Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0179 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:20.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that binds an IPv6 address to a local interface, aka "TCP/IP Double Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14908 - http://osvdb.org/81729 - http://www.securitytracker.com/id?1027044 - https://docs.microsoft.com/en-us/secu
def%3A14908 - http://osvdb.org/81729 - http://www.securitytracker.com/id?1027044 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-032 - http://www.securityfocus.com/bid/53349 - http://secunia.com/advisories/49114 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html
CVE ID: CVE-2012-0180 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2025-01-21T19:27:25.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode for (1) windows and (2) messages, which allows local users to gain privileges via a crafted application, aka "Windows and Messages Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cise
nerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15466 - http://www.securitytracker.com/id?1027039 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html - http://www.securityfocus.com/bid/53324
CVE ID: CVE-2012-0181 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:19.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly manage Keyboard Layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout File Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027039 - https://oval.cisecurity.org/repository/search/d
ram Container: References: - http://www.securitytracker.com/id?1027039 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15355 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html
CVE ID: CVE-2012-0182 State: PUBLISHED Published: 2012-10-09T21:00:00 Last Updated: 2024-08-06T18:16:20.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55780 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15426 - http://www.us-cert.gov/cas/techalerts/TA12-283A.html - https://docs.microsoft.com/en-us/security-up
oval%3Adef%3A15426 - http://www.us-cert.gov/cas/techalerts/TA12-283A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-064
CVE ID: CVE-2012-0183 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:19.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-029 - http://www.securityfocus.com/bid/53344 - http://www.securitytracker.com/id?1027035 - https://oval.cisecurity.or
12-029 - http://www.securityfocus.com/bid/53344 - http://www.securitytracker.com/id?1027035 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15327 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75122 - http://secunia.com/advisories/49111
CVE ID: CVE-2012-0184 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:19.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SXLI Record Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75117 - https://oval.cisecurity.org/repository/search/definiti
s: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75117 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14789 - http://www.securityfocus.com/bid/53375 - http://www.securitytracker.com/id?1027041 - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=982 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-030 - http://secunia.com/advisories/49112 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html
CVE ID: CVE-2012-0185 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:19.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027041 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A
securitytracker.com/id?1027041 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75118 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-030 - http://secunia.com/advisories/49112 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html
CVE ID: CVE-2012-0186 State: PUBLISHED Published: 2012-06-22T10:00:00 Last Updated: 2024-08-06T18:16:19.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Eclipse Help component in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows remote attackers to discover the locations of files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21575642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72096
CVE ID: CVE-2012-0187 State: PUBLISHED Published: 2012-06-22T10:00:00 Last Updated: 2024-08-06T18:16:19.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows local users to gain privileges via a Trojan horse DLL in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21575642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72097
CVE ID: CVE-2012-0188 State: PUBLISHED Published: 2012-01-18T20:00:00 Last Updated: 2024-08-06T18:16:20.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72118 - http://www-01.ibm.com/support/docview.wss?uid=swg21577956 - http://osvdb.org/78329
