Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-3843 State: PUBLISHED Published: 2012-07-03T22:00:00 Last Updated: 2024-08-06T20:21:03.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the registration page in e107, probably 1.0.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75225 - http://packetstormsecurity.org/files/112241/e107-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/53271 - http://hauntit.blogspot.com/2012/04/en-e107-cms-reflected-xss-in.html
CVE ID: CVE-2012-3844 State: PUBLISHED Published: 2012-07-03T22:00:00 Last Updated: 2024-08-06T20:21:04.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vBulletin 4.1.12 allows remote attackers to inject arbitrary web script or HTML via a long string in the subject parameter when creating a post. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75325 - http://hauntit.blogspot.com/2012/04/en-vbulletin-4112-cross-site-scripting.html - http://www.securityfocus.com/bid/53319 - http://packetstormsecurity.org/files/112385/vBulletin-4.1.12-Cross-Site-Scripting.html
CVE ID: CVE-2012-3845 State: PUBLISHED Published: 2012-07-03T22:00:00 Last Updated: 2024-08-06T20:21:04.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in LAN Messenger 1.2.28 and earlier allows remote attackers to cause a denial of service (crash) via a long string in an initiation request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53333 - http://archives.neohapsis.com/archives/bugtraq/2012-05/0005.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75319 - http://www.exploit-db.com/exploits/18816
CVE ID: CVE-2012-3846 State: PUBLISHED Published: 2012-07-03T22:00:00 Last Updated: 2024-08-06T20:21:04.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in PHP-pastebin 2.1 allows remote attackers to inject arbitrary web script or HTML via the title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112375/PHP-Pastebin-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/53329 - http://www.osvdb.org/81661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75323 - http://secunia.com/advisories/49025
CVE ID: CVE-2012-3847 State: PUBLISHED Published: 2012-07-05T01:00:00 Last Updated: 2024-08-06T20:21:03.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remote attackers to cause a denial of service (resource consumption) via a long Unicode string, a different vulnerability than CVE-2012-3007. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49173 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-171-01.pdf
CVE ID: CVE-2012-3848 State: PUBLISHED Published: 2012-07-31T10:00:00Z Last Updated: 2024-09-16T22:03:29.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to d4d/exporters.php, (2) the HTTP Referer header to d4d/exporters.php, or (3) unspecified input to d4d/contextMenu.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt - http://www.plixer.com/Press-Releases/plixer-releases
https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt - http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html
CVE ID: CVE-2012-3859 State: PUBLISHED Published: 2012-07-09T18:00:00Z Last Updated: 2024-09-17T03:17:27.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack vectors, a different vulnerability than CVE-2012-2446 and CVE-2012-2447. Additional Analyst Notes: - CVE Program Container: References: - http://infosec42.blogspot.com/2012/07/cve-2012-2446-cve-2012-2447-cve-2012.html
CVE ID: CVE-2012-3863 State: PUBLISHED Published: 2012-07-09T10:00:00 Last Updated: 2024-08-06T20:21:03.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a provisional response to a SIP reINVITE request, which allows remote authenticated users to cause a denial of service (RTP port exhaustion) via sessions that lack final responses. Additional Analyst Notes: - CVE Program Container: References:
port exhaustion) via sessions that lack final responses. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50687 - http://secunia.com/advisories/50756 - http://www.debian.org/security/2012/dsa-2550 - http://www.securityfocus.com/bid/54327 - http://downloads.asterisk.org/pub/security/AST-2012-010.html - https://issues.asterisk.org/jira/browse/ASTERISK-19992
CVE ID: CVE-2012-3864 State: PUBLISHED Published: 2012-08-06T16:00:00 Last Updated: 2024-08-06T20:21:04.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files on the puppet master server by leveraging an arbitrary user's certificate and private key in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html - http://puppetlabs.com/security/cve/cve-2012-3864/ - http://www.debian.org/security/2012/dsa-2511 - http://www.ubuntu.com/usn/USN-1506-1 - http
