Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-1814 State: PUBLISHED Published: 2012-06-08T18:00:00 Last Updated: 2024-08-06T19:08:38.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49210 - http://osvdb.org/81996 - http://www.securityfocus.com/bid/53591 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf
CVE ID: CVE-2012-1815 State: PUBLISHED Published: 2012-06-08T18:00:00 Last Updated: 2024-08-06T19:08:38.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/82011 - http://secunia.com/advisories/49210 - http://www.securityfocus.com/bid/53591 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf
CVE ID: CVE-2012-1816 State: PUBLISHED Published: 2012-06-08T18:00:00 Last Updated: 2024-08-06T19:08:38.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: PORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to cause a denial of service (daemon crash) via a crafted (1) TCP or (2) UDP packet to port 111. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49210 - http://osvdb.org/82012 - http://www.securityfocus.com/bid/53591 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf
CVE ID: CVE-2012-1817 State: PUBLISHED Published: 2012-06-08T18:00:00 Last Updated: 2024-08-06T19:08:38.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via an invalid field in a project file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49210 - http://www.securityfocus.com/bid/53591 - http://osvdb.org/82013 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf
CVE ID: CVE-2012-1818 State: PUBLISHED Published: 2012-06-08T18:00:00 Last Updated: 2024-08-06T19:08:38.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/82014 - http://secunia.com/advisories/49210 - http://www.securityfocus.com/bid/53591 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf
CVE ID: CVE-2012-1819 State: PUBLISHED Published: 2012-05-02T22:00:00 Last Updated: 2024-08-06T19:08:38.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in WellinTech KingView 6.53 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://en.wellintech.com/news/detail.aspx?contentid=168 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-122-01.pdf - http://www.securityfocus.com/bid/53316 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75309
CVE ID: CVE-2012-1820 State: PUBLISHED Published: 2012-06-13T15:00:00 Last Updated: 2024-08-06T19:08:38.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/962587 - http://rhn.redhat.com/errata/RHSA-2012-1259.html - http://www.ubuntu.com/usn/USN-1605-1 - http://www.debian.org/security/2012/dsa-2497
at.com/errata/RHSA-2012-1259.html - http://www.ubuntu.com/usn/USN-1605-1 - http://www.debian.org/security/2012/dsa-2497 - http://www.securityfocus.com/bid/53775 - http://secunia.com/advisories/50941
CVE ID: CVE-2012-1821 State: PUBLISHED Published: 2012-05-24T00:00:00 Last Updated: 2024-08-06T19:08:38.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Network Threat Protection module in the Manager component in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.700x on Windows Server 2003 allows remote attackers to cause a denial of service (web-server outage, or daemon crash or hang) via a flood of packets that triggers automated blocking of network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/82147 - http://www.kb.cert.org/vuls/id/149070 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=secu
- http://www.kb.cert.org/vuls/id/149070 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120522_00 - http://www.securitytracker.com/id?1027092 - http://secunia.com/advisories/49221 - http://www.securityfocus.com/bid/50358
CVE ID: CVE-2012-1823 State: PUBLISHED Published: 2012-05-11T10:00:00.000Z Last Updated: 2025-11-04T17:11:54.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://marc.info/?l=bugtraq&m=134012830914727&w=2 - http://lists.opens
Container: - CISA ADP Vulnrichment: References: - http://marc.info/?l=bugtraq&m=134012830914727&w=2 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00011.html - http://www.securitytracker.com/id?1027022 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:068 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00002.html - http://rhn.redhat.com/errata/RHSA-2012-0546.html - http://rhn.redhat.com/errata/RHSA-2012-0568.html - http://rhn.redhat.com/errata/RHSA-2012-0569.html - http://www.php.net/ChangeLog-5.php#5.4.2 - http://secunia.com/advisories/49014 - http://rhn.redhat
RHSA-2012-0569.html - http://www.php.net/ChangeLog-5.php#5.4.2 - http://secunia.com/advisories/49014 - http://rhn.redhat.com/errata/RHSA-2012-0570.html - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00007.html - https://bugs.php.net/bug.php?id=61910 - http://www.kb.cert.org/vuls/id/673343 - http://rhn.redhat.com/errata/RHSA-2012-0547.html - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://support.apple.com/kb/HT5501 - http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ - http://secunia.com/advisories/49065 - http://www.kb.cert.org/vuls/id/520827 - https://bugs.php.net/patch-display.php?bug_id=61910&patch=cgi.diff&revision=133598431
