Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
://rhn.redhat.com/errata/RHSA-2012-1558.html - http://www.securityfocus.com/bid/56437 - https://github.com/openstack/glance/commit/90bcdc5a89e350a358cf320a03f5afe99795f6f6 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092192.html - http://www.openwall.com/lists/oss-security/2012/11/07/6 - http://www.openwall.com/lists/oss-security/2012/11/09/5 - http://packetstormsecurity.com/files/118733/Red-Hat-Security-Advisory-2012-1558-01.html - http://osvdb.org/87248 - https://github.com/openstack/glance/commit/6ab0992e5472ae3f9bef0d2ced41030655d9d2bc - http://www.ubuntu.com/usn/USN-1626-2 - https://bugs.launchpad.net/glance/+bug/1065187 - http://lists.opensuse.org/opensuse-
p://www.ubuntu.com/usn/USN-1626-2 - https://bugs.launchpad.net/glance/+bug/1065187 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00002.html - https://github.com/openstack/glance/commit/efd7e75b1f419a52c7103c7840e24af8e5deb29d - https://exchange.xforce.ibmcloud.com/vulnerabilities/79895
CVE ID: CVE-2012-4574 State: PUBLISHED Published: 2013-01-04T22:00:00 Last Updated: 2024-08-06T20:42:54.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulp in Red Hat CloudForms before 1.1 uses world-readable permissions for pulp.conf, which allows local users to read the administrative password by reading this file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80548 - http://osvdb.org/88138 - http://secunia.com/advisories/51472 - https://bugzilla.redhat.com/show_bug.cgi?id=872487 - http://rhn.redhat.com/errata/RHSA-2012-1543.html - http://www.securityfocus.com/bid/56819
CVE ID: CVE-2012-4575 State: PUBLISHED Published: 2012-11-18T19:00:00 Last Updated: 2024-08-06T20:42:54.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service (daemon outage) via a long database name in a request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56371 - http://git.postgresql.org/gitweb/?p=pgbouncer.git%3Ba=commit%3Bh=4b92112b820830b30cd7bc91bef3dd8f35305525 - https://bugzilla.redhat.com/show_bug.cgi?id=872527 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692103 - http://openwall
//bugzilla.redhat.com/show_bug.cgi?id=872527 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692103 - http://openwall.com/lists/oss-security/2012/11/02/8
CVE ID: CVE-2012-4576 State: PUBLISHED Published: 2019-12-02T17:53:34 Last Updated: 2024-08-06T20:42:54.838Z Vendors: FreeBSD Products: FreeBSD Problem Types: privilege escalation Description: FreeBSD: Input Validation Flaw allows local users to gain elevated privileges Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-4576 - https://access.redhat.com/security/cve/cve-2012-4576 - http://www.securityfocus.com/bid/56654 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0089.html - http://www.securitytracker.com/id?1027809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80321
CVE ID: CVE-2012-4577 State: PUBLISHED Published: 2012-08-21T18:00:00 Last Updated: 2024-08-06T20:42:54.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux firmware image on (1) Korenix Jetport 5600 series serial-device servers and (2) ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77992 - http://ics-cert.us-cert.gov/advisories/ICSA-12-263-02 - http://ics-cert.us-cert.gov/advisories/ICSA-12-297-02 - http://www.di
//ics-cert.us-cert.gov/advisories/ICSA-12-263-02 - http://ics-cert.us-cert.gov/advisories/ICSA-12-297-02 - http://www.digitalbond.com/2012/06/13/korenix-and-oring-insecurity - http://www.securityfocus.com/bid/55196
CVE ID: CVE-2012-4578 State: PUBLISHED Published: 2012-08-21T19:00:00 Last Updated: 2024-08-06T20:42:54.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The geli encryption provider 7 before r239184 on FreeBSD 10 uses a weak Master Key, which makes it easier for local users to defeat a cryptographic protection mechanism via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78057 - http://lists.freebsd.org/pipermail/freebsd-security/2012-August/006541.html
CVE ID: CVE-2012-4579 State: PUBLISHED Published: 2012-08-21T23:00:00Z Last Updated: 2024-09-16T17:27:35.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via a Table Operations (1) TRUNCATE or (2) DROP link for a crafted table name, (3) the Add Trigger popup within a Triggers page that references crafted table names, (4) an invalid trigger-creation attempt for a crafted table name, (5) crafted data in a table, or (6) a crafted tooltip label name during GIS data visualization, a different issue than CVE-2012-4345. Additio
table, or (6) a crafted tooltip label name during GIS data visualization, a different issue than CVE-2012-4345. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php
CVE ID: CVE-2012-4580 State: PUBLISHED Published: 2012-08-22T10:00:00Z Last Updated: 2024-09-17T01:21:41.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote attackers to inject arbitrary web script or HTML via vectors related to the McAfee Security Appliance Management Console/Dashboard. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10020
