[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1624.

[Assistant] Cisco IOS 12.2(58)SE, when a login banner is configured, allows remote attackers to cause a denial of service (device reload) by establishing two SSH2 sessions, aka Bug ID CSCto62631.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1624?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1624?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1625 mean in the context of cybersecurity?

[Assistant] CVE-2011-1625


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1625.

[Assistant] Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching (DLSw) feature is configured, allows remote attackers to cause a denial of service (device crash) by sending a sequence of malformed packets and leveraging a "narrow timing window," aka Bug ID CSCtf74999, a different vulnerability than CVE-2007-0199, CVE-2008-1152, and CVE-2009-0629.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1625?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1625?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1637 mean in the context of cybersecurity?

[Assistant] CVE-2011-1637


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1637.

[Assistant] Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1637?

[Assistant] 20110601 Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1637?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1640 mean in the context of cybersecurity?

[Assistant] CVE-2011-1640


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1640.

[Assistant] The ethernet-lldp component in Cisco IOS 12.2 before 12.2(33)SXJ1 does not properly support a large number of LLDP Management Address (MA) TLVs, which allows remote attackers to cause a denial of service (device crash) via crafted LLDPDUs, aka Bug ID CSCtj22354.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1640?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1640?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1643 mean in the context of cybersecurity?

[Assistant] CVE-2011-1643


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1643.

[Assistant] Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session, aka Bug IDs CSCti81574, CSCto63060, CSCto72183, and CSCto73833.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1643?

[Assistant] 20110824 Open Query Interface in Cisco Unified Communications Manager and Cisco Unified Presence Server


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1643?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1645 mean in the context of cybersecurity?

[Assistant] CVE-2011-1645


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1645.

[Assistant] The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute arbitrary code, via unspecified vectors, aka Bug ID CSCtn23871.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1645?

[Assistant] 20110525 Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1645?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1646 mean in the context of cybersecurity?

[Assistant] CVE-2011-1646


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1646.

[Assistant] The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the (1) ping test parameter or (2) traceroute test parameter, aka Bug ID CSCtn23871.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1646?

[Assistant] 20110525 Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1646?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1647 mean in the context of cybersecurity?

[Assistant] CVE-2011-1647


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1647.

[Assistant] The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors, aka Bug ID CSCtn23871.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1647?

[Assistant] 20110525 Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1647?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1649 mean in the context of cybersecurity?

[Assistant] CVE-2011-1649


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1649.

[Assistant] The Internet Streamer application in Cisco Content Delivery System (CDS) with software 2.5.7, 2.5.8, and 2.5.9 before build 126 allows remote attackers to cause a denial of service (Web Engine crash) via a crafted URL, aka Bug IDs CSCtg67333 and CSCth25341.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1649?

[Assistant] 20110525 Cisco Content Delivery System Internet Streamer: Web Server Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1649?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1651 mean in the context of cybersecurity?

[Assistant] CVE-2011-1651


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1651.

[Assistant] Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 packet, aka Bug ID CSCto45095.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1651?

[Assistant] 20110525 Cisco XR 12000 Series Shared Port Adapters Interface Processor Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1651?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1652 mean in the context of cybersecurity?

[Assistant] CVE-2011-1652


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1652.

[Assistant] The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 service upon receipt of an IPv6 Router Advertisement (RA), and does not provide an option to ignore an unexpected RA, which allows remote attackers to conduct man-in-the-middle attacks on communication with external IPv4 servers via vectors involving RAs, a DHCPv6 server, and NAT-PT on the local network, aka a "SLAAC Attack." NOTE: it can be argued that preferring IPv6 complies with RFC 3484, and that attempting to determine the legitimacy of an RA is currently outside the scope of recommended behavior of host operating systems


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1652?

[Assistant] [dailydave] 20110404 SLAAC Attack - 0day Windows Network Interception Configuration Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1652?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1653 mean in the context of cybersecurity?

[Assistant] CVE-2011-1653


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1653.

