rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-3431 
The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, which might allow physically proximate attackers to obtain sensitive state information by watching the device's screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3432 
The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service (device hang) via a long tel: URL that triggers a large size for the acceptance dialog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3434 
The WiFi component in Apple iOS before 5 stores WiFi credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3435 
Open Directory in Apple Mac OS X 10.7 before 10.7.2 allows local users to read the password data of arbitrary users via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3436 
Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote attackers to bypass intended password-change restrictions by leveraging an unattended workstation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3437 
Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.7 before 10.7.2 allows remote attackers to execute arbitrary code via a crafted embedded Type 1 font in a document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-3438 
WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service (process crash) or arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-24T19:00:00.000Z
CVE-2011-3439 
FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-11T18:00:00.000Z
CVE-2011-3440 
The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically proximate attackers to access data by opening a Smart Cover during power-off confirmation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-11T18:00:00.000Z
CVE-2011-3441 
libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obtain sensitive information via a crafted DNS hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-11T18:00:00.000Z
CVE-2011-3442 
The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-11T18:00:00.000Z
CVE-2011-3443 
Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors related to improper list management for Cascading Style Sheets (CSS) @font-face rules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-02T00:00:00.000Z
CVE-2011-3444 
Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T18:00:00.000Z
CVE-2011-3446 
Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font that is accessed by Font Book.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T18:00:00.000Z
CVE-2011-3447 
CFNetwork in Apple Mac OS X 10.7.x before 10.7.3 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T18:00:00.000Z
CVE-2011-3448 
Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T18:00:00.000Z
CVE-2011-3449 
Use-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted embedded font in a document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T18:00:00.000Z
CVE-2011-3450 
CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption and application crash) via a long URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T18:00:00.000Z
CVE-2011-3452 
Internet Sharing in Apple Mac OS X before 10.7.3 does not preserve the Wi-Fi configuration across software updates, which allows remote attackers to obtain sensitive information by leveraging the lack of a WEP password for a Wi-Fi network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T18:00:00.000Z
CVE-2011-3453 
Integer overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via crafted DNS data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T18:00:00.000Z
CVE-2011-3457 
The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language (aka GLSL) compilation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T18:00:00.000Z
CVE-2011-3458 
QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T18:00:00.000Z
CVE-2011-3459 
Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted rdrf atom in a movie file that triggers a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T18:00:00.000Z
CVE-2011-3460 
Buffer overflow in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PNG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T18:00:00.000Z
CVE-2011-3462 
Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows remote attackers to obtain sensitive information contained in new backups by spoofing this storage object, a different vulnerability than CVE-2010-1803.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T18:00:00.000Z
CVE-2011-3463 
WebDAV Sharing in Apple Mac OS X 10.7.x before 10.7.3 does not properly perform authentication, which allows local users to gain privileges by leveraging access to (1) the server or (2) a bound directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T18:00:00.000Z
CVE-2011-3464 
Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-22T17:00:00.000Z
CVE-2011-3477 
GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local users to cause a denial of service (system crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T19:00:00.000Z
CVE-2011-3478 
The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote attackers to execute arbitrary code via a crafted session on TCP port 5631.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-25T15:00:00.000Z
CVE-2011-3479 
Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), uses world-writable permissions for product-installation files, which allows local users to gain privileges by modifying a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-25T15:00:00.000Z
CVE-2011-3481 
The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-14T17:00:00.000Z
CVE-2011-3482 
The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-20T10:00:00.000Z
CVE-2011-3483 
Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed capture file that leads to an invalid root tvbuff, related to a "buffer exception handling vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-20T10:00:00.000Z
CVE-2011-3484 
The unxorFrame function in epan/dissectors/packet-opensafety.c in the OpenSafety dissector in Wireshark 1.6.x before 1.6.2 does not properly validate a certain frame size, which allows remote attackers to cause a denial of service (loop and application crash) via a malformed packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-20T10:00:00.000Z
CVE-2011-3486 
Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T14:00:00.000Z
CVE-2011-3487 
Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T14:00:00.000Z
CVE-2011-3488 
Use-after-free vulnerability in Equis MetaStock 11 and earlier allows remote attackers to execute arbitrary code via a malformed (1) mwc chart, (2) mws chart, (3) mwt template, or (4) mwl layout.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T14:00:00.000Z
CVE-2011-3489 
RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted rna packet with a long string to TCP port 4446 that triggers (1) "a memset zero overflow" or (2) an out-of-bounds read, related to improper handling of a 32-bit size field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T14:00:00.000Z
CVE-2011-3490 
Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long command to port 11234, as demonstrated with the TF command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T14:00:00.000Z
CVE-2011-3491 
Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative Content-Length field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T14:00:00.000Z
CVE-2011-3492 
Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T14:00:00.000Z
CVE-2011-3493 
Multiple stack-based buffer overflows in the DH_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) domain, (2) report_domain, (3) register_datahub, or (4) slave commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T14:00:00.000Z
CVE-2011-3494 
WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long StyleTemplate element in a QUO, SUM or POR file, which triggers a stack-based buffer overflow, or (2) a long Font->FaceName field (aka FaceName element), which triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T14:00:00.000Z
CVE-2011-3495 
Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the (1) RF, (2) wF, (3) UF, or (4) NF command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T17:00:00.000Z
CVE-2011-3496 
service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) BF, (2) OF, or (3) EF command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T17:00:00.000Z
CVE-2011-3497 
service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T17:00:00.000Z
CVE-2011-3498 
Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T17:00:00.000Z
CVE-2011-3499 
Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T17:00:00.000Z
CVE-2011-3500 
Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T17:00:00.000Z
CVE-2011-3501 
Integer overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial of service (crash) via a negative or large Content-Length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T17:00:00.000Z
CVE-2011-3502 
The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request with a trailing (1) space or (2) %2e (encoded dot).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T17:00:00.000Z
CVE-2011-3503 
Untrusted search path vulnerability in eSignal 10.6.2425.1208, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse JRS_UT.dll that is located in the same folder as a .quo (QUOTE) file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-16T17:00:00.000Z
CVE-2011-3504 
The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-29T00:00:00.000Z
CVE-2011-3506 
Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3507 
Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows remote authenticated users to affect integrity via unknown vectors related to Messaging Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3508 
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect confidentiality, integrity, and availability, related to LDAP library.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3509 
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3524.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-3510 
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.3.0 and 11.1.1.5.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to BI Platform Security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3511 
Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2 allows remote authenticated users to affect integrity and availability via unknown vectors related to Privileged Account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3512 
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3513 
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity, related to HTML Pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3514 
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastructure SEC (JDENET).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-3515 
Unspecified vulnerability in the Oracle Solaris 10 and 11 Express allows local users to affect integrity and availability via unknown vectors related to Process File System (procfs).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3516 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3517 
Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 8.0 allows remote attackers to affect availability via unknown vectors related to Authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3518 
Unspecified vulnerability in the Siebel Core - UIF Client component in Oracle Siebel CRM 8.0.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to User Interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3519 
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.2 and 12.1.3 allows remote authenticated users to affect confidentiality, related to REST Services.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3520 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49, 8.50, and 8.51 allows remote authenticated users to affect integrity via unknown vectors related to Personalization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z