Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-4995 State: PUBLISHED Published: 2012-09-19T19:00:00 Last Updated: 2024-08-06T20:50:18.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/userrighthandling.php in LimeSurvey before 1.91+ Build 120224 allows remote attackers to inject arbitrary web script or HTML via the full_name parameter in a moduser action to admin/admin.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/79687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73563 - http://www.limesurvey.org/en/stable-release - http://freecode.com/p
exchange.xforce.ibmcloud.com/vulnerabilities/73563 - http://www.limesurvey.org/en/stable-release - http://freecode.com/projects/limesurvey/releases/342070 - http://secunia.com/advisories/48184
CVE ID: CVE-2012-4996 State: PUBLISHED Published: 2012-09-19T19:00:00 Last Updated: 2024-08-06T20:50:18.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to (1) dltorrent.php or (2) torrent_functions.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48245 - http://www.osvdb.org/79806 - http://www.securityfocus.com/bid/52283 - http://www.osvdb.org/79805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73679 - http://www.exploit-db.com/exploits/18553
CVE ID: CVE-2012-4997 State: PUBLISHED Published: 2012-09-19T19:00:00 Last Updated: 2024-08-06T20:50:18.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in acp/index.php in AneCMS allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52272 - http://www.exploit-db.com/exploits/18559 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73682
CVE ID: CVE-2012-4998 State: PUBLISHED Published: 2012-09-19T19:00:00 Last Updated: 2024-08-06T20:50:18.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in starCMS allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/110376/starcms-xss.txt - http://www.securityfocus.com/bid/52262 - http://osvdb.org/79739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73637
CVE ID: CVE-2012-4999 State: PUBLISHED Published: 2012-09-19T19:00:00 Last Updated: 2024-08-06T20:50:18.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service hang) via a crafted string in HTTP header fields such as (1) If-Modified-Since, (2) If-None-Match, or (3) If-Unmodified-Since. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73383 - http://archives.neohapsis.com/archives/bugtraq/2012-
8079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73383 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0116.html - http://www.securityfocus.com/bid/52106
CVE ID: CVE-2012-5000 State: PUBLISHED Published: 2012-09-19T19:00:00 Last Updated: 2024-08-06T20:50:18.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73681 - http://www.exploit-db.com/exploits/18558 - http://www.securityfocus.com/bid/52286 - http://secunia.com/advisories/48233 - http://www.osvdb.org/79807
CVE ID: CVE-2012-5001 State: PUBLISHED Published: 2012-09-19T19:00:00 Last Updated: 2024-08-06T20:50:18.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Hitachi JP1/Cm2/Network Node Manager i before 09-50-03 allow remote attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52205 - http://osvdb.org/79686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73545 - http://secunia.com/advisories/48201 - http://osvdb.org/79685 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS
ia.com/advisories/48201 - http://osvdb.org/79685 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-009/index.html
CVE ID: CVE-2012-5002 State: PUBLISHED Published: 2012-09-19T19:00:00 Last Updated: 2024-08-06T20:50:18.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command. Additional Analyst Notes: - CVE Program Container: References: - http://security.inshell.net/advisory/5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73591 - http://secunia.com/advisories/47912 - http://www.securityfocus.com/bid/52235 - http://www.osvdb.org/79691
CVE ID: CVE-2012-5003 State: PUBLISHED Published: 2012-09-19T21:00:00 Last Updated: 2024-08-06T20:50:18.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: nxapplet.jar in No Machine NX Web Companion 3.x and earlier does not properly verify the authenticity of updates, which allows user-assisted remote attackers to execute arbitrary code via a crafted (1) SiteUrl or (2) RedirectUrl parameter that points to a Trojan Horse client.zip update file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72712 - http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0466.html - h
.xforce.ibmcloud.com/vulnerabilities/72712 - http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0466.html - http://archives.neohapsis.com/archives/bugtraq/2012-01/0161.html
