Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-1778 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-06T19:08:38.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73483 - http://www.exploit-db.com/exploits/18525
CVE ID: CVE-2012-1779 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-06T19:08:38.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/110212/idev-BusinessDirectory-3.0-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/73505 - http://osvdb.org/79636 - http://secunia.com/advisories/48173 - http://www.securityfocus.com/bid/52171
CVE ID: CVE-2012-1780 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-06T19:08:38.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44313 - http://packetstormsecurity.org/files/110043/SocialCMS-Cross-Site-Scripting-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/73440 - http://osvdb.org/79458 - http://www.securityfocus.com/bid/52109 - http://secunia.com/advisories/48082
CVE ID: CVE-2012-1781 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-06T19:08:38.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) TREF_email_address or (2) TR_name parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/79457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73442 - http://packetstormsecurity.org/files/110043/SocialCMS-Cross-Site-Scripting-SQL-Injection.html - http://www.securityfocus.com/bid/52109 - http://secunia.com/advisories
cialCMS-Cross-Site-Scripting-SQL-Injection.html - http://www.securityfocus.com/bid/52109 - http://secunia.com/advisories/48082
CVE ID: CVE-2012-1782 State: PUBLISHED Published: 2012-03-19T18:00:00Z Last Updated: 2024-09-16T16:17:30.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the (1) url bar or (2) picture bar. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52184 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0164.html - http://www.vulnerability-lab.com/get_content.php?id=461
CVE ID: CVE-2012-1783 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-06T19:08:38.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET request without an HTTP version number. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73482
CVE ID: CVE-2012-1784 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-06T19:08:38.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter in a profile action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52168 - http://osvdb.org/79637 - http://packetstormsecurity.org/files/110225/MyJobList-0.1.3-SQL-Injection.html - http://secunia.com/advisories/48169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73503
CVE ID: CVE-2012-1785 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-06T19:08:38.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: kg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73508 - http://plugins.trac.wordpress.org/changeset?old_path=%2Fvideo-embed-thumbnail-generator&old=507924&new_path=%2Fvideo-embed-thumbnail-generator&new=507924 - http://www.securityfocus.com/bid/52180 - http://secunia.com/advisories/48087 - h
-embed-thumbnail-generator&new=507924 - http://www.securityfocus.com/bid/52180 - http://secunia.com/advisories/48087 - http://wordpress.org/extend/plugins/video-embed-thumbnail-generator/changelog/
CVE ID: CVE-2012-1786 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-06T19:08:38.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52652 - http://plugins.trac.wordpress.org/changeset?old_path=%2Fvideo-embed-thumbnail-generator&old=507924&new_path=%2Fvideo-embed-thumbnail-generator&new=507924 - http://wordpress.org/extend/plugins/video-embed-thumbnail-generator/changelog/
CVE ID: CVE-2012-1787 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-06T19:08:38.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) FILE, or (3) DOMAIN parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73485 - http://osvdb.org/79648 - http://secunia.com/advisories/48049 - http://websecurity.com.ua/3089/ - http://www.securityfocus.com/bid/52170 - http://packetstormsecurity.org/files/110219/Webglimp
websecurity.com.ua/3089/ - http://www.securityfocus.com/bid/52170 - http://packetstormsecurity.org/files/110219/Webglimpse-Brute-Force-Cross-Site-Scripting.html
CVE ID: CVE-2012-1788 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-06T19:08:38.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in wonderdesk.cgi in WonderDesk SQL 4.14 allow remote attackers to inject arbitrary web script or HTML via the (1) cus_email parameter in a cust_lostpw action; or (2) help_name, (3) help_email, (4) help_website, or (5) help_example_url parameters in an hd_modify_record action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73502 - http://st2tea.blogspot.com/2012/02/
tyfocus.com/bid/52193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73502 - http://st2tea.blogspot.com/2012/02/wonderdesk-cross-site-scripting.html - http://osvdb.org/79647 - http://secunia.com/advisories/48167 - http://packetstormsecurity.org/files/110224/WonderDesk-Cross-Site-Scripting.html