CVE ID: CVE-2012-0189 State: PUBLISHED Published: 2012-01-18T20:00:00 Last Updated: 2024-08-06T18:16:19.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the (1) PrintFile and (2) SaveDoc methods in the VsVIEW6 ActiveX control in VsVIEW6.ocx in IBM SPSS SamplePower 3.0 allow remote attackers to execute arbitrary code via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72119 - http://www.ibm.com/support/docview.wss?uid=swg21577951 - http://secunia.com/advisories/47605
CVE ID: CVE-2012-0190 State: PUBLISHED Published: 2012-01-18T20:00:00 Last Updated: 2024-08-06T18:16:19.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Render method in the ExportHTML.ocx ActiveX control in ExportHTML.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72121 - http://www-01.ibm.com/support/docview.wss?uid=swg21577956
CVE ID: CVE-2012-0191 State: PUBLISHED Published: 2012-06-22T10:00:00 Last Updated: 2024-08-06T18:16:19.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remote attackers to spoof a localhost request origin via crafted headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21575642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72156
CVE ID: CVE-2012-0192 State: PUBLISHED Published: 2012-01-23T15:00:00 Last Updated: 2024-08-06T18:16:19.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded (1) JPEG or (2) PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a .doc file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51591 - http://secunia.com/advisories/47245 - http://osvdb.org/78345 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
1591 - http://secunia.com/advisories/47245 - http://osvdb.org/78345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72424 - http://www-01.ibm.com/support/docview.wss?uid=swg21578684
CVE ID: CVE-2012-0193 State: PUBLISHED Published: 2012-01-20T02:00:00 Last Updated: 2024-08-06T18:16:19.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78321 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM53930 - http://www-01.ibm.com/support/
s: - http://osvdb.org/78321 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM53930 - http://www-01.ibm.com/support/docview.wss?uid=swg24031821 - http://www-01.ibm.com/support/docview.wss?uid=swg21577532
CVE ID: CVE-2012-0194 State: PUBLISHED Published: 2012-02-06T20:00:00 Last Updated: 2024-08-06T18:16:19.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service (assertion failure and panic) via an unspecified series of packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg1IV14211 - http://www.ibm.com/support/docview.wss?uid=isg1IV14209 - http://www.ibm.com/support/docview.wss?uid=isg1IV13827 - http://www.ibm.com/support/docview.wss?uid=isg1IV13751 - http://www.ibm.com
bm.com/support/docview.wss?uid=isg1IV13827 - http://www.ibm.com/support/docview.wss?uid=isg1IV13751 - http://www.ibm.com/support/docview.wss?uid=isg1IV13820 - http://www.ibm.com/support/docview.wss?uid=isg1IV14210 - http://www.securityfocus.com/bid/51864 - http://securitytracker.com/id?1026640 - http://secunia.com/advisories/47865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72562 - http://aix.software.ibm.com/aix/efixes/security/large_send_advisory.asc
CVE ID: CVE-2012-0195 State: PUBLISHED Published: 2012-03-13T01:00:00 Last Updated: 2024-08-06T18:16:19.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Start Center Layout and Configuration component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via the display name. Additional Analyst Notes: - CVE Program Container: R
ackers to inject arbitrary web script or HTML via the display name. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21584666 - http://secunia.com/advisories/48299 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV09198 - http://secunia.com/advisories/48305 - http://www.securityfocus.com/bid/52333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72612
CVE ID: CVE-2012-0198 State: PUBLISHED Published: 2012-03-06T02:00:00 Last Updated: 2024-08-06T18:16:19.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-12-040/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/73033
CVE ID: CVE-2012-0199 State: PUBLISHED Published: 2012-03-06T02:00:00 Last Updated: 2024-08-06T18:16:19.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allow remote attackers to execute arbitrary SQL commands via (1) a SOAP message to the Printer.getPrinterAgentKey function in the SoapServlet servlet, (2) the User.updateUserValue function in the register.do servlet, (3) the User.isExistingUser function in the logon.do servlet, (4) the Asset.getHWKey function in the CallHomeExec servlet, (5) the Asset.getMimeType function in the getAttachment (aka GetAttachmentServ
Key function in the CallHomeExec servlet, (5) the Asset.getMimeType function in the getAttachment (aka GetAttachmentServlet) servlet, (6) the addAsset.do servlet, or (7) a crafted EG2 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-12-040/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/73034
