Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2191 State: PUBLISHED Published: 2012-08-08T10:00:00 Last Updated: 2024-08-06T19:26:09.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack, which allows remote attackers to cause a denial of service (application crash) via crafted values in the TLS Record Layer, a different vulnerability than CVE-2012-2333. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docv
than CVE-2012-2333. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV31980 - http://secunia.com/advisories/51279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75996 - http://www.securityfocus.com/bid/54743 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV31981 - http://www-01.ibm.com/support/docview.wss?uid=swg21606145
CVE ID: CVE-2012-2192 State: PUBLISHED Published: 2012-06-20T10:00:00 Last Updated: 2024-08-06T19:26:09.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system crash) via a crafted application that leverages the presence of a socket on the free list. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027126 - http://www.ibm.com/support/docview.wss?uid=isg1IV21235 - http://aix.software.ibm.com/aix/efixes/security/socket_advisory.asc - http://www.securityfocus.com/bid/53567 - http://www.ibm.com/support
re.ibm.com/aix/efixes/security/socket_advisory.asc - http://www.securityfocus.com/bid/53567 - http://www.ibm.com/support/docview.wss?uid=isg1IV19178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76032 - http://www.ibm.com/support/docview.wss?uid=isg1IV21128 - http://www.ibm.com/support/docview.wss?uid=isg1IV16603 - http://www.ibm.com/support/docview.wss?uid=isg1IV21131
CVE ID: CVE-2012-2193 State: PUBLISHED Published: 2013-03-02T21:00:00 Last Updated: 2024-08-06T19:26:08.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Query Studio in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows user-assisted remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24034373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76098 - http://www-01.ibm.com/support/docview.wss?uid=swg21626697
CVE ID: CVE-2012-2194 State: PUBLISHED Published: 2012-07-25T10:00:00 Last Updated: 2024-08-06T19:26:08.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the SQLJ.DB2_INSTALL_JAR stored procedure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to replace JAR files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49919 - http://www.securityfocus.com/bid/54487 - http://www-01.ibm.com/support/docview.wss?uid=swg21600837 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84711 - http://www-01.ibm.com/support/d
ocview.wss?uid=swg21600837 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84711 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84019 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84716 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84714 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84715
CVE ID: CVE-2012-2196 State: PUBLISHED Published: 2012-07-25T10:00:00 Last Updated: 2024-08-06T19:26:08.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via the (1) GET_WRAP_CFG_C or (2) GET_WRAP_CFG_C2 stored procedure. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84712 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84751 - http://secunia.com/advisories/49919 - http://www.securityfocus.com/bid/54487 - http://www-01.ibm.com/support/docview.wss?uid=swg21600837 - htt
isories/49919 - http://www.securityfocus.com/bid/54487 - http://www-01.ibm.com/support/docview.wss?uid=swg21600837 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84614 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84750 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84748
CVE ID: CVE-2012-2197 State: PUBLISHED Published: 2012-07-25T10:00:00 Last Updated: 2024-08-06T19:26:09.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote authenticated users to execute arbitrary code by leveraging certain CONNECT and EXECUTE privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84753 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84754 - http://secunia.com/advisories/49919 - http://www.securityfocus.com/bid/54
.ibm.com/support/docview.wss?uid=swg1IC84754 - http://secunia.com/advisories/49919 - http://www.securityfocus.com/bid/54487 - http://www-01.ibm.com/support/docview.wss?uid=swg21600837 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84755 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84555 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC84752
CVE ID: CVE-2012-2199 State: PUBLISHED Published: 2012-09-25T20:00:00 Last Updated: 2024-08-06T19:26:08.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1 before 7.0.1.9, 7.1, and 7.5 on Solaris allows remote attackers to cause a denial of service (invalid address alignment exception and daemon crash) via vectors involving a multiplexed channel. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC82725 - http://www.ibm.com/support/docview.wss?uid=swg21610285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76434
CVE ID: CVE-2012-2200 State: PUBLISHED Published: 2012-06-27T10:00:00 Last Updated: 2024-08-06T19:26:09.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027207 - http://www.ibm.com/support/docview.wss?uid=isg1IV22965 - http://www.ibm.com/support/docview.wss?uid=isg1IV22963 - http://aix.software.ibm.com/aix/efixes/security/sendmail1_advisory.asc - https://exchange.xforce.ibmcloud.com/vulnera
- http://aix.software.ibm.com/aix/efixes/security/sendmail1_advisory.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/76466 - http://www.ibm.com/support/docview.wss?uid=isg1IV22964 - http://www.ibm.com/support/docview.wss?uid=isg1IV22966
CVE ID: CVE-2012-2201 State: PUBLISHED Published: 2020-08-27T12:35:48 Last Updated: 2024-08-06T19:26:08.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere MQ 7.1 is vulnerable to a denial of service, caused by an error when handling user ids. A remote attacker could exploit this vulnerability to bypass the security configuration setup on a SVRCONN channel and flood the queue manager. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76799
