Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/view.php?channel_id=1&id=155 - http://eromang.zataz.com/2012/02/15/cve-2012-0209-horde-backdoor-analysis/ - https://bugzilla.redhat.com/show_bug.cgi?id=790877 - http://packetstormsecurity.org/files/109874/Horde-3.3.12-Backdoor-Arbitrary-PHP-Code-Execution.html - http://lists.horde.org/archives/announce/2012/000751.html
CVE ID: CVE-2012-0210 State: PUBLISHED Published: 2012-06-16T00:00:00 Last Updated: 2024-08-06T18:16:20.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary code via the file name in a (1) .dsc or (2) .changes file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47955 - http://secunia.com/advisories/48039 - http://www.securityfocus.com/bid/52029 - http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=797ddc961532eb0aeb46153e3f28c8e9ea0500d2 - http://ubuntu.com/us
g/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=797ddc961532eb0aeb46153e3f28c8e9ea0500d2 - http://ubuntu.com/usn/usn-1366-1 - http://www.osvdb.org/79319 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73215 - http://www.debian.org/security/2012/dsa-2409
CVE ID: CVE-2012-0211 State: PUBLISHED Published: 2012-06-16T00:00:00 Last Updated: 2024-08-06T18:16:19.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package. Additional Analyst Notes: - CVE Program Container: References: - http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=9cbe605d3eab4f9e67525f69b676c55b273b7a03 - http://secunia.com/advisories/47955 - http://secunia.com/advisories/48039 - http://www.securityfocus.co
76c55b273b7a03 - http://secunia.com/advisories/47955 - http://secunia.com/advisories/48039 - http://www.securityfocus.com/bid/52029 - http://ubuntu.com/usn/usn-1366-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73216 - http://www.osvdb.org/79320 - http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=87f88232eb643f0c118c6ba38db8e966915b450f - http://www.debian.org/security/2012/dsa-2409
CVE ID: CVE-2012-0212 State: PUBLISHED Published: 2012-06-16T00:00:00 Last Updated: 2024-08-06T18:16:19.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument. Additional Analyst Notes: - CVE Program Container: References: - http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=9cbe605d3eab4f9e67525f69b676c55b273b7a03 - http://secunia.com/advisories/47955 - http://secunia.com/advisories/48039 - http://www.securityfocus.com/bid/52029 - http://www.osvdb.org/79322 - http://ubuntu.com/usn/u
nia.com/advisories/48039 - http://www.securityfocus.com/bid/52029 - http://www.osvdb.org/79322 - http://ubuntu.com/usn/usn-1366-1 - http://www.ubuntu.com/usn/USN-1593-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73217 - http://www.debian.org/security/2012/dsa-2409
CVE ID: CVE-2012-0213 State: PUBLISHED Published: 2012-08-07T21:00:00 Last Updated: 2024-08-06T18:16:19.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21996759 - http://secunia.com/advisories/49040 - https://wiki.mageia.org/en/Support
1.ibm.com/support/docview.wss?uid=swg21996759 - http://secunia.com/advisories/49040 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0044 - http://www.debian.org/security/2012/dsa-2468 - http://secunia.com/advisories/50549 - http://lists.fedoraproject.org/pipermail/package-announce/2012-August/084609.html - http://www.securityfocus.com/bid/53487 - http://rhn.redhat.com/errata/RHSA-2012-1232.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:094 - https://bugzilla.redhat.com/show_bug.cgi?id=799078
CVE ID: CVE-2012-0214 State: PUBLISHED Published: 2014-04-15T18:00:00 Last Updated: 2024-08-06T18:16:19.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pkgAcqMetaClearSig::Failed method in apt-pkg/acquire-item.cc in Advanced Package Tool (APT) 0.8.11 through 0.8.15.10 and 0.8.16 before 0.8.16~exp13, when updating from repositories that use InRelease files, allows man-in-the-middle attackers to install arbitrary packages by preventing a user from downloading the new InRelease file, which leaves the original InRelease file active and makes it more difficult to detect that the Packages file is modified and unsigned. Additional Analyst Notes: - CVE Program Container: Referenc
t to detect that the Packages file is modified and unsigned. Additional Analyst Notes: - CVE Program Container: References: - http://anonscm.debian.org/gitweb/?p=apt/apt.git%3Ba=commitdiff%3Bh=b7a6594d1e5ed199a7a472b78b33e070375d6f92 - http://www.ubuntu.com/usn/USN-1385-1 - http://anonscm.debian.org/gitweb/?p=apt/apt.git%3Ba=commitdiff%3Bh=de498a528cd6fc36c4bb22bf8dec6558e21cc9b6
CVE ID: CVE-2012-0215 State: PUBLISHED Published: 2012-07-12T20:00:00Z Last Updated: 2024-09-16T16:53:53.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenticated users to modify the privileges of arbitrary users via a (1) create, (2) write, (3) delete, or (4) copy rpc call. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2444 - https://bugs.tryton.org/issue2476 - http://hg.tryton.org/trytond/rev/8e64d52ecea4 - http://news.tryt
ity/2012/dsa-2444 - https://bugs.tryton.org/issue2476 - http://hg.tryton.org/trytond/rev/8e64d52ecea4 - http://news.tryton.org/2012/03/security-releases-for-all-supported.html
CVE ID: CVE-2012-0216 State: PUBLISHED Published: 2012-04-22T18:00:00 Last Updated: 2024-08-06T18:16:19.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when mod_php or mod_rivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting (XSS) attacks, gain privileges, or obtain sensitive information via vectors involving localhost HTTP requests to the Apache HTTP Server. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com
