Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ed independently in different ELF parser implementations. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80432 - http://www.securityfocus.com/archive/1/522005 - http://www.ieee-security.org/TC/SP2012/program.html
CVE ID: CVE-2012-1455 State: PUBLISHED Published: 2012-03-21T10:00:00 Last Updated: 2024-08-06T19:01:01.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMinor version field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/522005 - http://www.securityfocus.com/bid/52607 - http://www.ieee-secur
rences: - http://www.securityfocus.com/archive/1/522005 - http://www.securityfocus.com/bid/52607 - http://www.ieee-security.org/TC/SP2012/program.html
CVE ID: CVE-2012-1456 State: PUBLISHED Published: 2012-03-21T10:00:00 Last Updated: 2024-08-06T19:01:00.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, Rising Antivirus 22.83.00.03,
asher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, and Trend Micro HouseCall 9.120.0.1004 allows remote attackers to bypass malware detection via a TAR file with an appended ZIP file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80406 - http://www.securityfocus.com/archive/1/522005 - http://osvdb.
Program Container: References: - http://osvdb.org/80406 - http://www.securityfocus.com/archive/1/522005 - http://osvdb.org/80403 - http://osvdb.org/80389 - http://osvdb.org/80391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74289 - http://osvdb.org/80409 - http://osvdb.org/80396 - http://www.ieee-security.org/TC/SP2012/program.html - http://osvdb.org/80390 - http://www.securityfocus.com/bid/52608 - http://osvdb.org/80395
CVE ID: CVE-2012-1457 State: PUBLISHED Published: 2012-03-21T10:00:00 Last Updated: 2024-08-06T19:01:00.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158,
virus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size. NOTE: this may later be SPLIT into multiple CVEs if
ive entry with a length field that exceeds the total TAR file size. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html - http://osvdb.org/80406 - http://osvdb.org/80393 - http://www.securityfocus.com/archive/1/522005 - http://osvdb.org/80403 - http://osvdb.org/80389 - http://osvdb.org/80391 - http://osvdb.org/80409 - http://osvdb.org/80396 - http://osvdb.org/80392 - http://www.ieee-security.org/TC/SP2012/program.html - http://www.ma
- http://osvdb.org/80396 - http://osvdb.org/80392 - http://www.ieee-security.org/TC/SP2012/program.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:094 - http://www.securityfocus.com/bid/52610 - http://osvdb.org/80407 - http://osvdb.org/80395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74293
CVE ID: CVE-2012-1458 State: PUBLISHED Published: 2012-03-21T10:00:00 Last Updated: 2024-08-06T19:01:00.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CHM parser implementations. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html - http://www.securityfocus
ner: References: - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html - http://www.securityfocus.com/archive/1/522005 - http://www.securityfocus.com/bid/52611 - http://osvdb.org/80473 - http://www.ieee-security.org/TC/SP2012/program.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74301 - http://osvdb.org/80474 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:094
CVE ID: CVE-2012-1459 State: PUBLISHED Published: 2012-03-21T10:00:00 Last Updated: 2024-08-06T19:01:01.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 1
Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus 10.0.2.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBust
nt Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html - http://osvdb.org/80406 - http://osvdb.org/80393 - http://www.securityfocus
use-security-announce/2012-07/msg00002.html - http://osvdb.org/80406 - http://osvdb.org/80393 - http://www.securityfocus.com/archive/1/522005 - http://osvdb.org/80403 - http://osvdb.org/80389 - http://osvdb.org/80391 - http://osvdb.org/80409 - http://osvdb.org/80396 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74302 - http://osvdb.org/80392 - http://www.ieee-security.org/TC/SP2012/program.html - http://osvdb.org/80390 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:094 - http://osvdb.org/80407 - http://osvdb.org/80395 - http://www.securityfocus.com/bid/52623
CVE ID: CVE-2012-1460 State: PUBLISHED Published: 2012-03-21T10:00:00 Last Updated: 2024-08-06T19:01:02.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, and VBA32 3.12.14.2 allows remote attackers to bypass malware detection via a .tar.gz file with stray bytes at the end. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Gzip parser implementations. Additional Analyst No
published showing that the error occurred independently in different Gzip parser implementations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/522005 - http://www.securityfocus.com/bid/52629 - http://www.ieee-security.org/TC/SP2012/program.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74308