CVE ID: CVE-2012-2202 State: PUBLISHED Published: 2012-07-27T10:00:00 Last Updated: 2024-08-06T19:26:08.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/659791 - http://secunia.com/advisories/49897 - http://www-01.ibm.com/support/docview.wss?uid=swg21605630 - https://exchange.xforce.ibmcloud.com/vulne
dvisories/49897 - http://www-01.ibm.com/support/docview.wss?uid=swg21605630 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76801
CVE ID: CVE-2012-2203 State: PUBLISHED Published: 2012-08-08T10:00:00 Last Updated: 2024-08-06T19:26:08.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for certificate objects without enforcing file integrity, which makes it easier for remote attackers to spoof SSL servers via vectors involving insertion of an arbitrary root Certification Authority (CA) certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77280 - http://secunia
otes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77280 - http://secunia.com/advisories/51279 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV31975 - http://www.securityfocus.com/bid/54743 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV31973 - http://www-01.ibm.com/support/docview.wss?uid=swg21606145
CVE ID: CVE-2012-2204 State: PUBLISHED Published: 2020-02-10T15:34:15 Last Updated: 2024-08-06T19:26:09.040Z Vendors: InfoSphere Products: Guardium Problem Types: denial of service Description: InfoSphere Guardium aix_ktap module: DoS Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76968
CVE ID: CVE-2012-2205 State: PUBLISHED Published: 2012-08-17T20:00:00 Last Updated: 2024-08-06T19:26:08.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a workspace query. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM61670 - http://www.ibm.com/support/docview.wss?uid=swg21605838 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77094
CVE ID: CVE-2012-2206 State: PUBLISHED Published: 2012-08-17T10:00:00 Last Updated: 2024-08-06T19:26:08.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/20478/ - http://www.ibm.com/support/docview.wss?uid=swg21607481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77095 - http://www-01.ibm.com/suppo
t/docview.wss?uid=swg21607481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77095 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC82761
CVE ID: CVE-2012-2208 State: PUBLISHED Published: 2012-08-14T22:00:00 Last Updated: 2024-08-06T19:26:08.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in upgrade.php in Piwigo before 2.3.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18782 - http://piwigo.org/forum/viewtopic.php?id=19173 - https://www.htbridge.com/advisory/HTB23085 - http://piwigo.org/releases/2.3.4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75185 - http://www.securityfocus.com/bid/53245 - http:/
ses/2.3.4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75185 - http://www.securityfocus.com/bid/53245 - http://secunia.com/advisories/48903 - http://piwigo.org/bugs/view.php?id=2607 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0196.html
CVE ID: CVE-2012-2209 State: PUBLISHED Published: 2012-08-14T22:00:00 Last Updated: 2024-08-06T19:26:09.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Piwigo before 2.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter in the configuration module, (2) installstatus parameter in the languages_new module, or (3) theme parameter in the theme module. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18782 - http://piwigo.org/forum/viewtopic.php?id=19173 - https://www.htbridge.com/advisory/HTB23085 - http://piwigo.org/re
782 - http://piwigo.org/forum/viewtopic.php?id=19173 - https://www.htbridge.com/advisory/HTB23085 - http://piwigo.org/releases/2.3.4 - http://www.securityfocus.com/bid/53245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75186 - http://secunia.com/advisories/48903 - http://piwigo.org/bugs/view.php?id=2607 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0196.html
CVE ID: CVE-2012-2210 State: PUBLISHED Published: 2012-04-11T10:00:00 Last Updated: 2024-08-06T19:26:09.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service (configuration outage or device crash) via a flood of TCP SYN packets, as demonstrated by hping, a related issue to CVE-1999-0116. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48705 - http://www.exploit-db.com/exploits/18705/ - http://www.securitytracker.com/id?1026891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74644 - http://osvdb.org/80957 - http://archives.neohapsis.com/archives/b
//exchange.xforce.ibmcloud.com/vulnerabilities/74644 - http://osvdb.org/80957 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0043.html
CVE ID: CVE-2012-2211 State: PUBLISHED Published: 2012-11-22T11:00:00Z Last Updated: 2024-09-16T19:47:02.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpgwapi/inc/common_functions_inc.php in eGroupware before 1.8.004.20120405 allows remote attackers to inject arbitrary web script or HTML via the menuaction parameter to etemplate/process_exec.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48703 - http://www.egroupware.org/changelog - http://packetstormsecurity.org/files/111626/egroupware-xss.txt
CVE ID: CVE-2012-2212 State: PUBLISHED Published: 2012-04-28T10:00:00Z Last Updated: 2024-09-16T19:41:57.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Web Gateway 7.0 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. NOTE: this issue might not be reproducible, because the researcher did not provide configuration details for the vulnerable system, and the observed behavior might be consistent with a configuration that was (perhaps inadvertently) designed to allow access based on Host HTTP headers Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container
