Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-3020 State: PUBLISHED Published: 2012-08-06T16:00:00Z Last Updated: 2024-09-17T02:21:34.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Siemens Synco OZW Web Server devices OZW672.*, OZW772.*, and OZW775 with firmware before 4 have an unspecified default password, which makes it easier for remote attackers to obtain administrative access via a network session. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-214-01.pdf - http://support.automation.siemens.com/WW/view/en/41929231/130000
CVE ID: CVE-2012-3021 State: PUBLISHED Published: 2012-11-01T10:00:00 Last Updated: 2024-08-06T19:50:05.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3026. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55935 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdf - http://support.ge-ip.c
CVE ID: CVE-2012-3022 State: PUBLISHED Published: 2013-04-16T10:00:00Z Last Updated: 2024-09-17T02:57:16.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SaveToFile method in a certain ActiveX control in TrendDisplay.dll in Canary Labs TrendLink 9.0.2.27051 and earlier does not properly restrict the creation of files, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-098-01.pdf
CVE ID: CVE-2012-3024 State: PUBLISHED Published: 2012-08-16T10:00:00Z Last Updated: 2024-09-16T20:03:44.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.tridium.com/cs/tridium_news/security_patch_36 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01.pdf
CVE ID: CVE-2012-3025 State: PUBLISHED Published: 2012-08-16T10:00:00Z Last Updated: 2024-09-16T17:53:56.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.tridium.com/cs/tridium_news/security_patch_36 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01.pdf
CVE ID: CVE-2012-3026 State: PUBLISHED Published: 2012-11-01T10:00:00 Last Updated: 2024-08-06T19:50:05.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3021. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55935 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdf - http://support.ge-ip.c
CVE ID: CVE-2012-3027 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-3028 State: PUBLISHED Published: 2012-09-18T14:00:00Z Last Updated: 2024-09-16T20:32:23.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests that modify data or cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://en.securitylab.ru/lab/PT-2012-42 - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-864051.pdf - http://www.us-cert.gov/control_sys
porate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-864051.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-256-01.pdf
CVE ID: CVE-2012-3029 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-3030 State: PUBLISHED Published: 2012-09-18T14:00:00Z Last Updated: 2024-09-16T20:27:37.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, stores sensitive information under the web root with insufficient access control, which allows remote attackers to read a (1) log file or (2) configuration file via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-864051.pdf - http://en.securitylab.ru/lab/PT-2012-43 - http://www.us-cert.gov/control_sys
/siemens_security_advisory_ssa-864051.pdf - http://en.securitylab.ru/lab/PT-2012-43 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-256-01.pdf
CVE ID: CVE-2012-3031 State: PUBLISHED Published: 2012-09-18T14:00:00Z Last Updated: 2024-09-16T20:07:39.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allow remote attackers to inject arbitrary web script or HTML via a (1) GET parameter, (2) POST parameter, or (3) Referer HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://en.securitylab.ru/lab/PT-2012-42 - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-864051.pdf - http://www.us-cert.gov/cont
com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-864051.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-256-01.pdf
CVE ID: CVE-2012-3032 State: PUBLISHED Published: 2012-09-18T14:00:00Z Last Updated: 2024-09-17T03:22:48.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to execute arbitrary SQL commands via a crafted SOAP message. Additional Analyst Notes: - CVE Program Container: References: - http://en.securitylab.ru/lab/PT-2012-44 - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-864051.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-256-01.pdf
CVE ID: CVE-2012-3033 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-3034 State: PUBLISHED Published: 2012-09-18T14:00:00Z Last Updated: 2024-09-16T20:02:55.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via crafted parameters to unspecified methods in ActiveX controls. Additional Analyst Notes: - CVE Program Container: References: - http://en.securitylab.ru/lab/PT-2012-45 - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-864051.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-256-01.pdf
CVE ID: CVE-2012-3035 State: PUBLISHED Published: 2012-10-01T18:00:00 Last Updated: 2024-08-06T19:50:05.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Emerson DeltaV 9.3.1 and 10.3 through 11.3.1 allows remote attackers to cause a denial of service (daemon crash) via a long string to an unspecified port. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55719 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-265-01.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/78972
CVE ID: CVE-2012-3036 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-3037 State: PUBLISHED Published: 2012-09-25T10:00:00.000Z Last Updated: 2025-05-23T18:26:16.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-240718.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-263-01.pdf - http://en.securitylab.ru/lab/PT-2
isory_ssa-240718.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-263-01.pdf - http://en.securitylab.ru/lab/PT-2012-48
CVE ID: CVE-2012-3039 State: PUBLISHED Published: 2013-08-09T23:00:00Z Last Updated: 2024-09-17T04:13:42.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SSL keys, which makes it easier for remote attackers to obtain access by leveraging knowledge of a key from a product installation elsewhere. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-217-01
CVE ID: CVE-2012-3040 State: PUBLISHED Published: 2012-10-10T18:00:00.000Z Last Updated: 2025-05-23T18:26:17.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50816 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-283-01.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-279823.pdf - http://osvdb.org/86130 - http://en.securitylab.ru/lab/PT-
de/forschungsfelder/siemens_security_advisory_ssa-279823.pdf - http://osvdb.org/86130 - http://en.securitylab.ru/lab/PT-2012-50
CVE ID: CVE-2012-3042 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-3047 State: PUBLISHED Published: 2013-12-10T19:00:00 Last Updated: 2024-08-06T19:50:05.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=26036
