Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-5307 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-17T00:25:44.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in the PhotoSmash plugin 1.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22867
CVE ID: CVE-2011-5308 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-16T19:24:36.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in cdnvote-post.php in the cdnvote plugin before 0.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) cdnvote_post_id or (2) cdnvote_point parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wpsecure.net/2011/02/cdnvote-plugin/ - https://plugins.trac.wordpress.org/changeset/350873/cdnvote/trunk/cdnvote-post.php - https://www.htbridge.com/advisory/HTB22845
CVE ID: CVE-2011-5309 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-17T04:04:54.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22826
CVE ID: CVE-2011-5310 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-17T02:10:59.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22826
CVE ID: CVE-2011-5311 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-17T04:09:59.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to hijack the authentication of administrators for requests that modify pages via the data[text] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22826
CVE ID: CVE-2011-5312 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-16T17:34:22.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Gollos 2.8 allow remote attackers to inject arbitrary web script or HTML via the returnurl parameter to (1) register.aspx, (2) publication/info.aspx, or (3) user/add.aspx, or (4) the q parameter to product/list.aspx. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22830
CVE ID: CVE-2011-5313 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-16T20:11:17.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in includes/password.php in Redaxscript 0.3.2 allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) password parameter to the password_reset program. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22804
CVE ID: CVE-2011-5314 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-16T20:11:47.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: templates/default/index.php in Redaxscript 0.3.2 allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22804
CVE ID: CVE-2011-5315 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-16T17:02:49.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/index.php in whCMS 0.115 alpha allows remote attackers to hijack the authentication of administrators for requests that modify credentials via a user save action. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22767
CVE ID: CVE-2011-5316 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-17T03:42:40.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/index.php in Cambio 0.5a nightly r37 allows remote attackers to hijack the authentication of administrators for requests that modify credentials via a user save action. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22768
CVE ID: CVE-2011-5317 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-16T18:54:28.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in editText.php in WonderCMS before 0.4 allows remote attackers to inject arbitrary web script or HTML via the content parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22759
CVE ID: CVE-2011-5318 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-16T17:47:48.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify articles via a save_post action to admin/news/saveNEWS_ID/, (2) modify settings via a save_post action to admin/site/save2/, or (3) modify credentials via a save_post action to admin/usersite/save2/. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22775
CVE ID: CVE-2011-5319 State: PUBLISHED Published: 2015-03-09T00:00:00 Last Updated: 2024-08-07T00:30:46.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: content/renderer/device_sensors/device_motion_event_pump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate accelerometer data, which makes it easier for remote attackers to capture keystrokes via a crafted web site that listens for ondevicemotion events, a different vulnerability than CVE-2015-1231. Additional Analyst Notes: - CVE Program Container: References: - http://dl.acm.org/citation.cfm?id=2046771 - http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html - https:/
.acm.org/citation.cfm?id=2046771 - http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=421691 - http://www.cc.gatech.edu/~traynor/papers/traynor-ccs11.pdf - https://code.google.com/p/chromium/issues/detail?id=463349
CVE ID: CVE-2011-5320 State: PUBLISHED Published: 2017-10-18T14:00:00 Last Updated: 2024-08-07T00:30:47.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: scanf and related functions in glibc before 2.15 allow local users to cause a denial of service (segmentation fault) via a large string of 0s. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/?p=glibc.git%3Ba=commitdiff%3Bh=20b38e0 - https://sourceware.org/bugzilla/show_bug.cgi?id=13138#c4 - https://marc.info/?l=gimp-developer&m=129567990905823&w=2 - http://www.openwall.com/lists/oss-security/2015/03/12/14 - https://bugzilla.redhat.com/show_bug.cgi?id=1196745 - https://sourceware.org/
all.com/lists/oss-security/2015/03/12/14 - https://bugzilla.redhat.com/show_bug.cgi?id=1196745 - https://sourceware.org/git/?p=glibc.git%3Ba=commitdiff%3Bh=3f8cc204fdd0
CVE ID: CVE-2011-5321 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-07T00:30:46.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tty_open function in drivers/tty/tty_io.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via crafted access to a device file under the /dev/pts directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/03/13/17 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c290f8358acae
sts/oss-security/2015/03/13/17 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c290f8358acaeffd8e0c551ddcc24d1206143376 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.1 - https://bugzilla.redhat.com/show_bug.cgi?id=1201887 - https://github.com/torvalds/linux/commit/c290f8358acaeffd8e0c551ddcc24d1206143376 - http://rhn.redhat.com/errata/RHSA-2015-1221.html
CVE ID: CVE-2011-5322 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-07T00:30:46.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user, (2) G3car3s for the analyst user, (3) G3car3s for the ccg user, (4) V0yag3r for the viewer user, and (5) geservice for the geservice user in the Webmin interface, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/CA11_IN_2059103-001r4.pdf?REQ=RAA&DIRECTION=2059103-001&FILENAME=CA11_IN_2059103-001r4.pdf&F
e.com/servlet/ClientServlet/CA11_IN_2059103-001r4.pdf?REQ=RAA&DIRECTION=2059103-001&FILENAME=CA11_IN_2059103-001r4.pdf&FILEREV=4&DOCREV_ORG=4 - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE ID: CVE-2011-5323 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-07T00:30:46.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions has a password of A11enda1e for the sa SQL server user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/3.7.3.7+Installation+Guide.pdf?REQ=RAA&DIRECTION=DOC0947634&FILENAME=3.7.3.7%2BInstallation%2B
com/servlet/ClientServlet/3.7.3.7+Installation+Guide.pdf?REQ=RAA&DIRECTION=DOC0947634&FILENAME=3.7.3.7%2BInstallation%2BGuide.pdf&FILEREV=1&DOCREV_ORG=1 - http://apps.gehealthcare.com/servlet/ClientServlet/3.7.3.8+Installation+guide.pdf?REQ=RAA&DIRECTION=DOC1059456&FILENAME=3.7.3.8%2BInstallation%2Bguide.pdf&FILEREV=1&DOCREV_ORG=1 - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277
CVE ID: CVE-2011-5324 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-07T00:30:46.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TeraRecon server, as used in GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions, has a password of (1) shared for the shared user and (2) scan for the scan user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/3.7.3.7+Installation+Guide.pdf?REQ=
Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/3.7.3.7+Installation+Guide.pdf?REQ=RAA&DIRECTION=DOC0947634&FILENAME=3.7.3.7%2BInstallation%2BGuide.pdf&FILEREV=1&DOCREV_ORG=1 - http://apps.gehealthcare.com/servlet/ClientServlet/3.7.3.8+Installation+guide.pdf?REQ=RAA&DIRECTION=DOC1059456&FILENAME=3.7.3.8%2BInstallation%2Bguide.pdf&FILEREV=1&DOCREV_ORG=1 - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277
CVE ID: CVE-2011-5325 State: PUBLISHED Published: 2017-08-07T17:00:00 Last Updated: 2024-08-07T00:30:47.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/10/21/7 - https://bugzilla.redhat.com/show_bug.cgi?id=1274215 - https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html - https://usn.ubuntu.com/3935-1/ - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/
/msg00037.html - https://usn.ubuntu.com/3935-1/ - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html - http://seclists.org/fulldisclosure/2020/Aug/20 - https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html
CVE ID: CVE-2011-5326 State: PUBLISHED Published: 2016-05-13T16:00:00 Last Updated: 2024-08-07T00:30:47.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: imlib2 before 1.4.9 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) by drawing a 2x1 ellipse. Additional Analyst Notes: - CVE Program Container: References: - https://git.enlightenment.org/legacy/imlib2.git/commit/?id=c94d83ccab15d5ef02f88d42dce38ed3f0892882 - https://sourceforge.net/p/enlightenment/mailman/message/35055012/ - http://www.debian.org/security/2016/dsa-3555 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=639414 - http://lists.opensuse.org/opensuse-updates/2016
16/dsa-3555 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=639414 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00076.html
CVE ID: CVE-2011-5327 State: PUBLISHED Published: 2019-07-27T21:39:30 Last Updated: 2024-08-07T00:30:47.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 3.1, an off by one in the drivers/target/loopback/tcm_loop.c tcm_loop_make_naa_tpg() function could result in at least memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/12f09ccb4612734a53e47ed5302e0479c10a50f8 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=12f09ccb4612734a53e47ed5302e0479c10a50f8 - https://mirrors.edge.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 - https://support.f5.com/csp/art
5302e0479c10a50f8 - https://mirrors.edge.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 - https://support.f5.com/csp/article/K42315210 - https://support.f5.com/csp/article/K42315210?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2011-5328 State: PUBLISHED Published: 2019-08-20T14:49:21 Last Updated: 2024-08-07T00:30:46.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user-access-manager plugin before 1.2 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/user-access-manager/#developers
CVE ID: CVE-2011-5329 State: PUBLISHED Published: 2019-08-28T11:11:18 Last Updated: 2024-08-07T00:30:47.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: The redirection plugin before 2.2.9 for WordPress has XSS in the admin menu, a different issue than CVE-2011-4562. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/redirection/#developers
CVE ID: CVE-2011-5330 State: PUBLISHED Published: 2019-11-18T17:07:52 Last Updated: 2024-08-07T00:30:46.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Distributed Ruby (aka DRuby) 1.8 mishandles the sending of syscalls. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/17031
CVE ID: CVE-2011-5331 State: PUBLISHED Published: 2019-11-18T17:08:00 Last Updated: 2024-08-07T00:30:46.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Distributed Ruby (aka DRuby) 1.8 mishandles instance_eval. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/17058
CVE ID: CVE-2011-5370 State: REJECTED Published: 2012-11-28T00:00:00Z Last Updated: 2024-09-16T18:07:51.205Z Description: No description available.
CVE ID: CVE-2011-5371 State: REJECTED Published: 2012-11-28T00:00:00Z Last Updated: 2024-09-17T03:07:42.030Z Description: No description available.
CVE ID: CVE-2011-5372 State: REJECTED Published: 2012-11-28T00:00:00Z Last Updated: 2024-09-16T23:30:53.925Z Description: No description available.
CVE ID: CVE-2011-5373 State: REJECTED Published: 2012-11-28T00:00:00Z Last Updated: 2024-09-16T17:18:29.717Z Description: No description available.
CVE ID: CVE-2012-0001 State: PUBLISHED Published: 2012-01-10T21:00:00 Last Updated: 2024-08-06T18:09:17.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception handling tables, which allows context-dependent attackers to bypass the SafeSEH security feature by leveraging a Visual C++ .NET 2003 application, aka "Windows Kernel SafeSEH Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14758 - http://www.securityfocus.com/bid/51296 - http://www.us-cert.gov/cas/techalerts/TA12-010A.html - http://secunia.com/advisories/47356 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-001 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - http://www.securitytracker.com/id?1026493
CVE ID: CVE-2012-0002 State: PUBLISHED Published: 2012-03-13T21:00:00 Last Updated: 2024-08-06T18:09:17.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http
eted, aka "Remote Desktop Protocol Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14623 - http://blogs.quickheal.com/remote-desktop-protocol-vulnerability-cve-2012-0002-not-dead-yet/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-020 - http://www.securitytracker.com/id?1026790 - http://www.us-cert.gov/cas/techalerts/TA12-073A.html
CVE ID: CVE-2012-0003 State: PUBLISHED Published: 2012-01-10T21:00:00 Last Updated: 2024-10-17T19:23:42.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka "MIDI Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14337 - http://www.us-cert.gov/cas/techalerts/TA
security.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14337 - http://www.us-cert.gov/cas/techalerts/TA12-010A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-004 - http://secunia.com/advisories/47485 - http://www.securityfocus.com/bid/51292 - http://www.securitytracker.com/id?1026492
CVE ID: CVE-2012-0004 State: PUBLISHED Published: 2012-01-10T21:00:00 Last Updated: 2024-08-06T18:09:17.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll, Qdvd.dll, closed captioning, and the Line21 DirectShow filter, aka "DirectShow Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/defin
y." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14832 - http://www.us-cert.gov/cas/techalerts/TA12-010A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-004 - http://secunia.com/advisories/47485 - http://www.securityfocus.com/bid/51295 - http://www.securitytracker.com/id?1026492
CVE ID: CVE-2012-0005 State: PUBLISHED Published: 2012-01-10T21:00:00 Last Updated: 2024-08-06T18:09:17.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which allows local users to gain privileges via a crafted application, aka "CSRSS Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-010A.html
." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-010A.html - http://www.securitytracker.com/id?1026495 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14879 - http://www.securityfocus.com/bid/51270 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-003 - http://secunia.com/advisories/47479
CVE ID: CVE-2012-0006 State: PUBLISHED Published: 2012-03-13T21:00:00 Last Updated: 2024-08-06T18:09:17.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle objects in memory during record lookup, which allows remote attackers to cause a denial of service (daemon restart) via a crafted query, aka "DNS Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48394 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-017 - http://www.securityfocus.com/bid/52374 - https://ova
rosoft.com/en-us/security-updates/securitybulletins/2012/ms12-017 - http://www.securityfocus.com/bid/52374 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15098 - http://www.us-cert.gov/cas/techalerts/TA12-073A.html - http://osvdb.org/80005 - http://www.securitytracker.com/id?1026789