[Assistant] Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter, (4) NonAssignedUserList, (5) DeleteReportLayout, (6) DeleteReports, and (7) RegenerateReport stored procedures.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1653?

[Assistant]
20110413 ZDI-11-128: CA Total Defense Suite UnassignFunctionalUsers Stored Procedure SQL Injection Vulnerability

20110413 ZDI-11-134: CA Total Defense Suite UNC Management Console RegenerateReport SQL Injection Vulnerability

20110413 ZDI-11-130: CA Total Defense Suite UNC Management Console DeleteFilter SQL Injection Vulnerability

20110413 ZDI-11-131: CA Total Defense Suite NonAssignedUserList Stored Procedure SQL Injection Vulnerability

20110413 ZDI-11-132: CA Total Defense Suite UNC Management Console DeleteReportLayout SQL Injection Vulnerability

20110413 ZDI-11-133: CA Total Defense Suite UNC Management Console DeleteReports SQL Injection Vulnerability

20110413 CA20110413-01: Security Notice for CA Total Defense

20110413 ZDI-11-129: CA Total Defense Suite UnassignAdminRoles Stored Procedure SQL Injection Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1653?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1654 mean in the context of cybersecurity?

[Assistant] CVE-2011-1654


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1654.

[Assistant] Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense (TD) r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an upload request to FileUploadHandler.ashx.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1654?

[Assistant]
20110413 ZDI-11-126: CA Total Defense Suite Heartbeat Web Service Remote Code Execution Vulnerability

20110413 CA20110413-01: Security Notice for CA Total Defense


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1654?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1655 mean in the context of cybersecurity?

[Assistant] CVE-2011-1655


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1655.

[Assistant] The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 sends a cleartext response to unspecified getDBConfigSettings requests, which makes it easier for remote attackers to obtain database credentials, and subsequently execute arbitrary code, by sniffing the network, related to the UNCWS Web Service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1655?

[Assistant]
20110413 ZDI-11-127: CA Total Defense Suite UNCWS Web Service getDBConfigSettings Credential Disclosure Vulnerability

20110413 CA20110413-01: Security Notice for CA Total Defense


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1655?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1657 mean in the context of cybersecurity?

[Assistant] CVE-2011-1657


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1657.

[Assistant] The (1) ZipArchive::addGlob and (2) ZipArchive::addPattern functions in ext/zip/php_zip.c in PHP 5.3.6 allow context-dependent attackers to cause a denial of service (application crash) via certain flags arguments, as demonstrated by (a) GLOB_ALTDIRFUNC and (b) GLOB_APPEND.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1657?

[Assistant]
[oss-security] 20110701 php ZipArchive::addGlob() crashes on invalid flags

20110819 PHP 5.3.6 ZipArchive invalid use glob(3)

[oss-security] 20110701 Re: php ZipArchive::addGlob() crashes on invalid flags

[oss-security] 20110701 Re: Re: php ZipArchive::addGlob() crashes on invalid flags

20110819 PHP 5.3.6 ZipArchive invalid use glob(3)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1657?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1658 mean in the context of cybersecurity?

[Assistant] CVE-2011-1658


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1658.

[Assistant] ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a (1) setuid or (2) setgid program with this RPATH value, and then executing the program with a crafted value for the LD_PRELOAD environment variable, a different vulnerability than CVE-2010-3847 and CVE-2011-0536.  NOTE: it is not expected that any standard operating-system distribution would ship an applicable setuid or setgid program.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1658?

[Assistant] 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1658?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1659 mean in the context of cybersecurity?

[Assistant] CVE-2011-1659


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1659.

[Assistant] Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1659?

[Assistant] 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1659?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1660 mean in the context of cybersecurity?

[Assistant] CVE-2011-1660


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1660.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in the DataDynamics.Reports.Web class library in GrapeCity Data Dynamics Reports before 1.6.2084.14 allow remote attackers to inject arbitrary web script or HTML via (1) the reportName or (2) uniqueId parameter to CoreViewerInit.js, or the (3) uniqueId or (4) traceLevel parameter to CoreController.js, as reachable by CoreHandler.ashx.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1660?