//www.kb.cert.org/vuls/id/520827 - https://bugs.php.net/patch-display.php?bug_id=61910&patch=cgi.diff&revision=1335984315&display=1 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://marc.info/?l=bugtraq&m=134012830914727&w=2 - http://www.debian.org/security/2012/dsa-2465 - http://secunia.com/advisories/49085 - http://www.php.net/archive/2012.php#id2012-05-03-1 - http://secunia.com/advisories/49087 - http://www.openwall.com/lists/oss-security/2024/06/07/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/ - https://lists.fedoraproject.org/archives/list/package-announce%4
project.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/
CVE ID: CVE-2012-1824 State: PUBLISHED Published: 2012-05-25T19:00:00Z Last Updated: 2024-09-16T19:19:14.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Client/DOCUMENTATION/ReleaseNotes.doc - http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-01.pdf - http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/
v/control_systems/pdf/ICSA-12-145-01.pdf - http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Server/DOCUMENTATION/ReleaseNotes.doc
CVE ID: CVE-2012-1825 State: PUBLISHED Published: 2012-06-11T23:00:00Z Last Updated: 2024-09-17T04:04:35.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the status program on the ForeScout CounterACT appliance with software 6.3.3.2 through 6.3.4.10 allow remote attackers to inject arbitrary web script or HTML via (1) the loginname parameter in a forgotpass action or (2) the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/815532 - http://www.kb.cert.org/vuls/id/MAPG-8TWMEJ
CVE ID: CVE-2012-1826 State: PUBLISHED Published: 2012-06-08T16:00:00 Last Updated: 2024-08-06T19:08:38.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53688 - http://dotcms.com/dotCMSVersions/ - http://www.kb.cert.org/vuls/id/898083 - https://github.com/dotCMS/dotCMS/issues/281 - https://github.com/dotCMS/dotCMS/issues/261 - http://osvdb.org/82240 - http://secunia.com/advisories/49276 - https://gist.github.com/2627440
CVE ID: CVE-2012-1827 State: PUBLISHED Published: 2012-06-13T19:00:00 Last Updated: 2024-08-06T19:08:38.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated by the initializeQueryDatabase2 request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MAPG-8RQL83 - http://www.kb.cert.org/vuls/id/773035 - http://www.securityfocus.com/bid/53716 - http://secunia.com/advisories/49335
CVE ID: CVE-2012-1828 State: PUBLISHED Published: 2012-06-13T19:00:00 Last Updated: 2024-08-06T19:08:38.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MAPG-8RQL83 - http://www.kb.cert.org/vuls/id/773035 - http://www.securityfocus.com/bid/53716 - http://secunia.com/advisories/49335
CVE ID: CVE-2012-1829 State: PUBLISHED Published: 2012-06-13T19:00:00 Last Updated: 2024-08-06T19:08:38.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AutoFORM PDM Archive before 6.920 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MAPG-8RQL83 - http://www.kb.cert.org/vuls/id/773035 - http://www.securityfocus.com/bid/53716 - http://secunia.com/advisories/49335
CVE ID: CVE-2012-1830 State: PUBLISHED Published: 2012-07-05T01:00:00Z Last Updated: 2024-09-17T02:46:36.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 555. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf - http://www.wellintech.com/index.php/news/33-patch-for-kingview653
CVE ID: CVE-2012-1831 State: PUBLISHED Published: 2012-07-05T01:00:00Z Last Updated: 2024-09-16T18:43:21.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 555. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf - http://www.wellintech.com/index.php/news/33-patch-for-kingview653
CVE ID: CVE-2012-1832 State: PUBLISHED Published: 2012-07-05T01:00:00Z Last Updated: 2024-09-17T04:19:22.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted packet to (1) TCP or (2) UDP port 2001. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf - http://www.wellintech.com/index.php/news/33-patch-for-kingview653
CVE ID: CVE-2012-1833 State: PUBLISHED Published: 2012-09-28T21:00:00 Last Updated: 2024-08-06T19:08:38.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware SpringSource Grails before 1.3.8, and 2.x before 2.0.2, does not properly restrict data binding, which might allow remote attackers to bypass intended access restrictions and modify arbitrary object properties via a crafted request parameter to an application. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51113 - http://www.securityfocus.com/bid/55763 - http://support.springsource.com/security/cve-2012-1833
CVE ID: CVE-2012-1834 State: PUBLISHED Published: 2014-04-07T15:00:00 Last Updated: 2024-08-06T19:08:38.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the cms_tpv_admin_head function in functions.php in the CMS Tree Page View plugin before 0.8.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cms_tpv_view parameter to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48510 - http://www.osvdb.org/80573 - http://wordpress.org/extend/plugins/cms-tree-page-view/changelog/ - https://www.htbridge.com/advisory/HTB23083 - https:/
http://wordpress.org/extend/plugins/cms-tree-page-view/changelog/ - https://www.htbridge.com/advisory/HTB23083 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74337 - http://www.securityfocus.com/bid/52708 - http://plugins.trac.wordpress.org/changeset/523576/cms-tree-page-view