security/cve/cve-2012-3864/ - http://www.debian.org/security/2012/dsa-2511 - http://www.ubuntu.com/usn/USN-1506-1 - http://secunia.com/advisories/50014 - https://github.com/puppetlabs/puppet/commit/10f6cb8969b4d5a933b333ecb01ce3696b1d57d4 - http://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html - https://bugzilla.redhat.com/show_bug.cgi?id=839130 - https://github.com/puppetlabs/puppet/commit/c3c7462e4066bf3a563987a402bf3ddf278bcd87
CVE ID: CVE-2012-3865 State: PUBLISHED Published: 2012-08-06T16:00:00 Last Updated: 2024-08-06T20:21:04.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the puppet master server via a .. (dot dot) in a node name. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html - https://github.com/puppetlabs/puppet/commit/554eefc55f57ed2b76e5ee04d8f194d36f6e
curity-announce/2012-08/msg00006.html - https://github.com/puppetlabs/puppet/commit/554eefc55f57ed2b76e5ee04d8f194d36f6ee67f - http://www.debian.org/security/2012/dsa-2511 - http://www.ubuntu.com/usn/USN-1506-1 - http://secunia.com/advisories/50014 - http://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html - https://github.com/puppetlabs/puppet/commit/d80478208d79a3e6d6cb1fbc525e24817fe8c4c6 - https://bugzilla.redhat.com/show_bug.cgi?id=839131 - http://puppetlabs.com/security/cve/cve-2012-3865/
CVE ID: CVE-2012-3866 State: PUBLISHED Published: 2012-08-06T16:00:00 Last Updated: 2024-08-06T20:21:03.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for last_run_report.yaml, which allows local users to obtain sensitive configuration information by leveraging access to the puppet master server to read this file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/puppetlabs/puppet/commit/fd44bf5e6d0d360f6a493d663b653c121fa83c3f - http://www.debian.org/security/2012/dsa-2511 - http://www.ubuntu.com/usn/USN-1506-1 - http://secunia.co
653c121fa83c3f - http://www.debian.org/security/2012/dsa-2511 - http://www.ubuntu.com/usn/USN-1506-1 - http://secunia.com/advisories/50014 - http://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html - http://puppetlabs.com/security/cve/cve-2012-3866/ - https://bugzilla.redhat.com/show_bug.cgi?id=839135
CVE ID: CVE-2012-3867 State: PUBLISHED Published: 2012-08-06T16:00:00 Last Updated: 2024-08-06T20:21:04.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the characters in the Common Name field of a Certificate Signing Request (CSR), which makes it easier for user-assisted remote attackers to trick administrators into signing a crafted agent certificate via ANSI control sequences. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html - http://w
E Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html - http://www.debian.org/security/2012/dsa-2511 - http://www.ubuntu.com/usn/USN-1506-1 - http://secunia.com/advisories/50014 - http://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html - http://puppetlabs.com/security/cve/cve-2012-3867/ - https://github.com/puppetlabs/puppet/commit/dfedaa5fa841ccf335245a748b347b7c7c236640 - https://github.com/puppetlabs/puppet/commit/f3419620b42080dad3b0be14470b20a972f13c50 - https://bugzilla.redhat.com/show_bug.cgi?id=839158
CVE ID: CVE-2012-3868 State: PUBLISHED Published: 2012-07-25T10:00:00 Last Updated: 2024-08-06T20:21:03.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit) via a large volume of TCP queries. Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004 - https://kb.isc.org/article/AA-00730
CVE ID: CVE-2012-3869 State: PUBLISHED Published: 2012-08-13T20:00:00Z Last Updated: 2024-09-17T02:17:06.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in include/classes/class.rex_list.inc.php in REDAXO 4.3.x and 4.4 allows remote attackers to inject arbitrary web script or HTML via the subpage parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49904 - https://www.htbridge.com/advisory/HTB23098 - http://www.redaxo.org/de/download/sicherheitshinweise/ - http://archives.neohapsis.com/archives/bugtraq/2012-07/0142.html - http://www.securityfocus.com/bid/54670
CVE ID: CVE-2012-3870 State: PUBLISHED Published: 2012-12-28T11:00:00Z Last Updated: 2024-09-16T19:46:02.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in objects/createobject.php in Open Constructor 3.12.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) name or (2) description parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/115276/Openconstructor-CMS-3.12.0-Cross-Site-Scripting.html
