Provide references for further information: Can you share references or external links related to CVE-2011-1290?

{'name': 'ADV-2011-0654', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0654'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates.html'}, {'name': '44151', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44151'}, {'name': '46849', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46849'}, {'name': '1025212', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025212'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4596'}, {'name': '71182', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71182'}, {'name': 'DSA-2192', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2192'}, {'name': 'APPLE-SA-2011-04-14-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Apr/msg00002.html'}, {'name': 'APPLE-SA-2011-04-14-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Apr/msg00001.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-11-104'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.blackberry.com/btsc/KB26132'}, {'name': 'ADV-2011-0984', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0984'}, {'name': 'ADV-2011-0645', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0645'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011'}, {'name': '43782', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43782'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4607'}, {'name': 'ADV-2011-0671', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0671'}, {'name': 'APPLE-SA-2011-04-14-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zdnet.com/blog/security/pwn2own-2011-blackberry-falls-to-webkit-browser-attack/8401'}, {'name': '43748', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43748'}, {'name': '20110414 ZDI-11-104: (Pwn2Own) Webkit CSS Text Element Count Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517513/100/0/threaded'}, {'name': '44154', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44154'}, {'name': 'google-webkit-style-code-execution(66052)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66052'}, {'name': '43735', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43735'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1290?


Explain the CVE ID: What does the identifier CVE-2011-1291 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1291.

Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "buffer error."


Provide references for further information: Can you share references or external links related to CVE-2011-1291?

{'name': 'ADV-2011-0765', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0765'}, {'name': 'oval:org.mitre.oval:def:14544', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14544'}, {'name': '43859', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43859'}, {'name': '47029', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47029'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/03/stable-channel-update.html'}, {'name': 'google-chrome-base-string-bo(66298)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66298'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=72517'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1291?


Explain the CVE ID: What does the identifier CVE-2011-1292 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1292.

Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1292?

{'name': 'ADV-2011-0765', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0765'}, {'name': 'DSA-2245', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2245'}, {'name': 'google-chrome-frame-code-exec(66299)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66299'}, {'name': '43859', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43859'}, {'name': '47029', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47029'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=73216'}, {'name': 'oval:org.mitre.oval:def:13876', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13876'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1292?


Explain the CVE ID: What does the identifier CVE-2011-1293 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1293.

Use-after-free vulnerability in the HTMLCollection implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1293?

{'name': 'ADV-2011-0765', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0765'}, {'name': 'DSA-2245', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2245'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4981'}, {'name': 'APPLE-SA-2011-10-12-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html'}, {'name': 'APPLE-SA-2011-10-11-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html'}, {'name': '43859', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43859'}, {'name': '47029', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47029'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/03/stable-channel-update.html'}, {'name': 'google-chrome-html-code-exec(66300)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66300'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4999'}, {'name': 'oval:org.mitre.oval:def:14367', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14367'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4808'}, {'name': 'APPLE-SA-2011-07-20-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=73595'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1293?


Explain the CVE ID: What does the identifier CVE-2011-1294 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1294.

Google Chrome before 10.0.648.204 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."


Provide references for further information: Can you share references or external links related to CVE-2011-1294?

{'name': 'ADV-2011-0765', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0765'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=74562'}, {'name': 'oval:org.mitre.oval:def:14376', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14376'}, {'name': 'google-chrome-stale-code-exec(66301)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66301'}, {'name': '43859', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43859'}, {'name': '47029', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47029'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/03/stable-channel-update.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1294?


Explain the CVE ID: What does the identifier CVE-2011-1295 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1295.

WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not properly handle node parentage, which allows remote attackers to cause a denial of service (DOM tree corruption), conduct cross-site scripting (XSS) attacks, or possibly have unspecified other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1295?

{'name': 'ADV-2011-0765', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0765'}, {'name': 'APPLE-SA-2011-10-12-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html'}, {'name': '43859', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43859'}, {'name': '47029', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47029'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/03/stable-channel-update.html'}, {'name': 'oval:org.mitre.oval:def:14269', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14269'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4999'}, {'name': 'google-chrome-node-code-exec(66302)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66302'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4808'}, {'name': 'APPLE-SA-2011-07-20-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=74991'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1295?


Explain the CVE ID: What does the identifier CVE-2011-1296 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1296.

Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."


Provide references for further information: Can you share references or external links related to CVE-2011-1296?

