Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2155 State: PUBLISHED Published: 2012-08-14T23:00:00 Last Updated: 2024-08-06T19:26:08.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the CDN2 Video module 6.x for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://www.osvdb.org/80686 - http://www.securityfocus.com/bid/52812 - http://drupal.org/node/1506542 - http://www.openwall.com/lists/oss-security/2012/05/03/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74522
CVE ID: CVE-2012-2156 State: PUBLISHED Published: 2012-04-11T10:00:00 Last Updated: 2024-08-06T19:26:07.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the u_email parameter (aka Authors Email field) to manager/users.php, (2) the u_realname parameter (aka Authors Name field) to manager/users.php, or (3) the c_author parameter (aka Author field) in an ADD A COMMENT section. Additional Analyst Notes: - CVE Program Container: References: - http://www.webapp-security.com/2012/04/plumecms - http://osvdb.org/80960 - https://exchang
gram Container: References: - http://www.webapp-security.com/2012/04/plumecms - http://osvdb.org/80960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74614 - http://www.securityfocus.com/bid/52890 - http://www.exploit-db.com/exploits/18699 - http://osvdb.org/80961 - http://www.webapp-security.com/wp-content/uploads/2012/04/PlumeCMS-1.2.4-Multiple-Permanent-XSS.txt
CVE ID: CVE-2012-2159 State: PUBLISHED Published: 2012-06-20T10:00:00 Last Updated: 2024-08-06T19:26:08.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21598423 - http://www.ibm.com/support/docview.wss?uid=swg21596690 - https://exchange.xforce.ibmcloud.com/vulnerabil
d=swg21598423 - http://www.ibm.com/support/docview.wss?uid=swg21596690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74832
CVE ID: CVE-2012-2160 State: PUBLISHED Published: 2020-08-27T12:26:12 Last Updated: 2024-08-06T19:26:08.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Change 5.3 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using the SUPP_TEMPLATE_FLAG parameter in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https:/
ctim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74753 - https://www.ibm.com/support/pages/node/589933
CVE ID: CVE-2012-2161 State: PUBLISHED Published: 2012-06-20T10:00:00 Last Updated: 2024-08-06T19:26:08.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74833 - http://www.ibm.com/support/docview.wss?uid=swg21598423 - http://www.ibm.com/support/docview.wss?uid=swg2
ilities/74833 - http://www.ibm.com/support/docview.wss?uid=swg21598423 - http://www.ibm.com/support/docview.wss?uid=swg21596690
CVE ID: CVE-2012-2162 State: PUBLISHED Published: 2012-05-01T19:00:00 Last Updated: 2024-08-06T19:26:08.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74900 - http://www-01.ibm.com/support/docview.wss?uid=swg21591172 - http://www-01.ibm.com/support/docv
m/vulnerabilities/74900 - http://www-01.ibm.com/support/docview.wss?uid=swg21591172 - http://www-01.ibm.com/support/docview.wss?uid=swg21588312
CVE ID: CVE-2012-2163 State: PUBLISHED Published: 2012-07-30T19:00:00 Last Updated: 2024-08-06T19:26:08.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Scale Out Network Attached Storage (SONAS) 1.1 through 1.3.1 allows remote authenticated administrators to execute arbitrary Linux commands via the (1) Command Line Interface or (2) Graphical User Interface, related to a "code injection" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75037
CVE ID: CVE-2012-2164 State: PUBLISHED Published: 2012-08-17T20:00:00 Last Updated: 2024-08-06T19:26:08.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to bypass intended access restrictions, and use the Site Administration menu to modify system settings, via a parameter-tampering attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75039 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM62735 - http://www.ibm.com/support/docview.wss?uid=swg21606318
CVE ID: CVE-2012-2165 State: PUBLISHED Published: 2012-08-17T20:00:00 Last Updated: 2024-08-06T19:26:08.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3, when ClearQuest Authentication is enabled, allows remote authenticated users to read password hashes via a user query. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM62740 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75040 - http://www.ibm.com/support/docview.wss?uid=swg21606385
CVE ID: CVE-2012-2166 State: PUBLISHED Published: 2018-02-08T23:00:00 Last Updated: 2024-08-06T19:26:08.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM XIV Storage System 2810-A14 and 2812-A14 devices before level 10.2.4.e-2 and 2810-114 and 2812-114 devices before level 11.1.1 have hardcoded passwords for unspecified accounts, which allows remote attackers to gain user access via unknown vectors. IBM X-Force ID: 75041. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75041
