Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2565 State: PUBLISHED Published: 2012-06-09T00:00:00 Last Updated: 2024-08-06T19:34:25.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bloxx Web Filtering before 5.0.14 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53715 - http://www.kb.cert.org/vuls/id/MAPG-8R9LBY - http://www.kb.cert.org/vuls/id/722963
CVE ID: CVE-2012-2566 State: PUBLISHED Published: 2012-06-09T00:00:00 Last Updated: 2024-08-06T19:34:25.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging operations for HTTPS connection attempts, which allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53715 - http://www.kb.cert.org/vuls/id/MAPG-8R9LBY - http://www.kb.cert.org/vuls/id/722963
CVE ID: CVE-2012-2567 State: PUBLISHED Published: 2012-05-22T15:00:00 Last Updated: 2024-08-06T19:34:25.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/464683 - http://secunia.com/advisories/49268 - http://www.securityfocus.com/bid/53634 - http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/ - https://exchange.xforce.ibmcloud.c
com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/75783
CVE ID: CVE-2012-2568 State: PUBLISHED Published: 2012-05-25T20:00:00 Last Updated: 2024-08-06T19:34:25.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: d41d8cd98f00b204e9800998ecf8427e.php in the management web server on the Seagate BlackArmor device allows remote attackers to change the administrator password via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75854 - http://secunia.com/advisories/49282 - http://www.kb.cert.org/vuls/id/515283
CVE ID: CVE-2012-2569 State: PUBLISHED Published: 2014-06-19T14:00:00 Last Updated: 2024-08-06T19:34:25.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Synametrics Technologies Xeams 4.4 Build 5720 allows remote attackers to inject arbitrary web script or HTML via the body of an email. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/84591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77504 - http://secunia.com/advisories/50190 - http://www.exploit-db.com/exploits/20367 - http://www.securityfocus.com/bid/54902
CVE ID: CVE-2012-2570 State: PUBLISHED Published: 2012-08-15T20:00:00 Last Updated: 2024-08-06T19:34:25.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary web script or HTML via the symb parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/84115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77146 - http://secunia.com/advisories/50006 - http://www.securityfocus.com/bid/54628 - http://www.exploit-db.com/exploits/20010
CVE ID: CVE-2012-2571 State: PUBLISHED Published: 2012-08-12T21:00:00Z Last Updated: 2024-09-17T01:50:36.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WinWebMail Server 3.8.1.6 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted Cascading Style Sheets (CSS) expression property, (3) a CSS expression property in the STYLE attribute of an arbitrary element, (4) a crafted SRC attribute of an IFRAME element, or (5) UTF-7 text in an HTTP-EQUIV="CONTENT-TYPE" META element. Additional Analyst Notes: - CVE Program Container: References: - http://www.ex
n HTTP-EQUIV="CONTENT-TYPE" META element. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/20366/
CVE ID: CVE-2012-2572 State: PUBLISHED Published: 2014-06-19T14:00:00 Last Updated: 2024-08-06T19:34:25.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/threewp-email-reflector/changelog - https://exchange.xforce.ibmcloud.com/vulnerabilities/77502 - http://www.securityfocus.com/bid/54903 - http://osvdb.org/show/osvdb/85134 - http://www.exploit-db.com/exploits/20365
CVE ID: CVE-2012-2573 State: PUBLISHED Published: 2012-08-12T21:00:00Z Last Updated: 2024-09-16T18:28:48.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted Cascading Style Sheets (CSS) expression property, (3) a CSS expression property in the STYLE attribute of an arbitrary element, (4) an ONLOAD attribute of a BODY element, (5) a crafted SRC attribute of an IFRAME element, (6) a crafted CONTENT attribute of an HTTP-EQUIV="refresh" META element, or (7) a data: URL in the CO
an IFRAME element, (6) a crafted CONTENT attribute of an HTTP-EQUIV="refresh" META element, or (7) a data: URL in the CONTENT attribute of an HTTP-EQUIV="refresh" META element. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/20364/
CVE ID: CVE-2012-2574 State: PUBLISHED Published: 2012-07-23T17:00:00 Last Updated: 2024-08-06T19:34:25.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to a "blind SQL injection" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_00 - http://www.securityfocus.com/bid/54424 - http://www.kb.cert.org/vuls/id/108471 - https://exchange.x
2&suid=20120720_00 - http://www.securityfocus.com/bid/54424 - http://www.kb.cert.org/vuls/id/108471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77112
CVE ID: CVE-2012-2575 State: PUBLISHED Published: 2012-09-17T14:00:00Z Last Updated: 2024-09-16T20:37:44.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 6.0a4 allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IFRAME element in the body of an HTML e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/20363/
CVE ID: CVE-2012-2576 State: PUBLISHED Published: 2017-12-20T21:00:00 Last Updated: 2024-08-06T19:34:25.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72680 - http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/vulnerability.htm - http://www.exploit-db.com/exploits/1881
s.com/documentation/storage/storagemanager/docs/ReleaseNotes/vulnerability.htm - http://www.exploit-db.com/exploits/18818 - http://www.securityfocus.com/bid/51639 - http://www.exploit-db.com/exploits/18833
CVE ID: CVE-2012-2577 State: PUBLISHED Published: 2012-08-12T16:00:00 Last Updated: 2024-08-06T19:34:25.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName field of an snmpd.conf file. Additional Analyst Notes: - CVE Program Container: References: - http://www.solarwinds.com/documentation/Orion/docs/ReleaseNotes/releaseNotes.htm - http://www.kb.cert.org/vuls/id/174119 - http://secunia.com/advisories/50004 - https://exchange.xforce.ibmcloud.com/vu
