rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-2322 
Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.1.0.7 allows remote authenticated users to affect integrity and availability, related to SYSDBA.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-2323 
Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T23:00:00.000Z
CVE-2011-2324 
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC (JDENET).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-2325 
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2326, CVE-2011-3509, and CVE-2011-3524.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-2326 
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-3509, and CVE-2011-3524.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-2327 
Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows local users to affect confidentiality via unknown vectors related to Delegated Administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-2328 
Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a .usr (aka Virtual User script) file with long directives.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-02T20:00:00.000Z
CVE-2011-2329 
The rampart_timestamp_token_validate function in util/rampart_timestamp_token.c in Apache Rampart/C 1.3.0 does not properly calculate the expiration of timestamp tokens, which allows remote attackers to bypass intended access restrictions by leveraging an expired token, a different vulnerability than CVE-2011-0730.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-02T20:00:00.000Z
CVE-2011-2330 
Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 has an unspecified "built-in account" that is "trivially" accessed, which makes it easier for remote attackers to send requests to restricted pages via a session on TCP port 9495, a different vulnerability than CVE-2011-1220.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-02T20:00:00.000Z
CVE-2011-2331 
Integer overflow in img.exe in HP Intelligent Management Center (IMC) allows remote attackers to execute arbitrary code via a crafted length value in an a packet that triggers a heap-based buffer overflow, possibly related to an "recv" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-02T20:00:00.000Z
CVE-2011-2332 
Google V8, as used in Google Chrome before 12.0.742.91, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-09T19:00:00.000Z
CVE-2011-2334 
Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections.
Problem types: description: use after free
Affected products: vendor: Google
product: Chrome
Published: 2019-11-12T20:55:21.000Z
CVE-2011-2335 
A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function.
Problem types: description: double free
Affected products: vendor: Google
product: Chrome
Published: 2019-11-12T19:51:12.000Z
CVE-2011-2336 
An issue exists in WebKit in Google Chrome before Blink M12. when clearing lists in AnimationControllerPrivate that signal when a hardware animation starts.
Problem types: description: transition mishandling
Affected products: vendor: Google
product: Chrome
Published: 2019-11-07T17:46:24.000Z
CVE-2011-2337 
A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms.
Problem types: description: type confusion
Affected products: vendor: Google
product: Chrome on 64-bit platforms
Published: 2019-11-07T17:07:29.000Z
CVE-2011-2338 
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-2339 
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-2341 
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-2342 
The DOM implementation in Google Chrome before 12.0.742.91 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-09T19:00:00.000Z
CVE-2011-2343 
The Bluetooth stack in Android before 2.3.6 allows a physically proximate attacker to obtain contact information via an AT phonebook transfer.
Problem types: description: access to sensitive information
Affected products: vendor: Google
product: Android
Published: 2020-02-12T19:01:48.000Z
CVE-2011-2344 
Android Picasa in Android 3.0 and 2.x through 2.3.4 uses a cleartext HTTP session when transmitting the authToken obtained from ClientLogin, which allows remote attackers to gain privileges and access private pictures and web albums by sniffing the token from connections with picasaweb.google.com.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-08T17:00:00.000Z
CVE-2011-2345 
The NPAPI implementation in Google Chrome before 12.0.742.112 does not properly handle strings, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-29T17:00:00.000Z
CVE-2011-2346 
Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG fonts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-29T17:00:00.000Z
CVE-2011-2347 
Google Chrome before 12.0.742.112 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-29T17:00:00.000Z
CVE-2011-2348 
Google V8, as used in Google Chrome before 12.0.742.112, performs an incorrect bounds check, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-29T17:00:00.000Z
CVE-2011-2349 
Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to text selection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-29T17:00:00.000Z
CVE-2011-2350 
The HTML parser in Google Chrome before 12.0.742.112 does not properly address "lifetime and re-entrancy issues," which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-29T17:00:00.000Z
CVE-2011-2351 
Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-29T17:00:00.000Z
CVE-2011-2352 
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-2353 
Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDocument function.