CVE ID: CVE-2012-2167 State: PUBLISHED Published: 2012-10-20T18:00:00 Last Updated: 2024-08-06T19:26:08.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM XIV Storage System Gen3 before 11.1.0.a allows remote attackers to cause a denial of service (device outage) via TCP packets to unspecified ports. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004217 - http://www.securityfocus.com/bid/56142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75047
CVE ID: CVE-2012-2168 State: PUBLISHED Published: 2012-08-17T20:00:00 Last Updated: 2024-08-06T19:26:08.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21606319 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM61822 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75048
CVE ID: CVE-2012-2169 State: PUBLISHED Published: 2012-08-17T20:00:00 Last Updated: 2024-08-06T19:26:08.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote authenticated users to inject arbitrary web script or HTML via the File Description field. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM62762 - http://www.ibm.com/support/docview.wss?uid=swg21607783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75049
CVE ID: CVE-2012-2170 State: PUBLISHED Published: 2012-06-20T10:00:00 Last Updated: 2024-08-06T19:26:08.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtain sensitive client and request information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75234 - http://www.ibm.com/support/docview.wss?uid=swg1PM56183 - http://www.ibm.com/support/docview.wss?uid=swg21595172
CVE ID: CVE-2012-2171 State: PUBLISHED Published: 2012-06-22T10:00:00 Last Updated: 2024-08-06T19:26:08.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote authenticated users to execute arbitrary SQL commands via the selectedModuleOnly parameter in a state_viewmodulelog action to the ModuleServlet URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/codes/ibmssdssmp_sqlixss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/75236 - http://www.ibm.com/connec
mk/codes/ibmssdssmp_sqlixss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/75236 - http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cve-2012-2171_cve-2012-2172
CVE ID: CVE-2012-2172 State: PUBLISHED Published: 2012-06-22T10:00:00 Last Updated: 2024-08-06T19:26:08.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote attackers to inject arbitrary web script or HTML via the updateRegn parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/codes/ibmssdssmp_sqlixss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/75239 - http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cv
.xforce.ibmcloud.com/vulnerabilities/75239 - http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cve-2012-2171_cve-2012-2172
CVE ID: CVE-2012-2173 State: PUBLISHED Published: 2012-06-20T10:00:00 Last Updated: 2024-08-06T19:26:08.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ODBC driver in IBM Security AppScan Source 7.x and 8.x before 8.6 sends an SHA-1 hash of the connection password during connections to a solidDB database, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75242 - http://www.ibm.com/support/docview.wss?uid=swg21598423
CVE ID: CVE-2012-2174 State: PUBLISHED Published: 2012-06-20T10:00:00 Last Updated: 2024-08-06T19:26:08.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21598348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75320
CVE ID: CVE-2012-2175 State: PUBLISHED Published: 2012-06-20T10:00:00 Last Updated: 2024-08-06T19:26:08.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21596862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75321
CVE ID: CVE-2012-2176 State: PUBLISHED Published: 2012-05-25T20:00:00 Last Updated: 2024-08-06T19:26:08.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long argument to the (1) Attachment_Times or (2) Import_Times method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75322 - http://www.ibm.com/support/docview.wss?uid=swg21596191 - http://www.securityfocus.com/bid/53678
CVE ID: CVE-2012-2177 State: PUBLISHED Published: 2013-03-02T21:00:00 Last Updated: 2024-08-06T19:26:08.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors related to the search feature. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75400 - http://www-01.ibm.com/support/docview.wss?uid=swg24034373 - http://www-01.ibm.com/support/docview.wss?uid=swg21626697
CVE ID: CVE-2012-2179 State: PUBLISHED Published: 2012-06-22T10:00:00 Last Updated: 2024-08-06T19:26:08.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg1IV21382 - http://www.securitytracker.com/id?1027193 - http://www.ibm.com/support/docview.wss?uid=isg1IV21381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75510 - http://www.ibm.com/support/docview.wss?uid=isg1IV21379 - http://www.ibm.com/support/docview.wss?uid=isg1IV21383 - http:/
http://www.ibm.com/support/docview.wss?uid=isg1IV21379 - http://www.ibm.com/support/docview.wss?uid=isg1IV21383 - http://www.ibm.com/support/docview.wss?uid=isg1IV22019 - http://www.osvdb.org/83133 - http://aix.software.ibm.com/aix/efixes/security/libodm_advisory.asc
