Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2943 State: PUBLISHED Published: 2012-05-27T20:00:00 Last Updated: 2024-08-06T19:50:05.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53609 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75768 - http://packetstormsecurity.org/files/112859/Cryptographp-Local-File-Inclusion-HTTP-Response-Splitting.html
CVE ID: CVE-2012-2944 State: PUBLISHED Published: 2012-06-01T20:00:00 Last Updated: 2024-08-06T19:50:04.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-power outage) via a long string containing non-printable characters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75980 - http://www.debian.org/security/2012/dsa-2484 - http://alioth.debian.org/tracker/?func=detail&aid=313636 - http://www.mandriva.com/security
org/security/2012/dsa-2484 - http://alioth.debian.org/tracker/?func=detail&aid=313636 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:087 - http://secunia.com/advisories/50389 - http://trac.networkupstools.org/projects/nut/changeset/3633 - https://hermes.opensuse.org/messages/15514634 - http://secunia.com/advisories/49348 - http://networkupstools.org/docs/user-manual.chunked/apis01.html - http://www.securityfocus.com/bid/53743 - http://www.osvdb.org/82409
CVE ID: CVE-2012-2945 State: PUBLISHED Published: 2019-10-28T20:31:27 Last Updated: 2024-08-06T19:50:05.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hadoop 1.0.3 contains a symlink vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-2945 - https://seclists.org/fulldisclosure/2012/Jul/3
CVE ID: CVE-2012-2947 State: PUBLISHED Published: 2012-06-02T15:00:00 Last Updated: 2024-08-06T19:50:05.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: chan_iax2.c in the IAX2 channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1, when a certain mohinterpret setting is enabled, allows remote attackers to cause a denial of service (daemon crash) by placing a call on hold. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2493 - http://www.securitytracker.com/id?1027102 - http://archives.neohapsis.com/archives/bugtraq/2012-05/0144.html - ht
2493 - http://www.securitytracker.com/id?1027102 - http://archives.neohapsis.com/archives/bugtraq/2012-05/0144.html - http://downloads.asterisk.org/pub/security/AST-2012-007.html - http://secunia.com/advisories/49303
CVE ID: CVE-2012-2948 State: PUBLISHED Published: 2012-06-02T15:00:00 Last Updated: 2024-08-06T19:50:05.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by closing a connection in off-hook mode. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75937 - http://www.securitytracker.com/id?1027103 - http://www.debian.org/security/2012
rce.ibmcloud.com/vulnerabilities/75937 - http://www.securitytracker.com/id?1027103 - http://www.debian.org/security/2012/dsa-2493 - http://www.securityfocus.com/bid/53723 - http://downloads.asterisk.org/pub/security/AST-2012-008.html - http://secunia.com/advisories/49303 - http://archives.neohapsis.com/archives/bugtraq/2012-05/0145.html
CVE ID: CVE-2012-2949 State: PUBLISHED Published: 2012-05-29T19:00:00Z Last Updated: 2024-09-16T23:25:24.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZTE sync_agent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, which allows remote attackers to gain privileges via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.pcmag.com/article2/0%2C2817%2C2404639%2C00.asp - http://www.reuters.com/article/2012/05/18/us-zte-phone-idUSBRE84H08J20120518 - http://blog.mylookout.com/blog/2012/05/21/zte-security-vulnerability
CVE ID: CVE-2012-2950 State: PUBLISHED Published: 2020-01-09T21:08:10 Last Updated: 2024-08-06T19:50:05.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gateway Geomatics MapServer for Windows before 3.0.6 contains a Local File Include Vulnerability which allows remote attackers to execute local PHP code and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75983
CVE ID: CVE-2012-2951 State: REJECTED Published: 2012-05-29T20:00:00 Last Updated: 2014-04-26T23:57:01 Description: No description available.
