Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-4032 State: PUBLISHED Published: 2012-07-17T21:00:00 Last Updated: 2024-08-06T20:21:04.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in ReturnUrl to Default.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://websitepanel.codeplex.com/workitem/224 - http://osvdb.org/83689 - http://packetstormsecurity.org/files/114541/WebsitePanel-CMS-Open-Redirect.html - http://www.securityfocus.com/bid/54346 - http://secunia.com/advisories/49813 - https://exchange.xforc
en-Redirect.html - http://www.securityfocus.com/bid/54346 - http://secunia.com/advisories/49813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76803
CVE ID: CVE-2012-4033 State: PUBLISHED Published: 2012-07-18T18:00:00 Last Updated: 2024-08-06T20:21:04.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Zingiri Web Shop plugin before 2.4.0 for WordPress have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75044 - http://wordpress.org/extend/plugins/zingiri-web-shop/changelog/ - http://forums.zingiri.com/announcements.php?aid=2 - http://secunia.com/advisories/48909
CVE ID: CVE-2012-4034 State: PUBLISHED Published: 2012-08-12T00:00:00 Last Updated: 2024-08-06T20:21:04.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to the send page, (2) email parameter to the forget page, (3) password parameter to the forum_archive page, (4) section parameter to the management page, (5) section_id parameter to the managementreply page, (6) member_id parameter to the new_password page, or (7) subjectid parameter to the tags page to index.php. Additional Analyst Notes: - CVE Program Container: References: - https:/
jectid parameter to the tags page to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23101 - http://www.pbboard.com/forums/t10353.html - http://www.securityfocus.com/bid/54916 - http://www.pbboard.com/forums/t10352.html - http://osvdb.org/84480 - http://secunia.com/advisories/50153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77501
CVE ID: CVE-2012-4035 State: PUBLISHED Published: 2012-08-12T00:00:00 Last Updated: 2024-08-06T20:21:04.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: The new_password page in PBBoard 2.1.4 allows remote attackers to change the password of arbitrary user accounts via the member_id and new_password parameters to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23101 - http://www.pbboard.com/forums/t10353.html - http://osvdb.org/84481 - http://www.securityfocus.com/bid/54916 - http://www.pbboard.com/forums/t10352.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/77506 - http://secunia.com/advisories/5015
com/forums/t10352.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/77506 - http://secunia.com/advisories/50153
CVE ID: CVE-2012-4036 State: PUBLISHED Published: 2012-08-27T23:00:00 Last Updated: 2024-08-06T20:21:04.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the addons directory. NOTE: this vulnerability can be leveraged by remote attackers using CVE-2012-1216. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23101 - http://www.pbboard.com/forums/t10353.html - https://exchange.xforce.ibmcloud.com/vuln
w.htbridge.com/advisory/HTB23101 - http://www.pbboard.com/forums/t10353.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/77508 - http://www.securityfocus.com/bid/54916 - http://www.pbboard.com/forums/t10352.html - http://osvdb.org/84479 - http://secunia.com/advisories/50153
CVE ID: CVE-2012-4037 State: PUBLISHED Published: 2012-08-15T20:00:00 Last Updated: 2024-08-06T20:21:04.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) created by, or (3) name field in a torrent file. Additional Analyst Notes: - CVE Program Container: References: - http://www.madirish.net/541 - http://secunia.com/advisories/50769 - http://archives.neohapsis.com/archives/fulldisclosure/2012-07/0349.html - http://www.securityfocus.com/bid/54705 - https://trac.transmissionbt.com/wiki/Changes#versi
sclosure/2012-07/0349.html - http://www.securityfocus.com/bid/54705 - https://trac.transmissionbt.com/wiki/Changes#version-2.61 - https://trac.transmissionbt.com/ticket/4979 - http://secunia.com/advisories/50027 - http://www.ubuntu.com/usn/USN-1584-1