ed to allow access based on Host HTTP headers Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-04/0189.html - http://archives.neohapsis.com/archives/bugtraq/2012-04/0164.html - http://archives.neohapsis.com/archives/bugtraq/2012-04/0118.html
CVE ID: CVE-2012-2213 State: PUBLISHED Published: 2012-04-28T10:00:00Z Last Updated: 2024-09-16T22:19:37.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. NOTE: this issue might not be reproducible, because the researcher is unable to provide a squid.conf file for a vulnerable system, and the observed behavior is consistent with a squid.conf file that was (perhaps inadvertently) designed to allow access based on a "req_header Host" acl regex that matches www.uol.com.br Additional Analyst Notes: - CVE Program Container:
ss based on a "req_header Host" acl regex that matches www.uol.com.br Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-04/0146.html - http://archives.neohapsis.com/archives/bugtraq/2012-04/0163.html - http://archives.neohapsis.com/archives/bugtraq/2012-04/0131.html - http://archives.neohapsis.com/archives/bugtraq/2012-04/0165.html - http://archives.neohapsis.com/archives/bugtraq/2012-04/0117.html - http://archives.neohapsis.com/archives/bugtraq/2012-04/0140.html
CVE ID: CVE-2012-2214 State: PUBLISHED Published: 2012-07-03T19:00:00 Last Updated: 2024-08-06T19:26:09.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service (application crash) via a sequence of XMPP file-transfer requests. Additional Analyst Notes: - CVE Program Container: References: - http://hg.pidgin.im/pidgin/main/rev/5f9d676cefdb - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17886 - http://pidgin.im/news/security/?id=62 - http://www.mandriva.com/
search/definition/oval%3Aorg.mitre.oval%3Adef%3A17886 - http://pidgin.im/news/security/?id=62 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:082
CVE ID: CVE-2012-2215 State: PUBLISHED Published: 2012-04-09T21:00:00 Last Updated: 2024-08-06T19:26:09.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to read arbitrary files via an opcode 0x21 request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74189 - http://www.novell.com/support/viewContent.do?externalId=7010044 - http://download.novell.com/Download?buildid=rs4B5jhWKf8~ - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availab
.com/Download?buildid=rs4B5jhWKf8~ - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=975 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5127930.html
CVE ID: CVE-2012-2216 State: REJECTED Published: 2020-02-11T19:55:27 Last Updated: 2020-02-11T19:55:27 Description: No description available.
CVE ID: CVE-2012-2217 State: PUBLISHED Published: 2012-05-01T14:00:00 Last Updated: 2024-08-06T19:26:08.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote attackers to (1) send SMS messages, (2) obtain the Network Access Identifier (NAI) and its password, or trigger (3) popup messages or (4) tones via a crafted application that leverages the android.permission.INTERNET permission. Additio
popup messages or (4) tones via a crafted application that leverages the android.permission.INTERNET permission. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75080 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0176.html - http://www.vsecurity.com/resources/advisory/20120420-1/
CVE ID: CVE-2012-2223 State: PUBLISHED Published: 2012-04-11T10:00:00 Last Updated: 2024-08-06T19:26:08.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing (XST) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74818 - http://www.novell.com/support/viewContent.do?externalId=7010044 - http://www.novell.com/support/viewContent.do?externalId=7010137 - http://www.novell.
viewContent.do?externalId=7010044 - http://www.novell.com/support/viewContent.do?externalId=7010137 - http://www.novell.com/support/viewContent.do?externalId=7008244
CVE ID: CVE-2012-2224 State: PUBLISHED Published: 2012-04-11T10:00:00 Last Updated: 2024-08-06T19:26:09.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xunlei Thunder before 7.2.6 allows remote attackers to execute arbitrary code via a crafted file, related to a "DLL injection vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://safe.xunlei.com/announce/xl20120306.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74811 - http://blog.vulnhunt.com/index.php/2012/03/06/cal-2012-0006xunlei-dll-injection-vulnerability/ - http://www.securityfocus.com/bid/53191
CVE ID: CVE-2012-2225 State: PUBLISHED Published: 2012-04-11T10:00:00 Last Updated: 2024-08-06T19:26:08.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: 360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74810 - http://blog.vulnhunt.com/index.php/2012/01/01/cal-2011-0080/
CVE ID: CVE-2012-2226 State: PUBLISHED Published: 2020-01-09T20:23:36 Last Updated: 2024-08-06T19:26:08.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sensitive information or execute arbitrary code by uploading a malicious file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52998 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74855
CVE ID: CVE-2012-2227 State: PUBLISHED Published: 2012-08-26T18:00:00 Last Updated: 2024-08-06T19:26:09.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and execute arbitrary local files via a ..%2F (encoded dot dot slash) in the default_lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53348 - https://www.htbridge.com/advisory/HTB23086 - http://www.exploit-db.com/exploits/18828 - http://archives.neohapsis.com/archives/bugtraq/2012-05/0011.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75330
//archives.neohapsis.com/archives/bugtraq/2012-05/0011.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75330 - http://secunia.com/advisories/49026 - http://osvdb.org/81638 - http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6 - http://telechargements.pluxml.org/changelog