Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-4844 State: PUBLISHED Published: 2013-02-27T21:00:00 Last Updated: 2024-08-06T20:50:16.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web server in IBM Lotus Domino 8.5.x through 8.5.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79233 - http://www-01.ibm.com/support/docview.wss?uid=swg21614077
CVE ID: CVE-2012-4845 State: PUBLISHED Published: 2012-10-20T10:00:00 Last Updated: 2024-08-06T20:50:17.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg1IV28715 - http://www.ibm.com/support/docview.wss?uid=isg1IV23331 - http://aix.software.ibm.com/aix/efixes/security/ftp_advisory1.asc - https://oval.cisecurity.o
view.wss?uid=isg1IV23331 - http://aix.software.ibm.com/aix/efixes/security/ftp_advisory1.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19695 - http://www.ibm.com/support/docview.wss?uid=isg1IV28785 - http://www.ibm.com/support/docview.wss?uid=isg1IV28787 - http://www.securityfocus.com/bid/56134 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79279
CVE ID: CVE-2012-4846 State: PUBLISHED Published: 2012-12-19T11:00:00 Last Updated: 2024-08-06T20:50:17.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, aka SPRs JMAS7TRNLN and SRAO8U3Q68. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79535 - http://www.ibm.com/support/docview.wss?uid=swg21620361 - http://www.ibm.com/support/docview.wss?uid=swg21619604
CVE ID: CVE-2012-4847 State: PUBLISHED Published: 2012-11-14T11:00:00 Last Updated: 2024-08-06T20:50:17.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted request containing a zero-valued byte. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79536 - http://www.ibm.com/support/docview.wss?uid=swg21615445
CVE ID: CVE-2012-4848 State: PUBLISHED Published: 2012-12-19T11:00:00 Last Updated: 2024-08-06T20:50:16.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the (1) First Name or (2) Last Name field. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21620319 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79537
CVE ID: CVE-2012-4850 State: PUBLISHED Published: 2012-11-14T11:00:00 Last Updated: 2024-08-06T20:50:18.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1, when JAX-RS is used, does not properly validate requests, which allows remote attackers to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM67082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79539 - http://www.securityfocus.com/bid/56460 - http://www.ibm.com/support/docview.wss?uid=swg21614265
CVE ID: CVE-2012-4851 State: PUBLISHED Published: 2012-11-14T11:00:00 Last Updated: 2024-08-06T20:50:17.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79541 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM68643 - http://www.securityfocus.com/bid/56423 - http://www.ibm.com/support/docview.wss?uid=swg21614265
CVE ID: CVE-2012-4853 State: PUBLISHED Published: 2012-11-14T11:00:00 Last Updated: 2024-08-06T20:50:18.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Application Server 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM62920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79598 - http://www.securityfocus.com/bid/56458 - http://www.ibm
0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79598 - http://www.securityfocus.com/bid/56458 - http://www.ibm.com/support/docview.wss?uid=swg21614265
CVE ID: CVE-2012-4855 State: PUBLISHED Published: 2013-03-05T01:00:00 Last Updated: 2024-08-06T20:50:17.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the web services framework in IBM WebSphere Commerce 6.0 through 6.0.0.11 and 7.0 through 7.0.0.6 allows remote attackers to cause a denial of service (login outage) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR44528 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR45471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79735 - http://www.ibm.com/support/docview.wss?uid=swg21618720
CVE ID: CVE-2012-4856 State: PUBLISHED Published: 2012-12-20T11:00:00 Last Updated: 2024-08-06T20:50:17.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://aix.software.ibm.com/aix/efixes/security/squadrons_advisory.asc - http://www.kb.cert.org/vuls/id/194604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79736
CVE ID: CVE-2012-4857 State: PUBLISHED Published: 2012-12-08T15:00:00 Last Updated: 2024-08-06T20:50:17.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users to execute arbitrary code via a crafted SQL statement. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg21618994 - http://www.securitytracker.com/id?1027849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79737
CVE ID: CVE-2012-4858 State: PUBLISHED Published: 2013-03-02T21:00:00 Last Updated: 2024-08-06T20:50:18.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly validate Java serialized input, which allows remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24034373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79801 - http://www-01.ibm.com/support/docview.wss?uid=swg21626697
CVE ID: CVE-2012-4859 State: PUBLISHED Published: 2012-12-21T11:00:00 Last Updated: 2024-08-06T20:50:17.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x before 6.3.1.0 allows local users to read or modify file system objects via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79843 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC87006 - http://www-01.ibm.com/support/docview.wss?uid=swg21615292