pache HTTP Server. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75211 - http://www.debian.org/security/2012/dsa-2452
CVE ID: CVE-2012-0217 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T18:16:19.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1; and possibly other operating systems, when running on an Intel processor, incorrectly uses the sysret path in cases where a certain address is not a canonical address, wh
on an Intel processor, incorrectly uses the sysret path in cases where a certain address is not a canonical address, which allows local users to gain privileges via a crafted application. NOTE: because this issue is due to incorrect use of the Intel specification, it should have been split into separate identifiers; however, there was some value in preserving the original mapping of the multi-codebase coordinated-disclosure effort to a single identifier. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - http://blog.xen.org/index.php/2012/06/13/the-intel-sysret-privilege-escalation/ -
t.gov/cas/techalerts/TA12-164A.html - http://blog.xen.org/index.php/2012/06/13/the-intel-sysret-privilege-escalation/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-042 - https://www.exploit-db.com/exploits/28718/ - https://bugzilla.redhat.com/show_bug.cgi?id=813428 - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2012-003.txt.asc - http://security.gentoo.org/glsa/glsa-201309-24.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15596 - http://www.debian.org/security/2012/dsa-2501 - http://blog.illumos.org/2012/06/14/illumos-vulnerability-patched/ - https://www.illumos.org/issues/2873 - http://lists.xen
tp://blog.illumos.org/2012/06/14/illumos-vulnerability-patched/ - https://www.illumos.org/issues/2873 - http://lists.xen.org/archives/html/xen-devel/2012-06/msg01072.html - http://www.debian.org/security/2012/dsa-2508 - http://lists.xen.org/archives/html/xen-announce/2012-06/msg00001.html - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://support.citrix.com/article/CTX133161 - https://www.exploit-db.com/exploits/46508/ - http://smartos.org/2012/06/15/smartos-news-3/ - http://wiki.smartos.org/display/DOC/SmartOS+Change+Log#SmartOSChangeLog-June14%2C2012 - http://www.kb.cert.org/vuls/id/649219 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 -
une14%2C2012 - http://www.kb.cert.org/vuls/id/649219 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://security.freebsd.org/advisories/FreeBSD-SA-12:04.sysret.asc
CVE ID: CVE-2012-0218 State: PUBLISHED Published: 2012-12-03T21:00:00 Last Updated: 2024-08-06T18:16:19.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 3.4, 4.0, and 4.1, when the guest OS has not registered a handler for a syscall or sysenter instruction, does not properly clear a flag for exception injection when injecting a General Protection Fault, which allows local PV guest OS users to cause a denial of service (guest crash) by later triggering an exception that would normally be handled within Xen. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.de
: References: - http://secunia.com/advisories/55082 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.debian.org/security/2012/dsa-2501 - http://lists.xen.org/archives/html/xen-announce/2012-06/msg00003.html
CVE ID: CVE-2012-0219 State: PUBLISHED Published: 2012-06-21T15:00:00 Last Updated: 2024-08-06T18:16:19.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLINE address. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49746 - http://www.securitytracker.com/id?1027064 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081882.html - http://security.gentoo.org/glsa/glsa-201208-01.xml - http://www.dest-unreach.org/socat/cont
unce/2012-June/081882.html - http://security.gentoo.org/glsa/glsa-201208-01.xml - http://www.dest-unreach.org/socat/contrib/socat-secadv3.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081619.html - http://www.lwn.net/Articles/504742/ - http://www.securityfocus.com/bid/53510 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:169 - http://www.osvdb.org/81969 - http://secunia.com/advisories/49105 - http://www.openwall.com/lists/oss-security/2012/05/14/2
CVE ID: CVE-2012-0220 State: PUBLISHED Published: 2012-05-29T20:00:00 Last Updated: 2024-08-06T18:16:19.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the (1) author or (2) authorurl meta tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2474 - http://secunia.com/advisories/49199 - http://osvdb.org/81995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75702 - http://www.securityfocus.com/bid/53599 - http://ikiwiki.info/news/vers
hange.xforce.ibmcloud.com/vulnerabilities/75702 - http://www.securityfocus.com/bid/53599 - http://ikiwiki.info/news/version_3.20120516/ - http://secunia.com/advisories/49232 - http://source.ikiwiki.branchable.com/?p=source.git%3Ba=commitdiff%3Bh=fbfcea89f8e06426c73ab8ea369ca4cdc566db6f
CVE ID: CVE-2012-0221 State: PUBLISHED Published: 2012-04-02T18:00:00Z Last Updated: 2024-09-17T01:11:29.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service (service outage) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://rockwellautomation.custhelp.com/app/answers/detail/a_id/469937 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-088-01.pdf
CVE ID: CVE-2012-0222 State: PUBLISHED Published: 2012-04-02T18:00:00Z Last Updated: 2024-09-16T19:50:52.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://rockwellautomation.custhelp.com/app/answers/detail/a_id/469937 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-088-01.pdf
