rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-1104 
Multiple cross-site request forgery (CSRF) vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that (1) change a PIN, (2) delete messages, (3) add a delivery address, or (4) change a delivery address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-28T16:00:00.000Z
CVE-2011-1105 
Multiple cross-site scripting (XSS) vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via (1) a delivery address and possibly (2) a PIN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-28T16:00:00.000Z
CVE-2011-1106 
Cross-site scripting (XSS) vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to inject arbitrary web script or HTML via the authReasonCode parameter in an OpenDatabase action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1107 
Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the URL bar via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1108 
Google Chrome before 9.0.597.107 does not properly implement JavaScript dialogs, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1109 
Google Chrome before 9.0.597.107 does not properly process nodes in Cascading Style Sheets (CSS) stylesheets, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1110 
Google Chrome before 9.0.597.107 does not properly implement key frame rules, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1111 
Google Chrome before 9.0.597.107 does not properly implement forms controls, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1112 
Google Chrome before 9.0.597.107 does not properly perform SVG rendering, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1113 
Google Chrome before 9.0.597.107 on 64-bit Linux platforms does not properly perform pickle deserialization, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1114 
Google Chrome before 9.0.597.107 does not properly handle tables, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1115 
Google Chrome before 9.0.597.107 does not properly render tables, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1116 
Google Chrome before 9.0.597.107 does not properly handle SVG animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1117 
Google Chrome before 9.0.597.107 does not properly handle XHTML documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale nodes."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1118 
Google Chrome before 9.0.597.107 does not properly handle TEXTAREA elements, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1119 
Google Chrome before 9.0.597.107 does not properly determine device orientation, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1120 
The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, aka Issue 71717.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1121 
Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a TEXTAREA element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1122 
The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, aka Issue 71960.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1123 
Google Chrome before 9.0.597.107 does not properly restrict access to internal extension functions, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1124 
Use-after-free vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to blocked plug-ins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1125 
Google Chrome before 9.0.597.107 does not properly perform layout, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T22:00:00.000Z
CVE-2011-1126 
VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library in an unspecified directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-01T21:00:00.000Z
CVE-2011-1127 
SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-21T01:00:00.000Z
CVE-2011-1128 
The loadUserSettings function in Load.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly handle invalid login attempts, which might make it easier for remote attackers to obtain access or cause a denial of service via a brute-force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-21T01:00:00.000Z
CVE-2011-1129 
Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a save_items action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-21T01:00:00.000Z
CVE-2011-1130 
Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which might allow remote attackers to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, related to the cleanRequest function in QueryString.php and the constructPageIndex function in Subs.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-21T01:00:00.000Z
CVE-2011-1131 
The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created, which might allow remote attackers to obtain sensitive information via a search.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-21T01:00:00.000Z
CVE-2011-1132 
The IPv6 implementation in the kernel in Apple Mac OS X before 10.6.8 allows local users to cause a denial of service (NULL pointer dereference and reboot) via vectors involving socket options.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-24T20:00:00.000Z
CVE-2011-1133 
Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-05T20:03:37.000Z
CVE-2011-1134 
Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-05T20:07:15.000Z
CVE-2011-1135 
Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-05T20:10:49.000Z
CVE-2011-1136 
In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T00:50:59.000Z
CVE-2011-1137 
Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T17:00:00.000Z
CVE-2011-1138 
Off-by-one error in the dissect_6lowpan_iphc function in packet-6lowpan.c in Wireshark 1.4.0 through 1.4.3 on 32-bit platforms allows remote attackers to cause a denial of service (application crash) via a malformed 6LoWPAN IPv6 packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T00:00:00.000Z
CVE-2011-1139 
wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) via a pcap-ng file that contains a large packet-length field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T00:00:00.000Z
CVE-2011-1140 
Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service (infinite recursion) via a crafted (1) SMB or (2) Connection-less LDAP (CLDAP) packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T00:00:00.000Z
CVE-2011-1141 
epan/dissectors/packet-ldap.c in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (memory consumption) via (1) a long LDAP filter string or (2) an LDAP filter string containing many elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T00:00:00.000Z
CVE-2011-1142 
Stack consumption vulnerability in the dissect_ber_choice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service (infinite loop) via vectors involving self-referential ASN.1 CHOICE values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T00:00:00.000Z
CVE-2011-1143 
epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted .pcap file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T00:00:00.000Z
CVE-2011-1144 
The installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir, (3) tmp_dir, and (4) pear-build-download directories.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1072.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T00:00:00.000Z
CVE-2011-1145 
The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string.
Problem types: description: Buffer Overflow
Affected products: vendor: unixodbc
product: unixodbc
Published: 2019-11-14T01:01:55.000Z
CVE-2011-1146 
libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service (host OS crash) or possibly execute arbitrary code via a (1) virNodeDeviceDettach, (2) virNodeDeviceReset, (3) virDomainRevertToSnapshot, (4) virDomainSnapshotDelete, (5) virNodeDeviceReAttach, or (6) virConnectDomainXMLToNative call, a different vulnerability than CVE-2008-5086.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-15T17:00:00.000Z
CVE-2011-1147 
Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW 1.5; and s800i (Asterisk Appliance), when T.38 support is enabled, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UDPTL packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-15T17:00:00.000Z
CVE-2011-1148 
Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-18T15:00:00.000Z
CVE-2011-1149 
Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory (ashmem) and ASHMEM_SET_PROT_MASK.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-21T10:00:00.000Z
CVE-2011-1150 
bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter.
Problem types: description: XSS
Affected products: vendor: bbPress
product: bbPress
Published: 2020-02-05T21:24:42.000Z
CVE-2011-1151 
Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters.
Problem types: description: SQL Injection
Affected products: vendor: Joomla!
product: Joomla!
Published: 2020-02-05T21:39:18.000Z
CVE-2011-1153 
Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via format string specifiers in an argument to a class method, leading to an incorrect zend_throw_exception_ex call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-16T22:00:00.000Z
CVE-2011-1154 
The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-30T22:00:00.000Z
CVE-2011-1155 
The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-30T22:00:00.000Z
CVE-2011-1156 
feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-11T18:00:00.000Z
CVE-2011-1157 
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-11T18:00:00.000Z
CVE-2011-1158 
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-11T18:00:00.000Z
CVE-2011-1159 
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T01:00:00.000Z
CVE-2011-1160 
The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local users to obtain potentially sensitive information from kernel memory via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-21T23:00:00.000Z
CVE-2011-1162 
The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-27T15:00:00.000Z
CVE-2011-1163 
The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-10T01:00:00.000Z
CVE-2011-1164 
Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which might make it easier for remote attackers to perform attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-12T22:00:00.000Z
CVE-2011-1165 
Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easier for remote attackers to perform further attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-12T22:00:00.000Z
CVE-2011-1166 
Xen, possibly before 4.0.2, allows local 64-bit PV guests to cause a denial of service (host crash) by specifying user mode execution without user-mode pagetables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-07T19:00:00.000Z
CVE-2011-1167 
Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-28T16:00:00.000Z
CVE-2011-1168 
Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-18T18:00:00.000Z
CVE-2011-1169 
Array index error in the asihpi_hpi_ioctl function in sound/pci/asihpi/hpioctl.c in the AudioScience HPI driver in the Linux kernel before 2.6.38.1 might allow local users to cause a denial of service (memory corruption) or possibly gain privileges via a crafted adapter index value that triggers access to an invalid kernel pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-03T19:00:00.000Z
CVE-2011-1170 
net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-22T22:00:00.000Z