Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0236 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-06T18:16:19.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantech/BroadWin WebAccess 7.0 and earlier allows remote attackers to obtain sensitive information via a direct request to a URL. NOTE: the vendor reportedly "does not consider it to be a security risk." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2012-0237 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-06T18:16:19.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantech/BroadWin WebAccess before 7.0 allows remote attackers to (1) enable date and time syncing or (2) disable date and time syncing via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2012-0238 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-06T18:16:19.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in opcImg.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2012-0239 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-06T18:16:19.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: uaddUpAdmin.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to modify an administrative password via a password-change request. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2012-0240 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-06T18:16:20.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: GbScriptAddUp.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2012-0241 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-06T18:16:20.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantech/BroadWin WebAccess before 7.0 allows remote attackers to cause a denial of service (memory corruption) via a modified stream identifier to a function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73281 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2012-0242 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-06T18:16:19.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string specifiers in a message string. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2012-0243 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-06T18:16:20.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in an ActiveX control in bwocxrun.ocx in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code by leveraging the ability to write arbitrary content to any pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2012-0244 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-06T18:16:19.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Advantech/BroadWin WebAccess before 7.0 allow remote attackers to execute arbitrary SQL commands via crafted string input. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2012-0245 State: PUBLISHED Published: 2012-03-09T11:00:00 Last Updated: 2024-08-06T18:16:19.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in RobNetScanHost.exe in ABB Robot Communications Runtime before 5.14.02, as used in ABB Interlink Module, IRC5 OPC Server, PC SDK, PickMaster 3 and 5, RobView 5, RobotStudio, WebWare SDK, and WebWare Server, allow remote attackers to execute arbitrary code via a crafted (1) 0xA or (2) 0xE Netscan packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48090 - http://www.securityfocus.com/bid/52123 - http://archives.neohapsis.com/archives/bugt
tp://secunia.com/advisories/48090 - http://www.securityfocus.com/bid/52123 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0125.html - http://www.us-cert.gov/control_systems/pdf/ICSA-12-059-01.pdf - http://www05.abb.com/global/scot/scot348.nsf/veritydisplay/f261be074480dc24c12579a00049ecd5/%24file/si10227a1%20vulnerability%20security%20advisory.pdf - http://www.zerodayinitiative.com/advisories/ZDI-12-033/
CVE ID: CVE-2012-0246 State: PUBLISHED Published: 2012-04-02T10:00:00 Last Updated: 2024-08-06T18:16:20.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor before 3.71.4200 allows remote attackers to execute arbitrary code via vectors involving an HTML document on the server. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48558 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-083-01.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/74388 - http://osvdb.org/80650
CVE ID: CVE-2012-0247 State: PUBLISHED Published: 2012-06-05T22:00:00 Last Updated: 2024-08-06T18:16:19.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml - http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20286 - http://secunia.com/advisories/49068 - http://www.cert.fi/en/reports/2012/vulnerability595210.html - ht
php?f=4&t=20286 - http://secunia.com/advisories/49068 - http://www.cert.fi/en/reports/2012/vulnerability595210.html - http://secunia.com/advisories/48259 - http://secunia.com/advisories/49043 - http://secunia.com/advisories/49063 - http://www.debian.org/security/2012/dsa-2427 - http://rhn.redhat.com/errata/RHSA-2012-0544.html - http://secunia.com/advisories/47926 - http://ubuntu.com/usn/usn-1435-1 - http://secunia.com/advisories/48247 - http://www.osvdb.org/79003 - http://www.securitytracker.com/id?1027032 - http://rhn.redhat.com/errata/RHSA-2012-0545.html
CVE ID: CVE-2012-0248 State: PUBLISHED Published: 2012-06-05T22:00:00 Last Updated: 2024-08-06T18:16:20.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml - http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20286 - http://secunia.com/advisories/49068 - http://www.cert.fi/en/reports/2012/vulnerability595210.html - http://secunia.com/advisories/48
ia.com/advisories/49068 - http://www.cert.fi/en/reports/2012/vulnerability595210.html - http://secunia.com/advisories/48259 - http://secunia.com/advisories/49043 - http://www.securityfocus.com/bid/51957 - http://secunia.com/advisories/49063 - http://www.debian.org/security/2012/dsa-2427 - http://rhn.redhat.com/errata/RHSA-2012-0544.html - http://secunia.com/advisories/47926 - http://ubuntu.com/usn/usn-1435-1 - http://secunia.com/advisories/48247 - http://www.osvdb.org/79003 - http://www.securitytracker.com/id?1027032 - http://rhn.redhat.com/errata/RHSA-2012-0545.html
