Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-6299 State: PUBLISHED Published: 2012-12-26T20:00:00Z Last Updated: 2024-09-16T19:52:32.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attackers to bypass intended access restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BFBA53B61-3A68-4506-9876-F845F6DD8A93%7D
CVE ID: CVE-2012-6301 State: PUBLISHED Published: 2012-12-10T20:00:00Z Last Updated: 2024-09-17T04:14:07.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Browser application in Android 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted market: URI in the SRC attribute of an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/118539/Android-4.0.3-Browser-Crash.html
CVE ID: CVE-2012-6302 State: PUBLISHED Published: 2020-01-24T14:08:08 Last Updated: 2024-08-06T21:28:39.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Soapbox through 0.3.1: Sandbox bypass - runs a second instance of Soapbox within a sandboxed Soapbox. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/12/10/1
CVE ID: CVE-2012-6303 State: PUBLISHED Published: 2013-10-28T22:00:00 Last Updated: 2024-08-06T21:28:39.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large chunk size in a WAV file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49889 - http://www.exploit-db.com/exploits/19772 - http://security.gentoo.org/glsa/glsa-201309-04.xml - http://www.openwall.com/lists/oss-security/2012/12/10/2 -
/19772 - http://security.gentoo.org/glsa/glsa-201309-04.xml - http://www.openwall.com/lists/oss-security/2012/12/10/2 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00034.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:126
CVE ID: CVE-2012-6306 State: PUBLISHED Published: 2020-02-06T17:18:01 Last Updated: 2024-08-06T21:28:39.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in HCView (aka Hardcoreview) 1.4 due to a write access violation with a GIF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/12/10/3 - https://marc.info/?l=oss-security&m=135516610818927&w=2
CVE ID: CVE-2012-6307 State: PUBLISHED Published: 2020-02-06T17:31:02 Last Updated: 2024-08-06T21:28:39.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling, which could let a malicious user execute arbitrary code Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/21739/ - http://www.openwall.com/lists/oss-security/2012/12/10/4
CVE ID: CVE-2012-6309 State: PUBLISHED Published: 2020-02-06T17:36:29 Last Updated: 2024-08-06T21:28:39.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in Arctic Torrent 1.4 via unspecified vectors in .torrent file handling, which could let a malicious user cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/12/10/5
CVE ID: CVE-2012-6312 State: PUBLISHED Published: 2012-12-11T11:00:00Z Last Updated: 2024-09-17T03:37:38.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Video Lead Form plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the errMsg parameter in a video-lead-form action to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/video-lead-form/changelog/ - http://archives.neohapsis.com/archives/bugtraq/2012-12/0060.html
CVE ID: CVE-2012-6313 State: PUBLISHED Published: 2012-12-11T11:00:00Z Last Updated: 2024-09-16T19:46:48.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure of the installation path in a stack trace. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-12/0061.html - http://wordpress.org/extend/plugins/simple-gmail-login/changelog/
CVE ID: CVE-2012-6314 State: PUBLISHED Published: 2012-12-26T22:00:00 Last Updated: 2024-08-06T21:28:39.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix XenDesktop Virtual Desktop Agent (VDA) 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56908 - http://osvdb.org/88369 - http://support.citrix.com/article/CTX135813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80626 - http://www.securitytracker.com/id?1027869
icle/CTX135813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80626 - http://www.securitytracker.com/id?1027869 - http://secunia.com/advisories/51524
CVE ID: CVE-2012-6315 State: REJECTED Published: 2013-01-23T01:00:00Z Last Updated: 2024-09-16T22:03:27.551Z Description: No description available.