[Assistant] 20110330 DataDynamics Report Library CoreHandler XSS


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1660?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1661 mean in the context of cybersecurity?

[Assistant] CVE-2011-1661


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1661.

[Assistant] The Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node titles, which allows remote attackers to bypass intended access restrictions and read potentially sensitive node titles via the autocomplete feature.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1661?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1661?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1662 mean in the context of cybersecurity?

[Assistant] CVE-2011-1662


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1662.

[Assistant] Cross-site scripting (XSS) vulnerability in Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1662?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1662?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1663 mean in the context of cybersecurity?

[Assistant] CVE-2011-1663


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1663.

[Assistant] SQL injection vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1663?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1663?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1664 mean in the context of cybersecurity?

[Assistant] CVE-2011-1664


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1664.

[Assistant] Cross-site request forgery (CSRF) vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1664?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1664?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1665 mean in the context of cybersecurity?

[Assistant] CVE-2011-1665


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1665.

[Assistant] PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain backup SQL files via a direct request for predictable filenames in cache/backup/.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1665?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1665?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1666 mean in the context of cybersecurity?

[Assistant] CVE-2011-1666


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1666.

[Assistant] Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in (1) Crm/Controller.php, (2) Crm/Export/Csv.php, or (3) Calendar/Model/Attender.php, which reveal the full installation path.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1666?

[Assistant] 20110331 HTB22909: Path disclosure in Tine 2.0


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1666?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1667 mean in the context of cybersecurity?

[Assistant] CVE-2011-1667


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1667.

[Assistant] SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1667?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1667?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1668 mean in the context of cybersecurity?

[Assistant] CVE-2011-1668


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1668.

[Assistant] Cross-site scripting (XSS) vulnerability in search.php in AR Web Content Manager (AWCM) 2.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the search parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1668?

[Assistant] 20110401 AR Web Content Manager (AWCM) Cross-Site scripting Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1668?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1669 mean in the context of cybersecurity?

[Assistant] CVE-2011-1669


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1669.

[Assistant] Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F (encoded dot dot) sequences in the url parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1669?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1669?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1670 mean in the context of cybersecurity?

[Assistant] CVE-2011-1670


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1670.

[Assistant] Cross-site scripting (XSS) vulnerability in actions/add.php in InTerra Blog Machine 1.84, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the subject parameter to post_url/edit.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1670?

[Assistant] 20110331 HTB22931: XSS vulnerability in InTerra Blog Machine


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1670?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1671 mean in the context of cybersecurity?

[Assistant] CVE-2011-1671


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1671.

[Assistant] Cross-site scripting (XSS) vulnerability in app/controllers/todos_controller.rb in Tracks 1.7.2, 2.0RC2, and 2.0devel allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to todos/tag/.  NOTE: some of these details are obtained from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1671?

[Assistant] 20110329 XSS Vulnerability in Tracks 1.7.2


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1671?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1672 mean in the context of cybersecurity?

[Assistant] CVE-2011-1672


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1672.

[Assistant] The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the (1) unattend.xml or (2) sysprep.inf file, as demonstrated by reading a password.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1672?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1672?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1673 mean in the context of cybersecurity?

[Assistant] CVE-2011-1673


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1673.

[Assistant] BackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the administrator password by reading the configuration file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1673?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1673?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1674 mean in the context of cybersecurity?

[Assistant] CVE-2011-1674


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1674.

[Assistant] The NetGear ProSafe WNAP210 with firmware 2.0.12 allows remote attackers to bypass authentication and obtain access to the configuration page by visiting recreate.php and then visiting index.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1674?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1674?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1675 mean in the context of cybersecurity?

[Assistant] CVE-2011-1675


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1675.

[Assistant] mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1675?