- http://www.kb.cert.org/vuls/id/174119 - http://secunia.com/advisories/50004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77147 - http://www.securityfocus.com/bid/54624
CVE ID: CVE-2012-2578 State: PUBLISHED Published: 2012-09-19T10:00:00Z Last Updated: 2024-09-17T02:36:43.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SmarterMail 9.2 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a JavaScript alert function used in conjunction with the fromCharCode method, (2) a SCRIPT element, (3) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an arbitrary element, or (4) an innerHTML attribute within an XML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/20362
XML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/20362/
CVE ID: CVE-2012-2579 State: PUBLISHED Published: 2014-06-20T14:00:00 Last Updated: 2024-08-06T19:34:25.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) To, (2) From, (3) Date, or (4) Subject field of an email. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/54905 - http://secunia.com/advisories/50208 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77538 - http://www.exploit-db.com/exploits/20361 - http://osvdb.org/84534
CVE ID: CVE-2012-2580 State: PUBLISHED Published: 2014-06-20T14:00:00 Last Updated: 2024-08-06T19:34:26.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/84532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77537 - http://secunia.com/advisories/50207 - http://www.securityfocus.com/bid/54909 - http://www.exploit-db.com/exploits/20360
CVE ID: CVE-2012-2582 State: PUBLISHED Published: 2012-08-23T10:00:00 Last Updated: 2024-08-06T19:34:25.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an arbitrary element or (2) UTF-7 text in an HTTP-EQUIV="CONTENT-TYPE" META element. Additional Analyst Notes: - C
te of an arbitrary element or (2) UTF-7 text in an HTTP-EQUIV="CONTENT-TYPE" META element. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-09/msg00024.html - http://www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2012-01/ - http://www.kb.cert.org/vuls/id/582879 - http://secunia.com/advisories/50513 - http://www.debian.org/security/2012/dsa-2536
CVE ID: CVE-2012-2583 State: PUBLISHED Published: 2014-09-17T14:00:00 Last Updated: 2024-08-06T19:34:26.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers to inject arbitrary web script or HTML via the body of an email. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77536 - http://www.exploit-db.com/exploits/20358 - http://osvdb.org/show/osvdb/85135 - http://www.securityfocus.com/bid/54888
CVE ID: CVE-2012-2584 State: PUBLISHED Published: 2012-08-12T17:00:00 Last Updated: 2024-08-06T19:34:26.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) the Cascading Style Sheets (CSS) expression property in conjunction with a CSS comment within the STYLE attribute of an IMG element, (2) the CSS expression property in conjunction with multiple CSS comments within the STYLE attribute of an arbitrary element, or (3) an innerHTML attribute within an XML document. Additional Analyst Notes: - CVE Program
of an arbitrary element, or (3) an innerHTML attribute within an XML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77543 - http://www.securityfocus.com/bid/54885 - http://www.exploit-db.com/exploits/20357/
CVE ID: CVE-2012-2585 State: PUBLISHED Published: 2012-08-12T21:00:00Z Last Updated: 2024-09-16T20:57:27.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted Cascading Style Sheets (CSS) expression property, (3) a CSS expression property in the STYLE attribute of an arbitrary element, or (4) a crafted SRC attribute of an IFRAME element, or an e-mail message subject with (5) a SCRIPT element, (6) a CSS expression property in the STYLE attribute of an arbitrary elemen
l message subject with (5) a SCRIPT element, (6) a CSS expression property in the STYLE attribute of an arbitrary element, (7) a crafted SRC attribute of an IFRAME element, (8) a crafted CONTENT attribute of an HTTP-EQUIV="refresh" META element, or (9) a data: URL in the CONTENT attribute of an HTTP-EQUIV="refresh" META element. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/20356/
CVE ID: CVE-2012-2586 State: PUBLISHED Published: 2012-09-19T10:00:00Z Last Updated: 2024-09-16T20:22:55.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mailtraq 2.17.3.3150 allow remote attackers to inject arbitrary web script or HTML via an e-mail message subject with (1) a JavaScript alert function used in conjunction with the fromCharCode method or (2) a SCRIPT element; an e-mail message body with (3) a crafted SRC attribute of an IFRAME element, (4) a data: URL in the CONTENT attribute of an HTTP-EQUIV="refresh" META element, or (5) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an IMG e
UIV="refresh" META element, or (5) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an IMG element; or an e-mail message Date header with (6) a JavaScript alert function used in conjunction with the fromCharCode method, (7) a SCRIPT element, (8) a CSS expression property in the STYLE attribute of an arbitrary element, (9) a crafted SRC attribute of an IFRAME element, or (10) a data: URL in the CONTENT attribute of an HTTP-EQUIV="refresh" META element. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/20353/
CVE ID: CVE-2012-2587 State: PUBLISHED Published: 2012-08-12T21:00:00Z Last Updated: 2024-09-16T21:57:10.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with a crafted SRC attribute of (1) an IFRAME element or (2) a SCRIPT element. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/20352/
CVE ID: CVE-2012-2588 State: PUBLISHED Published: 2014-09-19T14:00:00 Last Updated: 2024-08-06T19:34:26.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, or (3) Subject header or (4) body in an SMTP e-mail message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77547 - http://www.securityfocus.com/bid/54900 - http://osvdb.org/84589 - http://secunia.com/advisories/50205 - http://www.exploit-db.com/exploits/20351
CVE ID: CVE-2012-2589 State: REJECTED Published: 2012-11-20T01:00:00Z Last Updated: 2024-09-17T03:52:46.393Z Description: No description available.