CVE ID: CVE-2012-3871 State: PUBLISHED Published: 2012-12-28T11:00:00Z Last Updated: 2024-09-16T19:15:36.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in data/hybrid/i_hybrid.php in Open Constructor 3.12.0 allows remote authenticated users to inject arbitrary web script or HTML via the header parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/115285/Openconstructor-CMS-3.12.0-i_hybrid.php-XSS.html
CVE ID: CVE-2012-3872 State: PUBLISHED Published: 2012-12-28T11:00:00Z Last Updated: 2024-09-16T22:35:07.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Constructor 3.12.0 allow remote attackers to inject arbitrary web script or HTML via (1) the result parameter to data/file/edit.php, (2) the q parameter to confirm.php, or (3) the keyword parameter to users/users.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/115284/Openconstructor-CMS-3.12.0-Reflected-XSS.html
CVE ID: CVE-2012-3873 State: PUBLISHED Published: 2012-12-28T11:00:00Z Last Updated: 2024-09-17T01:41:06.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1) data/gallery/edit.php, (2) data/guestbook/edit.php, (3) data/file/edit.php, (4) data/htmltext/edit.php, (5) data/publication/edit.php, or (6) data/event/edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/115286/Openconstructor-CMS-3.12.0-SQL-Injection.html
CVE ID: CVE-2012-3878 State: REJECTED Published: 2018-01-30T21:00:00 Last Updated: 2018-01-30T20:57:01 Description: No description available.
CVE ID: CVE-2012-3881 State: PUBLISHED Published: 2012-07-12T19:00:00Z Last Updated: 2024-09-17T02:41:10.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in RTG 0.7.4 and RTG2 0.9.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) 95.php, (2) view.php, or (3) rtg.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/07/09/2 - https://code.google.com/p/rtg2/issues/detail?id=35
CVE ID: CVE-2012-3884 State: PUBLISHED Published: 2012-07-26T22:00:00Z Last Updated: 2024-09-16T21:09:06.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote attackers to obtain access by sniffing the local wireless network and then replaying the authentication data. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html - http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt
CVE ID: CVE-2012-3885 State: PUBLISHED Published: 2012-07-26T22:00:00Z Last Updated: 2024-09-17T01:21:15.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of AirDroid 1.0.4 beta uses a four-character alphanumeric password, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html - http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt
CVE ID: CVE-2012-3886 State: PUBLISHED Published: 2012-07-26T22:00:00Z Last Updated: 2024-09-17T03:33:02.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: AirDroid 1.0.4 beta uses the MD5 algorithm for values in the checklogin key parameter and 7bb cookie, which makes it easier for remote attackers to obtain cleartext data by sniffing the local wireless network and then conducting a (1) brute-force attack or (2) rainbow-table attack. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html - http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt
CVE ID: CVE-2012-3887 State: PUBLISHED Published: 2012-07-26T22:00:00Z Last Updated: 2024-09-17T03:27:48.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which allows remote attackers to obtain sensitive information by sniffing the local wireless network, as demonstrated by the SMS message content sent to the sdctl/sms/send/single/ URI. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html - http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt
CVE ID: CVE-2012-3888 State: PUBLISHED Published: 2012-07-26T22:00:00Z Last Updated: 2024-09-16T17:49:31.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism by modifying a pass value within JSON data. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html - http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt
CVE ID: CVE-2012-3889 State: PUBLISHED Published: 2012-07-11T10:00:00 Last Updated: 2024-08-06T20:21:04.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file. Additional Analyst Notes: - CVE Program Container: References: - http://forums.winamp.com/showthread.php?t=345684 - http://secunia.com/advisories/46624 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14748 - http://www.securityfocus.com/bid/54131
CVE ID: CVE-2012-3890 State: PUBLISHED Published: 2012-07-11T10:00:00 Last Updated: 2024-08-06T20:21:03.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file. Additional Analyst Notes: - CVE Program Container: References: - http://forums.winamp.com/showthread.php?t=345684 - http://secunia.com/advisories/46624 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15553 - http://www.securityfocus.com/bid/54131
CVE ID: CVE-2012-3893 State: PUBLISHED Published: 2012-09-16T10:00:00Z Last Updated: 2024-09-16T16:33:02.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows remote authenticated users to cause a denial of service (spoke crash) via spoke-to-spoke traffic, aka Bug ID CSCtz02622. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/ios/15_2s/release/notes/15_2s_caveats_15_2_4s.html
CVE ID: CVE-2012-3895 State: PUBLISHED Published: 2012-09-16T10:00:00 Last Updated: 2024-08-06T20:21:03.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 15.0 through 15.3 allows remote authenticated users to cause a denial of service (device crash) via an MVPNv6 update, aka Bug ID CSCty89224. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/ios/15_2s/release/notes/15_2s_caveats_15_2_2s.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78872
CVE ID: CVE-2012-3899 State: PUBLISHED Published: 2012-09-16T10:00:00Z Last Updated: 2024-09-17T00:05:41.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and traffic-inspection outage) via network traffic, aka Bug ID CSCtn23051. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/web/software/282549758/51927/IPS-6_2-4-E4-readme.txt
CVE ID: CVE-2012-3901 State: PUBLISHED Published: 2012-09-16T10:00:00 Last Updated: 2024-08-06T20:21:04.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote attackers to cause a denial of service (process crash and traffic-inspection outage) via network traffic, aka Bug ID CSCta96144. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/ips/7.0/release/notes/22789_01.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78870
CVE ID: CVE-2012-3908 State: PUBLISHED Published: 2012-09-16T10:00:00 Last Updated: 2024-08-06T20:21:04.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user interface (aka the Apache Tomcat interface) on Cisco Identity Services Engine (ISE) 3300 series appliances before 1.1.0.665 Cumulative Patch 1 allow remote attackers to hijack the authentication of administrators, aka Bug ID CSCty46684. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50680 - http://www.cisco.com/en/US/docs/security/ise/1.1/release_notes/ise1.1_rn.html - http://www.securityfocu
visories/50680 - http://www.cisco.com/en/US/docs/security/ise/1.1/release_notes/ise1.1_rn.html - http://www.securityfocus.com/bid/55602 - http://en.securitylab.ru/lab/
CVE ID: CVE-2012-3913 State: PUBLISHED Published: 2013-07-31T19:00:00Z Last Updated: 2024-09-16T23:01:43.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco VC220 and VC240 cameras allow remote attackers to cause a denial of service (WebUI outage) via crafted packets, aka Bug IDs CSCtf73188, CSCtf88059, CSCtf87951, CSCtf87908, and CSCtf88019. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-3913
CVE ID: CVE-2012-3915 State: PUBLISHED Published: 2012-09-16T10:00:00 Last Updated: 2024-08-06T20:21:04.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of service (persistent IKE state) via a large volume of hub-to-spoke traffic, aka Bug ID CSCtq39602. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/ios/15_2s/release/notes/15_2s_caveats_15_2_2s.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78809
CVE ID: CVE-2012-3918 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T20:21:04.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 15.3(1)T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service (serial-interface outage) via certain Frame Relay traffic, aka Bug ID CSCub13317. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/ios/15_3m_and_t/release/notes/15_3m_and_t.pdf
CVE ID: CVE-2012-3919 State: PUBLISHED Published: 2012-09-16T10:00:00 Last Updated: 2024-08-06T20:21:04.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer (LB) queues, which allows remote attackers to cause a denial of service (incorrect memory access and module reboot) via application traffic, aka Bug ID CSCtw70879. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78808 - http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA2_3_x/Release/Note/RACEA2_3_
abilities/78808 - http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA2_3_x/Release/Note/RACEA2_3_X.html