[Assistant]
[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110307 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110401 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110315 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1675?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1676 mean in the context of cybersecurity?

[Assistant] CVE-2011-1676


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1676.

[Assistant] mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the /etc/mtab file via multiple invocations.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1676?

[Assistant]
[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110307 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110401 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110315 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1676?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1677 mean in the context of cybersecurity?

[Assistant] CVE-2011-1677


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1677.

[Assistant] mount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1677?

[Assistant]
[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110307 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110401 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110315 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1677?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1678 mean in the context of cybersecurity?

[Assistant] CVE-2011-1678


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1678.

[Assistant] smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1678?

[Assistant]
[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110307 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110401 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110315 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1678?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1679 mean in the context of cybersecurity?

[Assistant] CVE-2011-1679


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1679.

[Assistant] ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2) ncpumount to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1679?

[Assistant]
[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110307 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110401 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110315 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1679?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1680 mean in the context of cybersecurity?

[Assistant] CVE-2011-1680


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1680.

[Assistant] ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1680?

[Assistant]
[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110307 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110401 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110315 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1680?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1681 mean in the context of cybersecurity?

[Assistant] CVE-2011-1681


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1681.

[Assistant] vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to trigger corruption of this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1681?

[Assistant]
[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110307 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110401 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110315 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1681?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1682 mean in the context of cybersecurity?

[Assistant] CVE-2011-1682


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1682.

[Assistant] Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create a list or (2) insert cross-site scripting (XSS) sequences.  NOTE: this issue exists because of an incomplete fix for CVE-2011-0748.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1682?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1682?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1683 mean in the context of cybersecurity?

[Assistant] CVE-2011-1683


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1683.

[Assistant] IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1683?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1683?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1684 mean in the context of cybersecurity?

[Assistant] CVE-2011-1684


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1684.

[Assistant] Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted MP4 file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1684?

[Assistant]
[oss-security] 20110412 CVE id request: vlc

[oss-security] 20110413 Re: CVE id request: vlc

[oss-security] 20110413 Re: CVE id request: vlc


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1684?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1685 mean in the context of cybersecurity?

[Assistant] CVE-2011-1685


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1685.

[Assistant] Best Practical Solutions RT 3.8.0 through 3.8.9 and 4.0.0rc through 4.0.0rc7, when the CustomFieldValuesSources (aka external custom field) option is enabled, allows remote authenticated users to execute arbitrary code via unspecified vectors, as demonstrated by a cross-site request forgery (CSRF) attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1685?

[Assistant]
[rt-announce] 20110414 RT 3.8.10 Released - Security Release

[rt-announce] 20110414 Security vulnerabilities in RT


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1685?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1686 mean in the context of cybersecurity?

[Assistant] CVE-2011-1686


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1686.

[Assistant] Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, as demonstrated by reading data.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1686?

[Assistant]
[rt-announce] 20110414 RT 3.8.10 Released - Security Release

[rt-announce] 20110414 Security vulnerabilities in RT

[rt-announce] 20110414 RT 3.6.11 Released - Security Release


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1686?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1687 mean in the context of cybersecurity?

[Assistant] CVE-2011-1687


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1687.

[Assistant] Best Practical Solutions RT 3.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote authenticated users to obtain sensitive information by using the search interface, as demonstrated by retrieving encrypted passwords.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1687?

[Assistant]
[rt-announce] 20110414 RT 3.8.10 Released - Security Release

[rt-announce] 20110414 Security vulnerabilities in RT

[rt-announce] 20110414 RT 3.6.11 Released - Security Release


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1687?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1688 mean in the context of cybersecurity?

[Assistant] CVE-2011-1688


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1688.

[Assistant] Directory traversal vulnerability in Best Practical Solutions RT 3.2.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote attackers to read arbitrary files via a crafted HTTP request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1688?

