Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-1251 State: PUBLISHED Published: 2012-06-04T17:00:00Z Last Updated: 2024-09-16T19:40:36.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/963/ - http://www.opera.com/docs/changelogs/windows/963/ - http://www.opera.com/docs/changelogs/unix/963/ - http://jvn.jp/en/jp/JVN39707339/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000049
CVE ID: CVE-2012-1252 State: PUBLISHED Published: 2012-06-04T15:00:00Z Last Updated: 2024-09-16T16:53:58.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RSSOwl before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a feed, a different vulnerability than CVE-2006-4760. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000048 - http://jvn.jp/en/jp/JVN77947437/index.html
CVE ID: CVE-2012-1253 State: PUBLISHED Published: 2012-06-04T15:00:00Z Last Updated: 2024-09-16T19:01:14.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN21422837/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000050 - http://sourceforge.net/projects/roundcubemail/files/roundcubemail/0.7/
CVE ID: CVE-2012-1254 State: PUBLISHED Published: 2012-06-04T17:00:00Z Last Updated: 2024-09-17T01:47:07.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN29083866/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000052
CVE ID: CVE-2012-1255 State: PUBLISHED Published: 2012-06-04T17:00:00Z Last Updated: 2024-09-16T23:16:41.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN97995841/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000053
CVE ID: CVE-2012-1256 State: PUBLISHED Published: 2012-02-22T11:00:00 Last Updated: 2024-08-06T18:53:36.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: The single sign-on (SSO) implementation in EasyVista before 2010.1.1.89 allows remote attackers to bypass authentication via a modified url_account parameter, in conjunction with a valid login name in the SSPI_HEADER parameter, to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/273502 - http://secunia.com/advisories/48124
CVE ID: CVE-2012-1257 State: PUBLISHED Published: 2019-11-20T19:31:13 Last Updated: 2024-08-06T18:53:36.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor. Additional Analyst Notes: - CVE Program Container: References: - http://pidgin.im/pipermail/devel/2011-December/010521.html - http://developer.pidgin.im/ticket/14830
CVE ID: CVE-2012-1258 State: PUBLISHED Published: 2020-01-09T19:47:43 Last Updated: 2024-08-06T18:53:36.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with administrator privileges via the newuser, pwd, and selectedUserGroup parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111791/Scrutinizer-8.6.2-Bypass-Cross-Site-Scripting-SQL-Injection.html - http://www.exploit-db.com/exploits/18750 - http://www.securityfocus.com/bid/52989
s-Site-Scripting-SQL-Injection.html - http://www.exploit-db.com/exploits/18750 - http://www.securityfocus.com/bid/52989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74824 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/twsl2012-008-multiple-vulnerabilities-in-scrutinizer-netflow-sflow-analyzer/
CVE ID: CVE-2012-1259 State: PUBLISHED Published: 2020-01-09T19:47:46 Last Updated: 2024-08-06T18:53:36.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allow remote attackers to execute arbitrary SQL commands via the (1) addip parameter to cgi-bin/scrut_fa_exclusions.cgi, (2) getPermissionsAndPreferences parameter to cgi-bin/login.cgi, or (3) possibly certain parameters to d4d/alarms.php as demonstrated by the search_str parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecu
ted by the search_str parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111791/Scrutinizer-8.6.2-Bypass-Cross-Site-Scripting-SQL-Injection.html - http://www.exploit-db.com/exploits/18750 - http://www.securityfocus.com/bid/52989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74826 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/twsl2012-008-multiple-vulnerabilities-in-scrutinizer-netflow-sflow-analyzer/
CVE ID: CVE-2012-1260 State: PUBLISHED Published: 2020-01-09T19:47:50 Last Updated: 2024-08-06T18:53:36.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allows remote attackers to inject arbitrary web script or HTML via the newUser parameter. NOTE: this might not be a vulnerability, since an administrator might already have the privileges to create arbitrary script. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111791/Scrutinizer-8.6.2-B
al Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111791/Scrutinizer-8.6.2-Bypass-Cross-Site-Scripting-SQL-Injection.html - http://www.exploit-db.com/exploits/18750 - http://www.securityfocus.com/bid/52989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74825 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/twsl2012-008-multiple-vulnerabilities-in-scrutinizer-netflow-sflow-analyzer/
CVE ID: CVE-2012-1261 State: PUBLISHED Published: 2020-01-09T19:47:53 Last Updated: 2024-08-06T18:53:36.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow and sFlow Analyzer 8.6.2.16204 and other versions before 9.0.1.19899 allows remote attackers to inject arbitrary web script or HTML via the standalone parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111791/Scrutinizer-8.6.2-Bypass-Cross-Site-Scripting-SQL-Injection.html - http://www.exploit-db.com/exploits/18750 - http://www.securityfocus.com/bi
ass-Cross-Site-Scripting-SQL-Injection.html - http://www.exploit-db.com/exploits/18750 - http://www.securityfocus.com/bid/52989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74827 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/twsl2012-008-multiple-vulnerabilities-in-scrutinizer-netflow-sflow-analyzer/
CVE ID: CVE-2012-1262 State: PUBLISHED Published: 2012-03-03T02:00:00 Last Updated: 2024-08-06T18:53:36.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the dbuser parameter, a different vulnerability than CVE-2012-0318. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/110203/Movable-Type-Publishing-Platform-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2012/Feb/4
/files/110203/Movable-Type-Publishing-Platform-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2012/Feb/407 - http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html - http://www.securityfocus.com/bid/52138 - http://www.debian.org/security/2012/dsa-2423 - http://www.securitytracker.com/id?1026738 - https://www.trustwave.com/spiderlabs/advisories/TWSL2012-003.txt - http://www.movabletype.org/documentation/appendices/release-notes/513.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73480 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73411 - http://jvn.jp/en/jp/JVN49836527/index.html
ilities/73480 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73411 - http://jvn.jp/en/jp/JVN49836527/index.html - http://osvdb.org/79470
CVE ID: CVE-2012-1264 State: PUBLISHED Published: 2012-03-18T00:00:00 Last Updated: 2024-08-06T18:53:37.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Gretech GOM Media Player before 2.1.37.5091 allows remote attackers to execute arbitrary code via a crafted AVI file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74121 - http://gom.gomtv.com/gomIntro.html?type=4
CVE ID: CVE-2012-1288 State: PUBLISHED Published: 2012-02-23T11:00:00Z Last Updated: 2024-09-16T17:22:50.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/707254
CVE ID: CVE-2012-1289 State: PUBLISHED Published: 2012-02-23T18:00:00 Last Updated: 2024-08-06T18:53:36.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the logfilename parameter to (1) b2b/admin/log.jsp or (2) b2b/admin/log_view.jsp in the Internet Sales (crm.b2b) component, or (3) ipc/admin/log.jsp or (4) ipc/admin/log_view.jsp in the Application Administration (com.sap.ipc.webapp.ipc) component. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52101 - https://exchange.xforce.ibmcloud
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73346 - https://service.sap.com/sap/support/notes/1585527 - http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a - http://dsecrg.com/pages/vul/show.php?id=412 - http://dsecrg.com/pages/vul/show.php?id=413 - http://secunia.com/advisories/47861
CVE ID: CVE-2012-1290 State: PUBLISHED Published: 2012-02-23T18:00:00Z Last Updated: 2024-09-17T03:23:08.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in b2b/auction/container.jsp in the Internet Sales (crm.b2b) module in SAP NetWeaver 7.0 allows remote attackers to inject arbitrary web script or HTML via the _loadPage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52101 - http://dsecrg.com/pages/vul/show.php?id=414 - http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a - https://service.sap.com/sap/support/notes/1583300 - http://s
rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a - https://service.sap.com/sap/support/notes/1583300 - http://secunia.com/advisories/47861
CVE ID: CVE-2012-1291 State: PUBLISHED Published: 2012-02-23T18:00:00Z Last Updated: 2024-09-16T22:46:13.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the com.sap.aii.mdt.amt.web.AMTPageProcessor servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the Adapter Monitor via unspecified vectors, possibly related to the EnableInvokerServletGlobally property in the servlet_jsp service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52101 - http://dsecrg.com/pages/vul/show.php?id=415 - https://service.sap.com/sap/support/notes/1585527 - http://www.sdn.sap.com/irj/
//dsecrg.com/pages/vul/show.php?id=415 - https://service.sap.com/sap/support/notes/1585527 - http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a - http://secunia.com/advisories/47861
CVE ID: CVE-2012-1292 State: PUBLISHED Published: 2012-02-23T18:00:00Z Last Updated: 2024-09-16T22:41:03.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the MessagingSystem servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the MessagingSystem Performance Data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52101 - https://service.sap.com/sap/support/notes/1585527 - http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a - http://dsecrg.com/pages/vul/show.php?id=416 - http://secunia.com/advisorie
t/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a - http://dsecrg.com/pages/vul/show.php?id=416 - http://secunia.com/advisories/47861
CVE ID: CVE-2012-1293 State: PUBLISHED Published: 2012-09-25T23:00:00 Last Updated: 2024-08-06T18:53:36.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2414 - http://fex.rus.uni-stuttgart.de/fex.html - http://archives.neohapsis.com/archives/bugtraq/2012-02/0112.html - http://secunia.com/advisories/47971 - http://www.openwall.com/lists/oss-security/2012/0
ives/bugtraq/2012-02/0112.html - http://secunia.com/advisories/47971 - http://www.openwall.com/lists/oss-security/2012/02/23/2 - http://www.openwall.com/lists/oss-security/2012/02/20/1 - http://osvdb.org/79420 - http://www.openwall.com/lists/oss-security/2012/02/20/8 - http://www.securityfocus.com/bid/52085 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0109.html
CVE ID: CVE-2012-1294 State: PUBLISHED Published: 2012-02-23T20:00:00 Last Updated: 2024-08-06T18:53:37.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CONTIMEX Impulsio CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/109849/Impulsio-CMS-SQL-Injection.html - http://www.securityfocus.com/bid/52063 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73303
CVE ID: CVE-2012-1296 State: PUBLISHED Published: 2012-08-26T20:00:00 Last Updated: 2024-08-06T18:53:36.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body parameter to admin/preview. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23076 - http://www.elefantcms.com/forum/discussion/39/elefant-1.0.2-and-1.1.5-security-updates-released - http://www.securityfocus.com/bid/52143 - http://se
rum/discussion/39/elefant-1.0.2-and-1.1.5-security-updates-released - http://www.securityfocus.com/bid/52143 - http://secunia.com/advisories/48118 - http://www.elefantcms.com/wiki/Changelog - https://exchange.xforce.ibmcloud.com/vulnerabilities/73421
CVE ID: CVE-2012-1297 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-06T18:53:37.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) delete users via a delete action in the user module, (2) delete news via a delete action in the news module, or (3) delete newsletters via a delete action in the newsletters module. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18527 - http://ivanobinetti.blogspot.
t Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18527 - http://ivanobinetti.blogspot.com/2012/02/contaocms-fka-typolight-211-csrf-delete.html - http://packetstormsecurity.org/files/110214/ContaoCMS-2.11.0-Cross-Site-Request-Forgery.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/73479 - http://secunia.com/advisories/48180
CVE ID: CVE-2012-1301 State: PUBLISHED Published: 2017-04-13T17:00:00 Last Updated: 2024-08-06T18:53:37.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/522218 - http://www.securityfocus.com/bid/52912 - https://www.trustmatta.com/advisories/MATTA-2012-001.txt
CVE ID: CVE-2012-1302 State: PUBLISHED Published: 2014-12-28T02:00:00 Last Updated: 2024-08-06T18:53:36.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in amMap 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2) settings_file parameter to ammap.swf, or (3) the data_file parameter to amtimeline.swf. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1117094 - http://www.securitytracker.com/id/1038375 - http://web.appsec.ws/FlashExploitDatabase.php
CVE ID: CVE-2012-1303 State: PUBLISHED Published: 2014-12-28T02:00:00 Last Updated: 2024-08-06T18:53:36.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in amCharts Flash 1 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2) settings_file parameter to ampie.swf; the message element in the chart_data parameter to (3) amcolumn.swf, (4) amline.swf, (5) amradar.swf, or (6) amxy.sw; or (7) the settings_file parameter to amstock.swf. Additional Analyst Notes: - CVE Program Container: References: - http://web.appsec.ws/FlashExploitDatabase.php
CVE ID: CVE-2012-1308 State: PUBLISHED Published: 2012-10-08T18:00:00 Last Updated: 2024-08-06T18:53:37.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52096 - http://www.exploit-db.com/exploits/18499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73316
CVE ID: CVE-2012-1310 State: PUBLISHED Published: 2012-03-29T10:00:00 Last Updated: 2024-08-06T18:53:37.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted IP packets, aka Bug ID CSCto89536. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52753 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-zbfw - http://osvdb.org/80696 - http://secunia.com/advisories/48608 - http://www.securitytracker.com/id?1026861
CVE ID: CVE-2012-1311 State: PUBLISHED Published: 2012-03-29T10:00:00 Last Updated: 2024-08-06T18:53:37.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue wedge and service outage) via crafted RSVP packets, aka Bug ID CSCts80643. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026865 - http://osvdb.org/80692 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-rsvp - http://secunia.com/advisories/4
//tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-rsvp - http://secunia.com/advisories/48611 - http://www.securityfocus.com/bid/52754 - http://secunia.com/advisories/48621
CVE ID: CVE-2012-1312 State: PUBLISHED Published: 2012-03-29T10:00:00 Last Updated: 2024-08-06T18:53:37.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MACE feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (device reload) via crafted transit traffic, aka Bug IDs CSCtq64987 and CSCtu57226. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74429 - http://osvdb.org/80703 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-mace - http://www.securityfocus.com/bid/52751 - http://www.securitytracker.
tent/CiscoSecurityAdvisory/cisco-sa-20120328-mace - http://www.securityfocus.com/bid/52751 - http://www.securitytracker.com/id?1026862
CVE ID: CVE-2012-1313 State: PUBLISHED Published: 2013-09-27T20:00:00 Last Updated: 2024-08-06T18:53:37.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote debug shell on the PALO adapter card in Cisco Unified Computing System (UCS) allows local users to gain privileges via malformed show-macstats parameters, aka Bug ID CSCub13772. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029103 - http://osvdb.org/97776 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-1313
CVE ID: CVE-2012-1314 State: PUBLISHED Published: 2012-03-29T10:00:00 Last Updated: 2024-08-06T18:53:37.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WAAS Express feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit traffic, aka Bug ID CSCtt45381. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48595 - http://osvdb.org/80702 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-mace - http://www.securityfocus.com/bid/52751 - http://www.securitytracker.com/id?1026862 - https://exchange.xforce.ibmclo
ce - http://www.securityfocus.com/bid/52751 - http://www.securitytracker.com/id?1026862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74428