CVE ID: CVE-2012-1835 State: PUBLISHED Published: 2012-08-14T21:00:00Z Last Updated: 2024-09-16T19:52:04.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to app/view/agenda-widget-form.php; (2) args, (3) title, (4) before_title, or (5) after_title parameter to app/view/agenda-widget.php; (6) button_value parameter to app/view/box_publish_button.php; or (7) msg parameter to /app/view/save_successful.php. Additional Analyst Notes: - CVE Program Container: References: - http:
) msg parameter to /app/view/save_successful.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52986 - https://www.htbridge.com/advisory/HTB23082 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0071.html
CVE ID: CVE-2012-1836 State: PUBLISHED Published: 2012-03-22T01:00:00 Last Updated: 2024-08-06T19:08:38.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52561 - http://osvdb.org/80263 - http://www.debian.org/security/2012/dsa-2448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74157 - http://secunia.com/advisories/48474 - https://github.com/inspircd/inspircd/commit/fe7dbd2c104c37f6f3af7d9f1646a3c332aea4a4 - http://www
com/advisories/48474 - https://github.com/inspircd/inspircd/commit/fe7dbd2c104c37f6f3af7d9f1646a3c332aea4a4 - http://www.kb.cert.org/vuls/id/212651
CVE ID: CVE-2012-1837 State: PUBLISHED Published: 2012-03-22T01:00:00 Last Updated: 2024-08-06T19:08:38.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74038 - http://www-01.ibm.com/support/docview.wss?uid=swg2158
352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74038 - http://www-01.ibm.com/support/docview.wss?uid=swg21587743
CVE ID: CVE-2012-1838 State: PUBLISHED Published: 2012-03-22T10:00:00 Last Updated: 2024-08-06T19:08:38.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface on the LG-Nortel ELO GS24M switch allows remote attackers to bypass authentication, and consequently obtain cleartext credential and configuration information, via a direct request to a configuration web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/523027 - http://osvdb.org/80370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74237
CVE ID: CVE-2012-1839 State: PUBLISHED Published: 2012-03-22T10:00:00 Last Updated: 2024-08-06T19:08:38.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXP_ClientDriver.php in AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) pluginName or (2) pluginPath parameter in a get_template action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48226 - https://exchange.x
dditional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73671 - http://ajaxplorer.info/ajaxplorer-4-0-4/ - http://www.securityfocus.com/bid/52298 - http://www.kb.cert.org/vuls/id/504019 - http://www.osvdb.org/79810
CVE ID: CVE-2012-1840 State: PUBLISHED Published: 2012-03-22T10:00:00 Last Updated: 2024-08-06T19:08:38.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 does not properly perform cookie authentication, which allows remote attackers to obtain login access by leveraging knowledge of a password hash. Additional Analyst Notes: - CVE Program Container: References: - http://ajaxplorer.info/ajaxplorer-4-0-4/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/74305 - http://www.kb.cert.org/vuls/id/504019
CVE ID: CVE-2012-1841 State: PUBLISHED Published: 2012-03-22T10:00:00 Last Updated: 2024-08-06T19:08:38.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to read arbitrary files via a full pathname in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48453 - http://www.kb.cert.org/vuls/id/913483 - http://www.kb.cert.org/vuls/id/MAPG-8NNKN8 - http://www.kb.cert.org/
ies/48453 - http://www.kb.cert.org/vuls/id/913483 - http://www.kb.cert.org/vuls/id/MAPG-8NNKN8 - http://www.kb.cert.org/vuls/id/MAPG-8NVRPY - http://osvdb.org/80226 - http://secunia.com/advisories/48403
CVE ID: CVE-2012-1842 State: PUBLISHED Published: 2012-03-22T10:00:00 Last Updated: 2024-08-06T19:08:38.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48453 - http://www.kb.cert.org/vuls/id/913483 - http://www.kb.cert.org/vuls/id/MAPG-8NNKN8 - http://www.kb.cert
visories/48453 - http://www.kb.cert.org/vuls/id/913483 - http://www.kb.cert.org/vuls/id/MAPG-8NNKN8 - http://www.kb.cert.org/vuls/id/MAPG-8NVRPY - http://osvdb.org/80239 - http://secunia.com/advisories/48403 - http://osvdb.org/80225
CVE ID: CVE-2012-1843 State: PUBLISHED Published: 2012-03-22T10:00:00 Last Updated: 2024-08-06T19:08:38.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to hijack the authentication of users for requests that execute Linux commands via the fileName parameter, related to a "command-injection vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48453 - http:/
rability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48453 - http://www.kb.cert.org/vuls/id/913483 - http://osvdb.org/80227 - http://www.kb.cert.org/vuls/id/MAPG-8NNKN8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74161 - http://www.kb.cert.org/vuls/id/MAPG-8NVRPY - http://secunia.com/advisories/48403
CVE ID: CVE-2012-1844 State: PUBLISHED Published: 2012-03-22T10:00:00 Last Updated: 2024-08-06T19:08:38.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100) and the IBM TS3310 tape library with firmware before R6C (606G.GS001), uses default passwords for unspecified user accounts, which makes it easier for remote attackers to obtain access via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74322 - http://www.kb.cert.org/vuls