CVE ID: CVE-2012-4861 State: PUBLISHED Published: 2013-04-01T19:00:00 Last Updated: 2024-08-06T20:50:17.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in InfoSphere Data Replication Dashboard in IBM InfoSphere Replication Server 9.7 and 10.1 through 10.1.0.4 allows remote authenticated users to list directories via a direct request for a directory URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21632383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79844
CVE ID: CVE-2012-4862 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T20:50:17.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not properly store the SSL certificate password, which allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79919 - http://www.securitytracker.com/id?1027818 - http://www.ibm.com/support/docview.wss?uid=swg21617886 - http://secunia.com/advisories/51401 - http://www.securityfocus.com/bid/56725
CVE ID: CVE-2012-4863 State: PUBLISHED Published: 2020-01-23T13:49:42 Last Updated: 2024-08-06T20:50:17.591Z Vendors: IBM Products: WebSphere MQ Problem Types: denial of service Description: IBM WebSphere MQ 7.1 and 7.5: Queue manager has a DoS vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79920 - https://www.tenable.com/plugins/nessus/63099
CVE ID: CVE-2012-4864 State: PUBLISHED Published: 2012-09-06T17:00:00 Last Updated: 2024-08-06T20:50:17.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via a crafted xml file. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5080.php - http://www.securityfocus.com/bid/52650 - http://packetstormsecurity.org/files/111034 - http://www.exploit-db.com/exploits/18637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74170
CVE ID: CVE-2012-4865 State: PUBLISHED Published: 2012-09-06T17:00:00Z Last Updated: 2024-09-17T03:18:56.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111031 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5079.php - http://www.exploit-db.com/exploits/18636
CVE ID: CVE-2012-4866 State: PUBLISHED Published: 2012-09-06T17:00:00 Last Updated: 2024-08-06T20:50:17.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as the current working directory. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74151 - http://packetstormsecurity.org/files/110949/Xtreme-RAT-DLL-Hij
ps://exchange.xforce.ibmcloud.com/vulnerabilities/74151 - http://packetstormsecurity.org/files/110949/Xtreme-RAT-DLL-Hijack.html
CVE ID: CVE-2012-4867 State: PUBLISHED Published: 2012-09-06T17:00:00Z Last Updated: 2024-09-17T01:56:38.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the module_name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111075/Vtiger-5.1.0-Local-File-Inclusion.html - http://www.exploit-db.com/exploits/18635
CVE ID: CVE-2012-4868 State: PUBLISHED Published: 2012-09-06T17:00:00Z Last Updated: 2024-09-17T02:51:36.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://exploitsdownload.com/exploit/na/kunena-20-sql-injection - http://www.securityfocus.com/bid/52636
CVE ID: CVE-2012-4869 State: PUBLISHED Published: 2012-09-06T17:00:00 Last Updated: 2024-08-06T20:50:17.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum parameter in a c action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18649 - http://www.exploit-db.com/exploits/18659 - http://packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html - http://seclists.org/fulldisclosure/2012/Mar/234 - http://secunia.com/advisories/48463 - ht
-Command-Execution-XSS.html - http://seclists.org/fulldisclosure/2012/Mar/234 - http://secunia.com/advisories/48463 - http://www.securityfocus.com/bid/52630 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74174 - http://www.freepbx.org/trac/ticket/5711
CVE ID: CVE-2012-4870 State: PUBLISHED Published: 2012-09-06T17:00:00 Last Updated: 2024-08-06T20:50:17.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) context parameter to panel/index_amp.php or (2) panel/dhtml/index.php; (3) clid or (4) clidname parameters to panel/flash/mypage.php; (5) PATH_INFO to admin/views/freepbx_reload.php; or (6) login parameter to recordings/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18649 - http://packetstormsecurity.org/files/111
CVE Program Container: References: - http://www.exploit-db.com/exploits/18649 - http://packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74173 - http://seclists.org/fulldisclosure/2012/Mar/234 - http://secunia.com/advisories/48463 - http://www.securityfocus.com/bid/52630 - http://www.freepbx.org/trac/ticket/5711 - http://secunia.com/advisories/48475
CVE ID: CVE-2012-4871 State: PUBLISHED Published: 2012-09-06T21:00:00 Last Updated: 2024-08-06T20:50:17.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/110974/LiteSpeed-4.1.11-Cross-Site-Scripting.html - http://secunia.com/advisories/48400 - http://k1p0d.com/?p=25 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74144
