Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-4671 State: PUBLISHED Published: 2012-08-25T16:00:00Z Last Updated: 2024-09-16T17:38:33.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted. Additional Analyst Notes: - CVE Program Container: References: - http://www.psyced.org/files/psyced-20120821.tar.bz2 - http://xmpp.org/resources/security-notices/server-dialback/
CVE ID: CVE-2012-4672 State: PUBLISHED Published: 2012-08-25T16:00:00 Last Updated: 2024-08-06T20:42:55.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78133 - http://xmpp.org/resources/security-notices/server-dialback/
CVE ID: CVE-2012-4673 State: PUBLISHED Published: 2012-08-26T01:00:00Z Last Updated: 2024-09-16T22:41:34.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in application/controllers/invoice.php in NeoInvoice might allow remote attackers to execute arbitrary SQL commands via vectors involving the sort_col variable in the list_items function, a different vulnerability than CVE-2012-3477. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mweimerskirch/neoinvoice/commit/501a9d5d261c718913cfc13d212b09b56f3bf087 - http://adamcaudill.com/2012/08/12/neoinvoice-blind-sql-injection-cve-2012-3477/ - https://github.com/tlhunter/
f3bf087 - http://adamcaudill.com/2012/08/12/neoinvoice-blind-sql-injection-cve-2012-3477/ - https://github.com/tlhunter/neoinvoice/issues/2
CVE ID: CVE-2012-4674 State: PUBLISHED Published: 2012-08-26T18:00:00Z Last Updated: 2024-09-16T19:01:46.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID. Additional Analyst Notes: - CVE Program Container: References: - http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6 - http://telechargements.pluxml.org/changelog
CVE ID: CVE-2012-4675 State: PUBLISHED Published: 2012-08-26T18:00:00 Last Updated: 2024-08-06T20:42:54.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75331 - http://www.securityfocus.com/bid/53367 - http://secunia.com/advisories/49026 - http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6 - http://telechargements.pluxml.org/changelog
CVE ID: CVE-2012-4676 State: PUBLISHED Published: 2012-08-26T19:00:00Z Last Updated: 2024-09-16T22:56:55.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a different vulnerability than CVE-2012-3485. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/14/1 - http://code.google.com/p/tunnelblick/issues/detail?id=212 - http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html
CVE ID: CVE-2012-4677 State: PUBLISHED Published: 2012-08-26T19:00:00Z Last Updated: 2024-09-16T17:28:45.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/tunnelblick/issues/detail?id=212
CVE ID: CVE-2012-4678 State: PUBLISHED Published: 2012-08-26T21:00:00Z Last Updated: 2024-09-16T23:11:23.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of service (disk consumption) via many requests to an image with unique parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/19/5 - http://www.openwall.com/lists/oss-security/2012/04/27/7 - http://www.openwall.com/lists/oss-security/2012/04/18/2 - http://www.openwall.com/lists/oss-security/2012/04/19/4 - http://www.openwall.com/lists/oss-s
ss-security/2012/04/18/2 - http://www.openwall.com/lists/oss-security/2012/04/19/4 - http://www.openwall.com/lists/oss-security/2012/04/19/3 - http://www.openwall.com/lists/oss-security/2012/04/29/2 - http://www.openwall.com/lists/oss-security/2012/04/16/6 - http://munin-monitoring.org/changeset/4825 - http://www.openwall.com/lists/oss-security/2012/04/16/5 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668667 - https://bugzilla.redhat.com/show_bug.cgi?id=812889 - http://www.securityfocus.com/bid/53034
CVE ID: CVE-2012-4679 State: PUBLISHED Published: 2012-08-27T21:00:00 Last Updated: 2024-08-06T20:42:55.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the f_user_name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52941 - http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm - http://dev.sourcefabric.org/browse/CS-4184 - http://secunia.com/advisories/48769 - https://exchange.xforce.ibmcloud.com/vulnerabilit
ourcefabric.org/browse/CS-4184 - http://secunia.com/advisories/48769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74781 - https://www.htbridge.com/advisory/HTB23084
CVE ID: CVE-2012-4680 State: PUBLISHED Published: 2012-08-27T23:00:00 Last Updated: 2024-08-06T20:42:54.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ (backslash) character, allows remote attackers to read arbitrary files or list arbitrary directories via a .. (dot dot) in a URI. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-12-258-01 - http://www.foofus.net/?page_id=616 - http://secunia.com/advisories/50297
CVE ID: CVE-2012-4681 State: PUBLISHED Published: 2012-08-28T00:00:00.000Z Last Updated: 2025-10-22T00:05:46.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modif
Toolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html - http://www.us-cert.gov/cas/techalerts/TA12-240A.html - http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/ - http://marc.info/?l=