[Assistant]
[rt-announce] 20110414 RT 3.8.10 Released - Security Release

[rt-announce] 20110414 Security vulnerabilities in RT

[rt-announce] 20110414 RT 3.6.11 Released - Security Release


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1688?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1689 mean in the context of cybersecurity?

[Assistant] CVE-2011-1689


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1689.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1689?

[Assistant]
[rt-announce] 20110414 RT 3.8.10 Released - Security Release

[rt-announce] 20110414 Security vulnerabilities in RT

[rt-announce] 20110414 RT 3.6.11 Released - Security Release


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1689?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1690 mean in the context of cybersecurity?

[Assistant] CVE-2011-1690


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1690.

[Assistant] Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers to trick users into sending credentials to an arbitrary server via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1690?

[Assistant]
[rt-announce] 20110414 RT 3.8.10 Released - Security Release

[rt-announce] 20110414 Security vulnerabilities in RT

[rt-announce] 20110414 RT 3.6.11 Released - Security Release


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1690?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1691 mean in the context of cybersecurity?

[Assistant] CVE-2011-1691


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1691.

[Assistant] The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and other products, does not properly handle access to the (1) counterIncrement and (2) counterReset attributes of CSSStyleDeclaration data provided by a getComputedStyle method call, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1691?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1691?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1696 mean in the context of cybersecurity?

[Assistant] CVE-2011-1696


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1696.

[Assistant] Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity Manager Roles Based Provisioning Module 3.6.0, 3.6.1, 3.7.0, and 4.0.0, allows remote attackers to inject arbitrary web script or HTML via the apwaDetail (aka apwaDetailId) parameter, aka Bug 692972.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1696?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1696?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1699 mean in the context of cybersecurity?

[Assistant] CVE-2011-1699


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1699.

[Assistant] Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted uri parameter in a printer-url.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1699?

[Assistant] 20110606 ZDI-11-172: Novell iPrint nipplib.dll uri Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1699?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1700 mean in the context of cybersecurity?

[Assistant] CVE-2011-1700


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1700.

[Assistant] Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-time parameter in a printer-url.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1700?

[Assistant] 20110606 ZDI-11-173: Novell iPrint nipplib.dll profile-time Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1700?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1701 mean in the context of cybersecurity?

[Assistant] CVE-2011-1701


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1701.

[Assistant] Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-name parameter in a printer-url.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1701?

[Assistant] 20110606 ZDI-11-174: Novell iPrint nipplib.dll profile-name Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1701?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1702 mean in the context of cybersecurity?

[Assistant] CVE-2011-1702


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1702.

[Assistant] Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted file-date-time parameter in a printer-url.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1702?

[Assistant] 20110606 ZDI-11-175: Novell iPrint nipplib.dll file-date-time Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1702?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1703 mean in the context of cybersecurity?

[Assistant] CVE-2011-1703


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1703.

[Assistant] Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted driver-version parameter in a printer-url.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1703?

[Assistant] 20110606 ZDI-11-176: Novell iPrint nipplib.dll driver-version Remote Code Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1703?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1704 mean in the context of cybersecurity?

[Assistant] CVE-2011-1704


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1704.

[Assistant] Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted core-package parameter in a printer-url.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1704?

[Assistant] 20110606 ZDI-11-177: Novell iPrint nipplib.dll core-package Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1704?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1705 mean in the context of cybersecurity?

[Assistant] CVE-2011-1705


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1705.

[Assistant] Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1705?

[Assistant] 20110606 ZDI-11-178: Novell iPrint nipplib.dll client-file-name Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1705?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1706 mean in the context of cybersecurity?

[Assistant] CVE-2011-1706


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1706.

[Assistant] Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted iprint-client-config-info parameter in a printer-url.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1706?

[Assistant] 20110606 ZDI-11-179: Novell iPrint nipplib.dll iprint-client-config-info Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1706?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1707 mean in the context of cybersecurity?

[Assistant] CVE-2011-1707


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1707.

[Assistant] Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs parameter in a printer-url.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1707?