CVE ID: CVE-2012-1789 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-06T19:08:38.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Kongreg8 1.7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) surname or (2) firstname parameters to modules/members/addmember.php; or (3) groupdescription or (4) groupname parameters to modules/groups/addgroupform.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73510 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0154.html - http://www.securityfocus.com/bid/5217
ilities/73510 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0154.html - http://www.securityfocus.com/bid/52178
CVE ID: CVE-2012-1790 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-06T19:08:38.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/webgrind/issues/detail?id=66 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5075.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/73509 - http://www.exploit-db.com/exploits/18523 - http://packetstormsecurity.org/files/110216
CVE ID: CVE-2012-1792 State: PUBLISHED Published: 2012-05-27T19:00:00Z Last Updated: 2024-09-16T22:25:24.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Setup/Application/Install/RPC/DBCheck.php in OSCommerce Online Merchant 3.0.2, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the name parameter to oscommerce/index.php, which is not properly handled in an error message. NOTE: this might not be a vulnerability, since the ability to access oscommerce/index.php during installation may already imply administrator privileges. Additional Analyst Notes: - CV
cess oscommerce/index.php during installation may already imply administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2012-005.txt
CVE ID: CVE-2012-1795 State: PUBLISHED Published: 2012-03-20T18:00:00 Last Updated: 2024-08-06T19:08:38.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/364363 - http://www.securitytracker.com/id?1026825 - http://osvdb.org/80344 - http://secunia.com/advisories/48452
CVE ID: CVE-2012-1796 State: PUBLISHED Published: 2012-03-20T20:00:00 Last Updated: 2024-08-06T19:08:38.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21586193 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14526 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC79970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74325
CVE ID: CVE-2012-1797 State: PUBLISHED Published: 2012-03-20T20:00:00 Last Updated: 2024-08-06T19:08:38.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC79518 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74326 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14922 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC79518
CVE ID: CVE-2012-1798 State: PUBLISHED Published: 2012-06-05T22:00:00 Last Updated: 2024-08-06T19:08:38.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted EXIF IFD in a TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74659 - http://secunia.com/advisories/49068 - http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html - http://www.osvdb.org/81023 - http://www.debian.org/securi
://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html - http://www.osvdb.org/81023 - http://www.debian.org/security/2012/dsa-2462 - http://secunia.com/advisories/49063 - http://www.securityfocus.com/bid/52898 - http://rhn.redhat.com/errata/RHSA-2012-0544.html - http://secunia.com/advisories/48974 - http://secunia.com/advisories/49317 - http://www.securitytracker.com/id?1027032 - http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629
CVE ID: CVE-2012-1799 State: PUBLISHED Published: 2012-04-18T10:00:00 Last Updated: 2024-08-06T19:08:38.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit the rate of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack on the administrative password. Additional Analyst Notes: - CVE Program Container: References: - http://support.automation.siemens.com/WW/view/en/59869684 - http://osvdb.org/81033 - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_ad
9684 - http://osvdb.org/81033 - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-268149.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdf
CVE ID: CVE-2012-1800 State: PUBLISHED Published: 2012-04-18T10:00:00 Last Updated: 2024-08-06T19:08:38.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 allows remote attackers to cause a denial of service (device outage) or possibly execute arbitrary code via a crafted DCP frame. Additional Analyst Notes: - CVE Program Container: References: - http://support.automation.siemens.com/WW/view/en/59869684 - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_s
m/WW/view/en/59869684 - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-268149.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdf - http://osvdb.org/81034
CVE ID: CVE-2012-1801 State: PUBLISHED Published: 2012-04-18T10:00:00 Last Updated: 2024-08-06T19:08:38.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in (1) COM and (2) ActiveX controls in ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Server, QuickTeach, RobotStudio S4, and RobotStudio Lite allow remote attackers to execute arbitrary code via crafted input data. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-095-01A.pdf - http://secunia.com/advisories/48693 - http://www.securityfocus.com/bid/52888 - http://www05.abb.com/global/scot/scot348.nsf/veritydisplay