{'name': 'ADV-2011-0765', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0765'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4981'}, {'name': 'APPLE-SA-2011-10-12-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html'}, {'name': 'APPLE-SA-2011-10-11-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html'}, {'name': '43859', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43859'}, {'name': '47029', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47029'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/03/stable-channel-update.html'}, {'name': 'google-chrome-svgtext-code-exec(66303)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66303'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4999'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4808'}, {'name': 'oval:org.mitre.oval:def:14636', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14636'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=75170'}, {'name': 'APPLE-SA-2011-07-20-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1296?


Explain the CVE ID: What does the identifier CVE-2011-1298 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1298.

An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore::GraphicsContext::fillRect function.


Provide references for further information: Can you share references or external links related to CVE-2011-1298?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/chromium/issues/detail?id=75155'}, {'tags': ['x_refsource_MISC'], 'url': 'http://trac.webkit.org/changeset/80579'}, {'tags': ['x_refsource_MISC'], 'url': 'http://trac.webkit.org/changeset/81431'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1298?


Explain the CVE ID: What does the identifier CVE-2011-1300 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1300.

The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome before 10.0.648.205 on Windows, allows remote attackers to execute arbitrary code via unspecified vectors, related to an "off-by-three" error.


Provide references for further information: Can you share references or external links related to CVE-2011-1300?

{'name': 'ADV-2011-1006', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1006'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/angleproject/source/detail?r=611'}, {'name': '1025377', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025377'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=70070'}, {'name': '44141', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44141'}, {'name': '47377', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47377'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=623791'}, {'name': 'chrome-gpu-dos(66766)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66766'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2011/mfsa2011-17.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html'}, {'name': 'oval:org.mitre.oval:def:14466', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14466'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1300?


Explain the CVE ID: What does the identifier CVE-2011-1301 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1301.

Use-after-free vulnerability in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1301?

{'name': 'ADV-2011-1006', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1006'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=75629'}, {'name': '1025377', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025377'}, {'name': '44141', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44141'}, {'name': '47377', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47377'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html'}, {'name': 'chrome-gpu-code-execution(66767)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66767'}, {'name': 'oval:org.mitre.oval:def:14509', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14509'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1301?


Explain the CVE ID: What does the identifier CVE-2011-1302 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1302.

Heap-based buffer overflow in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1302?

{'name': 'ADV-2011-1006', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1006'}, {'name': '1025377', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025377'}, {'name': 'oval:org.mitre.oval:def:14737', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14737'}, {'name': '44141', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44141'}, {'name': '47377', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47377'}, {'name': 'chrome-gpu-bo(66768)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66768'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=78524'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1302?


Explain the CVE ID: What does the identifier CVE-2011-1303 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1303.

Google Chrome before 11.0.696.57 does not properly handle floating objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."


Provide references for further information: Can you share references or external links related to CVE-2011-1303?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=61502'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html'}, {'name': 'oval:org.mitre.oval:def:13705', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13705'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1303?


Explain the CVE ID: What does the identifier CVE-2011-1304 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1304.

Unspecified vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to bypass the pop-up blocker via vectors related to plug-ins.


Provide references for further information: Can you share references or external links related to CVE-2011-1304?

{'name': 'oval:org.mitre.oval:def:14399', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14399'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=70538'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1304?


Explain the CVE ID: What does the identifier CVE-2011-1305 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1305.

Race condition in Google Chrome before 11.0.696.57 on Linux and Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to linked lists and a database.


Provide references for further information: Can you share references or external links related to CVE-2011-1305?

{'name': 'oval:org.mitre.oval:def:14305', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14305'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=70589'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1305?


Explain the CVE ID: What does the identifier CVE-2011-1306 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1306.

Unspecified vulnerability in the Scratchpad application in Google Chrome OS before R10 0.10.156.46 Beta has unknown impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1306?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/03/chrome-os-beta-channel-update.html'}, {'name': 'google-chrome-scratchpad-unspecified(65991)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65991'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1306?


Explain the CVE ID: What does the identifier CVE-2011-1307 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1307.

The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log directory, which allows local users to have unintended access to log files via standard filesystem operations, a different vulnerability than CVE-2009-1173.


Provide references for further information: Can you share references or external links related to CVE-2011-1307?

{'name': 'PM20021', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM20021'}, {'name': '46736', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46736'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}, {'name': 'ADV-2011-0564', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0564'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1307?


Explain the CVE ID: What does the identifier CVE-2011-1308 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1308.

Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1308?

{'name': 'PM20393', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM20393'}, {'name': 'was-ivt-xss(65992)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65992'}, {'name': '46736', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46736'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}, {'name': 'ADV-2011-0564', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0564'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1308?