CVE ID: CVE-2012-2180 State: PUBLISHED Published: 2012-06-20T10:00:00 Last Updated: 2024-08-06T19:26:08.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service (NULL pointer dereference, and resource consumption or daemon crash) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75418 - http://www.ibm.com/support/docview.wss?uid=swg1IC82234 - http://www.ibm.com/support/docview.wss?uid=swg21597090 - http://ww
p://www.ibm.com/support/docview.wss?uid=swg1IC82234 - http://www.ibm.com/support/docview.wss?uid=swg21597090 - http://www.securityfocus.com/bid/53873 - http://www.ibm.com/support/docview.wss?uid=swg1IC82367
CVE ID: CVE-2012-2181 State: PUBLISHED Published: 2012-07-03T21:00:00 Last Updated: 2024-08-06T19:26:08.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Dojo module in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF14, and 8.0, allows remote attackers to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1PM64172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75584 - http://www.ibm.com/support/docview.wss?uid=swg21598363
CVE ID: CVE-2012-2183 State: PUBLISHED Published: 2012-09-10T17:00:00 Last Updated: 2024-08-06T19:26:08.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75776 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV09212 - http://osvdb.org
xforce.ibmcloud.com/vulnerabilities/75776 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV09212 - http://osvdb.org/85185 - http://secunia.com/advisories/50551 - http://www-01.ibm.com/support/docview.wss?uid=swg21610081
CVE ID: CVE-2012-2184 State: PUBLISHED Published: 2012-09-10T17:00:00 Last Updated: 2024-08-06T19:26:08.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75780 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV19887 - http://secunia.c
xforce.ibmcloud.com/vulnerabilities/75780 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV19887 - http://secunia.com/advisories/50551 - http://www-01.ibm.com/support/docview.wss?uid=swg21610081
CVE ID: CVE-2012-2185 State: PUBLISHED Published: 2012-09-10T17:00:00 Last Updated: 2024-08-06T19:26:08.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75784 - http://www-01.ibm.com/support/docview.wss?uid=swg2161
551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75784 - http://www-01.ibm.com/support/docview.wss?uid=swg21610081 - http://osvdb.org/85183 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV17942
CVE ID: CVE-2012-2186 State: PUBLISHED Published: 2012-08-31T14:00:00 Last Updated: 2024-08-06T19:26:08.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 allows remote authenticated users to execute arbitrary commands by leveraging originate privileges and providing an ExternalIVR value in an AMI Originate action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia
nalIVR value in an AMI Originate action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50687 - http://secunia.com/advisories/50756 - http://www.debian.org/security/2012/dsa-2550 - http://downloads.asterisk.org/pub/security/AST-2012-012.html - http://www.securitytracker.com/id?1027460
CVE ID: CVE-2012-2187 State: PUBLISHED Published: 2012-09-25T20:00:00 Last Updated: 2024-08-06T19:26:09.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 1.13 and earlier generates weak RSA keys, which makes it easier for attackers to defeat cryptographic protection mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55609 - https://www-947.ibm.com/support/entry/myportal/docdisplay?lndocid=MIGR-5091525 - http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_weak_key_vulnerability_in_remote_supervisor_ad
1525 - http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_weak_key_vulnerability_in_remote_supervisor_adapter_ii_firmware_cve_2012_2187_ibm_system_x3650_system_x3850_m2_system_x3950_m25
CVE ID: CVE-2012-2188 State: PUBLISHED Published: 2012-08-06T16:00:00 Last Updated: 2024-08-06T19:26:08.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems Director Management Console (SDMC) 6R7.3.0 before SP2, does not properly restrict the VIOS viosrvcmd command, which allows local users to gain privileges via vectors involving a (1) $ (dollar sign) or (2) & (ampersand) character. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75906 - http://www.ibm.com/support/docview.w
ntainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75906 - http://www.ibm.com/support/docview.wss?uid=isg1MB03580 - http://www.ibm.com/support/docview.wss?uid=isg1MB03554 - http://www.ibm.com/support/docview.wss?uid=isg1MB03550 - http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_power_hmc_viosrvcmd_command_allows_elevated_privilege_on_vios_cve_2012_218825 - http://www.ibm.com/support/docview.wss?uid=isg1MB03548
CVE ID: CVE-2012-2190 State: PUBLISHED Published: 2012-08-21T10:00:00 Last Updated: 2024-08-06T19:26:08.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allows remote attackers to cause a denial of service (daemon crash) via a crafted ClientHello message in the TLS Handshake Protocol. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75994 - http://www-01.ibm.com/support/docview.wss?uid=swg21606096 - http://www-01
ge.xforce.ibmcloud.com/vulnerabilities/75994 - http://www-01.ibm.com/support/docview.wss?uid=swg21606096 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM66218