CVE ID: CVE-2012-0249 State: PUBLISHED Published: 2012-04-05T10:00:00 Last Updated: 2024-08-06T18:16:19.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1259.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html - http:
om/errata/RHSA-2012-1259.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html - http://www.debian.org/security/2012/dsa-2459 - http://www.kb.cert.org/vuls/id/551715 - https://bugzilla.quagga.net/show_bug.cgi?id=705 - http://secunia.com/advisories/48949 - http://rhn.redhat.com/errata/RHSA-2012-1258.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078926.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078794.html
CVE ID: CVE-2012-0250 State: PUBLISHED Published: 2012-04-05T10:00:00 Last Updated: 2024-08-06T18:16:20.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1259.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html
redhat.com/errata/RHSA-2012-1259.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html - http://www.debian.org/security/2012/dsa-2459 - http://www.kb.cert.org/vuls/id/551715 - http://secunia.com/advisories/48949 - http://rhn.redhat.com/errata/RHSA-2012-1258.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078926.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078794.html
CVE ID: CVE-2012-0253 State: PUBLISHED Published: 2012-04-18T17:00:00 Last Updated: 2024-08-06T18:16:19.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Demand Media Pluck SiteLife before 5.0.13 allow remote attackers to inject arbitrary web script or HTML via (1) the jsonRequest parameter to Direct/Process, the (2) r or (3) cb parameter to Direct/jsonp.htm, or (4) the cb parameter to sys/jsonp.app/.htm. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48778 - http://www.securityfocus.com/bid/52968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74805 - http://www.kb.cer
http://www.securityfocus.com/bid/52968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74805 - http://www.kb.cert.org/vuls/id/MAPG-8Q6JEG - http://www.kb.cert.org/vuls/id/400619
CVE ID: CVE-2012-0254 State: PUBLISHED Published: 2012-09-08T10:00:00Z Last Updated: 2024-09-16T17:49:22.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions (HPS) Experion R2xx, R30x, R31x, and R400.x; Honeywell Building Solutions (HBS) Enterprise Building Manager R400 and R410.1; and Honeywell Environmental Combustion and Controls (ECC) SymmetrE R410.1 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.honeywellprocess.com/en-US/support/pages/all-notifications.aspx - h
: - CVE Program Container: References: - https://www.honeywellprocess.com/en-US/support/pages/all-notifications.aspx - http://www.us-cert.gov/control_systems/pdf/ICSA-12-150-01.pdf
CVE ID: CVE-2012-0255 State: PUBLISHED Published: 2012-04-05T10:00:00 Last Updated: 2024-08-06T18:16:19.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability). Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1259.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html - http://www.debian.org/secur
59.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html - http://www.debian.org/security/2012/dsa-2459 - http://www.kb.cert.org/vuls/id/551715 - http://secunia.com/advisories/48949 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078926.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078794.html
CVE ID: CVE-2012-0256 State: PUBLISHED Published: 2012-03-26T14:00:00 Last Updated: 2024-08-06T18:16:20.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-03/0118.html - http://seclists.org/fulldisclosure/2012/Mar/260 - http://www.securityfocus.com/bid/52696 - https://www.cert.fi/en/reports/2012/vulnerability612884.html - http://www.securitytracker.co
curityfocus.com/bid/52696 - https://www.cert.fi/en/reports/2012/vulnerability612884.html - http://www.securitytracker.com/id?1026847 - http://trafficserver.apache.org/downloads
CVE ID: CVE-2012-0257 State: PUBLISHED Published: 2012-04-02T20:00:00 Last Updated: 2024-08-06T18:16:20.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA Application Object Toolkit 3.2 and earlier, and InTouch 10.0 through 10.5 might allow remote attackers to execute arbitrary code via a long string to the Open member, leading to a function-pointer overwrite. Additional Analyst Notes: - CVE
rary code via a long string to the Open member, leading to a function-pointer overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000071.pdf - http://osvdb.org/80891 - http://secunia.com/advisories/48675 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-081-01.pdf
CVE ID: CVE-2012-0258 State: PUBLISHED Published: 2012-04-02T20:00:00 Last Updated: 2024-08-06T18:16:20.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA Application Object Toolkit 3.2 and earlier, and InTouch 10.0 through 10.5 might allow remote attackers to execute arbitrary code via a long string to the AddFile member. Additional Analyst Notes: - CVE Program Container: References: - http
rary code via a long string to the AddFile member. Additional Analyst Notes: - CVE Program Container: References: - https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000071.pdf - http://osvdb.org/80891 - http://secunia.com/advisories/48675 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-081-01.pdf
CVE ID: CVE-2012-0259 State: PUBLISHED Published: 2012-06-05T22:00:00 Last Updated: 2024-08-06T18:16:20.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55035 - http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html - http://secunia.com/advisories/49043 - http://www.debian.org/security/2012/dsa-2462 - http://secunia.