Explain the CVE ID: What does the identifier CVE-2011-1309 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1309.

The Plug-in component in IBM WebSphere Application Server (WAS) before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1309?

{'name': 'PM22860', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM22860'}, {'name': '46736', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46736'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}, {'name': 'ADV-2011-0564', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0564'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1309?


Explain the CVE ID: What does the identifier CVE-2011-1310 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1310.

The Administrative Scripting Tools component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when tracing is enabled, places wsadmin command parameters into the (1) wsadmin.traceout and (2) trace.log files, which allows local users to obtain potentially sensitive information by reading these files.


Provide references for further information: Can you share references or external links related to CVE-2011-1310?

{'name': 'PM18736', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM18736'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1310?


Explain the CVE ID: What does the identifier CVE-2011-1311 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1311.

The Security component in IBM WebSphere Application Server (WAS) before 7.0.0.15, when a J2EE 1.4 application is used, determines the security role mapping on the basis of the ibm-application-bnd.xml file instead of the intended ibm-application-bnd.xmi file, which might allow remote authenticated users to gain privileges in opportunistic circumstances by requesting a service.


Provide references for further information: Can you share references or external links related to CVE-2011-1311?

{'name': 'PM25455', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM25455'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1311?


Explain the CVE ID: What does the identifier CVE-2011-1312 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1312.

The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended access restrictions by mapping a (1) user or (2) group to an administrator role.


Provide references for further information: Can you share references or external links related to CVE-2011-1312?

{'name': 'PK88606', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PK88606'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1312?


Explain the CVE ID: What does the identifier CVE-2011-1313 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1313.

Double free vulnerability in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote backend IIOP servers to cause a denial of service (S0C4 ABEND and storage corruption) by rejecting IIOP requests at opportunistic time instants, as demonstrated by requests associated with an ORB_Request::getACRWorkElementPtr function call.


Provide references for further information: Can you share references or external links related to CVE-2011-1313?

{'name': 'PM17170', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM17170'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1313?


Explain the CVE ID: What does the identifier CVE-2011-1314 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1314.

The Service Integration Bus (SIB) messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (daemon hang) by performing close operations via network connections to a queue manager.


Provide references for further information: Can you share references or external links related to CVE-2011-1314?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}, {'name': 'PM19834', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM19834'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1314?


Explain the CVE ID: What does the identifier CVE-2011-1315 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1315.

Memory leak in the messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via network connections associated with a NULL return value from a synchronous JMS receive call.


Provide references for further information: Can you share references or external links related to CVE-2011-1315?

{'name': 'PM23626', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM23626'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1315?


Explain the CVE ID: What does the identifier CVE-2011-1316 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1316.

The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (worker thread exhaustion and UDP messaging outage) by sending many UDP messages.


Provide references for further information: Can you share references or external links related to CVE-2011-1316?

{'name': 'PM23115', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM23115'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1316?


Explain the CVE ID: What does the identifier CVE-2011-1317 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1317.

Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by sending many JSP requests that trigger large responses.


Provide references for further information: Can you share references or external links related to CVE-2011-1317?

{'name': 'PM19500', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM19500'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1317?


Explain the CVE ID: What does the identifier CVE-2011-1318 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1318.

Memory leak in org.apache.jasper.runtime.JspWriterImpl.response in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by accessing a JSP page of an application that is repeatedly stopped and restarted.


Provide references for further information: Can you share references or external links related to CVE-2011-1318?

{'name': 'PM23029', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM23029'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1318?


Explain the CVE ID: What does the identifier CVE-2011-1319 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1319.

The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote authenticated users to cause a denial of service (memory consumption) by using a Lightweight Third-Party Authentication (LTPA) token for authentication.


Provide references for further information: Can you share references or external links related to CVE-2011-1319?

{'name': 'PM18644', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM18644'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1319?


Explain the CVE ID: What does the identifier CVE-2011-1320 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1320.

The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when the Tivoli Integrated Portal / embedded WebSphere Application Server (TIP/eWAS) framework is used, does not properly delete AuthCache entries upon a logout, which might allow remote attackers to access the server by leveraging an unattended workstation.


Provide references for further information: Can you share references or external links related to CVE-2011-1320?

{'name': 'PM21536', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM21536'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1320?


Explain the CVE ID: What does the identifier CVE-2011-1321 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1321.

The AuthCache purge implementation in the Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 does not purge a user from the PlatformCredential cache, which might allow remote authenticated users to gain privileges by leveraging a group membership specified in an old RACF Object (aka RACO).