CVE ID: CVE-2012-1461 State: PUBLISHED Published: 2012-03-21T10:00:00 Last Updated: 2024-08-06T19:01:01.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AV
her) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, and VBA32 3.12.14.2 allows remote attackers to bypass malware detection via a .tar.gz file with multiple compressed streams. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Gzip parser implementations. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80502 - http://www.securityfocus.com/bid/52626 - http://www.security
E Program Container: References: - http://osvdb.org/80502 - http://www.securityfocus.com/bid/52626 - http://www.securityfocus.com/archive/1/522005 - http://osvdb.org/80504 - http://osvdb.org/80506 - http://www.ieee-security.org/TC/SP2012/program.html - http://osvdb.org/80500 - http://osvdb.org/80505 - http://osvdb.org/80501 - http://osvdb.org/80503 - http://osvdb.org/80510
CVE ID: CVE-2012-1462 State: PUBLISHED Published: 2012-03-21T10:00:00 Last Updated: 2024-08-06T19:01:01.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, Norman Antivirus 6.06.12, Sophos Anti-Virus 4.61.0, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote attackers to bypass malware detection via a ZIP file containing an invalid bl
antec Endpoint Protection 11 allows remote attackers to bypass malware detection via a ZIP file containing an invalid block of data at the beginning. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ZIP parser implementations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/522005 - http://www.ieee-security.org/TC/SP2012/program.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74310 - http://www.securityfocus.com/bid/52613
CVE ID: CVE-2012-1463 State: PUBLISHED Published: 2012-03-21T10:00:00 Last Updated: 2024-08-06T19:01:02.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified endianness field. NOTE: this may later be SPLIT into multiple
o bypass malware detection via an ELF file with a modified endianness field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/522005 - http://osvdb.org/80433 - http://www.securityfocus.com/bid/52614 - http://www.ieee-security.org/TC/SP2012/program.html - http://osvdb.org/80426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74311
CVE ID: CVE-2012-1464 State: PUBLISHED Published: 2012-03-19T19:00:00 Last Updated: 2024-08-06T19:01:02.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dashboard Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the installation path via a request with a trailing "?" character, which causes Dashboard to attempt to access a non-existent resource. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18543 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73549 - http://secpod.org/blog/?p=478 - http://osvdb.org/79653 - http:/
s://exchange.xforce.ibmcloud.com/vulnerabilities/73549 - http://secpod.org/blog/?p=478 - http://osvdb.org/79653 - http://www.securityfocus.com/bid/52645 - http://www.netmechanica.com/news/?news_id=26 - http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_Dashboard_Server_Info_Disc_Vuln.txt - http://secunia.com/advisories/48168
CVE ID: CVE-2012-1465 State: PUBLISHED Published: 2012-03-19T19:00:00 Last Updated: 2024-08-06T19:01:00.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of service (application crash) via a long URL in an HTTP request. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52194 - http://osvdb.org/79651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73528 - http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_HTTP_Server_
ge.xforce.ibmcloud.com/vulnerabilities/73528 - http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_HTTP_Server_DoS_Vuln.txt - http://www.securityfocus.com/bid/52208 - http://www.exploit-db.com/exploits/18541 - http://www.netmechanica.com/news/?news_id=26 - http://secpod.org/blog/?p=484 - http://secunia.com/advisories/48168
CVE ID: CVE-2012-1466 State: PUBLISHED Published: 2012-03-19T19:00:00 Last Updated: 2024-08-06T19:01:00.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Traffic Grapher Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the source code of NtDecision script files with a .nd extension via an invalid version number in an HTTP request, as demonstrated using default.nd. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secpod.org/blog/?p=481 - http://osvdb.org/79652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73531 - http://www.securityfocus.co
=481 - http://osvdb.org/79652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73531 - http://www.securityfocus.com/bid/52196 - http://www.exploit-db.com/exploits/18542 - http://www.netmechanica.com/news/?news_id=26 - http://secunia.com/advisories/48168 - http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_Traffic_Grapher_Server_SourceCode_Disc_Vuln.txt
