Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0299 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-06T18:23:30.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75730 - http://www.securityfocus.com/bid/53443 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00
CVE ID: CVE-2012-0300 State: PUBLISHED Published: 2012-07-05T17:00:00Z Last Updated: 2024-09-16T20:17:21.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brightmail Control Center in Symantec Message Filter 6.3 does not properly restrict establishment of sessions to the listening port, which allows remote attackers to obtain potentially sensitive version information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120626_00 - http://www.securityfocus.com/bid/54136
CVE ID: CVE-2012-0301 State: PUBLISHED Published: 2012-07-05T17:00:00Z Last Updated: 2024-09-17T02:26:58.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120626_00 - http://www.securityfocus.com/bid/54135
CVE ID: CVE-2012-0302 State: PUBLISHED Published: 2012-07-05T17:00:00Z Last Updated: 2024-09-17T02:47:03.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120626_00 - http://www.securityfocus.com/bid/54134
CVE ID: CVE-2012-0303 State: PUBLISHED Published: 2012-07-05T17:00:00Z Last Updated: 2024-09-17T02:21:39.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that (1) execute application commands or (2) create admin accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120626_00 - http://www.securityfocus.com/bid/54133
CVE ID: CVE-2012-0304 State: PUBLISHED Published: 2012-06-22T10:00:00 Last Updated: 2024-08-06T18:23:30.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec LiveUpdate Administrator before 2.3.1 uses weak permissions (Everyone: Full Control) for the installation directory, which allows local users to gain privileges via a Trojan horse file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027182 - http://www.nessus.org/plugins/index.php?view=single&id=59193 - http://www.securityfocus.com/bid/53903 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&
://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120615_00
CVE ID: CVE-2012-0305 State: PUBLISHED Published: 2012-07-23T17:00:00 Last Updated: 2024-08-06T18:23:30.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_01 - http://www.securityfocus.com/bid/54594
CVE ID: CVE-2012-0306 State: PUBLISHED Published: 2012-10-18T17:00:00 Last Updated: 2024-08-06T18:23:29.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Ghost Solution Suite 2.x through 2.5.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted backup file. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121010_00 - http://www.securityfocus.com/bid/55748 - http://www.securitytracker.com/id?1027648
CVE ID: CVE-2012-0307 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T18:23:30.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Symantec Messaging Gateway (SMG) before 10.0 allow remote attackers to inject arbitrary web script or HTML via (1) web content or (2) e-mail content. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120827_00 - http://www.securityfocus.com/bid/55138 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78031
CVE ID: CVE-2012-0308 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T18:23:30.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120827_00 - http://www.securityfocus.com/bid/55137
CVE ID: CVE-2012-0309 State: PUBLISHED Published: 2012-01-13T02:00:00 Last Updated: 2024-08-06T18:23:30.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000001 - http://www.securityfocus.com/bid/51375 - http://www.cogentdatahub.com/ReleaseNotes.html - http://www.us-cert.gov/control_systems/pdf/ICSA-12-016-01.pdf - http://secunia.com/advisories/
b.com/ReleaseNotes.html - http://www.us-cert.gov/control_systems/pdf/ICSA-12-016-01.pdf - http://secunia.com/advisories/47525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72305 - http://jvn.jp/en/jp/JVN12983784/index.html - http://secunia.com/advisories/47496
CVE ID: CVE-2012-0310 State: PUBLISHED Published: 2012-01-13T02:00:00 Last Updated: 2024-08-06T18:23:29.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51375 - http://www.cogentdatahub.com/ReleaseNotes.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72306 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-01
tml - https://exchange.xforce.ibmcloud.com/vulnerabilities/72306 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-016-01.pdf - http://secunia.com/advisories/47525 - http://jvn.jp/en/jp/JVN63249231/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000002 - http://secunia.com/advisories/47496
CVE ID: CVE-2012-0311 State: PUBLISHED Published: 2012-01-26T15:00:00Z Last Updated: 2024-09-16T17:28:07.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000004 - http://sourceforge.jp/forum/forum.php?forum_id=28119 - http://jvn.jp/en/jp/JVN36559450/index.html