Provide references for further information: Can you share references or external links related to CVE-2011-1321?

{'name': 'PM24668', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM24668'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1321?


Explain the CVE ID: What does the identifier CVE-2011-1322 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1322.

The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via encrypted SOAP messages.


Provide references for further information: Can you share references or external links related to CVE-2011-1322?

{'name': 'PM19534', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM19534'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1322?


Explain the CVE ID: What does the identifier CVE-2011-1323 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1323.

Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service (device reboot) via a crafted option that triggers access to an invalid memory location.


Provide references for further information: Can you share references or external links related to CVE-2011-1323?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN55714408.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.nec.co.jp/security-info/secinfo/nv11-004.html'}, {'name': 'JVN#55714408', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN55714408/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1323?


Explain the CVE ID: What does the identifier CVE-2011-1324 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1324.

Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.


Provide references for further information: Can you share references or external links related to CVE-2011-1324?

{'name': 'JVN#50505257', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN50505257/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://buffalo.jp/support_s/20080808/csrf.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1324?


Explain the CVE ID: What does the identifier CVE-2011-1325 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1325.

Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1325?

{'name': 'JVNDB-2011-000029', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000029'}, {'name': '44487', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44487'}, {'name': 'JVN#37878530', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN37878530/index.html'}, {'name': '72239', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/72239'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ec-cube.net/press/detail.php?press_id=114'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1325?


Explain the CVE ID: What does the identifier CVE-2011-1326 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1326.

Unspecified vulnerability on the La Fonera+ router with firmware before 1.7.0.1 allows remote attackers to cause a denial of service via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1326?

{'name': 'lafoneraplus-unspecified-dos(67405)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67405'}, {'name': 'JVNDB-2011-000027', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000027'}, {'name': '44508', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44508'}, {'name': '47801', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47801'}, {'name': 'JVN#96839637', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN96839637/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1326?


Explain the CVE ID: What does the identifier CVE-2011-1327 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1327.

The Keystroke Encryption feature in Trend Micro Internet Security 2009 (aka Virus Buster 2009 and PC-cillin 2009) does not completely encrypt passwords, which allows local users to obtain sensitive information by leveraging a keylogger.


Provide references for further information: Can you share references or external links related to CVE-2011-1327?

{'name': 'JVN#99175647', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN99175647/index.html'}, {'name': 'JVNDB-2011-000028', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000028'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://esupport.trendmicro.co.jp/Pages/JP-2079186.aspx'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1327?


Explain the CVE ID: What does the identifier CVE-2011-1328 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1328.

SQL injection vulnerability in RADVISION iVIEW Suite before 7.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1328?

{'name': 'JVNDB-2011-000030', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000030'}, {'name': 'JVN#77697803', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN77697803/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jvn.jp/en/jp/JVN77697803/995139/index.html'}, {'name': 'iview-scopia-unspecified-sql-injection(67556)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67556'}, {'name': '72410', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/72410'}, {'name': '44634', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44634'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1328?


Explain the CVE ID: What does the identifier CVE-2011-1329 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1329.

WalRack 1.x before 1.1.9 and 2.x before 2.0.7 does not properly restrict file uploads, which allows remote attackers to execute arbitrary PHP code via vectors involving a double extension, as demonstrated by a .php.zzz file.


Provide references for further information: Can you share references or external links related to CVE-2011-1329?

{'name': 'JVN#46984044', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN46984044/index.html'}, {'name': '48001', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48001'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://digit.que.ne.jp/work/index.cgi?WalRack2'}, {'name': 'walrack-uploaded-files-code-exec(67641)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67641'}, {'name': 'JVNDB-2011-000032', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000032'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jvn.jp/en/jp/JVN46984044/54827/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://digit.que.ne.jp/work/index.cgi?WalRack'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1329?


Explain the CVE ID: What does the identifier CVE-2011-1330 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1330.

Cross-site scripting (XSS) vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1330?

{'name': '48338', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48338'}, {'name': 'JVN#43386477', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN43386477/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kbs.co.jp/jp/tabid/254/Default.aspx'}, {'name': 'JVNDB-2011-000042', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000042'}, {'name': '44994', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44994'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1330?


Explain the CVE ID: What does the identifier CVE-2011-1331 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1331.

JustSystems Ichitaro 2005 through 2011, Ichitaro Government 6, Ichitaro Government 2006 through 2010, Ichitaro Portable, Ichitaro Pro, and Ichitaro Viewer allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document, as exploited in the wild in early 2011.


Provide references for further information: Can you share references or external links related to CVE-2011-1331?