CVE ID: CVE-2012-6316 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:28:39.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the TP-LINK TL-WR841N router with firmware 3.13.9 Build 120201 Rel.54965n and earlier allow remote administrators to inject arbitrary web script or HTML via the (1) username or (2) pwd parameter to userRpm/NoipDdnsRpm.htm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56602 - http://seclists.org/fulldisclosure/2012/Dec/93
CVE ID: CVE-2012-6324 State: PUBLISHED Published: 2012-12-21T21:00:00Z Last Updated: 2024-09-16T22:26:39.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 and 5.1 before Patch 1 allows remote authenticated users to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2012-0018.html
CVE ID: CVE-2012-6325 State: PUBLISHED Published: 2012-12-21T21:00:00Z Last Updated: 2024-09-17T02:57:52.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2012-0018.html
CVE ID: CVE-2012-6326 State: PUBLISHED Published: 2013-02-22T20:00:00Z Last Updated: 2024-09-16T21:57:31.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2, allows remote attackers to cause a denial of service (disk consumption) via vectors that trigger large log entries. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2012-0018.html
CVE ID: CVE-2012-6327 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-6328 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-6329 State: PUBLISHED Published: 2013-01-04T21:00:00 Last Updated: 2024-08-06T21:28:39.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6. Additional Analyst Notes: - CVE Program Con
3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:113 - http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329 - http://sourceforge.net/mailarchive/message.php?msg_id=30219695 - http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8 - http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod - http://code.activestate.com/lists/perl5-porters/187763/ - http://openwall.com/lists/oss-security/2012/12/11/4 - https://bu
tp://code.activestate.com/lists/perl5-porters/187763/ - http://openwall.com/lists/oss-security/2012/12/11/4 - https://bugzilla.redhat.com/show_bug.cgi?id=884354 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032 - http://www.ubuntu.com/usn/USN-2099-1 - http://code.activestate.com/lists/perl5-porters/187746/ - http://rhn.redhat.com/errata/RHSA-2013-0685.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735 - http://www.securityfocus.com/bid/56950 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224
CVE ID: CVE-2012-6330 State: PUBLISHED Published: 2013-01-04T21:00:00 Last Updated: 2024-08-06T21:28:39.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory consumption) via a large integer in a %MAKETEXT% macro. Additional Analyst Notes: - CVE Program Container: References: - http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329 - http://sourceforge.net/mailarchive/message.php?msg_id=30219695 - http://www.securityfocus.com/bid/56950
CVE ID: CVE-2012-6333 State: PUBLISHED Published: 2012-12-13T11:00:00 Last Updated: 2024-08-06T21:28:39.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU consumption) via a large input. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.openwall.com/lists/oss-security/2012/12/03/10 - http://www.securityfocus.com/bid/56796 - http://support.citrix.com/article/CTX135777 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://secunia.com/advisories/51397 - http://secunia.com/adv
5777 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://secunia.com/advisories/51397 - http://secunia.com/advisories/51486 - http://secunia.com/advisories/51487 - http://www.osvdb.org/88129 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80484
CVE ID: CVE-2012-6334 State: PUBLISHED Published: 2012-12-31T11:00:00Z Last Updated: 2024-09-16T17:28:53.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices does not properly implement Location APIs, which allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer." Additional Analyst Notes: - CVE Program Container: References: - http://thehackernews.com/2012/12/manufacture-based-gps-tracking-services.html
CVE ID: CVE-2012-6335 State: PUBLISHED Published: 2012-12-31T11:00:00Z Last Updated: 2024-09-16T22:51:20.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Anti-theft service in AVG AntiVirus for Android allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer." Additional Analyst Notes: - CVE Program Container: References: - http://thehackernews.com/2012/12/manufacture-based-gps-tracking-services.html
CVE ID: CVE-2012-6336 State: PUBLISHED Published: 2012-12-31T11:00:00Z Last Updated: 2024-09-16T16:37:55.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Missing Device feature in Lookout allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer." Additional Analyst Notes: - CVE Program Container: References: - http://thehackernews.com/2012/12/manufacture-based-gps-tracking-services.html
CVE ID: CVE-2012-6337 State: PUBLISHED Published: 2012-12-31T11:00:00Z Last Updated: 2024-09-16T23:30:49.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might allow physically proximate attackers to defeat a product-recovery effort by tampering with this feature or its location data. Additional Analyst Notes: - CVE Program Container: References: - http://thehackernews.com/2012/12/manufacture-based-gps-tracking-services.html
CVE ID: CVE-2012-6339 State: PUBLISHED Published: 2012-12-31T11:00:00Z Last Updated: 2024-09-16T20:16:37.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow (1) remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow (2) remote authenticated administrators to inject arbitrary web script or HTML via a Messages field to the servermanager program. Additional Analyst Notes: - CVE Program Container: References: - http://sadgeeksinsnow.blogspot.com/2012/12/persis
gram. Additional Analyst Notes: - CVE Program Container: References: - http://sadgeeksinsnow.blogspot.com/2012/12/persistence-is-key-another-bug-hunt.html - http://www.cerberusftp.com/products/releasenotes.html - http://archives.neohapsis.com/archives/bugtraq/2012-12/0118.html
CVE ID: CVE-2012-6340 State: PUBLISHED Published: 2020-02-06T17:54:33 Last Updated: 2024-08-06T21:28:39.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Authentication vulnerability exists in NETGEAR WGR614 v7 and v9 due to a hardcoded credential used for serial programming, a related issue to CVE-2006-1002. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.7180 - https://packetstormsecurity.com/files/118854/Netgear-WGR614-Credential-Information.html - https://www.securityfocus.com/archive/1/525042
CVE ID: CVE-2012-6341 State: PUBLISHED Published: 2020-02-06T18:17:25 Last Updated: 2024-08-06T21:28:39.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Information Disclosure vulnerability exists in the my config file in NEtGEAR WGR614 v7 and v9, which could let a malicious user recover all previously used passwords on the device, for both the control panel and WEP/WPA/WPA2, in plaintext. This is a different issue than CVE-2012-6340. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/archive/1/525042 - https://packetstormsecurity.com/files/date/2012-12-14/
CVE ID: CVE-2012-6342 State: PUBLISHED Published: 2014-05-13T14:00:00 Last Updated: 2024-08-06T21:28:39.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in logout.action in Atlassian Confluence 3.4.6 allows remote attackers to hijack the authentication of administrators for requests that logout the user via a comment. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-01/0066.html - http://www.securityfocus.com/archive/1/524217/30/450/threaded - http://packetstormsecurity.com/files/116829/Atlassian-Confluence-3.0-Cross-Site-Request-Forgery.html - http://www.halock.