CVE ID: CVE-2012-4581 State: PUBLISHED Published: 2012-08-22T10:00:00Z Last Updated: 2024-09-17T04:24:27.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not disable the server-side session token upon the closing of the Management Console/Dashboard, which makes it easier for remote attackers to hijack sessions by capturing a session cookie and then modifying the response to a login attempt, related to a "Logout Failure" issue. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content
sue. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10020
CVE ID: CVE-2012-4582 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T20:42:54.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to reset the passwords of arbitrary administrative accounts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10020 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0160.html
CVE ID: CVE-2012-4583 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T20:42:54.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to obtain the session tokens of arbitrary users by navigating within the Dashboard. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-03/0161.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10020
CVE ID: CVE-2012-4584 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T20:42:54.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authenticated users to obtain sensitive information by reading a backup file, as demonstrated by obtaining password hashes. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-03/0162.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10020
CVE ID: CVE-2012-4585 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T20:42:54.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-03/0163.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10020
CVE ID: CVE-2012-4586 State: PUBLISHED Published: 2012-08-22T10:00:00Z Last Updated: 2024-09-16T23:45:25.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated users to bypass intended permission settings by requesting a file. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10020
CVE ID: CVE-2012-4587 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T20:42:54.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records, which makes it easier for remote attackers to discover user passwords by spoofing the EMM server, as demonstrated by a password entered on an iOS device. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78130 - https://kc.mcafee.com/corporate/index?page=content&id=SB10021
CVE ID: CVE-2012-4588 State: PUBLISHED Published: 2012-08-22T10:00:00Z Last Updated: 2024-09-16T20:17:16.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login attempts, and place them on a list of accounts that an administrator may wish to unlock, which allows remote attackers to cause a denial of service (excessive list size in the EMM Database) via a long sequence of login attempts with different usernames. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10021
CVE ID: CVE-2012-4589 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T20:42:54.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Login.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78223 - https://kc.mcafee.com/corporate/index?page=content&id=SB10022
CVE ID: CVE-2012-4590 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T20:42:54.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 might allow remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Connection variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78222 - https://kc.mcafee.com/corporate/index?page=content&id=SB10022
CVE ID: CVE-2012-4591 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T20:42:54.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78221
CVE ID: CVE-2012-4592 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T20:42:54.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not set the secure flag for the ASP.NET session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78220 - https://kc.mcafee.com/corporate/index?page=content&id=SB10022
CVE ID: CVE-2012-4593 State: PUBLISHED Published: 2012-08-22T10:00:00Z Last Updated: 2024-09-17T01:31:53.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users to bypass authentication by executing a command. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10023
CVE ID: CVE-2012-4594 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T20:42:54.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information from arbitrary reporting panels, via a modified ID value in a console URL. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10025 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78132
CVE ID: CVE-2012-4595 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T20:42:54.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin session ID via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77977 - https://kc.mcafee.com/corporate/index?page=content&id=SB10026
CVE ID: CVE-2012-4596 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T20:42:54.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in McAfee Email Gateway (MEG) 7.0.0 and 7.0.1 allows remote authenticated users to bypass intended access restrictions and download arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027444 - https://kc.mcafee.com/corporate/index?page=content&id=SB10026
CVE ID: CVE-2012-4597 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T20:42:54.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to the McAfee Security Appliance Management Console/Dashboard. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027444 - https://kc.mcafee.com/corporate/index?page=content&id=SB10026 - https://exchange.xforce.ibmcloud.com/vul
om/id?1027444 - https://kc.mcafee.com/corporate/index?page=content&id=SB10026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77979
CVE ID: CVE-2012-4598 State: PUBLISHED Published: 2012-08-22T10:00:00Z Last Updated: 2024-09-17T03:48:04.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10028
CVE ID: CVE-2012-4599 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T20:42:54.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to execute arbitrary code via a crafted .war file. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10029
CVE ID: CVE-2012-4600 State: PUBLISHED Published: 2012-08-31T14:00:00 Last Updated: 2024-08-06T20:42:54.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x before 3.0.16, and 3.1.x before 3.1.10, when Firefox or Opera is used, allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with nested HTML tags. Additional Analyst Notes: - CVE Program Container: References: - http://znuny.com/en/#%21/advisory/ZSA-2012-02 - http://secunia.com/advisories/50615 - http://www.otrs.com/de/open-source/community-news/security-advisories/security-adv
http://secunia.com/advisories/50615 - http://www.otrs.com/de/open-source/community-news/security-advisories/security-advisory-2012-02/ - http://www.kb.cert.org/vuls/id/511404
CVE ID: CVE-2012-4601 State: PUBLISHED Published: 2012-11-23T20:00:00Z Last Updated: 2024-09-16T23:46:04.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the (1) user_groups[] parameter to admin/code/tce_edit_test.php or (2) subject_id parameter to admin/code/tce_show_all_questions.php. Additional Analyst Notes: - CVE Program Container: References: - http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam%3Ba=commit%3Bh=3e1ed3c02122eae182f076daabe903b0c8837971 - http://secunia.com/advis
ge.net/git/gitweb.cgi?p=tcexam/tcexam%3Ba=commit%3Bh=3e1ed3c02122eae182f076daabe903b0c8837971 - http://secunia.com/advisories/50539 - https://www.htbridge.com/advisory/HTB23111 - http://sourceforge.net/projects/tcexam/files/CHANGELOG.TXT/view - http://freecode.com/projects/tcexam/releases/347588
CVE ID: CVE-2012-4602 State: PUBLISHED Published: 2012-11-23T20:00:00Z Last Updated: 2024-09-16T23:30:32.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the (1) cid or (2) uids parameter. Additional Analyst Notes: - CVE Program Container: References: - http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam%3Ba=commit%3Bh=3e1ed3c02122eae182f076daabe903b0c8837971 - http://secunia.com/advisories/50539 - https://www.htbridge.com/advisory/HTB23111 - http://sourceforge.net/proj
8837971 - http://secunia.com/advisories/50539 - https://www.htbridge.com/advisory/HTB23111 - http://sourceforge.net/projects/tcexam/files/CHANGELOG.TXT/view - http://freecode.com/projects/tcexam/releases/347588
CVE ID: CVE-2012-4603 State: PUBLISHED Published: 2020-01-10T20:22:58 Last Updated: 2024-08-06T20:42:54.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2 and earlier could allow remote attackers to execute arbitrary code by convincing a target to open a specially crafted file from an SMB or WebDAV fileserver. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55518 - http://www.securitytracker.com/id?1027521 - http://www.securitytracker.com/id?1027522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78433
CVE ID: CVE-2012-4604 State: PUBLISHED Published: 2012-08-23T10:00:00Z Last Updated: 2024-09-16T20:47:54.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentication and read arbitrary reports via a crafted uid field, in conjunction with a crafted userRoles field, in a cookie, as demonstrated by a request to explorer_wse/favorites.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/522530
CVE ID: CVE-2012-4605 State: PUBLISHED Published: 2012-08-23T10:00:00 Last Updated: 2024-08-06T20:42:54.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl plc\SuperScout Email Filter\SMTP" registry key, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and then conducting a brute-force attack against encrypted session data. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/SSL-TLS-weak-and-export-ciphers-detected-in-Websense-Email-Se
ences: - http://www.websense.com/support/article/kbarticle/SSL-TLS-weak-and-export-ciphers-detected-in-Websense-Email-Security-deployments - https://exchange.xforce.ibmcloud.com/vulnerabilities/78131 - http://www.securityfocus.com/bid/64758
CVE ID: CVE-2012-4606 State: PUBLISHED Published: 2020-01-23T21:39:51 Last Updated: 2024-08-06T20:42:54.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a Local Privilege Escalation Vulnerability which could allow local users with access to a guest operating system to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55432
CVE ID: CVE-2012-4607 State: PUBLISHED Published: 2013-01-17T22:00:00Z Last Updated: 2024-09-16T19:21:07.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in nsrindexd in EMC NetWorker 7.5.x and 7.6.x before 7.6.5, and 8.x before 8.0.0.6, allows remote attackers to execute arbitrary code via crafted SunRPC data. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-01/0029.html