CVE ID: CVE-2012-0223 State: PUBLISHED Published: 2012-02-22T11:00:00Z Last Updated: 2024-09-17T00:40:36.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in 7-Technologies (7T) TERMIS 2.10 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0224. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-025-02A.pdf
CVE ID: CVE-2012-0224 State: PUBLISHED Published: 2012-02-20T21:00:00 Last Updated: 2024-08-06T18:16:19.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in 7-Technologies (7T) AQUIS 1.5 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0223. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-025-01.pdf
CVE ID: CVE-2012-0225 State: PUBLISHED Published: 2012-04-02T20:00:00 Last Updated: 2024-08-06T18:16:19.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026886 - http://secunia.com/advisories/48603 - http://www.securityfocus.com/bid/52851 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf - http://www.securitytracker.com/id?1026887 - https://exchange.xforce.ibmcloud.com/vulnerabilit
s/pdf/ICSA-12-062-01.pdf - http://www.securitytracker.com/id?1026887 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74549 - http://osvdb.org/80888
CVE ID: CVE-2012-0226 State: PUBLISHED Published: 2012-04-02T20:00:00 Last Updated: 2024-08-06T18:16:19.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74550 - http://secunia.com/advisories/48603 - http://www.securityfocus.com/bid/52851 - http://osvdb.org/80889 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf - http://www.securitytracke
851 - http://osvdb.org/80889 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf - http://www.securitytracker.com/id?1026887
CVE ID: CVE-2012-0227 State: PUBLISHED Published: 2012-10-12T20:00:00 Last Updated: 2024-08-06T18:16:19.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the VSFlex7.VSFlexGrid ActiveX control in ComponentOne FlexGrid 7.1, as used in Open Automation Software OPC Systems.NET, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long archive file name argument to the Archive method. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-012-01A.pdf - http://www.securityfocus.com/bid/51601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72604 - http://ds
1A.pdf - http://www.securityfocus.com/bid/51601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72604 - http://dsecrg.com/pages/vul/show.php?id=406
CVE ID: CVE-2012-0228 State: PUBLISHED Published: 2012-04-02T20:00:00 Last Updated: 2024-08-06T18:16:19.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026886 - http://secunia.com/advisories/48603 - http://osvdb.org/80890 - http://www.securityfocus.com/bid/52851 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf - http://www.securitytracker.com/id?1026887
CVE ID: CVE-2012-0229 State: PUBLISHED Published: 2012-03-15T18:00:00 Last Updated: 2024-08-06T18:16:19.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted session on TCP port 14000 to (1) ihDataArchiver.exe or (2) ihDataArchiver_x64.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-01.pdf - http://www.securityfocus.com/bid/52437 - http://secunia.com/advisories/48369 - http://support.ge-ip.com/suppor
-01.pdf - http://www.securityfocus.com/bid/52437 - http://secunia.com/advisories/48369 - http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14767
CVE ID: CVE-2012-0230 State: PUBLISHED Published: 2012-03-15T18:00:00 Last Updated: 2024-08-06T18:16:19.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12299. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73956 - http://secunia.com/advisories/48415 - http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB1
erabilities/73956 - http://secunia.com/advisories/48415 - http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14766 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-02.pdf
CVE ID: CVE-2012-0231 State: PUBLISHED Published: 2012-03-15T18:00:00 Last Updated: 2024-08-06T18:16:19.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: PRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12401. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52434 - http://secunia.com/advisories/48415 - http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14766 - http://xforce.iss.net/xforce/xfdb/73957 - ht
8415 - http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14766 - http://xforce.iss.net/xforce/xfdb/73957 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-02.pdf
CVE ID: CVE-2012-0232 State: PUBLISHED Published: 2012-03-15T18:00:00 Last Updated: 2024-08-06T18:16:19.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6, 3.0, 3.0 SP1, and 3.5 allows remote attackers to modify the configuration via crafted strings. Additional Analyst Notes: - CVE Program Container: References: - http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14768 - http://www.securityfocus.com/bid/52439 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-03.pdf
CVE ID: CVE-2012-0233 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-06T18:16:19.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script or HTML via a malformed URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2012-0234 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-06T18:16:19.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via a malformed URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2012-0235 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-06T18:16:19.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051