Problem types: description: use after free
Affected products: vendor: Google
product: Chrome
Published: 2019-11-07T16:35:33.000Z
CVE-2011-2354 
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-2356 
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-12T18:00:00.000Z
CVE-2011-2357 
Cross-application scripting vulnerability in the Browser URL loading functionality in Android 2.3.4 and 3.1 allows local applications to bypass the sandbox and execute arbitrary Javascript in arbitrary domains by (1) causing the MAX_TAB number of tabs to be opened, then loading a URI to the targeted domain into the current tab, or (2) making two startActivity function calls beginning with the targeted domain's URI followed by the malicious Javascript while the UI focus is still associated with the targeted domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-12T18:00:00.000Z
CVE-2011-2358 
Google Chrome before 13.0.782.107 does not ensure that extension installations are confirmed by a browser dialog, which makes it easier for remote attackers to modify the product's functionality via a Trojan horse extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-03T00:00:00.000Z
CVE-2011-2359 
Google Chrome before 13.0.782.107 does not properly track line boxes during rendering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-03T00:00:00.000Z
CVE-2011-2360 
Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a dangerous file, which makes it easier for remote attackers to bypass intended content restrictions via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-03T00:00:00.000Z
CVE-2011-2361 
The Basic Authentication dialog implementation in Google Chrome before 13.0.782.107 does not properly handle strings, which might make it easier for remote attackers to capture credentials via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-03T00:00:00.000Z
CVE-2011-2362 
Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only in a trailing dot, which allows remote web servers to bypass the Same Origin Policy via Set-Cookie headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2363 
Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a user-supplied callback.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2364 
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2365.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2365 
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2364.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2366 
Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T15:26:00.000Z
CVE-2011-2367 
The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process, or cause a denial of service (application crash), via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2368 
The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write operations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2369 
Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 4.0.1 allows remote attackers to inject arbitrary web script or HTML via an SVG element containing an HTML-encoded entity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2370 
Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation dialog for a (1) add-on or (2) theme via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2371 
Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2372 
Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-29T00:00:00.000Z
CVE-2011-2373 
Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14, when JavaScript is disabled, allows remote attackers to execute arbitrary code via a crafted XUL document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2374 
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2375 
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 5.0 and Thunderbird through 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2376 
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and Thunderbird before 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2377 
Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-30T16:00:00.000Z
CVE-2011-2378 
The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, SeaMonkey 2.x, and possibly other products does not properly handle DOM objects, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to dereferencing of a "dangling pointer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-18T18:00:00.000Z
CVE-2011-2379 
Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3, when Internet Explorer before 9 or Safari before 5.0.6 is used for Raw Unified mode, allows remote attackers to inject arbitrary web script or HTML via a crafted patch, related to content sniffing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-09T19:00:00.000Z
CVE-2011-2380 
Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to determine the existence of private group names via a crafted parameter during (1) bug creation or (2) bug editing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-09T19:00:00.000Z
CVE-2011-2381 
CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to inject arbitrary e-mail headers via an attachment description in a flagmail notification.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-09T19:00:00.000Z
CVE-2011-2382 
Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-03T17:00:00.000Z
CVE-2011-2383 
Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing an http: URL that redirects to a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue, aka "Drag and Drop Information Disclosure Vulnerability." NOTE: this vulnerability exists because of an incomplete fix in the Internet Explorer 9 release.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-03T17:00:00.000Z
CVE-2011-2385 
The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-07-19T20:00:00.000Z
CVE-2011-2386 
VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site Survey before 2.1.9 allows user-assisted remote attackers to execute arbitrary code via a (1) vws and (2) vwr file with an invalid Type property, which triggers an untrusted pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-08T10:00:00.000Z
CVE-2011-2391 
The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (CPU consumption) via crafted ICMPv6 packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2011-2393 
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD, NetBSD, and possibly other BSD-based operating systems allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, a similar vulnerability to CVE-2010-4670.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-02T17:00:00.000Z