CVE ID: CVE-2012-0200 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-06T18:16:19.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a redundant WHERE condition. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73126 - http://www.ibm.com/support/docview.wss?uid=swg27021052 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC81244
CVE ID: CVE-2012-0201 State: PUBLISHED Published: 2012-03-02T11:00:00 Last Updated: 2024-08-06T18:16:19.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profile string in a WorkStation (aka .ws) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18539/ - http://www-01.ibm.com/support/docview.wss?uid=swg21586166 - http://www.stratsec.net/Research/Advisories/IBM-Personal-Communications-I-Series-Access-WorkSt - http://www.metasploit.c
http://www.stratsec.net/Research/Advisories/IBM-Personal-Communications-I-Series-Access-WorkSt - http://www.metasploit.com/modules/exploit/windows/fileformat/ibm_pcm_ws - https://exchange.xforce.ibmcloud.com/vulnerabilities/73127 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC81539 - http://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/fileformat/ibm_pcm_ws.rb
CVE ID: CVE-2012-0202 State: PUBLISHED Published: 2012-05-04T16:00:00 Last Updated: 2024-08-06T18:16:20.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73182 - http://www-01.ibm.com/support/docview.wss?uid=swg21590314 - http://www-01.ibm.com/support/docview.wss?uid=swg24032164 - http://www-01.ibm.com/support/docview.wss
?uid=swg21590314 - http://www-01.ibm.com/support/docview.wss?uid=swg24032164 - http://www-01.ibm.com/support/docview.wss?uid=swg24032165 - http://www-01.ibm.com/support/docview.wss?uid=swg24032166
CVE ID: CVE-2012-0203 State: PUBLISHED Published: 2013-01-31T11:00:00 Last Updated: 2024-08-06T18:16:19.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in InfoSphere Metadata Workbench (MWB) 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73254 - http://www-01.ibm.com/support/docview.wss?uid=swg21623501
CVE ID: CVE-2012-0204 State: PUBLISHED Published: 2013-01-31T11:00:00 Last Updated: 2024-08-06T18:16:19.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, 8.7, and 9.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73255 - http://www-01.ibm.com/support/docview.wss?uid=swg21623501
CVE ID: CVE-2012-0205 State: PUBLISHED Published: 2013-01-31T11:00:00 Last Updated: 2024-08-06T18:16:20.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: InfoSphere Metadata Workbench (MWB) 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly restrict use of the troubleshooting feature, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service (workbench outage) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21623501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73265
CVE ID: CVE-2012-0206 State: PUBLISHED Published: 2012-02-17T21:00:00Z Last Updated: 2024-09-16T17:23:09.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: common_startup.cc in PowerDNS (aka pdns) Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attackers to cause a denial of service (packet loop) via a crafted UDP DNS response. Additional Analyst Notes: - CVE Program Container: References: - http://doc.powerdns.com/powerdns-advisory-2012-01.html - http://doc.powerdns.com/changelog.html - https://bugzilla.redhat.com/show_bug.cgi?id=772570
CVE ID: CVE-2012-0207 State: PUBLISHED Published: 2012-05-17T10:00:00Z Last Updated: 2024-09-16T19:41:17.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654876 - https://github.com/torvalds/linux/commit/25c413ad0029ea86008234be28aee33456e53e5b - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.1 - https://github.com/torvalds/linux/commit/a8c1f65c79cbbb2f7da782d4c9d15639a9b
org/pub/linux/kernel/v3.x/ChangeLog-3.2.1 - https://github.com/torvalds/linux/commit/a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27 - https://bugzilla.redhat.com/show_bug.cgi?id=772867 - http://www.openwall.com/lists/oss-security/2012/01/10/5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27
CVE ID: CVE-2012-0208 State: PUBLISHED Published: 2012-05-03T17:18:00 Last Updated: 2024-08-06T18:16:19.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to qrsh. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026950 - http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html - http://www.debian.org/security/2012/dsa-2472 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-0209 State: PUBLISHED Published: 2012-09-25T22:00:00Z Last Updated: 2024-09-16T21:57:27.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced modification (Trojan Horse) in templates/javascript/open_calendar.js, which allows remote attackers to execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - http://dev.horde.org/h/jonah/stories/view.php?channel_id=1&id=155 - http://eromang.zataz.com/2012/02/15/cve-2012-0209-horde-backdoor-analysis/ - https://bug