Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-6049 State: PUBLISHED Published: 2012-11-27T02:00:00 Last Updated: 2024-08-06T21:21:28.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via (1) a long string or (2) invalid characters in a cookie, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75204 - http://hauntit.blogspot.com/2012/03/en-quickcartv50-information-disclosure.html - http://packetstormsecurity.org/files/112242/Quick.Cart-5.0-Information-Disclosure.html
CVE ID: CVE-2012-6050 State: PUBLISHED Published: 2012-11-27T02:00:00 Last Updated: 2024-08-06T21:21:28.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consumption), read the router version, and possibly have other impacts via a request to download the router's DLLs or plugins, as demonstrated by roteros.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75327 - http://www.133tsec.com/2012/04/30/0day-ddos-mikrotik-server-side-ddos-attack/
CVE ID: CVE-2012-6051 State: PUBLISHED Published: 2012-11-28T11:00:00Z Last Updated: 2024-09-16T23:06:27.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google CityHash computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack. Additional Analyst Notes: - CVE Program Container: References: - http://asfws12.files.wordpress.com/2012/11/asfws2012-jean_philippe_aumasson-martin_bosslet-hash_flooding_dos_reloaded.pdf - https://www.13100
wordpress.com/2012/11/asfws2012-jean_philippe_aumasson-martin_bosslet-hash_flooding_dos_reloaded.pdf - https://www.131002.net/data/talks/appsec12_slides.pdf - http://2012.appsec-forum.ch/conferences/#c17 - http://code.google.com/p/cityhash/source/browse/trunk/NEWS
CVE ID: CVE-2012-6052 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T21:21:28.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireshark 1.8.x before 1.8.4 allows remote attackers to obtain sensitive hostname information by reading pcap-ng files. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16040 - http://www.wireshark.org/security/wnpa-sec-2012-30.html - http://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html
CVE ID: CVE-2012-6053 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T21:21:28.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-usb.c in the USB dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 relies on a length field to calculate an offset value, which allows remote attackers to cause a denial of service (infinite loop) via a zero value for this field. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15915 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7787 - http://www.wireshark.org/security/wnpa-sec-2
%3Adef%3A15915 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7787 - http://www.wireshark.org/security/wnpa-sec-2012-31.html - http://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=45310 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-usb.c?r1=45310&r2=45309&pathrev=45310
CVE ID: CVE-2012-6054 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T21:21:28.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_sflow_245_address_type function in epan/dissectors/packet-sflow.c in the sFlow dissector in Wireshark 1.8.x before 1.8.4 does not properly handle length calculations for an invalid IP address type, which allows remote attackers to cause a denial of service (infinite loop) via a packet that is neither IPv4 nor IPv6. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7789 - http://www.wireshark.org/security/wnpa-sec-2012-32.html - https://oval.cisecuri
hark.org/bugzilla/show_bug.cgi?id=7789 - http://www.wireshark.org/security/wnpa-sec-2012-32.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15764 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=45324 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sflow.c?r1=45324&r2=45323&pathrev=45324 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html
CVE ID: CVE-2012-6055 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T21:21:28.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-3g-a11.c in the 3GPP2 A11 dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a zero value in a sub-type length field. Additional Analyst Notes: - CVE Program Container: References: - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-3g-a11.c?r1=45337&r2=45336&pathrev=45337 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16044 - http://www.wireshark.org/security/wnpa-sec-2012-39.html - h
tory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16044 - http://www.wireshark.org/security/wnpa-sec-2012-39.html - http://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=45337 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7801
CVE ID: CVE-2012-6056 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T21:21:28.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the dissect_sack_chunk function in epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted Duplicate TSN count. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0341.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7802 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=45355 - http://anonsvn.wireshark.org/viewvc/trunk/epan/
802 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=45355 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sctp.c?r1=45355&r2=45354&pathrev=45355 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html - http://www.wireshark.org/security/wnpa-sec-2012-33.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16139
