Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-5951 State: PUBLISHED Published: 2012-12-26T18:00:00 Last Updated: 2024-08-06T21:21:28.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Tivoli NetView 1.4, 5.1 through 5.4, and 6.1 on z/OS allows local users to gain privileges by leveraging access to the normal Unix System Services (USS) security level. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1OA41061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80643 - http://www-01.ibm.com/support/docview.wss?uid=swg1OA41060 - http://www.ibm.com/support/docview.wss?uid=swg21621163 - http://www.securitytracker.
pport/docview.wss?uid=swg1OA41060 - http://www.ibm.com/support/docview.wss?uid=swg21621163 - http://www.securitytracker.com/id?1027920 - http://www-01.ibm.com/support/docview.wss?uid=swg1OA41059
CVE ID: CVE-2012-5952 State: PUBLISHED Published: 2013-02-20T11:00:00 Last Updated: 2024-08-06T21:21:28.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2 does not validate Basic Authentication credentials before proceeding to WS-Addressing and WS-Security operations, which allows remote attackers to trigger transmission of unauthenticated messages via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21623316 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC89803 - https://exchange.xforce.ibmcloud.
view.wss?uid=swg21623316 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC89803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80666
CVE ID: CVE-2012-5953 State: PUBLISHED Published: 2013-02-20T11:00:00 Last Updated: 2024-08-06T21:21:27.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service (infinite loop) via a crafted query string. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21623316 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80667 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM75015
CVE ID: CVE-2012-5954 State: PUBLISHED Published: 2012-12-21T11:00:00 Last Updated: 2024-08-06T21:21:28.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x before 6.3.1.0 allows remote attackers to read or modify HSM-managed file system objects via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027901 - http://www-01.ibm.com/support/docview.wss?uid=swg21615292 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC86724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80668
CVE ID: CVE-2012-5955 State: PUBLISHED Published: 2012-12-20T11:00:00 Last Updated: 2024-08-06T21:21:28.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IBM HTTP Server component 5.3 in IBM WebSphere Application Server (WAS) for z/OS allows remote attackers to execute arbitrary commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80684 - http://www-01.ibm.com/support/docview.wss?&uid=swg21620945
CVE ID: CVE-2012-5956 State: PUBLISHED Published: 2012-12-11T11:00:00Z Last Updated: 2024-09-16T18:19:02.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow remote attackers to inject arbitrary web script or HTML via fields in XML asset data to discoveryServlet/WsDiscoveryServlet, as demonstrated by the DocRoot/Computer_Information/output element. Additional Analyst Notes: - CVE Program Container: References: - http://www.manageengine.com/products/asset-explorer/sp-readme.html - http://www.kb.cert.org/vuls/id/571068
CVE ID: CVE-2012-5958 State: PUBLISHED Published: 2013-01-31T21:00:00 Last Updated: 2024-08-06T21:21:28.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://
ner: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.mandriva.com/security/advisories?name=MDVSA-2013:098 - http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf - https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf - http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf - http://www.debian.org/security/2013/dsa-2615 - http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf - http://w
.08B44_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf - http://www.debian.org/security/2013/dsa-2614 - http://www.securityfocus.com/bid/57602 - https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb - http://pupnp.sourceforge.net/ChangeLog - https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play - http://www.kb.cert.org/vuls/id/922681 - https://www.tenable.com/security/research/tra-2017-10 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00013.html - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037 - http://packetstormsecurity.