CVE ID: CVE-2012-2590 State: PUBLISHED Published: 2012-08-12T21:00:00Z Last Updated: 2024-09-16T19:19:05.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted SRC attribute of an IFRAME element, (3) a crafted CONTENT attribute of an HTTP-EQUIV="Set-Cookie" META element, or (4) an innerHTML attribute within an XML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/20350/
CVE ID: CVE-2012-2591 State: PUBLISHED Published: 2014-06-20T14:00:00 Last Updated: 2024-08-06T19:34:26.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) From or (2) Date field in an email. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/115354/EmailArchitect-Enterprise-Email-Server-10.0-Cross-Site-Scripting.html - http://www.exploit-db.com/exploits/20349 - http://www.securityfocus.com/bid/54896 - http://secunia.com/advisories/50203 - https://exchange.x
b.com/exploits/20349 - http://www.securityfocus.com/bid/54896 - http://secunia.com/advisories/50203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77514 - http://osvdb.org/84520
CVE ID: CVE-2012-2592 State: PUBLISHED Published: 2014-06-18T19:00:00 Last Updated: 2024-08-06T19:34:26.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/54899 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77515 - http://www.exploit-db.com/exploits/20348 - http://osvdb.org/84526
CVE ID: CVE-2012-2593 State: PUBLISHED Published: 2020-02-06T13:47:18 Last Updated: 2024-08-06T19:34:26.067Z Vendors: Atmail Products: Atmail Webmail Server Problem Types: Cross-Site Scripting Description: Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbitrary web script or HTML via the Date field of an email. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/20009 - http://www.securityfocus.com/bid/54630
CVE ID: CVE-2012-2595 State: PUBLISHED Published: 2012-06-08T18:00:00Z Last Updated: 2024-09-17T01:41:00.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 allow remote attackers to inject arbitrary web script or HTML via vectors involving special characters in parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf
CVE ID: CVE-2012-2596 State: PUBLISHED Published: 2012-06-08T18:00:00Z Last Updated: 2024-09-17T00:15:45.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special characters in parameters, which allows remote authenticated users to read or modify settings via a crafted URL, related to an "XML injection" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf
CVE ID: CVE-2012-2597 State: PUBLISHED Published: 2012-06-08T18:00:00Z Last Updated: 2024-09-16T17:53:38.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow remote authenticated users to read arbitrary files via a crafted parameter in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf
CVE ID: CVE-2012-2598 State: PUBLISHED Published: 2012-06-08T18:00:00Z Last Updated: 2024-09-17T02:02:35.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DiagAgent web server in Siemens WinCC 7.0 SP3 through Update 2 allows remote attackers to cause a denial of service (agent outage) via crafted input. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf
CVE ID: CVE-2012-2599 State: REJECTED Published: 2020-02-20T17:01:16 Last Updated: 2020-02-20T17:01:16 Description: No description available.
CVE ID: CVE-2012-2601 State: PUBLISHED Published: 2012-08-15T22:00:00 Last Updated: 2024-08-06T19:34:26.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77152 - http://www.securitytracker.com/id?1027325 - http://www.securityfocus.com/bid/54626 - http://www.exploit-db.com/exploits/20035 - http://www.kb.cert.org/vuls/id/777007 - http://www.whatsupgold.com/blog/2012/07/23/keeping-whatsup-gold-sec
oits/20035 - http://www.kb.cert.org/vuls/id/777007 - http://www.whatsupgold.com/blog/2012/07/23/keeping-whatsup-gold-secure/