CVE ID: CVE-2012-0312 State: PUBLISHED Published: 2012-01-26T15:00:00Z Last Updated: 2024-09-16T23:57:01.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online Merchant before 2.3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000005 - http://sourceforge.jp/forum/forum.php?forum_id=28119 - http://jvn.jp/en/jp/JVN64386898/index.html
CVE ID: CVE-2012-0313 State: PUBLISHED Published: 2012-01-24T02:00:00Z Last Updated: 2024-09-16T23:36:36.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in glucose 2 before stage 6.2 allows remote attackers to inject arbitrary web script or HTML via an RSS feed. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN65869891/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000008 - http://glucose.jp/release/19
CVE ID: CVE-2012-0314 State: PUBLISHED Published: 2012-02-03T02:00:00 Last Updated: 2024-08-06T18:23:30.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the eAccess Pocket WiFi (aka GP02) router before 2.00 with firmware 11.203.11.05.168 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51782 - http://secunia.com/advisories/47795 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000010 - http://emobile.jp/topics/info20120201_01.html
cunia.com/advisories/47795 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000010 - http://emobile.jp/topics/info20120201_01.html - http://jvn.jp/en/jp/JVN33021167/index.html
CVE ID: CVE-2012-0315 State: PUBLISHED Published: 2012-02-22T11:00:00Z Last Updated: 2024-09-17T00:50:50.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in ALFTP before 5.31 allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN85695061/995223/index.html - http://www.altools.jp/download.aspx - http://jvn.jp/en/jp/JVN85695061/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-
http://www.altools.jp/download.aspx - http://jvn.jp/en/jp/JVN85695061/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000011 - http://www.altools.jp/ETC/NEWS.aspx?mid=231&vidx=118
CVE ID: CVE-2012-0316 State: PUBLISHED Published: 2012-03-02T00:00:00 Last Updated: 2024-08-06T18:23:29.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cookpad 1.5.16 and earlier and Cookpad Noseru 1.1.1 and earlier applications for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000014 - http://jvn.jp/en/jp/JVN25731073/index.html - http://secunia.com/advisories/48065 - http://cookpad.typepad.jp/help/2012/02/23oshirase.html - http://www.securityfocus.com/bid/52189 - http://osvdb.
/48065 - http://cookpad.typepad.jp/help/2012/02/23oshirase.html - http://www.securityfocus.com/bid/52189 - http://osvdb.org/79643
CVE ID: CVE-2012-0317 State: PUBLISHED Published: 2012-03-03T02:00:00 Last Updated: 2024-08-06T18:23:30.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote attackers to hijack the authentication of arbitrary users for requests that modify data via the (1) commenting feature or (2) community script. Additional Analyst Notes: - CVE Program Container: References: - http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html - http://www.securityfocus.com/bid/52138 - http://www.debian.org/security/2012/dsa-2423 - http://
_security_updates.html - http://www.securityfocus.com/bid/52138 - http://www.debian.org/security/2012/dsa-2423 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000015 - http://www.securitytracker.com/id?1026738 - http://www.movabletype.org/documentation/appendices/release-notes/513.html - http://jvn.jp/en/jp/JVN70683217/index.html
CVE ID: CVE-2012-0318 State: PUBLISHED Published: 2012-03-03T02:00:00 Last Updated: 2024-08-06T18:23:30.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote attackers to inject arbitrary web script or HTML via vectors involving templates, a different issue than CVE-2012-1262. Additional Analyst Notes: - CVE Program Container: References: - http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html - http://www.securityfocus.com/bid/52138 - http://www.debian.org/security/2012/dsa-2423 - http://www.securitytracker.com/id?1026
/www.securityfocus.com/bid/52138 - http://www.debian.org/security/2012/dsa-2423 - http://www.securitytracker.com/id?1026738 - http://www.movabletype.org/documentation/appendices/release-notes/513.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000016 - http://jvn.jp/en/jp/JVN49836527/index.html
CVE ID: CVE-2012-0319 State: PUBLISHED Published: 2012-03-03T02:00:00 Last Updated: 2024-08-06T18:23:30.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote authenticated users to execute arbitrary commands by leveraging the file-upload feature, related to an "OS Command Injection" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000017 - http://www.securityfocus.com/bid/52138 - http://www.debian.org/security/2012/dsa-2423 - htt
jp/jvndb/JVNDB-2012-000017 - http://www.securityfocus.com/bid/52138 - http://www.debian.org/security/2012/dsa-2423 - http://www.securitytracker.com/id?1026738 - http://www.movabletype.org/documentation/appendices/release-notes/513.html - http://jvn.jp/en/jp/JVN92683325/index.html