ates/2013-02/msg00013.html - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037 - http://packetstormsecurity.com/files/160242/libupnp-1.6.18-Denial-Of-Service.html
CVE ID: CVE-2012-5959 State: PUBLISHED Published: 2013-01-31T21:00:00 Last Updated: 2024-08-06T21:21:28.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that contains a :: (colon colon) in a UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.man
ferences: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.mandriva.com/security/advisories?name=MDVSA-2013:098 - http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf - https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf - http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf - http://www.debian.org/security/2013/dsa-2615 - http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf - http://www.debi
WW.pdf - http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf - http://www.debian.org/security/2013/dsa-2614 - http://www.securityfocus.com/bid/57602 - https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb - http://pupnp.sourceforge.net/ChangeLog - https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play - http://www.kb.cert.org/vuls/id/922681 - https://www.tenable.com/security/research/tra-2017-10 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00013.html - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037
CVE ID: CVE-2012-5960 State: PUBLISHED Published: 2013-01-31T21:00:00 Last Updated: 2024-08-06T21:21:28.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka upnp:rootdevice) field in a UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.mandriva.com/security/advisories?name=MDV
urity/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.mandriva.com/security/advisories?name=MDVSA-2013:098 - https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf - http://www.debian.org/security/2013/dsa-2615 - http://www.debian.org/security/2013/dsa-2614 - http://www.securityfocus.com/bid/57602 - https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb - http://pupnp.sourceforge.net/ChangeLog - https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play - http://www.kb.cert.org/vuls/id/922681 - https://www.tenable.com/security/research/tra-2017
g-and-play-unplug-dont-play - http://www.kb.cert.org/vuls/id/922681 - https://www.tenable.com/security/research/tra-2017-10 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00013.html - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037
CVE ID: CVE-2012-5961 State: PUBLISHED Published: 2013-01-31T21:00:00 Last Updated: 2024-08-06T21:21:28.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka device) field in a UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.mandriva.com/security/advisories?name=MDVSA-2013:098 - htt
ent/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.mandriva.com/security/advisories?name=MDVSA-2013:098 - http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf - https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf - http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf - http://www.debian.org/security/2013/dsa-2615 - http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf - http://www.debian.org/security/2013/dsa-2614 - http://www.securityfocu
_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf - http://www.debian.org/security/2013/dsa-2614 - http://www.securityfocus.com/bid/57602 - https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb - http://pupnp.sourceforge.net/ChangeLog - https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play - http://www.kb.cert.org/vuls/id/922681 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037
CVE ID: CVE-2012-5962 State: PUBLISHED Published: 2013-01-31T21:00:00 Last Updated: 2024-08-06T21:21:28.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn) field in a UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.mandriva.com/security/advisories?name=MDVSA-2013:098 -
content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.mandriva.com/security/advisories?name=MDVSA-2013:098 - http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf - https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf - http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf - http://www.debian.org/security/2013/dsa-2615 - http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf - http://www.debian.org/security/2013/dsa-2614 - http://www.security
-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf - http://www.debian.org/security/2013/dsa-2614 - http://www.securityfocus.com/bid/57602 - https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb - http://pupnp.sourceforge.net/ChangeLog - https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play - http://www.kb.cert.org/vuls/id/922681 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037
CVE ID: CVE-2012-5963 State: PUBLISHED Published: 2013-01-31T21:00:00 Last Updated: 2024-08-06T21:21:28.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that lacks a :: (colon colon) in a UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.mandriva.com/s
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.mandriva.com/security/advisories?name=MDVSA-2013:098 - http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf - https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf - http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf - http://www.debian.org/security/2013/dsa-2615 - http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf - http://www.debian.org/secu
tp://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf - http://www.debian.org/security/2013/dsa-2614 - http://www.securityfocus.com/bid/57602 - https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb - http://pupnp.sourceforge.net/ChangeLog - https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play - http://www.kb.cert.org/vuls/id/922681 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037