CVE ID: CVE-2012-6057 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T21:21:28.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_eigrp_metric_comm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data type for a certain offset value, which allows remote attackers to cause a denial of service (integer overflow and infinite loop) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-eigrp.c?r1=45408&r2=45407&pathrev=45408 - http://www.wireshark.org/security/wnpa-sec-2012-34.html - h
/dissectors/packet-eigrp.c?r1=45408&r2=45407&pathrev=45408 - http://www.wireshark.org/security/wnpa-sec-2012-34.html - http://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=45408 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7800 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15883
CVE ID: CVE-2012-6058 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T21:21:28.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the dissect_icmpv6 function in epan/dissectors/packet-icmpv6.c in the ICMPv6 dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted Number of Sources value. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16075 - http://www.wireshark.org/security/wnpa-sec-2012-40.html - https://bugs.wireshark.org/bugzilla/show_bu
al%3Adef%3A16075 - http://www.wireshark.org/security/wnpa-sec-2012-40.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7844 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=45459 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-icmpv6.c?r1=45459&r2=45458&pathrev=45459
CVE ID: CVE-2012-6059 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T21:21:28.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_isakmp function in epan/dissectors/packet-isakmp.c in the ISAKMP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 uses an incorrect data structure to determine IKEv2 decryption parameters, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2012-35.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-isakmp.c?r1=45510&r2=45
ecurity/wnpa-sec-2012-35.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-isakmp.c?r1=45510&r2=45509&pathrev=45510 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7855 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=45510 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15239 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html
CVE ID: CVE-2012-6060 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T21:21:28.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the dissect_iscsi_pdu function in epan/dissectors/packet-iscsi.c in the iSCSI dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0341.html - http://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html - http://www.wireshark.org/security/wnpa-sec-2012-36.html - http://lists.opensuse.org/opensuse
tes/2012-12/msg00022.html - http://www.wireshark.org/security/wnpa-sec-2012-36.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16038 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7858 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-iscsi.c?r1=45524&r2=45523&pathrev=45524 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=45524
CVE ID: CVE-2012-6061 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T21:21:28.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_wtp_common function in epan/dissectors/packet-wtp.c in the WTP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 uses an incorrect data type for a certain length field, which allows remote attackers to cause a denial of service (integer overflow and infinite loop) via a crafted value in a packet. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15253 - http://anonsvn.wireshark.org/viewvc/trunk/epan
ty.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15253 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-wtp.c?r1=45614&r2=45613&pathrev=45614 - http://rhn.redhat.com/errata/RHSA-2014-0341.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7869 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html - http://www.wireshark.org/security/wnpa-sec-2012-37.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=45614
CVE ID: CVE-2012-6062 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T21:21:28.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_rtcp_app function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2012-38.html - http://rhn.redhat.com/errata/RHSA-2014-0341.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15894 - http://lists.opensuse.org/opens
//oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15894 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7879 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=45717 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-rtcp.c?r1=45717&r2=45716&pathrev=45717
CVE ID: CVE-2012-6063 State: PUBLISHED Published: 2012-11-30T22:00:00 Last Updated: 2024-08-06T21:21:28.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors, a different vector than CVE-2012-4559. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=871612 - http://www.debian.org/security/2012/dsa-2577 - http://www.libssh.org/2012/11/20/libssh-0-5-3-security-release/ - http://git.libssh.org/projects/libssh.git/commit/?h=v0
http://www.libssh.org/2012/11/20/libssh-0-5-3-security-release/ - http://git.libssh.org/projects/libssh.git/commit/?h=v0-5&id=4d8420f3282ed07fc99fc5e930c17df27ef1e9b2
CVE ID: CVE-2012-6064 State: PUBLISHED Published: 2012-12-03T21:00:00 Last Updated: 2024-08-06T21:21:28.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) before 1.11.2.1 allows remote authenticated administrators to delete arbitrary files via a .. (dot dot) in the deld parameter. NOTE: this can be leveraged using CSRF (CVE-2012-5450) to allow remote attackers to delete arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/117951/CMS-Made-Simple-1.11.2-Cross-Site-Request-Forgery.html - https://www.htbridge.com/ad