CVE ID: CVE-2012-1467 State: PUBLISHED Published: 2012-09-06T21:00:00Z Last Updated: 2024-09-17T03:48:28.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3.7, allow remote authenticated users to (1) delete or (2) rename arbitrary files via a .. (dot dot) in the param parameter to lib/pkp/lib/tinymce/jscripts/tiny_mce/plugins/ibrowser/scripts/rfiles.php. Additional Analyst Notes: - CVE Program Container: References: - http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&t=8431 - https://www.htbridge.com/advisory/HTB23079
CVE ID: CVE-2012-1468 State: PUBLISHED Published: 2012-09-06T21:00:00Z Last Updated: 2024-09-17T03:42:40.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Author Role permission to execute arbitrary code by uploading a file with an executable extension that is not ".php", then accessing it via a direct request to the file in submission/original/ in the associated article directory, as demonstrated using .pHp, .asp, and other extensions. Additional Analyst Notes: - CVE Program Container: References: - http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&t=8431 - http:/
Analyst Notes: - CVE Program Container: References: - http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&t=8431 - http://pkp.sfu.ca/ojs/RELEASE-2.3.7 - https://www.htbridge.com/advisory/HTB23079
CVE ID: CVE-2012-1469 State: PUBLISHED Published: 2012-09-06T21:00:00 Last Updated: 2024-08-06T19:01:01.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems before 2.3.7 allow remote attackers and remote authenticated users to inject arbitrary web script or HTML via the (1) editor or (2) callback parameters to lib/pkp/lib/tinymce/jscripts/tiny_mce/plugins/ibrowser/ibrowser.php in the iBrowser plugin, (3) authors[][url] parameter to index.php, or (4) Bio Statement or (5) Abstract of Submission fields to the stripUnsafeHtml function in lib/pkp/classes/core/String.inc.php. Additional Analyst Notes: - CVE Prog
sion fields to the stripUnsafeHtml function in lib/pkp/classes/core/String.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&t=8431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74228 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74225 - http://secunia.com/advisories/48449 - http://pkp.sfu.ca/ojs/RELEASE-2.3.7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74227 - http://www.osvdb.org/80257 - https://www.htbridge.com/advisory/HTB23079 - http://www.osvdb.org/80255 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0102.html - http://secunia.com/advisories/48464 - http://www.osvdb.org/8025
hives.neohapsis.com/archives/bugtraq/2012-03/0102.html - http://secunia.com/advisories/48464 - http://www.osvdb.org/80256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74226
CVE ID: CVE-2012-1470 State: PUBLISHED Published: 2012-10-01T23:00:00Z Last Updated: 2024-09-17T01:21:49.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in code_editor.php in ocPortal before 7.1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) path or (2) line parameters. Additional Analyst Notes: - CVE Program Container: References: - http://ocportal.com/site/news/view/ocportal-security-update.htm - http://ocportal.com/site/news/view/new-releases/ocportal-7-1-6-released.htm - https://www.htbridge.com/advisory/HTB23078
CVE ID: CVE-2012-1471 State: PUBLISHED Published: 2012-10-01T23:00:00Z Last Updated: 2024-09-16T23:51:47.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in catalogue_file.php in ocPortal before 7.1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://ocportal.com/site/news/view/ocportal-security-update.htm - http://ocportal.com/site/news/view/new-releases/ocportal-7-1-6-released.htm - https://www.htbridge.com/advisory/HTB23078
CVE ID: CVE-2012-1472 State: PUBLISHED Published: 2012-03-13T01:00:00Z Last Updated: 2024-09-16T17:03:23.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary files or cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2012-0002.html
CVE ID: CVE-2012-1474 State: PUBLISHED Published: 2012-03-14T01:00:00Z Last Updated: 2024-09-16T20:27:29.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Youni SMS (com.snda.youni) application 2.1.0c and 2.1.0d for Android has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1474-vulnerability-in-YouniSMS.html
CVE ID: CVE-2012-1475 State: PUBLISHED Published: 2012-03-14T01:00:00Z Last Updated: 2024-09-17T01:06:40.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the YagattaTalk Messenger (com.iskoot.yagatta.yagattatalk) application 1.00.01.08 for Android has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1475-vulnerability-in-YagattaTalkMessenger.html
CVE ID: CVE-2012-1476 State: PUBLISHED Published: 2012-03-14T01:00:00Z Last Updated: 2024-09-16T20:58:30.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the KKtalk (com.kkliaotian.android) application 4.0.0 and 4.1.5 for Android has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1476-vulnerability-in-KKtalk.html
CVE ID: CVE-2012-1477 State: PUBLISHED Published: 2012-03-14T01:00:00Z Last Updated: 2024-09-16T19:24:53.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Cnectd (mci.cnectd) application 3.1.0 for Android has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1477-vulnerability-in-Cnectd.html