CVE ID: CVE-2012-3051 State: PUBLISHED Published: 2012-09-16T10:00:00 Last Updated: 2024-08-06T19:50:05.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (process crash or packet loss) via a large number of ARP packets, aka Bug ID CSCtr44822. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55600 - http://secunia.com/advisories/50671 - http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/release/notes/52_nx-os_release_note.html
CVE ID: CVE-2012-3052 State: PUBLISHED Published: 2012-09-16T10:00:00Z Last Updated: 2024-09-17T02:16:36.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html
CVE ID: CVE-2012-3053 State: PUBLISHED Published: 2012-06-29T14:37:00Z Last Updated: 2024-09-17T03:13:32.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Cisco WebEx Advanced Recording Format (ARF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted ARF file, aka Bug ID CSCtz72985. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex
CVE ID: CVE-2012-3054 State: PUBLISHED Published: 2012-06-29T14:37:00Z Last Updated: 2024-09-16T19:09:55.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72977. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex
CVE ID: CVE-2012-3055 State: PUBLISHED Published: 2012-06-29T14:37:00Z Last Updated: 2024-09-16T19:14:56.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted DHT chunk in a JPEG image within a WRF file, aka Bug ID CSCtz72953. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex
CVE ID: CVE-2012-3056 State: PUBLISHED Published: 2012-06-29T14:37:00Z Last Updated: 2024-09-16T18:23:21.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file, aka Bug ID CSCtz72946. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex
CVE ID: CVE-2012-3057 State: PUBLISHED Published: 2012-06-29T14:37:00Z Last Updated: 2024-09-16T23:35:51.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted size field in audio data within a WRF file, aka Bug ID CSCtz00755. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex
CVE ID: CVE-2012-3058 State: PUBLISHED Published: 2012-06-20T20:00:00 Last Updated: 2024-08-06T19:50:05.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(4.1), 8.5 before 8.5(1.11), and 8.6 before 8.6(1.3) allow remote attackers to cause a denial of service (device reload) via IPv6 transit traffic that triggers syslog message 110003, aka Bug ID CSCua27134. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-asaipv6 -
ontainer: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-asaipv6 - http://www.securitytracker.com/id?1027187
CVE ID: CVE-2012-3060 State: PUBLISHED Published: 2012-09-16T10:00:00 Last Updated: 2024-08-06T19:50:05.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unity Connection (UC) 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service (CPU consumption) via malformed UDP packets, aka Bug ID CSCtz76269. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78922 - http://www.cisco.com/web/software/282074295/93949/cucm-readme-862asu2-Rev2.pdf
CVE ID: CVE-2012-3062 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T19:50:05.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 15.1(1)SY, when Multicast Listener Discovery (MLD) snooping is enabled, allows remote attackers to cause a denial of service (CPU consumption or device crash) via MLD packets on a network that contains many IPv6 hosts, aka Bug ID CSCtr88193. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf
CVE ID: CVE-2012-3063 State: PUBLISHED Published: 2012-06-20T20:00:00 Last Updated: 2024-08-06T19:50:05.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Application Control Engine (ACE) before A4(2.3) and A5 before A5(1.1), when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances, and read or modify configuration settings, via a login attempt to a context, aka Bug ID CSCts30631, a different vulnerability than CVE-2012-3058. Additional Analyst Notes: - CVE Program Container: References: - http://www.secur
rent vulnerability than CVE-2012-3058. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027188 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ace
CVE ID: CVE-2012-3073 State: PUBLISHED Published: 2012-07-12T10:00:00Z Last Updated: 2024-09-16T16:52:38.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of service (networking outage or process crash) via (1) malformed IP packets, (2) a high rate of TCP connection requests, or (3) a high rate of TCP connection terminations, aka Bug IDs CSCti21830, CSCti21851, CSCtj19100, CSCtj19086, CSCtj19078, CSCty11219, CSCty11299, CSCty11323, and CSCty11338. Additional Analyst
CSCti21851, CSCtj19100, CSCtj19086, CSCtj19078, CSCty11219, CSCty11299, CSCty11323, and CSCty11338. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs
CVE ID: CVE-2012-3074 State: PUBLISHED Published: 2012-07-12T10:00:00Z Last Updated: 2024-09-16T19:34:59.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arbitrary commands by leveraging certain adjacency and sending a malformed request on TCP port 61460, aka Bug ID CSCtz38382. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts
CVE ID: CVE-2012-3075 State: PUBLISHED Published: 2012-07-12T10:00:00Z Last Updated: 2024-09-16T21:07:46.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443, aka Bug ID CSCtn99724. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts
CVE ID: CVE-2012-3076 State: PUBLISHED Published: 2012-07-12T10:00:00Z Last Updated: 2024-09-17T03:39:04.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Bug ID CSCth85804. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs
CVE ID: CVE-2012-3079 State: PUBLISHED Published: 2012-09-16T10:00:00 Last Updated: 2024-08-06T19:50:05.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 allows remote attackers to cause a denial of service (CPU consumption) by establishing many IPv6 neighbors, aka Bug ID CSCtn78957. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXI_rebuilds.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78921
CVE ID: CVE-2012-3088 State: PUBLISHED Published: 2012-09-16T10:00:00 Last Updated: 2024-08-06T19:50:05.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78920
CVE ID: CVE-2012-3094 State: PUBLISHED Published: 2012-09-16T10:00:00 Last Updated: 2024-08-06T19:50:05.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VPN downloader in the download_install component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server certificates without user interaction, which allows remote attackers to obtain sensitive information via vectors involving an invalid certificate, aka Bug ID CSCua11967. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html - https://exchange.xforce.ib
om/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78916
CVE ID: CVE-2012-3096 State: PUBLISHED Published: 2012-09-16T10:00:00 Last Updated: 2024-08-06T19:50:05.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unity Connection (UC) 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service (resource consumption and administration outage) via extended use of the product, aka Bug ID CSCtd79132. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78915 - http://www.cisco.com/en/US/docs/voice_ip_comm/connection/7x/release/notes/715cucrn.html