[Assistant] 20110606 ZDI-11-181: Novell iPrint op-printer-list-all-jobs url Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1707?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1708 mean in the context of cybersecurity?

[Assistant] CVE-2011-1708


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1708.

[Assistant] Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs cookie.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1708?

[Assistant] 20110606 ZDI-11-180: Novell iPrint op-printer-list-all-jobs cookie Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1708?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1709 mean in the context of cybersecurity?

[Assistant] CVE-2011-1709


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1709.

[Assistant] GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1709?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1709?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1710 mean in the context of cybersecurity?

[Assistant] CVE-2011-1710


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1710.

[Assistant] Multiple integer overflows in the HTTP server in the Novell XTier framework 3.1.8 allow remote attackers to cause a denial of service (service crash) or possibly execute arbitrary code via crafted header length variables.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1710?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1710?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1711 mean in the context of cybersecurity?

[Assistant] CVE-2011-1711


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1711.

[Assistant] Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote authenticated users to access the accounts of other users via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1711?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1711?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1712 mean in the context of cybersecurity?

[Assistant] CVE-2011-1712


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1712.

[Assistant] The txXPathNodeUtils::getXSLTId function in txMozillaXPathTreeWalker.cpp and txStandaloneXPathTreeWalker.cpp in Mozilla Firefox before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1, and SeaMonkey before 2.0.14, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1712?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1712?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1713 mean in the context of cybersecurity?

[Assistant] CVE-2011-1713


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1713.

[Assistant] Microsoft msxml.dll, as used in Internet Explorer 8 on Windows 7, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.  NOTE: this might overlap CVE-2011-1202.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1713?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1713?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1714 mean in the context of cybersecurity?

[Assistant] CVE-2011-1714


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1714.

[Assistant] Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or HTML via the callback parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1714?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1714?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1715 mean in the context of cybersecurity?

[Assistant] CVE-2011-1715


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1715.

[Assistant] Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to read arbitrary files via ..%2f (encoded dot dot) sequences in the file parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1715?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1715?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1716 mean in the context of cybersecurity?

[Assistant] CVE-2011-1716


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1716.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1716?

[Assistant]
20110404 Re: Xymon monitor cross-site scripting vulnerabilities

20110403 Xymon monitor cross-site scripting vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1716?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1717 mean in the context of cybersecurity?

[Assistant] CVE-2011-1717


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1717.

[Assistant] Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1717?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1717?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1718 mean in the context of cybersecurity?

[Assistant] CVE-2011-1718


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1718.

[Assistant] The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1718?

[Assistant] 20110421 CA20110420-01: Security Notice for CA SiteMinder


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1718?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1719 mean in the context of cybersecurity?

[Assistant] CVE-2011-1719


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1719.

[Assistant] Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via (1) a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or (2) a long Title property value to the UOMWV_Helper ActiveX control in UOMWV_HelperActiveX.ocx before 11.5.0.1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1719?

[Assistant] 20110421 CA20110420-02: Security Notice for CA Output Management Web Viewer


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1719?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1720 mean in the context of cybersecurity?

[Assistant] CVE-2011-1720


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1720.

[Assistant] The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1720?

[Assistant]
20110509 Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720)

[postfix-announce] 20110509 Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1720?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1721 mean in the context of cybersecurity?

[Assistant] CVE-2011-1721


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1721.

[Assistant] Cross-site request forgery (CSRF) vulnerability in php/partie_administrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests that (1) modify passwords or (2) add new projects.  NOTE: some of these details are obtained from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1721?

[Assistant] 20110412 HTB22927: CSRF (Cross-Site Request Forgery) in Webjaxe


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1721?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1722 mean in the context of cybersecurity?

[Assistant] CVE-2011-1722


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1722.

[Assistant] Multiple SQL injection vulnerabilities in WEC Discussion Forum (wec_discussion) extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1722?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1722?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1723 mean in the context of cybersecurity?

[Assistant] CVE-2011-1723


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1723.