{'name': '44956', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44956'}, {'name': '48283', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48283'}, {'name': 'JVNDB-2011-000043', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000043'}, {'name': 'ichitaro-unspec-bo(68072)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/68072'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.justsystems.com/jp/info/js11001.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.symantec.com/connect/blogs/targeted-attacks-2011-using-ichitaro-zero-day-vulnerability'}, {'name': 'JVN#87239473', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN87239473/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1331?


Explain the CVE ID: What does the identifier CVE-2011-1332 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1332.

Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-6570.


Provide references for further information: Can you share references or external links related to CVE-2011-1332?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://cybozu.co.jp/products/dl/notice/detail/0023.html'}, {'name': 'JVNDB-2011-000044', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000044'}, {'name': 'JVN#59779256', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN59779256/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1332?


Explain the CVE ID: What does the identifier CVE-2011-1333 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1333.

Cross-site scripting (XSS) vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the bulletin board system."


Provide references for further information: Can you share references or external links related to CVE-2011-1333?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://cybozu.co.jp/products/dl/notice/detail/0019.html'}, {'name': '45063', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45063'}, {'name': 'JVNDB-2011-000045', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000045'}, {'name': '48446', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48446'}, {'name': 'JVN#80877328', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN80877328/index.html'}, {'name': '73327', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/73327'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1333?


Explain the CVE ID: What does the identifier CVE-2011-1334 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1334.

Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the mail system."


Provide references for further information: Can you share references or external links related to CVE-2011-1334?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://cybozu.co.jp/products/dl/notice/detail/0019.html'}, {'name': '73317', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/73317'}, {'name': '48446', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48446'}, {'name': 'JVN#54074460', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN54074460/index.html'}, {'name': '45043', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45043'}, {'name': 'JVNDB-2011-000046', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000046'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1334?


Explain the CVE ID: What does the identifier CVE-2011-1335 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1335.

Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user list functions."


Provide references for further information: Can you share references or external links related to CVE-2011-1335?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://cs.cybozu.co.jp/information/20100816notice05.php'}, {'name': '44992', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44992'}, {'name': '45050', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45050'}, {'name': '73320', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/73320'}, {'name': '48446', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48446'}, {'name': 'JVNDB-2011-000047', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000047'}, {'name': 'JVN#55508059', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN55508059/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1335?


Explain the CVE ID: What does the identifier CVE-2011-1336 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1336.

Buffer overflow in ALZip 8.21 and earlier allows remote attackers to execute arbitrary code via a crafted mim file.


Provide references for further information: Can you share references or external links related to CVE-2011-1336?

{'name': 'JVNDB-2011-000048', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000048'}, {'name': '48493', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48493'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.altools.jp/ETC/NEWS.aspx?mid=231&vidx=118'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.altools.jp/download.aspx'}, {'name': '45108', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45108'}, {'name': 'JVN#01547302', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN01547302/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1336?


Explain the CVE ID: What does the identifier CVE-2011-1337 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1337.

Opera before 11.50 allows remote attackers to cause a denial of service (disk consumption) via invalid URLs that trigger creation of error pages.


Provide references for further information: Can you share references or external links related to CVE-2011-1337?

{'name': '48501', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48501'}, {'name': 'opera-error-pages-dos(68323)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/68323'}, {'name': '45060', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45060'}, {'name': '73486', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/73486'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/docs/changelogs/windows/1150/'}, {'name': 'JVN#47757122', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN47757122/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/docs/changelogs/unix/1150/'}, {'name': 'JVNDB-2011-000049', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000049.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/docs/changelogs/mac/1150/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/support/kb/view/996/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1337?


Explain the CVE ID: What does the identifier CVE-2011-1338 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1338.

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item.


Provide references for further information: Can you share references or external links related to CVE-2011-1338?

{'name': 'JVNDB-2011-000050', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000050'}, {'name': '48562', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48562'}, {'name': '73619', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/73619'}, {'name': 'xnview-library-code-execution(68369)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/68369'}, {'name': 'JVN#17844633', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN17844633/index.html'}, {'name': '45127', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45127'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1338?


Explain the CVE ID: What does the identifier CVE-2011-1339 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1339.

Cross-site scripting (XSS) vulnerability in Google Search Appliance before 5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1339?

{'name': 'JVN#86220950', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN86220950/index.html'}, {'name': 'JVNDB-2011-000054', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000054'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1339?


Explain the CVE ID: What does the identifier CVE-2011-1340 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1340.

Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the type_name parameter to Members/ipa/createObject.