CVE ID: CVE-2012-2952 State: PUBLISHED Published: 2012-05-29T20:00:00 Last Updated: 2024-08-06T19:50:04.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in add_ons.php in Jaow 2.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the add_ons parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.jaow.net/Article-97 - http://secunia.com/advisories/49266 - http://www.securityfocus.com/bid/53677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75866 - http://osvdb.org/82231 - http://www.exploit-db.com/exploits/18921
CVE ID: CVE-2012-2953 State: PUBLISHED Published: 2012-07-23T17:00:00 Last Updated: 2024-08-06T19:50:05.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_00 - http://www.kb.cert.org/vuls/id/108471 - http://www.securityfocus.com/bid/54426
CVE ID: CVE-2012-2955 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-06T19:50:05.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allow remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/84014 - http://www-01.ibm.com/support/docview.wss?uid=swg21605626 - http://www.kb.cert.org/vuls/id/659791 - http://secunia.com/advisories/49897 - http://www.sec
cview.wss?uid=swg21605626 - http://www.kb.cert.org/vuls/id/659791 - http://secunia.com/advisories/49897 - http://www.securityfocus.com/bid/54486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76798
CVE ID: CVE-2012-2956 State: PUBLISHED Published: 2014-09-17T15:00:00 Last Updated: 2024-08-06T19:50:05.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SpiceWorks 5.3.75941 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to api_v2.json. NOTE: this entry was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6658 is for the XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/54647 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77174 - http://osvdb.org/84113 - http://www.exploit-db.com/exploits/20063
CVE ID: CVE-2012-2957 State: PUBLISHED Published: 2012-07-23T17:00:00 Last Updated: 2024-08-06T19:50:05.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_00 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77113 - http://www.kb.cert.org/vuls/id/108471 - http://www.securityfocus.com/bid/54429
CVE ID: CVE-2012-2959 State: PUBLISHED Published: 2012-06-11T23:00:00Z Last Updated: 2024-09-17T01:46:35.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in password-manager/changePasswords.do in BMC Identity Management Suite 7.5.00.103 allows remote attackers to hijack the authentication of administrators for requests that change passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/221180
CVE ID: CVE-2012-2960 State: PUBLISHED Published: 2012-08-08T10:00:00 Last Updated: 2024-08-06T19:50:05.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03606700 - http://www.kb.cert.org/vuls/id/960468 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?d
http://www.kb.cert.org/vuls/id/960468 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03606700
CVE ID: CVE-2012-2961 State: PUBLISHED Published: 2012-07-23T17:00:00 Last Updated: 2024-08-06T19:50:05.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_00 - http://www.securityfocus.com/bid/54425 - http://www.kb.cert.org/vuls/id/108471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77116
CVE ID: CVE-2012-2962 State: PUBLISHED Published: 2012-07-30T22:00:00 Last Updated: 2024-08-06T19:50:05.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/84232 - http://secunia.com/advisories/50052 - http://www.sonicwall.com/shared/download/Dell_SonicWALL_Scrutinizer_Service_Bulletin_for_SQL_injection_vulnerability_CVE.pdf - http://www.securityfocus.com/bid/54625 - http://www.exploit-db.c
vice_Bulletin_for_SQL_injection_vulnerability_CVE.pdf - http://www.securityfocus.com/bid/54625 - http://www.exploit-db.com/exploits/20033 - http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html - http://www.kb.cert.org/vuls/id/404051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77148
CVE ID: CVE-2012-2963 State: PUBLISHED Published: 2012-08-12T16:00:00Z Last Updated: 2024-09-16T16:13:33.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative interface in the embedded web server on the BreakingPoint Storm appliance before 3.0 does not require authentication for the gwt/BugReport script, which allows remote attackers to obtain sensitive information by downloading a .tgz file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MAPG-8GANCC - http://www.kb.cert.org/vuls/id/520430 - http://www.secureworks.com/research/advisories/SWRX-2012-005/
CVE ID: CVE-2012-2964 State: PUBLISHED Published: 2012-08-12T16:00:00Z Last Updated: 2024-09-16T17:28:39.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information by sniffing the network for XML documents. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MAPG-8GANCC - http://www.kb.cert.org/vuls/id/520430 - http://www.secureworks.com/research/advisories/SWRX-2012-006/
CVE ID: CVE-2012-2965 State: PUBLISHED Published: 2012-08-12T16:00:00Z Last Updated: 2024-09-16T20:52:28.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/309979 - http://en.securitylab.ru/lab/ - http://en.securitylab.ru/lab/PT-2012-05 - http://caucho.com/resin-4.0/changes/changes.xtp
CVE ID: CVE-2012-2966 State: PUBLISHED Published: 2012-08-12T16:00:00Z Last Updated: 2024-09-16T22:14:49.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/309979 - http://en.securitylab.ru/lab/ - http://en.securitylab.ru/lab/PT-2012-05 - http://caucho.com/resin-4.0/changes/changes.xtp
CVE ID: CVE-2012-2967 State: PUBLISHED Published: 2012-08-12T16:00:00Z Last Updated: 2024-09-17T00:41:22.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/309979 - http://en.securitylab.ru/lab/ - http://en.securitylab.ru/lab/PT-2012-05 - http://caucho.com/resin-4.0/changes/changes.xtp
CVE ID: CVE-2012-2968 State: PUBLISHED Published: 2012-08-12T16:00:00Z Last Updated: 2024-09-17T00:50:54.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/309979 - http://en.securitylab.ru/lab/ - http://en.securitylab.ru/lab/PT-2012-05 - http://caucho.com/resin-4.0/changes/changes.xtp