CVE ID: CVE-2012-0320 State: PUBLISHED Published: 2012-03-03T02:00:00 Last Updated: 2024-08-06T18:23:30.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script. Additional Analyst Notes: - CVE Program Container: References: - http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html - http://jvn.jp/en/jp/JVN20083397/index.html - http://www.securityfocus.com/bid/52138 - http://www.debian.org/security/2012/dsa-2423 - http://www.securitytracker.com/id?1026738
w.securityfocus.com/bid/52138 - http://www.debian.org/security/2012/dsa-2423 - http://www.securitytracker.com/id?1026738 - http://www.movabletype.org/documentation/appendices/release-notes/513.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000018
CVE ID: CVE-2012-0321 State: PUBLISHED Published: 2012-03-02T22:00:00Z Last Updated: 2024-09-16T23:50:31.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the device driver in Kingsoft Internet Security 2011 allows local users to cause a denial of service via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000019 - http://www.kingsoft.jp/support/security/support_news/supportnews_20120229 - http://jvn.jp/en/jp/JVN31517714/index.html
CVE ID: CVE-2012-0322 State: PUBLISHED Published: 2012-03-05T21:00:00Z Last Updated: 2024-09-17T02:21:08.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly restrict access, which allows remote attackers to read arbitrary files via vectors involving an unspecified function. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000020 - http://jvn.jp/en/jp/JVN08871006/index.html
CVE ID: CVE-2012-0323 State: PUBLISHED Published: 2012-03-09T11:00:00Z Last Updated: 2024-09-16T19:19:30.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Autocomplete plugin before 3.0 for SquirrelMail allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000021 - http://squirrelmail.org/plugin_view.php?id=32 - http://jvn.jp/en/jp/JVN56653852/index.html
CVE ID: CVE-2012-0324 State: PUBLISHED Published: 2012-03-09T11:00:00 Last Updated: 2024-08-06T18:23:30.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0325. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000022 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-03-05.cb - http://www.securityfocus.com/bi
22 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-03-05.cb - http://www.securityfocus.com/bid/52384 - http://jvn.jp/en/jp/JVN14791558/index.html
CVE ID: CVE-2012-0325 State: PUBLISHED Published: 2012-03-09T11:00:00 Last Updated: 2024-08-06T18:23:30.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0324. Additional Analyst Notes: - CVE Program Container: References: - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-03-05.cb - http://jvn.jp/en/jp/JVN79950061/index.html - http://www.securityfocus.com/bid
/jenkins-security-advisory-2012-03-05.cb - http://jvn.jp/en/jp/JVN79950061/index.html - http://www.securityfocus.com/bid/52384 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000023
CVE ID: CVE-2012-0326 State: PUBLISHED Published: 2012-03-17T10:00:00 Last Updated: 2024-08-06T18:23:30.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73951 - https://play.google.com/store/apps/details?id=jp.r246.twicca - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000024 - http://twicca.r246.jp/notice/ - http://www.securityfocus.com/bid/52442 - http://osvdb.org/80
p/jvndb/JVNDB-2012-000024 - http://twicca.r246.jp/notice/ - http://www.securityfocus.com/bid/52442 - http://osvdb.org/80106 - http://jvn.jp/en/jp/JVN31860555/index.html
CVE ID: CVE-2012-0327 State: PUBLISHED Published: 2012-04-04T10:00:00 Last Updated: 2024-08-06T18:23:30.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52447 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000025 - http://jvn.jp/en/jp/JVN93406632/index.html - http://www.redmine.org/versions/42
CVE ID: CVE-2012-0328 State: PUBLISHED Published: 2012-03-19T21:00:00 Last Updated: 2024-08-06T18:23:30.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Janetter before 3.3.0.0 (aka 3.3.0) allows remote attackers to obtain session information for twitter.com web sites via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000026 - http://www.securityfocus.com/bid/52555 - http://janetter.net/history.html - http://jvn.jp/en/jp/JVN10745573/index.html - http://secunia.com/advisories/48480 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74132 - http://blog.janetter.net/ - http://osvdb.org/80334
CVE ID: CVE-2012-0329 State: PUBLISHED Published: 2012-01-19T15:00:00 Last Updated: 2024-08-06T18:23:30.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026541 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120118-dmm
CVE ID: CVE-2012-0330 State: PUBLISHED Published: 2012-03-01T01:00:00Z Last Updated: 2024-09-16T19:20:14.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a malformed SIP message, aka Bug ID CSCtr20426. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-vcs
CVE ID: CVE-2012-0331 State: PUBLISHED Published: 2012-03-01T01:00:00Z Last Updated: 2024-09-16T17:08:48.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a crafted SIP packet, as demonstrated by a SIP INVITE message from a Tandberg device, aka Bug ID CSCtq73319. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-vcs