Provide references for further information: Can you share references or external links related to CVE-2011-1340?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.plone.org/plone/ticket/6110'}, {'name': 'JVNDB-2011-000056', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000056'}, {'name': 'JVN#41222793', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN41222793/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.plone.org/plone/changeset/12262'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1340?


Explain the CVE ID: What does the identifier CVE-2011-1341 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1341.

Cross-site request forgery (CSRF) vulnerability in Aimluck Aipo before 4.0.4.0, and Aipo for ASP before 4.0.4.0, allows remote attackers to hijack the authentication of administrators for requests that modify data.


Provide references for further information: Can you share references or external links related to CVE-2011-1341?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://jvn.jp/en/jp/JVN72854072/91216/index.html'}, {'name': 'JVNDB-2011-000062', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000062'}, {'name': 'JVN#72854072', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN72854072/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1341?


Explain the CVE ID: What does the identifier CVE-2011-1342 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1342.

SQL injection vulnerability in Aimluck Aipo before 5.1.1, and Aipo for ASP before 5.1.1, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1342?

{'name': 'JVNDB-2011-000063', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2011-000063'}, {'name': 'JVN#31506102', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN31506102/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jvn.jp/en/jp/JVN31506102/91216/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1342?


Explain the CVE ID: What does the identifier CVE-2011-1343 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1343.

SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via "dynamic SQL parameters."


Provide references for further information: Can you share references or external links related to CVE-2011-1343?

{'name': 'tivoli-netcool-webgui-sql-injection(65767)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65767'}, {'name': 'ADV-2011-0550', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0550'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg24029093'}, {'name': 'IZ83269', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1IZ83269'}, {'name': '43577', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43577'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1343?


Explain the CVE ID: What does the identifier CVE-2011-1344 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1344.

Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA); and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag, related to text nodes, as demonstrated by Chaouki Bekrar during a Pwn2Own competition at CanSecWest 2011.


Provide references for further information: Can you share references or external links related to CVE-2011-1344?

{'name': '44151', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44151'}, {'name': '20110415 VUPEN Security Research - Apple Safari Text Nodes Remote Use-after-free Vulnerability (CVE-2011-1344)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517517/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/aaronportnoy/statuses/45632544967901187'}, {'name': '46822', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46822'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4596'}, {'name': 'APPLE-SA-2011-04-14-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Apr/msg00002.html'}, {'name': '1025363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025363'}, {'name': 'APPLE-SA-2011-04-14-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Apr/msg00001.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-11-135'}, {'name': 'ADV-2011-0984', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0984'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011'}, {'name': '20110414 ZDI-11-135: (Pwn2Own) WebKit WBR Tag Removal Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517505/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4607'}, {'name': 'safari-webkit-unspec-code-exec(66061)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66061'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zdnet.com/blog/security/safarimacbook-first-to-fall-at-pwn2own-2011/8358'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own'}, {'name': 'APPLE-SA-2011-04-14-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html'}, {'name': '44154', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44154'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1344?


Explain the CVE ID: What does the identifier CVE-2011-1345 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1345.

Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011, aka "Object Management Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2011-1345?

{'name': 'TA11-102A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA11-102A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/msftsecresponse/statuses/45646985998516224'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/aaronportnoy/statuses/45642180118855680'}, {'name': '1025327', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025327'}, {'name': 'MS11-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own'}, {'name': '46821', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46821'}, {'name': 'oval:org.mitre.oval:def:12228', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12228'}, {'tags': ['x_refsource_MISC'], 'url': 'https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011'}, {'name': 'ms-ie-unspec-code-exec(66062)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66062'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1345?


Explain the CVE ID: What does the identifier CVE-2011-1346 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1346.

Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Stephen Fewer as the second of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.


Provide references for further information: Can you share references or external links related to CVE-2011-1346?

{'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/msftsecresponse/statuses/45646985998516224'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/aaronportnoy/statuses/45642180118855680'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own'}, {'name': 'ie-unspec-code-exec(66063)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66063'}, {'name': '46821', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46821'}, {'tags': ['x_refsource_MISC'], 'url': 'https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1346?


Explain the CVE ID: What does the identifier CVE-2011-1347 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1347.

Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mode and create arbitrary files by leveraging access to a Low integrity process, as demonstrated by Stephen Fewer as the third of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.


Provide references for further information: Can you share references or external links related to CVE-2011-1347?

{'name': 'MS11-057', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/msftsecresponse/statuses/45646985998516224'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/aaronportnoy/statuses/45642180118855680'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011'}, {'name': 'ms-ie-unspec-ce(66064)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66064'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own'}, {'name': '46821', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46821'}, {'tags': ['x_refsource_MISC'], 'url': 'https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1347?