CVE ID: CVE-2012-2969 State: PUBLISHED Published: 2012-08-12T16:00:00Z Last Updated: 2024-09-17T00:16:39.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/309979 - http://en.securitylab.ru/lab/ - http://en.securitylab.ru/lab/PT-2012-05 - http://caucho.com/resin-4.0/changes/changes.xtp
CVE ID: CVE-2012-2970 State: PUBLISHED Published: 2012-07-09T22:00:00Z Last Updated: 2024-09-16T19:56:27.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of service (device hang) via network traffic to port (1) 1641, (2) 3734, or (3) 3735. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/154307
CVE ID: CVE-2012-2971 State: PUBLISHED Published: 2012-10-20T10:00:00 Last Updated: 2024-08-06T19:50:05.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in CA ARCserve Backup r12.5, r15, and r16 on Windows does not properly process RPC requests, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Jan/86 - http://osvdb.org/86416 - http://secunia.com/advisories/51012 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BF9EEA31E-8089-423E-B746-41B5C9DD2AC1%7D - http://packetstormsecurity.com
irj/portal/anonymous/phpsupcontent?contentID=%7BF9EEA31E-8089-423E-B746-41B5C9DD2AC1%7D - http://packetstormsecurity.com/files/119543/Security-Notice-For-CA-ARCserve-Backup.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79476
CVE ID: CVE-2012-2972 State: PUBLISHED Published: 2012-10-20T10:00:00 Last Updated: 2024-08-06T19:50:05.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) server and (2) agent components in CA ARCserve Backup r12.5, r15, and r16 on Windows do not properly validate RPC requests, which allows remote attackers to cause a denial of service (service crash) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Jan/86 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79477 - http://osvdb.org/86415 - http://www.kb.cert.org/vuls/id/408099 - http://secunia.com/advisories/51012 - https://support.ca.com/i
osvdb.org/86415 - http://www.kb.cert.org/vuls/id/408099 - http://secunia.com/advisories/51012 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BF9EEA31E-8089-423E-B746-41B5C9DD2AC1%7D - http://packetstormsecurity.com/files/119543/Security-Notice-For-CA-ARCserve-Backup.html
CVE ID: CVE-2012-2974 State: PUBLISHED Published: 2012-07-19T15:00:00 Last Updated: 2024-08-06T19:50:05.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass authentication and obtain administrative access via a direct request to a .html file under (1) status/, (2) system/, (3) ports/, (4) trunks/, (5) vlans/, (6) qos/, (7) rstp/, (8) dot1x/, (9) security/, (10) igmps/, or (11) snmp/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027285 - http://www.kb.cert.org/vuls/id/377915
CVE ID: CVE-2012-2975 State: PUBLISHED Published: 2012-09-11T18:00:00Z Last Updated: 2024-09-17T04:09:41.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the traffic overview page on the F5 ASM appliance 10.0.0 through 11.2.0 HF2 allows remote attackers to inject arbitrary web script or HTML via crafted requests that are later listed on a summary page. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/143395 - https://support.f5.com/kb/en-us/solutions/public/13000/800/sol13838.html
CVE ID: CVE-2012-2976 State: PUBLISHED Published: 2012-07-23T17:00:00 Last Updated: 2024-08-06T19:50:05.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_00 - http://www.kb.cert.org/vuls/id/108471 - http://www.securityfocus.com/bid/54427
CVE ID: CVE-2012-2977 State: PUBLISHED Published: 2012-07-23T17:00:00 Last Updated: 2024-08-06T19:50:05.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted input to an application script. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_00 - http://www.kb.cert.org/vuls/id/108471 - http://www.securityfocus.com/bid/54430
CVE ID: CVE-2012-2978 State: PUBLISHED Published: 2012-07-27T10:00:00 Last Updated: 2024-08-06T19:50:05.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/84097 - http://www.kb.cert.org/vuls/id/624931 - http://www.nlnetlabs.nl/downloads/CVE-2012-2978.txt - http://www.securityfocus.com/bid/54606 - http://secunia.com/advisories/49795 - http://secunia.com/advisories/49997 - http://www.debian.or
tyfocus.com/bid/54606 - http://secunia.com/advisories/49795 - http://secunia.com/advisories/49997 - http://www.debian.org/security/2012/dsa-2515
CVE ID: CVE-2012-2979 State: PUBLISHED Published: 2019-11-01T14:19:37 Last Updated: 2024-08-06T19:50:05.462Z Vendors: nsd3 Products: nsd3 Problem Types: Other Description: FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV) and cause a denial of service in the NSD server. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-2979 - https://www.tenable.com/plugins/nessus/60150 - https://vuxml.freebsd.org/freebsd/17f369dc-d7e7-11e1-90a2-000c299b62e1.html
CVE ID: CVE-2012-2980 State: PUBLISHED Published: 2012-08-21T10:00:00Z Last Updated: 2024-09-16T17:23:57.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remote attackers to obtain sensitive information via a crafted application, as demonstrated by PIN numbers, telephone numbers, and text messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.htc.com/www/help/
umbers, and text messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.htc.com/www/help/app-security-fix/ - http://www.kb.cert.org/vuls/id/MAPG-8R5LD6 - http://www.kb.cert.org/vuls/id/251635
CVE ID: CVE-2012-2981 State: PUBLISHED Published: 2012-09-11T18:00:00 Last Updated: 2024-08-06T19:50:05.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type (aka monitor type name) parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.americaninfosec.com/research/dossiers/AISG-12-000.pdf - http://www.kb.cert.org/vuls/id/788478 - http://www.securitytracker.com/id?1027507 - http://americaninfosec.com/research/index.html - https://github.com/webmin/webmin/commit/ed7365064c189b8f136a9f952062249167d1bd9e - http://www.xero
research/index.html - https://github.com/webmin/webmin/commit/ed7365064c189b8f136a9f952062249167d1bd9e - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf