[{"CVE":"CVE-2011-0012","severity":"low","public_date":"2011-04-07T00:00:00Z","advisories":["RHSA-2011:0426"],"bugzilla":"639869","bugzilla_description":"CVE-2011-0012 spice-xpi: symlink attack on usbrdrctl log file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["spice-xpi-0:2.4-1.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0012.json"},{"CVE":"CVE-2011-1179","severity":"moderate","public_date":"2011-04-07T00:00:00Z","advisories":["RHSA-2011:0426","RHSA-2011:0427"],"bugzilla":"689931","bugzilla_description":"CVE-2011-1179 spice-xpi: unitialized pointer writes possible when getting plugin properties","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["spice-xpi-0:2.2-2.3.el5_6.1","spice-xpi-0:2.4-1.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1179.json"},{"CVE":"CVE-2010-2792","severity":"moderate","public_date":"2010-08-25T00:00:00Z","advisories":["RHSA-2010:0632","RHSA-2010:0651"],"bugzilla":"620350","bugzilla_description":"CVE-2010-2792 spice-xpi/qspice-client unix socket race","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["spice-xpi-0:2.2-2.3.el5_5","qspice-client-0:0.3.0-4.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2792.json"},{"CVE":"CVE-2010-2794","severity":"low","public_date":"2010-08-25T00:00:00Z","advisories":["RHSA-2010:0651"],"bugzilla":"620356","bugzilla_description":"CVE-2010-2794 spice-xpi symlink attack","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["spice-xpi-0:2.2-2.3.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2794.json"}]