Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-3287 State: PUBLISHED Published: 2012-06-13T19:00:00Z Last Updated: 2024-09-16T22:14:45.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Poul-Henning Kamp md5crypt has insufficient algorithmic complexity and a consequently short runtime, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack, as demonstrated by an attack using GPU hardware. Additional Analyst Notes: - CVE Program Container: References: - http://phk.freebsd.dk/sagas/md5crypt_eol.html - https://phk.freebsd.dk/sagas/md5crypt_eol/
CVE ID: CVE-2012-3288 State: PUBLISHED Published: 2012-06-14T20:00:00 Last Updated: 2024-08-06T19:57:50.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denial of service (memory corruption) on the host OS via a crafted Checkpoint file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2012-0011.html - https://oval.cisecurity.org
ram Container: References: - http://www.vmware.com/security/advisories/VMSA-2012-0011.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17178
CVE ID: CVE-2012-3289 State: PUBLISHED Published: 2012-06-14T20:00:00Z Last Updated: 2024-09-16T18:29:08.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash) via crafted traffic from a remote virtual device. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2012-0011.html
CVE ID: CVE-2012-3290 State: PUBLISHED Published: 2012-06-07T19:00:00Z Last Updated: 2024-09-17T00:21:30.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 20.0.1132.22 on the Acer AC700; Samsung Series 5, 5 550, and Chromebox 3; and Cr-48 Chromebook platforms have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/06/beta-channel-update-for-chromebooks.html
CVE ID: CVE-2012-3291 State: PUBLISHED Published: 2012-06-07T20:00:00 Last Updated: 2024-08-06T19:57:50.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner. Additional Analyst Notes: - CVE Program Container: References: - http://www.infradead.org/openconnect/changelog.html - http://www.debian.org/security/2012/dsa-2495 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079747.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17242 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00186.h
ry/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17242 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00186.html - http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/14cae65318d3ef1f7d449e463b72b6934e82f1c2
CVE ID: CVE-2012-3292 State: PUBLISHED Published: 2012-06-07T20:00:00 Last Updated: 2024-08-06T19:57:50.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnam_r function, which might allow remote attackers to gain privileges by logging in with a user that does not exist, which causes GridFTP to run as the last user in the password file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081787.html - http://www.debian.org/security/2012/dsa-2523 - http://j
raproject.org/pipermail/package-announce/2012-June/081787.html - http://www.debian.org/security/2012/dsa-2523 - http://jira.globus.org/browse/GT-195 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081797.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081791.html
CVE ID: CVE-2012-3293 State: PUBLISHED Published: 2012-08-21T10:00:00 Last Updated: 2024-08-06T19:57:50.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a cross-frame scripting (XFS) issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77179 - http://www-01.ibm.com/support/docview.wss?uid=swg21
nces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77179 - http://www-01.ibm.com/support/docview.wss?uid=swg21606096 - http://www.securityfocus.com/bid/55149 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM60839 - http://www-01.ibm.com/support/docview.wss?uid=swg27022958
CVE ID: CVE-2012-3294 State: PUBLISHED Published: 2012-08-17T10:00:00 Last Updated: 2024-08-06T19:57:50.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier, and WebSphere MQ - Managed File Transfer 7.5, allow remote attackers to hijack the authentication of arbitrary users for requests that (1) add user accounts via the /wmqfteconsole/Filespaces URI, (2) modify permissions via the /wmqfteconsole/FileSpacePermisssions URI, or (3) add MQ Message Descriptor (MQMD) user accounts via the /wmqfteconsole/UploadUsers URI. Additional Analyst N
URI, or (3) add MQ Message Descriptor (MQMD) user accounts via the /wmqfteconsole/UploadUsers URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21607482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77180 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC85516 - http://www.securitytracker.com/id?1027373 - http://www.exploit-db.com/exploits/20477/
CVE ID: CVE-2012-3295 State: PUBLISHED Published: 2012-08-29T22:00:00 Last Updated: 2024-08-06T19:57:50.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere MQ 7.1, when an SVRCONN channel is used, allows remote attackers to bypass the security-configuration setup step and obtain queue-manager access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21595523 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM56593 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77279
CVE ID: CVE-2012-3296 State: PUBLISHED Published: 2012-08-17T20:00:00 Last Updated: 2024-08-06T19:57:50.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Help link in the login panel in IBM Power Hardware Management Console (HMC) 7R7.1.0 before SP4, 7R7.2.0 before SP2, and 7R7.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/fixcentral/firmware/readme?fixid=MH01258 - http://www.ibm.com/support/fixcentral/firmware/readme?fixid=MH01257 - http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulle
m.com/support/fixcentral/firmware/readme?fixid=MH01257 - http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_the_help_link_on_the_power_hmc_login_panel_is_susceptible_to_reflected_cross_site_scripting_cve_2012_329617 - http://secunia.com/advisories/50376 - http://www.ibm.com/support/fixcentral/firmware/readme?fixid=MH01253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77288 - http://www.ibm.com/support/docview.wss?uid=isg1MB03489 - http://www.ibm.com/support/docview.wss?uid=isg1MB03488 - http://www.ibm.com/support/docview.wss?uid=isg1MB03494 - http://www.securitytracker.com/id?1027433
CVE ID: CVE-2012-3297 State: PUBLISHED Published: 2012-12-08T15:00:00 Last Updated: 2024-08-06T19:57:50.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the embedded HTTP server in the Service Console in IBM Tivoli Monitoring 6.2.2 before 6.2.2-TIV-ITM-FP0009 and 6.3.2 before 6.2.3-TIV-ITM-FP0001 allows remote attackers to inject arbitrary web script or HTML via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77291 - https://www.ibm.com/support/docview.wss?uid=swg21618972 - http://www.securitytracker.com/id?1027850
CVE ID: CVE-2012-3298 State: PUBLISHED Published: 2012-09-25T20:00:00 Last Updated: 2024-08-06T19:57:50.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the REST services framework in IBM WebSphere Commerce 7.0 Feature Pack 4 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21610905 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77294 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR42770
CVE ID: CVE-2012-3300 State: PUBLISHED Published: 2012-09-25T20:00:00 Last Updated: 2024-08-06T19:57:50.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Commerce 7.0 before 7.0.0.6, when persistent sessions and personalization IDs are enabled, allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21610909 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR42771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77382
CVE ID: CVE-2012-3301 State: PUBLISHED Published: 2012-08-21T10:00:00 Last Updated: 2024-08-06T19:57:50.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x before 8.5.4 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input involving (1) Mozilla Firefox 3.0.9 and earlier or (2) unspecified browsers. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21608160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77400 - http://websecurity.com.ua/5839/
CVE ID: CVE-2012-3302 State: PUBLISHED Published: 2012-08-21T10:00:00 Last Updated: 2024-08-06T19:57:50.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via (1) a URL accessed during use of the Mail template in the WebMail UI or (2) a URL accessed during use of Domino Help through the Domino HTTP server. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21608160 - http://websecurity.com.ua/5839/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/77401
CVE ID: CVE-2012-3304 State: PUBLISHED Published: 2012-09-25T20:00:00 Last Updated: 2024-08-06T19:57:50.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM54356 - http://osvdb.org/85733 - http://www.ibm.com/support/docview.wss?uid=swg21611313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77476
CVE ID: CVE-2012-3305 State: PUBLISHED Published: 2012-09-25T20:00:00 Last Updated: 2024-08-06T19:57:50.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to overwrite arbitrary files via a crafted application file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM62467 - http://www.ibm.com/support/docview.wss?uid=swg21611313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77477
CVE ID: CVE-2012-3306 State: PUBLISHED Published: 2012-09-25T20:00:00 Last Updated: 2024-08-06T19:57:50.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, when multi-domain support is configured, does not purge password data from the authentication cache, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21611313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77478 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM66514
CVE ID: CVE-2012-3308 State: PUBLISHED Published: 2012-08-17T10:00:00 Last Updated: 2024-08-06T19:57:50.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77567 - http://www.ibm.com/support/docview.wss?uid=swg21607903 - http://www.ibm.com/support/docview.wss?uid=swg21599114
CVE ID: CVE-2012-3309 State: PUBLISHED Published: 2012-08-29T22:00:00 Last Updated: 2024-08-06T19:57:50.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrf_status) feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21609223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77745 - http://www.securitytracker.com/id?1027455 -
d=swg21609223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77745 - http://www.securitytracker.com/id?1027455 - http://en.securitylab.ru/lab/PT-2012-15 - http://en.securitylab.ru/lab/
CVE ID: CVE-2012-3310 State: PUBLISHED Published: 2013-01-17T22:00:00 Last Updated: 2024-08-06T19:57:50.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Federated Identity Manager (TFIM) before 6.1.1.14, 6.2.0 before 6.2.0.12, and 6.2.1 before 6.2.1.4 allows context-dependent attackers to discover (1) a cleartext LDAP Bind Password, (2) keystore passwords, (3) a cleartext Basic Authentication password from a client, or (4) a cleartext user password by leveraging a logging configuration with a log trace setting of all. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV26823 - http://www-01.ibm.com/sup
E Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV26823 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV26824 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77695 - http://www.ibm.com/support/docview.wss?uid=swg21615977 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV26822
CVE ID: CVE-2012-3311 State: PUBLISHED Published: 2012-09-25T20:00:00 Last Updated: 2024-08-06T19:57:50.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users to bypass intended access restrictions, and read or modify application data, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21611313 - http://ww
Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21611313 - http://www.securityfocus.com/bid/55671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77697 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM61388
CVE ID: CVE-2012-3312 State: PUBLISHED Published: 2012-08-29T22:00:00 Last Updated: 2024-08-06T19:57:50.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://en.securitylab.ru/lab/PT-2012-15 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77785 - http://www.ibm.com/support/docview.wss?uid=swg21609224 - http://en.securitylab.ru/lab/
CVE ID: CVE-2012-3313 State: PUBLISHED Published: 2012-09-10T17:00:00 Last Updated: 2024-08-06T19:57:50.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV15530 - http://secunia.com/advisories/50551 - https://excha
ences: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV15530 - http://secunia.com/advisories/50551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77787 - http://www-01.ibm.com/support/docview.wss?uid=swg21610081
CVE ID: CVE-2012-3314 State: PUBLISHED Published: 2012-10-02T21:00:00 Last Updated: 2024-08-06T19:57:50.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, 6.2.1, and 6.2.2 allow remote attackers to establish sessions via a crafted message that leverages (1) a signature-validation bypass for SAML messages containing unsigned elements, (2) incorrect validation of XML messages, or (3) a certificate-chain validation bypass for an XML signature element that contains the signing certificate. Additional Analyst Notes: - CVE Program Container: References: - http://w
element that contains the signing certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21612612 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV23435 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV23445 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV23442 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV23448 - http://www.securityfocus.com/bid/55732
CVE ID: CVE-2012-3315 State: PUBLISHED Published: 2012-11-08T11:00:00 Last Updated: 2024-08-06T19:57:50.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java servlets in the management console in IBM Tivoli Federated Identity Manager (TFIM) through 6.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) before 6.2.2 do not require authentication for all resource downloads, which allows remote attackers to bypass intended J2EE security constraints, and obtain sensitive information related to (1) federation metadata or (2) a web plugin configuration template, via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.i
ration template, via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV26827 - http://www-01.ibm.com/support/docview.wss?uid=swg21615772 - http://www-01.ibm.com/support/docview.wss?uid=swg21615770 - http://secunia.com/advisories/51163 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV26825 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV26826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77796
CVE ID: CVE-2012-3316 State: PUBLISHED Published: 2013-02-20T11:00:00 Last Updated: 2024-08-06T19:57:50.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Tivoli Process Automation Engine (TPAE) in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE
mote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77813 - http://www-01.ibm.com/support/docview.wss?uid=swg21625624 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV24609
CVE ID: CVE-2012-3317 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T19:57:50.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Message Broker 6.1 before 6.1.0.11, 7.0 before 7.0.0.5, and 8.0 before 8.0.0.2 has incorrect ownership of certain uninstaller Java Runtime Environment (JRE) files, which might allow local users to gain privileges by leveraging access to uid 501 or gid 300. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77818 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC85477 - http://www.ibm.com/support/docview.wss?uid=swg21611401
CVE ID: CVE-2012-3319 State: PUBLISHED Published: 2012-10-01T18:00:00 Last Updated: 2024-08-06T19:57:50.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Business Developer 8.x before 8.0.1.4 allows remote attackers to obtain potentially sensitive information via a connection to a web service created with the Rational Business Developer product. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21612314 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78726 - http://osvdb.org/85867 - http://www.securityfocus.com/bid/55718
CVE ID: CVE-2012-3321 State: PUBLISHED Published: 2013-02-20T11:00:00 Last Updated: 2024-08-06T19:57:50.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SmartCloud Control Desk 7.5 allows remote authenticated users to bypass intended access restrictions via vectors involving an expired password. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77916 - http://www-01.ibm.com/support/docview.wss?uid=swg21625624 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV25198