[Assistant] Cross-site scripting (XSS) vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to projects/hg-helloworld/news/.  NOTE: some of these details are obtained from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1723?

[Assistant] 20110406 XSS Vulnerability in Redmine 1.0.1 to 1.1.1


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1723?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1724 mean in the context of cybersecurity?

[Assistant] CVE-2011-1724


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1724.

[Assistant] Unspecified vulnerability in HP Virtual Server Environment before 6.3 allows remote authenticated users to gain privileges via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1724?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1724?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1725 mean in the context of cybersecurity?

[Assistant] CVE-2011-1725


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1725.

[Assistant] Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1725?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1725?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1726 mean in the context of cybersecurity?

[Assistant] CVE-2011-1726


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1726.

[Assistant] Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1726?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1726?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1727 mean in the context of cybersecurity?

[Assistant] CVE-2011-1727


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1727.

[Assistant] Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1727?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1727?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1728 mean in the context of cybersecurity?

[Assistant] CVE-2011-1728


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1728.

[Assistant] Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_BAR message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1728?

[Assistant] 20110429 ZDI-11-144: HP Data Protector Backup Client Service EXEC_BAR Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1728?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1729 mean in the context of cybersecurity?

[Assistant] CVE-2011-1729


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1729.

[Assistant] Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed GET_FILE message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1729?

[Assistant] 20110429 ZDI-11-145: HP Data Protector Backup Client Service GET_FILE Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1729?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1730 mean in the context of cybersecurity?

[Assistant] CVE-2011-1730


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1730.

[Assistant] Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_SCRIPT message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1730?

[Assistant] 20110429 ZDI-11-146: HP Data Protector Backup Client Service EXEC_SCRIPT Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1730?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1731 mean in the context of cybersecurity?

[Assistant] CVE-2011-1731


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1731.

[Assistant] Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_INTEGUTIL message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1731?

[Assistant] 20110429 ZDI-11-147: HP Data Protector Backup Client Service EXEC_INTEGUTIL Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1731?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1732 mean in the context of cybersecurity?

[Assistant] CVE-2011-1732


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1732.

[Assistant] Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed stutil message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1732?

[Assistant] 20110429 ZDI-11-148: HP Data Protector Backup Client Service stutil Message Processing Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1732?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1733 mean in the context of cybersecurity?

[Assistant] CVE-2011-1733


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1733.

[Assistant] Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed HPFGConfig message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1733?

[Assistant] 20110429 ZDI-11-149: HP Data Protector Backup Client Service HPFGConfig Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1733?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1734 mean in the context of cybersecurity?

[Assistant] CVE-2011-1734


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1734.

[Assistant] Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed omniiaputil message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1734?

[Assistant] 20110429 ZDI-11-150: HP Data Protector Backup Client Service omniiaputil Message Processing Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1734?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1735 mean in the context of cybersecurity?

[Assistant] CVE-2011-1735


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1735.

[Assistant] Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed bm message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1735?

[Assistant] 20110429 ZDI-11-151: HP Data Protector Backup Client Service bm Message Processing Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1735?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1736 mean in the context of cybersecurity?

[Assistant] CVE-2011-1736


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1736.

[Assistant] Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a GET_FILE message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1736?

[Assistant] 20110429 ZDI-11-152: HP Data Protector Backup Client Service GET_FILE Directory Traversal Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1736?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1737 mean in the context of cybersecurity?

[Assistant] CVE-2011-1737


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1737.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in the Email application in HP Palm webOS 1.4.5 and 1.4.5.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1737?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1737?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1738 mean in the context of cybersecurity?

[Assistant] CVE-2011-1738


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1738.

[Assistant] HP Palm webOS 1.4.5 and 1.4.5.1 does not properly restrict Plug-in Development Kit (PDK) applications, which allows local users to gain privileges by leveraging unintended filesystem write access.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1738?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1738?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1739 mean in the context of cybersecurity?

[Assistant] CVE-2011-1739


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1739.

[Assistant] The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances via an NFS mount request.