CVE ID: CVE-2012-5004 State: PUBLISHED Published: 2012-09-19T21:00:00 Last Updated: 2024-08-06T20:50:18.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3 Patch 1 allow remote attackers to hijack the authentication of admins for requests that (1) add group plans via admin/group_plans.html or (2) add extra packages via admin/extra_packs/create_extra_pack.html. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78505 - http://packetstormsecurity.org/files/view/108972/VL-392.txt - http://secunia.com/advisories/47556 - http://www.vulnerability-lab.com/get_content.php?i
/files/view/108972/VL-392.txt - http://secunia.com/advisories/47556 - http://www.vulnerability-lab.com/get_content.php?id=392 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72628
CVE ID: CVE-2012-5005 State: PUBLISHED Published: 2012-09-19T21:00:00 Last Updated: 2024-08-06T20:50:18.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/admin_options.php in VR GPub 4.0 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an add action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72745 - http://www.exploit-db.com/exploits/18418 - http://secunia.com/advisories/47729
CVE ID: CVE-2012-5006 State: PUBLISHED Published: 2012-09-19T21:00:00Z Last Updated: 2024-09-16T23:26:03.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in npdjvu.dll in Caminova DjVu Browser Plug-in 6.1.4 Build 27351 and other versions before 6.1.4.27993 allows remote attackers to execute arbitrary code via a crafted Sjbz chunk in a djvu file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51675 - http://secunia.com/advisories/46091 - http://www.caminova.com/en/downloads/download.aspx?id=1 - http://www.osvdb.org/78526
CVE ID: CVE-2012-5007 State: PUBLISHED Published: 2012-09-20T01:00:00Z Last Updated: 2024-09-16T18:49:28.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fill PDF module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to write to arbitrary PDF files via unspecified vectors related to the fillpdf_merge_pdf function and incorrect arguments, a different vulnerability than CVE-2012-1625. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51288 - http://drupal.org/node/1394428 - http://secunia.com/advisories/47418 - http://www.openwall.com/lists/oss-se
/bid/51288 - http://drupal.org/node/1394428 - http://secunia.com/advisories/47418 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://osvdb.org/78181
CVE ID: CVE-2012-5010 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T20:50:18.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASA 5515-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.4.x before 9.4.1 Interim, 9.2.x before 9.2.4 Interim, ASA 5510 Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 8.4.x before 8.4.7 Interim, 8.2.x before 8.2.5 Interim, 9.1.x before 9.1.6 Interim, ASA 5555-X Adaptive Security Appliance ASA for Application Centric Infrastructure (ACI) Device Package 1.2.4.x before 1.2.4.8, ASA 5512-X Adaptive Security Appliance ASA for Application Centric Infrastructure (ACI) Device Package
before 1.2.4.8, ASA 5512-X Adaptive Security Appliance ASA for Application Centric Infrastructure (ACI) Device Package 1.2.4.x before 1.2.4.8, ASA 5520 Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 8.2.x before 8.2.5 Interim, 8.4.x before 8.4.7 Interim, 9.1.x before 9.1.6 Interim, ASA 5505 Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.2.x before 9.2.4 Interim, 8.4.x before 8.4.7 Interim, 9.1.x before 9.1.6 Interim, ASA 5525-X Adaptive Security Appliance ASA for Application Centric Infrastructure (ACI) Device Package 1.2.4.x before 1.2.4.8, ASA 5512-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.4.x before 9.4.1
.x before 1.2.4.8, ASA 5512-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.4.x before 9.4.1 Interim, 9.2.x before 9.2.4 Interim or 9.2.4.SMP, 9.1.x before 9.1.6 Interim, ASA 5545-X Adaptive Security Appliance ASA for Application Centric Infrastructure (ACI) Device Package 1.2.4.x before 1.2.4.8, ASA 5585-X Adaptive Security Appliance ASA for Application Centric Infrastructure (ACI) Device Package 1.2.4.x before 1.2.4.8, ASA 5540 Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 8.2.x before 8.2.5 Interim, 8.4.x before 8.4.7 Interim, 9.1.x before 9.1.6 Interim, ASA 5515-X Adaptive Security Appliance ASA for Application Centric Infrastructure (A
nterim, 9.1.x before 9.1.6 Interim, ASA 5515-X Adaptive Security Appliance ASA for Application Centric Infrastructure (ACI) Device Package 1.2.4.x before 1.2.4.8, ASA 5555-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.2.x before 9.2.4 Interim or 9.2.4.SMP, 9.4.x before 9.4.1 Interim, 9.1.x before 9.1.6 Interim, ASA 5580 Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.1.x before 9.1.6 Interim, ASA 5585-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.2.x before 9.2.4 Interim, 9.4.x before 9.4.1 Interim, ASA 5525-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.4.x before 9.4.1 Interim, 9.