CVE ID: CVE-2012-5964 State: PUBLISHED Published: 2013-01-31T21:00:00 Last Updated: 2024-08-06T21:21:28.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long ServiceType (aka urn service) field in a UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.mandriva.com/security/advisories?name=MDVSA-2
y/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.mandriva.com/security/advisories?name=MDVSA-2013:098 - http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf - https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf - http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf - http://www.debian.org/security/2013/dsa-2615 - http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf - http://www.debian.org/security/2013/dsa-2614 - http://www
13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf - http://www.debian.org/security/2013/dsa-2614 - http://www.securityfocus.com/bid/57602 - https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb - http://pupnp.sourceforge.net/ChangeLog - https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play - http://www.kb.cert.org/vuls/id/922681 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037
CVE ID: CVE-2012-5965 State: PUBLISHED Published: 2013-01-31T21:00:00 Last Updated: 2024-08-06T21:21:28.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn device) field in a UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.mandriva.com/security/advisories?name=MDVSA-201
center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp - http://www.mandriva.com/security/advisories?name=MDVSA-2013:098 - https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf - http://www.debian.org/security/2013/dsa-2615 - http://www.debian.org/security/2013/dsa-2614 - http://www.securityfocus.com/bid/57602 - https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb - http://pupnp.sourceforge.net/ChangeLog - https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play - http://www.kb.cert.org/vuls/id/922681 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013
play-unplug-dont-play - http://www.kb.cert.org/vuls/id/922681 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037
CVE ID: CVE-2012-5966 State: PUBLISHED Published: 2012-12-13T11:00:00Z Last Updated: 2024-09-16T18:59:28.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: The restricted telnet shell on the D-Link DSL2730U router allows remote authenticated users to bypass intended command restrictions via shell metacharacters that follow a whitelisted command. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/876780
CVE ID: CVE-2012-5967 State: PUBLISHED Published: 2012-12-19T11:00:00 Last Updated: 2024-08-06T21:21:28.270Z Vendors: Centreon Products: Centreon, Centreon web Problem Types: n/a Description: SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote authenticated users to execute arbitrary SQL commands via the menu parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/856892 - http://forge.centreon.com/projects/centreon/repository/revisions/13749 - https://github.com/centreon/centreon/commit/434e291eebcd8f56771ac96b37831634fa52b6a8#diff-606758231371c4a66ae2668f7ad2b617
CVE ID: CVE-2012-5968 State: PUBLISHED Published: 2012-12-19T11:00:00Z Last Updated: 2024-09-17T01:35:39.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to the LAN network. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm - http://www.kb.cert.org/vuls/id/871148
CVE ID: CVE-2012-5969 State: PUBLISHED Published: 2012-12-19T11:00:00Z Last Updated: 2024-09-17T01:26:57.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the PATH_INFO of an sdcard/ request or (2) modify arbitrary files via a .. (dot dot) in the req_page parameter to en/sms.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm - http://www.kb.cert.org/vuls/id/871148
CVE ID: CVE-2012-5970 State: PUBLISHED Published: 2012-12-19T11:00:00Z Last Updated: 2024-09-16T23:10:52.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Huawei E585 device allows remote attackers to cause a denial of service (NULL pointer dereference and device outage) via crafted HTTP requests, as demonstrated by unspecified vulnerability-scanning software. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/871148 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198240.htm
CVE ID: CVE-2012-5972 State: PUBLISHED Published: 2013-01-17T16:00:00Z Last Updated: 2025-07-07T19:55:10.421Z Severity: N/A (CVSS 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N) Vendors: SpecView Products: SpecView Problem Types: CWE-23 Description: Directory traversal vulnerability in the web server in SpecView 2.5 build 853 and earlier allows remote attackers to read arbitrary files via a ... (dot dot dot) in a URI. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/specview_1-adv.txt - https://www.cisa.gov/news-events/ics-advisories/icsa-13-011-02
CVE ID: CVE-2012-5973 State: PUBLISHED Published: 2012-12-10T20:00:00Z Last Updated: 2024-09-16T23:16:09.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA XCOM Data Transport r11.0 and r11.5 on UNIX and Linux allows remote attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B358F44CA-6354-4427-9088-C57138E9EE11%7D
CVE ID: CVE-2012-5975 State: PUBLISHED Published: 2012-12-04T23:00:00Z Last Updated: 2024-09-17T02:37:22.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when old-style password authentication is enabled, allows remote attackers to bypass authentication via a crafted session involving entry of blank passwords, as demonstrated by a root login session from a modified OpenSSH client with an added input_userauth_passwd_changereq call in sshconnect2.c. Additional Analyst Notes: - CVE Program Container: References: -