CVE ID: CVE-2012-4872 State: PUBLISHED Published: 2012-09-06T21:00:00 Last Updated: 2024-08-06T20:50:17.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to inject arbitrary web script or HTML via certain vectors, possibly a crafted ticket description. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52625 - http://wiki.kayako.com/display/DOCS/4.40.985 - http://st2tea.blogspot.com/2012/03/kayako-fusion-cross-site-scripting.html - http://wiki.kayako.com/display/DOCS/4.40.986 - http://secunia.com/advisories/48462 - ht
sion-cross-site-scripting.html - http://wiki.kayako.com/display/DOCS/4.40.986 - http://secunia.com/advisories/48462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74143
CVE ID: CVE-2012-4873 State: PUBLISHED Published: 2012-09-06T21:00:00Z Last Updated: 2024-09-17T01:40:54.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the file_download function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrary web script or HTML via the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18627 - http://secunia.com/advisories/48458 - http://www.securityfocus.com/bid/52622 - http://sir.co.kr/bbs/board.php?bo_table=g4_pds&wr_id=7156
CVE ID: CVE-2012-4874 State: PUBLISHED Published: 2012-09-06T21:00:00Z Last Updated: 2024-09-17T00:11:51.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Another WordPress Classifieds Plugin before 2.0 for WordPress has unknown impact and attack vectors related to "image uploads." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47335 - http://www.securityfocus.com/bid/52861 - http://wordpress.org/extend/plugins/another-wordpress-classifieds-plugin/changelog/ - http://osvdb.org/80881
CVE ID: CVE-2012-4875 State: PUBLISHED Published: 2012-09-06T21:00:00 Last Updated: 2024-08-06T20:50:17.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in gdevwpr2.c in Ghostscript 9.04, when processing the OutputFile device parameter, allows user-assisted remote attackers to execute arbitrary code via a long file name in a PostScript document. NOTE: as of 20120314, the developer was not able to reproduce the issue and disputed it Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47855 - http://www.securityfocus.com/bid/52864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74554 - http://bugs.ghost
http://www.securityfocus.com/bid/52864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74554 - http://bugs.ghostscript.com/show_bug.cgi?id=692856
CVE ID: CVE-2012-4876 State: PUBLISHED Published: 2012-09-06T21:00:00Z Last Updated: 2024-09-16T18:29:39.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48601 - http://osvdb.org/80661 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0152.html - http://www.exploit-db.com/exploits/18675 - http://www.securityfocus.com/bid/52760 - http://retrogod.altervista.org/9sg_tr
ttp://www.exploit-db.com/exploits/18675 - http://www.securityfocus.com/bid/52760 - http://retrogod.altervista.org/9sg_trendnet_adv.htm
CVE ID: CVE-2012-4877 State: PUBLISHED Published: 2012-09-06T21:00:00 Last Updated: 2024-08-06T20:50:18.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html - http://osvdb.org/80878 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74567 - http://secunia.com/advisories/48656 - http://www.securityfo
https://exchange.xforce.ibmcloud.com/vulnerabilities/74567 - http://secunia.com/advisories/48656 - http://www.securityfocus.com/bid/52846 - http://www.vulnerability-lab.com/get_content.php?id=487
CVE ID: CVE-2012-4878 State: PUBLISHED Published: 2012-09-06T21:00:00 Last Updated: 2024-08-06T20:50:17.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74568 - http://www.securityfocus.com/bid/52846 - http://www.vulnerability-lab.com/get_content.php?id
com/vulnerabilities/74568 - http://www.securityfocus.com/bid/52846 - http://www.vulnerability-lab.com/get_content.php?id=487
CVE ID: CVE-2012-4879 State: PUBLISHED Published: 2012-09-07T00:00:00Z Last Updated: 2024-09-16T17:28:51.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password of wago for the (1) root and (2) admin accounts, (3) a default password of user for the user account, and (4) a default password of guest for the guest account, which makes it easier for remote attackers to obtain login access via a TELNET session, a different vulnerability than CVE-2012-3013. Additional Analyst Notes: - CVE Program Container: References: - http://www.wago.com/wagoweb/do
lity than CVE-2012-3013. Additional Analyst Notes: - CVE Program Container: References: - http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf
CVE ID: CVE-2012-4880 State: PUBLISHED Published: 2012-09-07T10:00:00Z Last Updated: 2024-09-16T16:19:06.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in DVD Architect Pro 5.2 Build 133 and DVD Architect Studio 5.0 Build 156 allow local users to gain privileges via a Trojan horse (1) enc_mp2v.200 or (2) CFHDDecoder.dll file in the current working directory, as demonstrated by a directory that contains a .dar file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47282
CVE ID: CVE-2012-4881 State: PUBLISHED Published: 2012-09-07T10:00:00Z Last Updated: 2024-09-16T22:36:21.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in moviEZ HD 1.0 Build 2554-29894-A allows local users to gain privileges via a Trojan horse avrt.dll file in the current working directory, as demonstrated by a directory that contains a .mvz file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47284