nterim, ASA 5525-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.4.x before 9.4.1 Interim, 9.2.x before 9.2.4 Interim or 9.2.4.SMP, 9.1.x before 9.1.6 Interim, ASA 5545-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.4.x before 9.4.1 Interim, 9.2.x before 9.2.4 Interim or 9.2.4.SMP. 9.1.x before 9.1.6 ASA does not check the source of the ARP request or GARP packets for addresses it performs NAT translation for under unspecified conditions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99332 - https://icisystem.blogspot.com/2016/01/cisco-notification-alert-asa-5500.html
CVE ID: CVE-2012-5014 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T20:50:18.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 15.1(2)SY allows remote authenticated users to cause a denial of service (device crash) by establishing an SSH session from a client and then placing this client into a (1) slow or (2) idle state, aka Bug ID CSCto87436. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf
CVE ID: CVE-2012-5017 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T20:50:18.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf
CVE ID: CVE-2012-5030 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-06T20:50:18.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 15.2(4)S6 does not initialize an unspecified variable, which might allow remote authenticated users to cause a denial of service (CPU consumption, watchdog timeout, crash) by walking specific SNMP objects. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisco.com/c/en/us/td/docs/ios/15_2s/release/notes/15_2s_rel_notes/15_2s_caveats_15_2_4s.html
CVE ID: CVE-2012-5032 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T20:50:18.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.1(1)SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an arbitrary device to become a cluster member, aka Bug ID CSCub93641. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf
CVE ID: CVE-2012-5036 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T20:50:18.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 12.2(50)SY1 allows remote authenticated users to cause a denial of service (memory consumption) via a sequence of VTY management sessions (aka exec sessions), aka Bug ID CSCtn43662. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SY/release/notes/ol_20679.html
CVE ID: CVE-2012-5037 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T20:50:18.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service (device reload) via a "no object-group" command followed by an object-group command, aka Bug ID CSCts16133. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf
CVE ID: CVE-2012-5039 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T20:50:18.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BGP Router process in Cisco IOS before 12.2(50)SY1 allows remote attackers to cause a denial of service (memory consumption) via vectors involving BGP path attributes, aka Bug ID CSCsw63003. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SY/release/notes/ol_20679.html
CVE ID: CVE-2012-5044 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T20:50:18.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a denial of service (media loops and stack memory corruption) via VoIP traffic, aka Bug ID CSCub45809. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/ios/15_3m_and_t/release/notes/15_3m_and_t.pdf
CVE ID: CVE-2012-5048 State: PUBLISHED Published: 2012-09-28T10:00:00 Last Updated: 2024-08-06T20:50:18.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55712 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-271-02.pdf
CVE ID: CVE-2012-5049 State: PUBLISHED Published: 2012-09-28T10:00:00 Last Updated: 2024-08-06T20:50:18.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55712 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-271-02.pdf
CVE ID: CVE-2012-5050 State: PUBLISHED Published: 2012-10-05T17:00:00 Last Updated: 2024-08-06T20:50:18.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the server in VMware vCenter Operations (aka vCOps) before 5.0.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2012-0014.html - http://www.securitytracker.com/id?1027612 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0069.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79044 - http://osvdb.org/85959 - http://se
traq/2012-10/0069.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79044 - http://osvdb.org/85959 - http://secunia.com/advisories/50795
CVE ID: CVE-2012-5051 State: PUBLISHED Published: 2012-10-05T17:00:00 Last Updated: 2024-08-06T20:50:18.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in VMware CapacityIQ 1.5.x allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2012-0014.html - http://archives.neohapsis.com/archives/bugtraq/2012-10/0069.html - http://www.securityfocus.com/bid/55808
CVE ID: CVE-2012-5053 State: PUBLISHED Published: 2013-03-07T00:00:00Z Last Updated: 2024-09-17T01:41:41.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Receiver Web User Interface on Trimble Infrastructure GNSS Series Receivers NetR3, NetR5, NetR8, and NetR9 before 4.70, and NetRS before 1.3-2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-01/0063.html - http://trl.trimble.com/docushare/dsweb/Get/Document-644791/Infrastructure_GNSS-SeriesReceivers_4.70_RelNotes.pdf - http
http://trl.trimble.com/docushare/dsweb/Get/Document-644791/Infrastructure_GNSS-SeriesReceivers_4.70_RelNotes.pdf - http://trl.trimble.com/docushare/dsweb/Get/Document-636664/NetRS_1%203-2_RelNotes.pdf
CVE ID: CVE-2012-5054 State: PUBLISHED Published: 2012-09-24T17:00:00.000Z Last Updated: 2025-10-22T00:05:46.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.adobe.com/support/security/bulletins/apsb12-19.html - http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78866 - http://www.vupen
x3D-Integer-Overflow-Code-Execution.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78866 - http://www.vupen.com/english/services/ba-index.php
CVE ID: CVE-2012-5055 State: PUBLISHED Published: 2012-12-05T17:00:00Z Last Updated: 2024-09-16T23:11:00.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the user is not found, which makes the response delay shorter and might allow remote attackers to enumerate valid usernames via a series of login requests. Additional Analyst Notes: - CVE Program Container: References: - http://support.springsource.com/security/CVE-2012-5055
CVE ID: CVE-2012-5056 State: PUBLISHED Published: 2014-06-04T14:00:00 Last Updated: 2024-08-06T20:50:18.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) readyCallback parameter to apps/files_odfviewer/src/webodf/webodf/flashput/PUT.swf, the (2) root parameter to apps/gallery/templates/index.php, or a (3) malformed query to lib/db.php. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/CVE-2012-5056/
CVE ID: CVE-2012-5057 State: PUBLISHED Published: 2014-06-04T14:00:00 Last Updated: 2024-08-06T20:50:18.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in ownCloud Server before 4.0.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the url path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/CVE-2012-5057/
CVE ID: CVE-2012-5058 State: PUBLISHED Published: 2012-10-17T10:00:00 Last Updated: 2024-08-06T20:50:18.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to the Web interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150