Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2524 State: PUBLISHED Published: 2012-08-15T01:00:00 Last Updated: 2024-08-06T19:34:25.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka "CGM File Format Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15702 - http://www.us-cert.gov/cas/techalerts/TA12-227A.html - https://docs.microsoft.com/en-us/security-updates/securitybulle
- http://www.us-cert.gov/cas/techalerts/TA12-227A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-057
CVE ID: CVE-2012-2525 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2526 State: PUBLISHED Published: 2012-08-15T01:00:00 Last Updated: 2024-08-06T19:34:26.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to a deleted object, aka "Remote Desktop Protocol Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-053 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A156
ritybulletins/2012/ms12-053 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15650 - http://www.us-cert.gov/cas/techalerts/TA12-227A.html
CVE ID: CVE-2012-2527 State: PUBLISHED Published: 2012-08-15T01:00:00 Last Updated: 2024-08-06T19:34:25.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-055 - https://oval.cisecurity.org/repository/search/definition
ft.com/en-us/security-updates/securitybulletins/2012/ms12-055 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15706 - http://www.us-cert.gov/cas/techalerts/TA12-227A.html
CVE ID: CVE-2012-2528 State: PUBLISHED Published: 2012-10-09T21:00:00 Last Updated: 2024-08-06T19:34:25.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Automation Services on Microsoft SharePoint Server 2010; and Office Web Apps 2010 SP1 allows remote attackers to execute arbitrary code via a crafted RTF document, aka "RTF File listid Use-After-Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15680 - http://www
References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15680 - http://www.securityfocus.com/bid/55781 - http://www.us-cert.gov/cas/techalerts/TA12-283A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-064
CVE ID: CVE-2012-2529 State: PUBLISHED Published: 2012-10-09T21:00:00 Last Updated: 2024-08-06T19:34:25.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Windows Kernel Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-068 - http://www.us-cert.gov/cas/tech
s: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-068 - http://www.us-cert.gov/cas/techalerts/TA12-283A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15867
CVE ID: CVE-2012-2530 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-08-06T19:34:25.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - http://www.securitytracker.com/id?1027750 - https://oval.cisecurity.org/repository/se
ov/cas/techalerts/TA12-318A.html - http://www.securitytracker.com/id?1027750 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15936 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-075 - http://secunia.com/advisories/51239
CVE ID: CVE-2012-2531 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-08-06T19:34:25.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56439 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15959 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-073
CVE ID: CVE-2012-2532 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-08-06T19:34:25.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56440 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15786 - https://docs.microsoft.com/en-us/security-
curity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15786 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-073
CVE ID: CVE-2012-2533 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2534 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2535 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2536 State: PUBLISHED Published: 2012-09-11T18:00:00 Last Updated: 2024-08-06T19:34:25.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15781 - http://www.us-cert.gov/cas/techalerts/TA12-255A.html - https://docs.microsoft.com/en-us/security-updates/securi
A15781 - http://www.us-cert.gov/cas/techalerts/TA12-255A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-062 - http://www.securityfocus.com/bid/55430
CVE ID: CVE-2012-2537 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2538 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2539 State: PUBLISHED Published: 2012-12-12T00:00:00.000Z Last Updated: 2025-10-22T00:05:45.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA12-346A.html - https://docs.microsoft.com/en-us/security-updates/se
eferences: - http://www.us-cert.gov/cas/techalerts/TA12-346A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-079 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16073
CVE ID: CVE-2012-2540 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2541 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2542 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2543 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-08-06T19:34:25.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Stack Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56431 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15908 - https://docs.microsoft.com/en-us/security-updates/securit
sitory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15908 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-076 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15737 - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - http://www.securitytracker.com/id?1027752
CVE ID: CVE-2012-2544 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2545 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2546 State: PUBLISHED Published: 2012-09-21T21:00:00 Last Updated: 2024-08-06T19:34:25.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Event Listener Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78757 - http://www.securitytracker.com/id?1027555 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15652 - http://www.us-cert.gov/cas/techalerts/T
isecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15652 - http://www.us-cert.gov/cas/techalerts/TA12-255A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-063 - http://www.securityfocus.com/bid/55645
CVE ID: CVE-2012-2547 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2548 State: PUBLISHED Published: 2012-09-21T21:00:00 Last Updated: 2024-08-06T19:34:25.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Layout Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55646 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15449 - http://www.securitytracker.com/id?1027555 - http://www.us-cert.gov/cas/techalerts/TA12-255A.html - https://docs
A15449 - http://www.securitytracker.com/id?1027555 - http://www.us-cert.gov/cas/techalerts/TA12-255A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-063
CVE ID: CVE-2012-2549 State: PUBLISHED Published: 2012-12-12T00:00:00 Last Updated: 2024-08-06T19:34:25.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IP-HTTPS server in Windows Server 2008 R2 and R2 SP1 and Server 2012 does not properly validate certificates, which allows remote attackers to bypass intended access restrictions via a revoked certificate, aka "Revoked Certificate Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-346A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-083 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
ecurity-updates/securitybulletins/2012/ms12-083 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16117
CVE ID: CVE-2012-2550 State: PUBLISHED Published: 2012-10-09T21:00:00 Last Updated: 2024-08-06T19:34:25.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Works 9 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Word .doc file, aka "Works Heap Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027621 - http://www.securityfocus.com/bid/55796 - http://secunia.com/advisories/50844 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-065 - http://www.us-cert.gov/cas/techalerts/TA12-283A.html
CVE ID: CVE-2012-2551 State: PUBLISHED Published: 2012-10-09T21:00:00 Last Updated: 2024-08-06T19:34:25.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Kerberos in Microsoft Windows Server 2008 R2 and R2 SP1, and Windows 7 Gold and SP1, allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a crafted session request, aka "Kerberos NULL Dereference Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15674 - http://secunia.com/advisories/50867 - http://www.securitytracker.com/id?1027620 - https://docs.microsoft
3Adef%3A15674 - http://secunia.com/advisories/50867 - http://www.securitytracker.com/id?1027620 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-069 - http://www.securityfocus.com/bid/55778 - http://www.us-cert.gov/cas/techalerts/TA12-283A.html
CVE ID: CVE-2012-2552 State: PUBLISHED Published: 2012-10-09T21:00:00 Last Updated: 2024-08-06T19:34:25.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-070 - https://oval.cisecurity.org/repository/search/definition/oval%3A
n-us/security-updates/securitybulletins/2012/ms12-070 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15395 - http://www.us-cert.gov/cas/techalerts/TA12-283A.html - http://www.securityfocus.com/bid/55783
CVE ID: CVE-2012-2553 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-08-06T19:34:25.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - http://www.securityfocus.com/bid/56448 - http://www.securitytracker.com/id?1027750 - https://oval.cisecurity.