2-240A.html - http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/ - http://marc.info/?l=bugtraq&m=135109152819176&w=2 - https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day - http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html - http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html - http://rhn.redhat.com/errata/RHSA-2012-1225.html - http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html - http://secunia.com/advisories/51044 - http://marc.info/?l=bugtraq&m=135109152819176&w=2 - http://www.securityfocus.com/bid/55213
CVE ID: CVE-2012-4682 State: PUBLISHED Published: 2012-09-14T23:00:00Z Last Updated: 2024-09-17T02:11:40.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-4683. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/CVEs - http://www.osvdb.org/85353
CVE ID: CVE-2012-4683 State: PUBLISHED Published: 2012-09-14T23:00:00Z Last Updated: 2024-09-17T03:42:56.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-4682. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/CVEs - http://www.osvdb.org/85354
CVE ID: CVE-2012-4684 State: PUBLISHED Published: 2013-03-12T10:00:00Z Last Updated: 2024-09-16T20:36:40.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data, but relies on a hash of this signature, which allows remote attackers to cause a denial of service (resource consumption) via a valid modified signature for a circulating alert. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/CVE-2012-4684 - https://en.bitcoin.it/wiki/CVEs - https://bitcointalk.org/index.php?topic=8392.0 - https://bitcointalk.org/i
2012-4684 - https://en.bitcoin.it/wiki/CVEs - https://bitcointalk.org/index.php?topic=8392.0 - https://bitcointalk.org/index.php?topic=148109.0
CVE ID: CVE-2012-4685 State: PUBLISHED Published: 2012-08-28T16:00:00 Last Updated: 2024-08-06T20:42:54.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Arbor Networks Peakflow SP 5.1.1 before patch 6, 5.5 before patch 4, and 5.6.0 before patch 1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74648 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0036.html - http://archives.neohapsis.com/archives/bugtraq/2012-04/0019.html - ht
neohapsis.com/archives/bugtraq/2012-04/0036.html - http://archives.neohapsis.com/archives/bugtraq/2012-04/0019.html - http://archives.neohapsis.com/archives/bugtraq/2012-04/0037.html - http://secunia.com/advisories/48728
CVE ID: CVE-2012-4686 State: PUBLISHED Published: 2012-08-28T16:00:00Z Last Updated: 2024-09-16T22:19:51.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in announcement.php in vBulletin 4.1.10 allows remote attackers to execute arbitrary SQL commands via the announcementid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80962 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0042.html - http://www.securityfocus.com/bid/52897
CVE ID: CVE-2012-4687 State: PUBLISHED Published: 2012-12-08T15:00:00Z Last Updated: 2025-07-09T18:27:31.737Z Severity: N/A (CVSS 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C) Vendors: Post Oak Traffic Systems Products: AWAM Bluetooth Reader Traffic System Problem Types: CWE-331 Description: Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-12-335-01 - http://www.postoaktraffic.com/contact.aspx
CVE ID: CVE-2012-4688 State: PUBLISHED Published: 2012-12-31T11:00:00Z Last Updated: 2025-07-10T16:10:19.366Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: i-GEN Solutions Corporation Products: opLYNX Problem Types: CWE-592 Description: The Central application in i-GEN opLYNX before 2.01.9 allows remote attackers to bypass authentication via vectors involving the disabling of browser JavaScript support. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-12-362-01
CVE ID: CVE-2012-4689 State: PUBLISHED Published: 2013-01-17T16:00:00Z Last Updated: 2024-09-16T16:37:52.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to cause a denial of service (daemon crash) via a malformed HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-341-01.pdf - http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15153
CVE ID: CVE-2012-4690 State: PUBLISHED Published: 2012-12-08T15:00:00 Last Updated: 2024-08-06T20:42:54.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platform, when Static status is not enabled, allow remote attackers to cause a denial of service via messages that trigger modification of status bits. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-12-342-01A - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/511407 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-
s://rockwellautomation.custhelp.com/app/answers/detail/a_id/511407 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-342-01.pdf
CVE ID: CVE-2012-4691 State: PUBLISHED Published: 2012-12-18T11:00:00.000Z Last Updated: 2025-05-23T18:26:19.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service (memory consumption) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-349-01.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-783261.pdf