Explain the CVE ID: What does the identifier CVE-2011-1350 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1350.

The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device.


Provide references for further information: Can you share references or external links related to CVE-2011-1350?

{'tags': ['x_refsource_MISC'], 'url': 'http://jon.oberheide.org/files/levitator.c'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/android/issues/detail?id=21522'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1350?


Explain the CVE ID: What does the identifier CVE-2011-1352 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1352.

The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory corruption using crafted user data to the pvrsrvkm device.


Provide references for further information: Can you share references or external links related to CVE-2011-1352?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/android/issues/detail?id=21523'}, {'tags': ['x_refsource_MISC'], 'url': 'http://jon.oberheide.org/files/levitator.c'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1352?


Explain the CVE ID: What does the identifier CVE-2011-1353 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1353.

Unspecified vulnerability in Adobe Reader 10.x before 10.1.1 on Windows allows local users to gain privileges via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1353?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb11-24.html'}, {'name': 'oval:org.mitre.oval:def:14177', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14177'}, {'name': 'SUSE-SU-2011:1239', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html'}, {'name': 'SUSE-SA:2011:044', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html'}, {'name': 'openSUSE-SU-2011:1238', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1353?


Explain the CVE ID: What does the identifier CVE-2011-1355 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1355.

Open redirect vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage parameter.


Provide references for further information: Can you share references or external links related to CVE-2011-1355?

{'name': 'PM35701', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1PM35701'}, {'name': 'PM42436', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1PM42436'}, {'name': 'was-logoutexitpage-security-bypass(68570)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/68570'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1355?


Explain the CVE ID: What does the identifier CVE-2011-1356 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1356.

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request.


Provide references for further information: Can you share references or external links related to CVE-2011-1356?

{'name': 'PM42436', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1PM42436'}, {'name': '48709', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48709'}, {'name': 'PM36620', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1PM36620'}, {'name': 'was-admcons-info-disclosure(68571)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/68571'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1356?


Explain the CVE ID: What does the identifier CVE-2011-1357 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1357.

Cross-site scripting (XSS) vulnerability in agentDetect.jsp in the web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 before 6.3.0.5, 7.0 before 7.0.0.5, and 7.5 before 7.5.0.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.


Provide references for further information: Can you share references or external links related to CVE-2011-1357?

{'name': 'IV01657', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1IV01657'}, {'name': 'websphere-wsrr-agentdetect-xss(69040)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/69040'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1357?


Explain the CVE ID: What does the identifier CVE-2011-1359 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1359.

Directory traversal vulnerability in the administration console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41, 7.0 before 7.0.0.19, and 8.0 before 8.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.


Provide references for further information: Can you share references or external links related to CVE-2011-1359?

{'name': 'websphere-admin-console-dir-traversal(69473)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/69473'}, {'name': '45749', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45749'}, {'name': 'PM45322', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM45322'}, {'name': '49362', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/49362'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg21509257'}, {'name': '74817', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/74817'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1359?


Explain the CVE ID: What does the identifier CVE-2011-1360 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1360.

Multiple cross-site scripting (XSS) vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in (1) manual/ibm/ and (2) htdocs/*/manual/ibm/.


Provide references for further information: Can you share references or external links related to CVE-2011-1360?

{'name': '50447', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/50447'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21502580'}, {'name': 'PM41293', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1PM41293'}, {'name': 'was-http-doc-xss(69656)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/69656'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1360?


Explain the CVE ID: What does the identifier CVE-2011-1362 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1362.

Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 and 7.0 before 7.0.0.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1308.


Provide references for further information: Can you share references or external links related to CVE-2011-1362?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27007951'}, {'name': 'was-incomplete-ivt-xss(69731)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/69731'}, {'name': 'PM40733', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM40733'}, {'name': 'PM65992', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM65992'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1362?


Explain the CVE ID: What does the identifier CVE-2011-1364 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1364.

Cross-site request forgery (CSRF) vulnerability in _ah/admin/interactive/execute (aka the Interactive Console) in the SDK Console (aka Admin Console) in the Google App Engine Python SDK before 1.5.4 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary Python code via the code parameter.


Provide references for further information: Can you share references or external links related to CVE-2011-1364?

{'tags': ['x_refsource_MISC'], 'url': 'http://code.google.com/p/googleappengine/wiki/SdkReleaseNotes'}, {'name': 'google-app-engine-csrf(69958)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/69958'}, {'name': '50075', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/50075'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.watchfire.com/files/googleappenginesdk.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1364?