18A.html - http://www.securityfocus.com/bid/56448 - http://www.securitytracker.com/id?1027750 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15817 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-075 - http://secunia.com/advisories/51239
CVE ID: CVE-2012-2554 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2555 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2556 State: PUBLISHED Published: 2012-12-12T00:00:00 Last Updated: 2024-08-06T19:34:25.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to execute arbitrary code via a crafted OpenType font file, aka "OpenType Font Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-346A.html - https://docs.microsoft.com/en-us/s
ogram Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-346A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-078 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16067
CVE ID: CVE-2012-2557 State: PUBLISHED Published: 2012-09-21T21:00:00 Last Updated: 2024-08-06T19:34:25.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "cloneNode Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027555 - http://www.us-cert.gov/cas/techalerts/TA12-255A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15745 - https://docs.microsoft.com/en-us/securit
security.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15745 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-063 - http://www.securityfocus.com/bid/55647
CVE ID: CVE-2012-2559 State: PUBLISHED Published: 2012-07-05T01:00:00Z Last Updated: 2024-09-16T22:15:15.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: WellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer write) via a crafted packet to TCP port 5678. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf
CVE ID: CVE-2012-2560 State: PUBLISHED Published: 2012-07-05T01:00:00Z Last Updated: 2024-09-16T19:25:49.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request to port 8001. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf - http://www.wellintech.com/index.php/news/33-patch-for-kingview653
CVE ID: CVE-2012-2561 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-06T19:34:25.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Business Service Management (BSM) 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server component via a crafted request to TCP port 1098, 1099, or 4444. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49218 - http://www.securityfocus.com/bid/53556 - http://www.kb.cert.org/vuls/id/859230 - http://www.securitytracker.com/id?1027075 - http://marc.info/?l=bugtraq&m=134013352316810
w.kb.cert.org/vuls/id/859230 - http://www.securitytracker.com/id?1027075 - http://marc.info/?l=bugtraq&m=134013352316810&w=2 - http://osvdb.org/81981 - http://marc.info/?l=bugtraq&m=134013352316810&w=2
CVE ID: CVE-2012-2562 State: PUBLISHED Published: 2012-05-22T15:00:00 Last Updated: 2024-08-06T19:34:25.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a (1) LOCATE, (2) TRACK, (3) UPDATECFG, (4) UPDATEACCT, (5) STAT, (6) TERM, or (7) WIPE command via an SMS message. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/464683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75782 - http://secunia.com/advisories/49268 - http://www.securityfocus.com/bid/53634 - http://blog.mobiledefe
rabilities/75782 - http://secunia.com/advisories/49268 - http://www.securityfocus.com/bid/53634 - http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/
CVE ID: CVE-2012-2563 State: PUBLISHED Published: 2012-06-09T00:00:00 Last Updated: 2024-08-06T19:34:25.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Bloxx Web Filtering before 5.0.14 allow (1) remote attackers to inject arbitrary web script or HTML via web traffic that is examined within the Bloxx Reports component, and allow (2) remote authenticated administrators to inject arbitrary web script or HTML via vectors involving administrative menu functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53715 - http://www.kb.cert.org/vuls/id/MAPG-8R9LBY - http://www.kb.c
ner: References: - http://www.securityfocus.com/bid/53715 - http://www.kb.cert.org/vuls/id/MAPG-8R9LBY - http://www.kb.cert.org/vuls/id/722963
CVE ID: CVE-2012-2564 State: PUBLISHED Published: 2012-06-09T00:00:00 Last Updated: 2024-08-06T19:34:25.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bloxx Web Filtering before 5.0.14 allow remote attackers to hijack the authentication of administrators for requests that perform administrative actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53715 - http://www.kb.cert.org/vuls/id/MAPG-8R9LBY - http://www.kb.cert.org/vuls/id/722963