CVE ID: CVE-2012-4692 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-4693 State: PUBLISHED Published: 2012-12-18T11:00:00Z Last Updated: 2024-09-16T20:57:49.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Ps_security.ini, which makes it easier for local users to discover passwords by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-370812.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-348-01.pdf
CVE ID: CVE-2012-4694 State: PUBLISHED Published: 2013-02-15T11:00:00Z Last Updated: 2024-09-16T17:03:16.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-042-01.pdf - http://www.moxa.com/support/download.aspx?type=support&id=492
CVE ID: CVE-2012-4695 State: PUBLISHED Published: 2013-04-18T01:00:00Z Last Updated: 2024-09-16T20:43:24.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (service outage) via a zero-byte UDP packet that is not properly handled by Logger.dll. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-095-02.pdf - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599
CVE ID: CVE-2012-4696 State: PUBLISHED Published: 2013-01-28T18:00:00 Last Updated: 2024-08-06T20:42:54.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Beijer ADP 6.5.0-180_R1967 and 6.5.1-186_R2942, and H-Designer 6.5.0 B180_R1967, allows local users to gain privileges by inserting a long string into a DLL file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57546 - http://www.us-cert.gov/control_systems/pdf/ICSA-13-024-01.pdf
CVE ID: CVE-2012-4697 State: PUBLISHED Published: 2013-05-23T17:00:00Z Last Updated: 2024-09-16T22:19:57.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-136-01
CVE ID: CVE-2012-4698 State: PUBLISHED Published: 2012-12-23T21:00:00 Last Updated: 2024-08-06T20:42:55.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens RuggedCom Rugged Operating System (ROS) before 3.12, ROX I OS through 1.14.5, ROX II OS through 2.3.0, and RuggedMax OS through 4.2.1.4621.22 use hardcoded private keys for SSL and SSH communication, which makes it easier for man-in-the-middle attackers to spoof servers and decrypt network traffic by leveraging the availability of these keys within ROS files at all customer installations. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-354-01.pdf - htt
nalyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-354-01.pdf - http://www.ruggedcom.com/productbulletin/ros-security-page/ - http://ics-cert.us-cert.gov/advisories/ICSA-12-354-01A - https://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-622607.pdf
CVE ID: CVE-2012-4699 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-4700 State: PUBLISHED Published: 2013-02-08T02:00:00Z Last Updated: 2024-09-16T23:01:22.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attackers to execute arbitrary code via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-036-02.pdf - http://www.integraxor.com/blog/security-issue-for-activex-enabled-browser-vulnerability-note
CVE ID: CVE-2012-4701 State: PUBLISHED Published: 2013-02-15T11:00:00Z Last Updated: 2024-09-17T01:31:31.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging (1) valid credentials or (2) the guest feature. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-045-01.pdf - https://www.niagara-central.com/ord?portal:/dev/wiki/Niagara_AX_Security_Patch_11-Feb-2013
CVE ID: CVE-2012-4702 State: PUBLISHED Published: 2013-03-11T17:00:00Z Last Updated: 2024-09-17T00:42:04.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: 360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root account, which makes it easier for remote attackers to execute arbitrary code, or modify video content or scheduling, via an SSH session. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-038-01A.pdf
CVE ID: CVE-2012-4703 State: PUBLISHED Published: 2013-03-11T21:00:00Z Last Updated: 2024-09-16T19:45:54.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Emerson DeltaV SE3006 through 11.3.1, DeltaV VE3005 through 10.3.1 and 11.x through 11.3.1, and DeltaV VE3006 through 10.3.1 and 11.x through 11.3.1 allow remote attackers to cause a denial of service (device restart) via a crafted packet on (1) TCP port 23, (2) UDP port 161, or (3) TCP port 513. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-053-01.pdf
CVE ID: CVE-2012-4704 State: PUBLISHED Published: 2013-02-24T11:00:00 Last Updated: 2024-08-06T20:42:55.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-050-01A
CVE ID: CVE-2012-4705 State: PUBLISHED Published: 2013-02-24T11:00:00 Last Updated: 2024-08-06T20:42:55.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-050-01A
CVE ID: CVE-2012-4706 State: PUBLISHED Published: 2013-02-24T11:00:00 Last Updated: 2024-08-06T20:42:55.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted packet that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-050-01A
CVE ID: CVE-2012-4707 State: PUBLISHED Published: 2013-02-24T11:00:00 Last Updated: 2024-08-06T20:42:55.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-050-01A
CVE ID: CVE-2012-4708 State: PUBLISHED Published: 2013-02-24T11:00:00 Last Updated: 2024-08-06T20:42:54.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-050-01A