ttp://packetstormsecurity.com/files/116829/Atlassian-Confluence-3.0-Cross-Site-Request-Forgery.html - http://www.halock.com/blog/cve-2012-6342-atlassian-confluence-multiple-cross-site-request-forgery-csrf-vulnerabilities - https://jira.atlassian.com/browse/CONFSERVER-22784
CVE ID: CVE-2012-6344 State: PUBLISHED Published: 2020-01-25T18:31:39 Last Updated: 2024-08-06T21:28:39.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell ZENworks Configuration Management before 11.2.4 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://support.microfocus.com/kb/doc.php?id=7012761
CVE ID: CVE-2012-6345 State: PUBLISHED Published: 2020-01-25T18:34:15 Last Updated: 2024-08-06T21:28:39.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information. Additional Analyst Notes: - CVE Program Container: References: - https://support.microfocus.com/kb/doc.php?id=7012763
CVE ID: CVE-2012-6346 State: PUBLISHED Published: 2018-02-09T22:00:00 Last Updated: 2024-08-06T21:28:39.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FortiWeb before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) redir or (2) mkey parameter to waf/pcre_expression/validate. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=702 - https://fortiguard.com/psirt/FG-IR-012-008
CVE ID: CVE-2012-6347 State: PUBLISHED Published: 2018-02-09T22:00:00 Last Updated: 2024-08-06T21:28:39.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Java number format exception handling in FortiGate FortiDB before 4.4.2 allow remote attackers to inject arbitrary web script or HTML via the conversationContext parameter to (1) admin/auditTrail.jsf, (2) mapolicymgmt/targetsMonitorView.jsf, (3) vascan/globalsummary.jsf, (4) vaerrorlog/vaErrorLog.jsf, (5) database/listTargetGroups.jsf, (6) sysconfig/listSystemInfo.jsf, (7) vascan/list.jsf, (8) network/router.jsf, (9) mapolicymgmt/editPolicyProfile.jsf, or (10) mapolicymgmt
ystemInfo.jsf, (7) vascan/list.jsf, (8) network/router.jsf, (9) mapolicymgmt/editPolicyProfile.jsf, or (10) mapolicymgmt/maPolicyMasterList.jsf. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/psirt/FG-IR-012-007 - https://www.vulnerability-lab.com/get_content.php?id=558
CVE ID: CVE-2012-6348 State: PUBLISHED Published: 2013-01-04T21:00:00Z Last Updated: 2024-09-16T16:37:56.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centrify Deployment Manager 2.1.0.283, as distributed in Centrify Suite before 2012.5, allows local users to (1) overwrite arbitrary files via a symlink attack on the adcheckDMoutput temporary file, or (2) overwrite arbitrary files and consequently gain privileges via a symlink attack on the centrify.cmd.0 temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-12/0113.html - http://archives.neohapsis.com/archives/bugtraq/2012-12/0097.html - http://a
sis.com/archives/bugtraq/2012-12/0113.html - http://archives.neohapsis.com/archives/bugtraq/2012-12/0097.html - http://archives.neohapsis.com/archives/bugtraq/2012-12/0036.html - http://archives.neohapsis.com/archives/bugtraq/2012-12/0071.html - http://vapid.dhs.org/exploits/centrify_local_r00t.c - http://archives.neohapsis.com/archives/bugtraq/2012-12/0037.html - http://vapid.dhs.org/advisories/centrify_deployment_manager_insecure_tmp2.html
CVE ID: CVE-2012-6349 State: PUBLISHED Published: 2013-07-18T16:00:00Z Last Updated: 2024-09-17T00:30:29.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute arbitrary code via a crafted file, aka SPR KLYH92XL3W. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21627992
CVE ID: CVE-2012-6350 State: PUBLISHED Published: 2013-01-31T11:00:00 Last Updated: 2024-08-06T21:28:39.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web component in IBM Cognos TM1 before 9.5.2 FP3 and 10.1 before 10.1 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21621782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80670
CVE ID: CVE-2012-6352 State: PUBLISHED Published: 2013-02-02T20:00:00 Last Updated: 2024-08-06T21:28:39.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Session Manager in IBM Sterling Connect:Direct through 4.1.0.3 on UNIX allows remote attackers to cause a denial of service (daemon crash and disk consumption) via crafted data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80701 - http://www-01.ibm.com/support/docview.wss?uid=swg21623608 - http://www-01.ibm.com/support/docview.wss?uid=swg1QC20158
CVE ID: CVE-2012-6354 State: PUBLISHED Published: 2013-02-19T19:00:00 Last Updated: 2024-08-06T21:28:39.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80716
CVE ID: CVE-2012-6355 State: PUBLISHED Published: 2013-02-20T11:00:00 Last Updated: 2024-08-06T21:28:39.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21625624 - https:
Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21625624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80747 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV30384