
CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted (1) http or (2) https URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3247 
Integer overflow in Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-28T01:00:00.000Z
CVE-2011-3248 
Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font table in a QuickTime movie file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-28T01:00:00.000Z
CVE-2011-3249 
Buffer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with FLC encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-28T01:00:00.000Z
CVE-2011-3250 
Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with JPEG2000 encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-28T01:00:00.000Z
CVE-2011-3251 
Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted TKHD atoms in a QuickTime movie file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-28T01:00:00.000Z
CVE-2011-3252 
Buffer overflow in CoreAudio, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Advanced Audio Coding (AAC) stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-3253 
CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, which allows man-in-the-middle attackers to spoof calendar servers and obtain sensitive information via an arbitrary certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3254 
Cross-site scripting (XSS) vulnerability in Calendar in Apple iOS before 5 allows remote attackers to inject arbitrary web script or HTML via an invitation note.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3255 
CFNetwork in Apple iOS before 5 stores AppleID credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3256 
FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font, a different vulnerability than CVE-2011-0226.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3257 
The Data Access component in Apple iOS before 5 does not properly handle the existence of multiple user accounts on the same mail server, which allows local users to bypass intended access restrictions in opportunistic circumstances by leveraging a different account's cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3259 
The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections, which allows remote attackers to cause a denial of service (resource consumption) by making many connection attempts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3260 
Buffer overflow in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Word document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3261 
Double free vulnerability in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Excel spreadsheet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3262 
tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service (management software infinite loop and management domain resource consumption) via unspecified vectors related to "Lack of error checking in the decompression loop."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-19T20:00:00.000Z
CVE-2011-3263 
zabbix_agentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to cause a denial of service (CPU consumption) by executing the vfs.file.cksum command for a special device, as demonstrated by the /dev/urandom device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-19T21:00:00.000Z
CVE-2011-3264 
Zabbix before 1.8.6 allows remote attackers to obtain sensitive information via an invalid srcfld2 parameter to popup.php, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-19T21:00:00.000Z
CVE-2011-3265 
popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-19T21:00:00.000Z
CVE-2011-3266 
The proto_tree_add_item function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service (infinite loop) via vectors involving a malformed IKE packet and many items in a tree.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-24T00:00:00.000Z
CVE-2011-3267 
PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-25T18:00:00.000Z
CVE-2011-3268 
Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt argument, a different vulnerability than CVE-2011-2483.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-25T18:00:00.000Z
CVE-2011-3269 
Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-09T18:11:27.000Z
CVE-2011-3270 
Unspecified vulnerability in Cisco IOS 12.2SB before 12.2(33)SB10 and 15.0S before 15.0(1)S3a on Cisco 10000 series routers allows remote attackers to cause a denial of service (device reload) via a sequence of crafted ICMP packets, aka Bug ID CSCtk62453.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-03T23:00:00.000Z
CVE-2011-3271 
Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to execute arbitrary code or cause a denial of service (device crash) via crafted TCP packets to port 4786, aka Bug ID CSCto10165.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-03T23:00:00.000Z
CVE-2011-3272 
The IP Service Level Agreement (IP SLA) functionality in Cisco IOS 15.1, and IOS XE 2.1.x through 3.3.x, allows remote attackers to cause a denial of service (memory corruption and device reload) via malformed IP SLA packets, aka Bug ID CSCtk67073.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-03T23:00:00.000Z
CVE-2011-3273 
Memory leak in Cisco IOS 15.0 through 15.1, when IPS or Zone-Based Firewall (aka ZBFW) is configured, allows remote attackers to cause a denial of service (memory consumption or device crash) via vectors that trigger many session creation flows, aka Bug ID CSCti79848.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-03T23:00:00.000Z
CVE-2011-3274 
Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service (device crash) via a crafted IPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCto07919.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-03T23:00:00.000Z
CVE-2011-3275 
Memory leak in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service (memory consumption) via a crafted SIP message, aka Bug ID CSCti48504.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-03T23:00:00.000Z
CVE-2011-3276 
Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (device reload or hang) by sending crafted SIP packets to TCP port 5060, aka Bug ID CSCso02147.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-03T23:00:00.000Z
CVE-2011-3277 
Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (device reload) by sending crafted H.323 packets to TCP port 1720, aka Bug ID CSCth11006.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-03T23:00:00.000Z
CVE-2011-3278 
Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (device reload) by sending crafted SIP packets to UDP port 5060, aka Bug ID CSCti48483.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-03T23:00:00.000Z
CVE-2011-3279 
The provider-edge MPLS NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (device reload) via a malformed SIP packet to UDP port 5060, aka Bug ID CSCti98219.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-03T23:00:00.000Z
CVE-2011-3280 
Memory leak in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted SIP packets to UDP port 5060, aka Bug ID CSCtj04672.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-03T23:00:00.000Z
CVE-2011-3281 
Unspecified vulnerability in Cisco IOS 15.0 through 15.1, in certain HTTP Layer 7 Application Control and Inspection configurations, allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTP packet, aka Bug ID CSCto68554.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-03T23:00:00.000Z
CVE-2011-3282 
Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service (device reload) via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-03T23:00:00.000Z
CVE-2011-3283 
Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service (Metro subsystem crash) via a fragmented GRE packet, aka Bug ID CSCts14887.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2011-3285 
CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCth63101.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2011-3287 
Cisco Jabber Extensible Communications Platform (aka Jabber XCP) 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XML document containing a large number of nested entity references, aka Bug ID CSCtq78106, a similar issue to CVE-2003-1564.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-06T10:00:00.000Z
CVE-2011-3288 
Cisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XML document containing a large number of nested entity references, aka Bug IDs CSCtq89842 and CSCtq88547, a similar issue to CVE-2003-1564.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-06T10:00:00.000Z
CVE-2011-3289 
Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2011-3290 
Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via unknown vectors, aka Bug ID CSCts59135.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-21T16:00:00.000Z
CVE-2011-3293 
Multiple cross-site request forgery (CSRF) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences, aka Bug ID CSCtr78143.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2011-3294 
Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers (VCS) with software before X7.0 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, aka Bug ID CSCts80342.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T15:00:00.000Z
CVE-2011-3295 
The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service (CPU consumption) via crafted network traffic, aka Bug ID CSCti59888.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2011-3296 
Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when IPv6 is used, allows remote attackers to cause a denial of service (memory corruption and module crash or hang) via vectors that trigger syslog message 302015, aka Bug ID CSCti83875.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-06T10:00:00.000Z
CVE-2011-3297 
Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when certain authentication configurations are used, allows remote attackers to cause a denial of service (module crash) by making many authentication requests for network access, aka Bug ID CSCtn15697.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-06T10:00:00.000Z