m/advisories/48693 - http://www.securityfocus.com/bid/52888 - http://www05.abb.com/global/scot/scot348.nsf/veritydisplay/35df9dc4a94ae83ac12579ca0043acc1/%24file/SI10231A2%20rev%200.pdf
CVE ID: CVE-2012-1802 State: PUBLISHED Published: 2012-04-18T10:00:00 Last Updated: 2024-08-06T19:08:38.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, X-300EEC before 3.7.2, XR-300 before 3.7.2, and X-300 before 3.7.2 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a malformed URL. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81032 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-04.pdf - http://www.siemens.com/corporate-technology/po
g/81032 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-04.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-130874.pdf
CVE ID: CVE-2012-1803 State: PUBLISHED Published: 2012-04-28T00:00:00 Last Updated: 2024-08-06T19:08:38.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) TELNET, (2) remote shell (aka rsh), or (3) serial-console session. Additional Analyst Notes: - CVE Program Container: References: - http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/ - http://www.exploit-db.com/exploits/18779 - https://
es: - http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/ - http://www.exploit-db.com/exploits/18779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75120 - http://www.kb.cert.org/vuls/id/889195 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0186.html - http://www.ruggedcom.com/productbulletin/ros-security-page/ - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf - http://www.kb.cert.org/vuls/id/MAPG-8RCPEN - http://seclists.org/fulldisclosure/2012/Apr/277 - http://ics-cert.us-cert.gov/advisories/ICSA-12-146-01A - http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars - http://
ca.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars - http://www.securityfocus.com/bid/53215
CVE ID: CVE-2012-1804 State: PUBLISHED Published: 2012-05-14T20:00:00 Last Updated: 2024-08-06T19:08:38.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-01.pdf - http://secunia.com/advisories/49092 - http://osvdb.org/81814 - http://www.securityfocus.com/bid/53484
CVE ID: CVE-2012-1805 State: PUBLISHED Published: 2012-04-13T17:00:00 Last Updated: 2024-08-06T19:08:38.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 allows remote attackers to execute arbitrary code via long strings in unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/74875
CVE ID: CVE-2012-1806 State: PUBLISHED Published: 2012-04-13T17:00:00 Last Updated: 2024-08-06T19:08:38.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 supports a maximum password length of 8 bytes, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74876 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf
CVE ID: CVE-2012-1807 State: PUBLISHED Published: 2012-04-13T17:00:00Z Last Updated: 2024-09-16T22:55:23.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf
CVE ID: CVE-2012-1808 State: PUBLISHED Published: 2012-04-13T17:00:00 Last Updated: 2024-08-06T19:08:38.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 does not require authentication, which allows remote attackers to perform unspecified functions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/74878
CVE ID: CVE-2012-1809 State: PUBLISHED Published: 2012-04-13T17:00:00Z Last Updated: 2024-09-16T20:17:17.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf
CVE ID: CVE-2012-1810 State: PUBLISHED Published: 2012-11-13T11:00:00 Last Updated: 2024-08-06T19:08:38.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: EOSCoreScada.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service (daemon restart) by sending data to TCP port (1) 5050 or (2) 24004. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51171 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-271-01.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/79753 - http://www.securityfocus.com/bid/56364
CVE ID: CVE-2012-1811 State: PUBLISHED Published: 2012-11-13T11:00:00 Last Updated: 2024-08-06T19:08:38.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51171 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-271-01.pdf - http://www.securityfocus.com/bid/56364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79754
CVE ID: CVE-2012-1812 State: PUBLISHED Published: 2012-11-13T11:00:00 Last Updated: 2024-08-06T19:08:38.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79756 - http://secunia.com/advisories/51171 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-271-01.pdf - http://www.securityfocus.com/bid/56364
CVE ID: CVE-2012-1813 State: PUBLISHED Published: 2012-11-13T11:00:00 Last Updated: 2024-08-06T19:08:38.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79755 - http://secunia.com/advisories/51171 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-271-01.pdf - http://www.securityfocus.com/bid/56364