Explain the CVE ID: What does the identifier CVE-2011-1366 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1366.

Unspecified vulnerability in the Import feature in IBM Rational AppScan Enterprise and AppScan Reporting Console 5.2 through 7.9.x and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary commands on an agent server via a crafted ZIP archive.


Provide references for further information: Can you share references or external links related to CVE-2011-1366?

{'name': 'rational-appscan-zip-code-execution(70043)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/70043'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21515110'}, {'name': '46329', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/46329'}, {'name': '46326', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/46326'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1366?


Explain the CVE ID: What does the identifier CVE-2011-1367 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1367.

Unspecified vulnerability in the File Load feature in IBM Rational AppScan Standard and Express 7.8.x, 7.9.x, and 8.0.x before 8.0.0.3 allows remote attackers to execute arbitrary commands via a crafted .scan file.


Provide references for further information: Can you share references or external links related to CVE-2011-1367?

{'name': '49989', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/49989'}, {'name': 'rational-appscan-scan-code-execution(70044)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/70044'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21515110'}, {'name': '46329', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/46329'}, {'name': '46326', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/46326'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1367?


Explain the CVE ID: What does the identifier CVE-2011-1368 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1368.

The JavaServer Faces (JSF) application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1368?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg24030916'}, {'name': 'PM45992', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1PM45992'}, {'name': 'was-jfs-info-disclosure(70168)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/70168'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1368?


Explain the CVE ID: What does the identifier CVE-2011-1370 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1370.

The default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message.


Provide references for further information: Can you share references or external links related to CVE-2011-1370?

{'name': 'lotussametime-configserv-info-disclosure(70923)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/70923'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21569452'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1370?


Explain the CVE ID: What does the identifier CVE-2011-1371 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1371.

Cross-site scripting (XSS) vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an Unknown Error document, a different vulnerability than CVE-2011-4171.


Provide references for further information: Can you share references or external links related to CVE-2011-1371?

{'name': 'RS00810', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1RS00810'}, {'name': 'ilogrts-error-xss(71005)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/71005'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1371?


Explain the CVE ID: What does the identifier CVE-2011-1372 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1372.

The Web User Interface on the IBM TS3100 and TS3200 tape libraries with firmware before A.60 allows remote attackers to bypass authentication and obtain administrative access via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1372?

{'name': 'tapelibraryexpress-wmc-sec-bypass(71026)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/71026'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=ssg1S1003938'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1372?


Explain the CVE ID: What does the identifier CVE-2011-1373 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1373.

Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager (STMM) feature and the AUTOMATIC DATABASE_MEMORY setting are configured, allows local users to cause a denial of service (daemon crash) via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1373?

{'name': 'oval:org.mitre.oval:def:14720', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14720'}, {'name': 'db2-stmm-dos(71043)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/71043'}, {'name': 'IC70473', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IC70473'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1373?


Explain the CVE ID: What does the identifier CVE-2011-1374 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1374.

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted REGION record in a PICT file.


Provide references for further information: Can you share references or external links related to CVE-2011-1374?

{'name': '51226', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51226'}, {'name': 'APPLE-SA-2012-11-07-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5581'}, {'name': 'oval:org.mitre.oval:def:15782', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15782'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1374?


Explain the CVE ID: What does the identifier CVE-2011-1375 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1375.

IBM AIX 6.1 and 7.1 does not restrict the wpar_limits_config and wpar_limits_modify system calls, which allows local users to cause a denial of service (system crash) via a crafted call.


Provide references for further information: Can you share references or external links related to CVE-2011-1375?

{'name': 'IV10227', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=isg1IV10227'}, {'name': 'aix-wparlimits-dos(71211)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/71211'}, {'name': 'IV10229', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=isg1IV10229'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1375?


Explain the CVE ID: What does the identifier CVE-2011-1376 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1376.

iscdeploy in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.43, 7.0 before 7.0.0.21, and 8.0 before 8.0.0.2 on the IBM i platform sets weak permissions under systemapps/isclite.ear/ and bin/client_ffdc/, which allows local users to read or modify files via standard filesystem operations.


Provide references for further information: Can you share references or external links related to CVE-2011-1376?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21569205'}, {'name': 'was-iscdeploy-insecure-permissions(71230)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/71230'}, {'name': 'PM49712', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1PM49712'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg24031675'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1376?


Explain the CVE ID: What does the identifier CVE-2011-1377 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1377.

The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server (WAS) 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors.