Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-1478 State: PUBLISHED Published: 2012-03-14T01:00:00 Last Updated: 2024-08-06T19:01:02.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the UCMobile BloveStorm (com.blovestorm) application 2.2.0 and 3.2.1 for Android has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74024 - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1478-vulnerability-in-UCMobileBloveStorm.html
CVE ID: CVE-2012-1479 State: PUBLISHED Published: 2012-03-14T01:00:00 Last Updated: 2024-08-06T19:01:01.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the AContact (com.movester.quickcontact) application 1.8.2 for Android has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1479-vulnerability-in-AContact.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74025
CVE ID: CVE-2012-1480 State: PUBLISHED Published: 2012-03-14T01:00:00 Last Updated: 2024-08-06T19:01:01.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Pansi SMS (com.pansi.msg) application 1.97, 2.01, and 2.07 for Android has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1480-vulnerability-in-PansiSMS.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/73963
CVE ID: CVE-2012-1481 State: PUBLISHED Published: 2012-03-15T17:00:00 Last Updated: 2024-08-06T19:01:01.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Textdroid (com.app.android.textdroid) application 2.5.2 for Android has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1481-vulnerability-in-Textdroid.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74052 - http://www.securityfocus.com/bid/52490 - http://osvdb.org/80168
CVE ID: CVE-2012-1482 State: PUBLISHED Published: 2012-03-15T17:00:00 Last Updated: 2024-08-06T19:01:02.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the TouchPal Contacts (com.cootek.smartdialer) application 3.3.1 and 4.0.1 for Android has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1482-vulnerability-in-TouchPalContacts.html - http://www.securityfocus.com/bid/52491 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74051 - http://osvdb.org/80169
CVE ID: CVE-2012-1483 State: PUBLISHED Published: 2012-03-15T17:00:00 Last Updated: 2024-08-06T19:01:02.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Message Forwarder (com.gmail.zbnetium) application 1.12.20110409.1 for Android has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74050 - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1483-vulnerability-in-MessageForwarder.html - http://osvdb.org/80170
CVE ID: CVE-2012-1484 State: PUBLISHED Published: 2012-03-15T17:00:00 Last Updated: 2024-08-06T19:01:02.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WaliSMS CN (cn.com.wali.walisms) application 2.9.2 and 3.7.0 for Android has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74049 - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1484-vulnerability-in-WaliSMSCN.html - http://www.securityfocus.com/bid/52495
CVE ID: CVE-2012-1485 State: PUBLISHED Published: 2012-03-15T17:00:00 Last Updated: 2024-08-06T19:01:02.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NetFront Life Browser (com.access_company.android.nflifebrowser.lite) application 2.2.0 and 2.3.0 for Android has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80172 - http://secunia.com/advisories/48557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74048 - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1485-vulnerability-in-NetFrontLifeBrowser.html - http://www.securityfocus.com/bid/52480
CVE ID: CVE-2012-1493 State: PUBLISHED Published: 2012-07-09T22:00:00Z Last Updated: 2024-09-17T01:20:39.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-HF1, and 2.3.x before 2.3.0-HF3, use a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins via the PubkeyAuthentication option. Additional Analyst Notes: - CVE Program Container: References: - http://support.f5.com/kb/en-us/s
Authentication option. Additional Analyst Notes: - CVE Program Container: References: - http://support.f5.com/kb/en-us/solutions/public/13000/600/sol13600.html - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/f5_bigip_known_privkey.rb - https://www.trustmatta.com/advisories/MATTA-2012-002.txt - http://www.theregister.co.uk/2012/06/13/f5_kit_metasploit_exploit/
CVE ID: CVE-2012-1495 State: PUBLISHED Published: 2020-01-27T14:39:11 Last Updated: 2024-08-06T19:01:01.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/webcalendar/files/webcalendar%201.2/1.2.5/ - https://www.exploit-db.com/exploits/18775 - https://packetstormsecurity.com/files/112332/WebCalendar-1.2.4-Remote-Code-Execution.html - https://packetstormsecurity.com/files/112323/WebCalendar-1.2.4-Pre-Auth-Remote-Code-Injection.html
CVE ID: CVE-2012-1496 State: PUBLISHED Published: 2020-01-27T14:25:10 Last Updated: 2024-08-06T19:01:01.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Local file inclusion in WebCalendar before 1.2.5. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/webcalendar/files/webcalendar%201.2/1.2.5/
CVE ID: CVE-2012-1497 State: PUBLISHED Published: 2012-03-03T02:00:00 Last Updated: 2024-08-06T19:01:01.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role. Additional Analyst Notes: - CVE Program Container: References: - http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html - http://www.debian.org/security/2012/dsa-2423 - http://www.movabletype.org/documentation/appendic
security_updates.html - http://www.debian.org/security/2012/dsa-2423 - http://www.movabletype.org/documentation/appendices/release-notes/513.html
CVE ID: CVE-2012-1498 State: PUBLISHED Published: 2012-03-19T19:00:00 Last Updated: 2024-08-06T19:01:02.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Webfolio CMS 1.1.4 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add an administrator via an add action to admin/users/add or (2) modify a web page via a save action to admin/pages/edit/web_page_name. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/79658 - http://www.exploit-db.com/exploits/18536 - http://packetstormsecurity.org/files/110294/WebfolioCMS-1.1.4-Cross-Site-Reque
ttp://www.exploit-db.com/exploits/18536 - http://packetstormsecurity.org/files/110294/WebfolioCMS-1.1.4-Cross-Site-Request-Forgery.html - http://www.securityfocus.com/bid/52218 - http://ivanobinetti.blogspot.com/2012/02/webfoliocms-114-csrf-add-adminmodify.html - http://secunia.com/advisories/48190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73575
CVE ID: CVE-2012-1499 State: PUBLISHED Published: 2012-04-11T10:00:00 Last Updated: 2024-08-06T19:01:02.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write." Additional Analyst Notes: - CVE Program Container: References: - http://technet.microsoft.com/en-us/security/msvr/msvr12-004 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/083105.html - https://bugzilla.redhat.com/show_bug.cgi?id=805912 - http://www.securityfocus.com/bid/52
nnounce/2012-June/083105.html - https://bugzilla.redhat.com/show_bug.cgi?id=805912 - http://www.securityfocus.com/bid/52654 - http://code.google.com/p/openjpeg/source/detail?r=1330 - http://security.gentoo.org/glsa/glsa-201206-06.xml - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082923.html - http://openjpeg.googlecode.com/svn/branches/openjpeg-1.5/NEWS
CVE ID: CVE-2012-1500 State: PUBLISHED Published: 2020-02-13T16:02:55 Last Updated: 2024-08-06T19:01:01.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS vulnerability in UpdateFieldJson.jspa in JIRA 4.4.3 and GreenHopper before 5.9.8 allows an attacker to inject arbitrary script code. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20121014055829/http://www.cloudscan.me/2012/09/cve-2012-1500-ghs-5375-ghs-5642.html - https://www.exploit-db.com/exploits/21052
CVE ID: CVE-2012-1501 State: REJECTED Published: 2012-12-11T11:00:00Z Last Updated: 2024-09-16T22:31:16.116Z Description: No description available.
CVE ID: CVE-2012-1502 State: PUBLISHED Published: 2012-06-16T00:00:00 Last Updated: 2024-08-06T19:01:01.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a NULL byte in a password string. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-04/msg00027.html - http://secunia.com/advisories/48312 - http://secunia.com/advisories/48746 - http://ubuntu.com/usn/usn-1395-1 - http://www.osvdb.org/79892 - http://www.lsexperts.de/advi
unia.com/advisories/48746 - http://ubuntu.com/usn/usn-1395-1 - http://www.osvdb.org/79892 - http://www.lsexperts.de/advisories/lse-2012-03-01.txt - https://security.gentoo.org/glsa/201507-09 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73857 - http://www.debian.org/security/2012/dsa-2430 - http://secunia.com/advisories/48332
CVE ID: CVE-2012-1503 State: PUBLISHED Published: 2014-08-29T14:00:00 Last Updated: 2024-08-06T19:01:02.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote attackers to inject arbitrary web script or HTML via the comment section. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/22151 - http://osvdb.org/show/osvdb/86729 - http://www.cloudscan.me/2012/10/cve-2012-1503-movable-type-pro-513en.html - http://www.securityfocus.com/bid/56160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79521 - http://packetstor
http://www.securityfocus.com/bid/56160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79521 - http://packetstormsecurity.org/files/117564/Movable-Type-Pro-5.13en-Cross-Site-Scripting.html
CVE ID: CVE-2012-1506 State: PUBLISHED Published: 2014-09-17T14:00:00 Last Updated: 2024-08-06T19:01:01.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the updateStatus function in lib/models/benefits/Hsp.php in OrangeHRM before 2.7 allows remote authenticated users to execute arbitrary SQL commands via the hspSummaryId parameter to plugins/ajaxCalls/haltResumeHsp.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53433 - http://osvdb.org/81743 - https://www.htbridge.com/advisory/HTB23080 - http://secunia.com/advisories/4907
com/bid/53433 - http://osvdb.org/81743 - https://www.htbridge.com/advisory/HTB23080 - http://secunia.com/advisories/49072 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75472 - http://blog.orangehrm.com/2012/04/24/orangehrm-27-stable-release-with-complete-localization/
CVE ID: CVE-2012-1507 State: PUBLISHED Published: 2014-09-17T14:00:00 Last Updated: 2024-08-06T19:01:01.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) newHspStatus parameter to plugins/ajaxCalls/haltResumeHsp.php, (2) sortOrder1 parameter to templates/hrfunct/emppop.php, or (3) uri parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53433 - https://www.htbridge.com/advisory/HTB23080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75473 - http://osvdb.o
https://www.htbridge.com/advisory/HTB23080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75473 - http://osvdb.org/81744 - http://secunia.com/advisories/49072 - http://osvdb.org/81745 - http://osvdb.org/81746 - http://blog.orangehrm.com/2012/04/24/orangehrm-27-stable-release-with-complete-localization/
CVE ID: CVE-2012-1508 State: PUBLISHED Published: 2012-03-16T20:00:00 Last Updated: 2024-08-06T19:01:01.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80115 - http://www.securitytracker.com/id?1026814 - http://www.vmware.com/security/advisories/VMSA-2012-0004.html - http://secunia.com/advisories/48378 - http://secunia.com/advisories/48379 - http://archives.
ories/VMSA-2012-0004.html - http://secunia.com/advisories/48378 - http://secunia.com/advisories/48379 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0071.html - http://www.securityfocus.com/bid/52524 - http://www.vmware.com/security/advisories/VMSA-2012-0005.html - http://www.securitytracker.com/id?1026818 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17183
CVE ID: CVE-2012-1509 State: PUBLISHED Published: 2012-03-16T20:00:00 Last Updated: 2024-08-06T19:01:01.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74096 - http://www.securitytracker.com/id?1026814 - http://www.vmware.com/security/advisories/VMSA-2012-0004.html - http://osvdb.org/80116 - http://secunia.com/advisories/48379 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0071.html - http://www.securityfoc
secunia.com/advisories/48379 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0071.html - http://www.securityfocus.com/bid/52524 - http://www.vmware.com/security/advisories/VMSA-2012-0005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17151
CVE ID: CVE-2012-1510 State: PUBLISHED Published: 2012-03-16T20:00:00 Last Updated: 2024-08-06T19:01:02.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026814 - http://www.vmware.com/security/advisories/VMSA-2012-0004.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17258 - http://secunia.com/advisories/48378 - http://secunia.com/ad
tory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17258 - http://secunia.com/advisories/48378 - http://secunia.com/advisories/48379 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0071.html - http://www.securityfocus.com/bid/52524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74097 - http://www.vmware.com/security/advisories/VMSA-2012-0005.html - http://www.securitytracker.com/id?1026818 - http://osvdb.org/80117
CVE ID: CVE-2012-1511 State: PUBLISHED Published: 2012-03-16T20:00:00 Last Updated: 2024-08-06T19:01:01.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026814 - http://www.vmware.com/security/advisories/VMSA-2012-0004.html - http://osvdb.org/80118 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16664 - http://secunia.com/advisories/48379 - http://archives.neohapsis.c
earch/definition/oval%3Aorg.mitre.oval%3Adef%3A16664 - http://secunia.com/advisories/48379 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0071.html - http://www.securityfocus.com/bid/52526
CVE ID: CVE-2012-1512 State: PUBLISHED Published: 2012-03-16T20:00:00 Last Updated: 2024-08-06T19:01:01.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the internal browser in vSphere Client in VMware vSphere 4.1 before Update 2 and 5.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via a crafted log-file entry. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48387 - http://www.securityfocus.com/bid/52525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74093 - http://www.securitytracker.com/id?1026817 - http://www.vmware.com/security/advisories/VMS
ud.com/vulnerabilities/74093 - http://www.securitytracker.com/id?1026817 - http://www.vmware.com/security/advisories/VMSA-2012-0005.html - http://osvdb.org/80119
CVE ID: CVE-2012-1513 State: PUBLISHED Published: 2012-03-16T20:00:00 Last Updated: 2024-08-06T19:01:02.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Configuration tool in VMware vCenter Orchestrator (vCO) 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML document, which allows remote authenticated administrators to obtain sensitive information by reading this document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52525 - http://secunia.com/advisories/48408 - http://osvdb.org/80120 - http://www.securitytracker.com/id?1026816 - http://www.vmware.com/secu
a.com/advisories/48408 - http://osvdb.org/80120 - http://www.securitytracker.com/id?1026816 - http://www.vmware.com/security/advisories/VMSA-2012-0005.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74091
CVE ID: CVE-2012-1514 State: PUBLISHED Published: 2012-03-16T20:00:00 Last Updated: 2024-08-06T19:01:01.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in VMware vShield Manager (vSM) 1.0.1 before Update 2 and 4.1.0 before Update 2 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74092 - http://www.securitytracker.com/id?1026815 - http://osvdb.org/80121 - http://www.vmware.com/security/advisories/VMSA-2012-0005.html - http://secunia.com/advisories/4
http://osvdb.org/80121 - http://www.vmware.com/security/advisories/VMSA-2012-0005.html - http://secunia.com/advisories/48409
CVE ID: CVE-2012-1515 State: PUBLISHED Published: 2012-04-02T10:00:00 Last Updated: 2024-08-06T19:01:02.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allows guest OS users to gain guest OS privileges by overwriting memory locations in a read-only memory block associated with the Virtual DOS Machine. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-042 - http://www.securityfocus.com/bid/52820 - https://oval.cisecuri
/en-us/security-updates/securitybulletins/2012/ms12-042 - http://www.securityfocus.com/bid/52820 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17110 - http://www.vmware.com/security/advisories/VMSA-2012-0006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15209 - http://www.securitytracker.com/id?1026875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74480
CVE ID: CVE-2012-1516 State: PUBLISHED Published: 2012-05-04T16:00:00 Last Updated: 2024-08-06T19:01:02.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving data pointers. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16810 - http://www.vmware.com/security/advisories/VMSA-2012-0009.html - http://www.securi
/oval%3Aorg.mitre.oval%3Adef%3A16810 - http://www.vmware.com/security/advisories/VMSA-2012-0009.html - http://www.securitytracker.com/id?1027018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75373 - http://www.securityfocus.com/bid/53369
CVE ID: CVE-2012-1517 State: PUBLISHED Published: 2012-05-04T16:00:00 Last Updated: 2024-08-06T19:01:02.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving function pointers. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81692 - http://www.vmware.com/security/advisories/VMSA-2012-0009.html - http://www.securitytracker.com/id?1027018 - https://oval.cisecurity.org/repository/search/definition/oval%3
-0009.html - http://www.securitytracker.com/id?1027018 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17231 - http://www.securityfocus.com/bid/53369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75374