acketstormsecurity.org/files/117951/CMS-Made-Simple-1.11.2-Cross-Site-Request-Forgery.html - https://www.htbridge.com/advisory/HTB23121 - http://secunia.com/advisories/51185 - http://forum.cmsmadesimple.org/viewtopic.php?f=1&t=63545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79881 - http://viewsvn.cmsmadesimple.org/diff.php?repname=cmsmadesimple&path=%2Ftrunk%2Flib%2Ffilemanager%2FImageManager%2FClasses%2FImageManager.php&rev=8400&peg=8498 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0035.html
CVE ID: CVE-2012-6065 State: PUBLISHED Published: 2012-12-03T21:00:00Z Last Updated: 2024-09-17T02:10:41.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OM Maximenu module 6.x-1.43 and earlier for Drupal, when the "Title has PHP" option is enabled, allows remote authenticated users with the "Administer OM Maximenu" permission to execute arbitrary PHP code via a "Link Title," a different vulnerability than CVE-2012-5553. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1834048 - http://drupal.org/node/1834046 - http://www.madirish.net/551
CVE ID: CVE-2012-6066 State: PUBLISHED Published: 2012-12-04T23:00:00Z Last Updated: 2024-09-17T02:32:34.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0012.html
CVE ID: CVE-2012-6067 State: PUBLISHED Published: 2012-12-04T23:00:00Z Last Updated: 2024-09-16T23:16:04.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0011.html
CVE ID: CVE-2012-6068 State: PUBLISHED Published: 2013-01-21T21:00:00 Last Updated: 2025-07-02T20:12:04.890Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: 3S-Smart Software Solutions, Festo Products: CODESYS Control Runtime embedded, CODESYS Control Runtime full, CODESYS Control RTE, CECX-X-C1 Modular Master Controller with CoDeSys, CECX-X-M1 Modular Controller with CoDeSys and SoftMotion, CoDeSys Problem Types: CWE-284 Description: The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via
ws remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service. Additional Analyst Notes: - CVE Program Container: References: - http://www.codesys.com/news-events/press-releases/detail/article/sicherheitsluecke-in-codesys-v23-laufzeitsystem.html - https://www.cisa.gov/news-events/ics-advisories/icsa-13-011-01 - http://www.digitalbond.com/tools/basecamp/3s-codesys/ - https://www.cisa.gov/news-events/ics-advisories/icsa-14-084-01 - https://us.codesys.com/ecosystem/security/
CVE ID: CVE-2012-6069 State: PUBLISHED Published: 2013-01-21T21:00:00 Last Updated: 2025-07-02T20:15:19.655Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: 3S-Smart Software Solutions, Festo Products: CODESYS Control Runtime embedded, CODESYS Control Runtime full, CODESYS Control RTE, CECX-X-C1 Modular Master Controller with CoDeSys, CECX-X-M1 Modular Controller with CoDeSys and SoftMotion, CoDeSys Problem Types: CWE-23 Description: The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download
n attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This could allow the attacker to affect the availability, integrity, and confidentiality of the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.codesys.com/news-events/press-releases/detail/article/sicherheitsluecke-in-codesys-v23-laufzeitsystem.html - https://www.cisa.gov/news-events/ics-advisories/icsa-13-011-01 - http://www.digitalbond.com/tools/basecamp/3s-codesys/ - https://www.cisa.gov/news-events/ics-advisories/icsa-14-084-01 - https://us.codesys.com/ecosystem/security/
CVE ID: CVE-2012-6070 State: PUBLISHED Published: 2019-11-19T16:37:19 Last Updated: 2024-08-06T21:21:28.390Z Vendors: falconpl Products: falconpl Problem Types: Other Description: Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to interfere with security checks. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-6070 - http://www.openwall.com/lists/oss-security/2012/12/27/1 - http://www.openwall.com/lists/oss-security/2013/01/15/6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696681
CVE ID: CVE-2012-6071 State: PUBLISHED Published: 2019-11-19T16:44:00 Last Updated: 2024-08-06T21:21:28.386Z Vendors: nusoap Products: nusoap Problem Types: Other Description: nuSOAP before 0.7.3-5 does not properly check the hostname of a cert. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-6071 - http://www.openwall.com/lists/oss-security/2012/12/27/1 - http://www.openwall.com/lists/oss-security/2013/01/15/6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696707
CVE ID: CVE-2012-6072 State: PUBLISHED Published: 2013-02-24T22:00:00 Last Updated: 2024-08-06T21:21:28.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0220.html - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2012-11-20 - https://bugzilla.r
-2013-0220.html - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2012-11-20 - https://bugzilla.redhat.com/show_bug.cgi?id=890607 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-11-20.cb
CVE ID: CVE-2012-6073 State: PUBLISHED Published: 2013-02-24T22:00:00 Last Updated: 2024-08-06T21:21:28.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0220.html - http://www.openwall.com/lists/oss-security/2012/12/28/1 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins
20.html - http://www.openwall.com/lists/oss-security/2012/12/28/1 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2012-11-20 - https://bugzilla.redhat.com/show_bug.cgi?id=890608 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-11-20.cb