-06/msg00001.html - http://secunia.com/advisories/49043 - http://www.debian.org/security/2012/dsa-2462 - http://secunia.com/advisories/49063 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74657 - http://secunia.com/advisories/48679 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259 - http://www.securityfocus.com/bid/52898 - http://rhn.redhat.com/errata/RHSA-2012-0544.html - http://ubuntu.com/usn/usn-1435-1 - http://secunia.com/advisories/48974 - http://www.osvdb.org/81021 - http://secunia.com/advisories/49317 - http://www.cert.fi/en/reports/2012/vulnerability635606.html - http://www.securitytracker.com/id?1027032 - http://www.imagemagick.org/discourse-server/viewtopic.php?f=
ty635606.html - http://www.securitytracker.com/id?1027032 - http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629
CVE ID: CVE-2012-0260 State: PUBLISHED Published: 2012-06-05T22:00:00 Last Updated: 2024-08-06T18:16:20.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a crafted sequence of restart markers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55035 - http://secunia.com/advisories/49068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74658 - http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html - http://secunia.com/advisories/57224 - http://www.
8 - http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html - http://secunia.com/advisories/57224 - http://www.ubuntu.com/usn/USN-2132-1 - http://www.debian.org/security/2012/dsa-2462 - http://secunia.com/advisories/49063 - http://www.securityfocus.com/bid/52898 - http://rhn.redhat.com/errata/RHSA-2012-0544.html - http://secunia.com/advisories/48974 - http://secunia.com/advisories/49317 - http://www.cert.fi/en/reports/2012/vulnerability635606.html - http://www.osvdb.org/81022 - http://www.securitytracker.com/id?1027032 - http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629 - http://rhn.redhat.com/errata/RHSA-2012-0545.html
CVE ID: CVE-2012-0261 State: PUBLISHED Published: 2013-12-31T20:00:00 Last Updated: 2024-08-06T18:16:19.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.op5.com/view.php?id=5094 - http://www.osvdb.org/78064 - http://secunia.com/advisories/47417 - http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/ - http://seclists.org/fulldisclosure/2012/Jan/62 - http:/
/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/ - http://seclists.org/fulldisclosure/2012/Jan/62 - http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf
CVE ID: CVE-2012-0262 State: PUBLISHED Published: 2013-12-31T20:00:00 Last Updated: 2024-08-06T18:16:20.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.op5.com/view.php?id=5094 - http://secunia.com/advisories/47417 - http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/ - http://seclists.org/fulldisclosure/2012/Jan/62 - http://www.osvdb.org/78065 - http://www.ekelow.se
itor-op5-appliance/ - http://seclists.org/fulldisclosure/2012/Jan/62 - http://www.osvdb.org/78065 - http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf
CVE ID: CVE-2012-0263 State: PUBLISHED Published: 2013-12-31T20:00:00 Last Updated: 2024-08-06T18:16:20.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malformed hoststatustypes parameter to status/service/all or (2) a crafted request to config. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/78067 - https://bugs.op5.com/view.php?id=5094 - http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/ - h
ugs.op5.com/view.php?id=5094 - http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/ - http://secunia.com/advisories/47344 - http://seclists.org/fulldisclosure/2012/Jan/62 - http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf
CVE ID: CVE-2012-0264 State: PUBLISHED Published: 2013-12-31T20:00:00 Last Updated: 2024-08-06T18:16:20.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/78066 - https://bugs.op5.com/view.php?id=5094 - http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/ - http://secunia.com/advisories/47344 - http://seclists.org/fulldisclosure/2012/Jan/62 - http://www.ekelow.se/file_uploads/Advisories/ekelow-aid
isories/47344 - http://seclists.org/fulldisclosure/2012/Jan/62 - http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf
CVE ID: CVE-2012-0265 State: PUBLISHED Published: 2012-05-16T01:00:00 Last Updated: 2024-08-06T18:16:20.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted pathname for a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027065 - http://support.apple.com/kb/HT5261 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16170 - http://www.securityfocus.com/bid/53578 - http://lists.apple.com/archives/security-anno