CVE ID: CVE-2012-4043 State: PUBLISHED Published: 2012-07-26T19:00:00Z Last Updated: 2024-09-17T00:05:33.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto Networks Global Protect Portal, Global Protect Gateway, and SSL VPN portals 3.1.x through 3.1.11 and 4.0.x through 4.0.5 allows remote attackers to inject arbitrary web script or HTML via the inputStr parameter in a Login action. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/83896 - http://blog.abhisek.me/2012/06/xss-on-palo-alto-networks-global.html
CVE ID: CVE-2012-4045 State: PUBLISHED Published: 2012-07-22T17:00:00 Last Updated: 2024-08-06T20:21:04.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbitrary code via the (1) strf chunk in BI_RGB or (2) UYVY video data in an AVI file, or (3) decompressed TechSmith Screen Capture Codec (TSCC) data in an AVI file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15335 - http://forums.winamp.com/showthread.php?t=345684 - http://secunia.com/advisories/46624 - ht
g.mitre.oval%3Adef%3A15335 - http://forums.winamp.com/showthread.php?t=345684 - http://secunia.com/advisories/46624 - http://www.securityfocus.com/bid/54131
CVE ID: CVE-2012-4046 State: PUBLISHED Published: 2012-12-24T18:00:00Z Last Updated: 2024-09-17T03:13:29.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link DCS-932L camera with firmware 1.02 allows remote attackers to discover the password via a UDP broadcast packet, as demonstrated by running the D-Link Setup Wizard and reading the _paramR["P"] value. Additional Analyst Notes: - CVE Program Container: References: - http://www.fishnetsecurity.com/6labs/blog/password-disclosure-d-link-surveillance-cameras-cve-2012-4046 - http://seclists.org/bugtraq/2012/Dec/98
CVE ID: CVE-2012-4048 State: PUBLISHED Published: 2012-07-24T19:00:00 Last Updated: 2024-08-06T20:28:05.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PPP dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted packet, as demonstrated by a usbmon dump. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49971 - http://www.debian.org/security/2012/dsa-2590 - http://secunia.com/advisories/54425 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1
/secunia.com/advisories/54425 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15547 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=680056 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://www.wireshark.org/security/wnpa-sec-2012-11.html - http://lists.opensuse.org/opensuse-updates/2012-08/msg00000.html
CVE ID: CVE-2012-4049 State: PUBLISHED Published: 2012-07-24T19:00:00 Last Updated: 2024-08-06T20:28:05.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://anonsvn.wireshark.org/viewvc?view=revision&revision=43576 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15707 - http://secunia.com/advisories/49971 - http://secunia.com/advisories/54425 -
ition/oval%3Aorg.mitre.oval%3Adef%3A15707 - http://secunia.com/advisories/49971 - http://secunia.com/advisories/54425 - http://www.wireshark.org/security/wnpa-sec-2012-12.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7436 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-nfs.c?r1=43576&r2=43575&pathrev=43576 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00000.html
CVE ID: CVE-2012-4050 State: PUBLISHED Published: 2012-07-24T19:00:00 Last Updated: 2024-08-06T20:28:06.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome OS before 21.0.1180.50 on the Cr-48 and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/07/beta-channel-update-for-chrome-os.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/77191
CVE ID: CVE-2012-4051 State: PUBLISHED Published: 2012-09-28T10:00:00Z Last Updated: 2024-09-17T03:47:41.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Suite before 8.61 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts or (2) change passwords via a Save action. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/555668 - http://infosec42.blogspot.com/2012/09/jamf-casper-suite-mdm-csrf-vulnerability.html - http://jamfsoftware.com/libr
668 - http://infosec42.blogspot.com/2012/09/jamf-casper-suite-mdm-csrf-vulnerability.html - http://jamfsoftware.com/libraries/pdf/products/documentation/Casper_Suite_8.61_Release_Notes.pdf
CVE ID: CVE-2012-4052 State: PUBLISHED Published: 2012-08-20T20:00:00Z Last Updated: 2024-09-16T23:21:38.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, or (3) comment parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.jease.org/download/2.9/ - https://www.htbridge.com/advisory/HTB23104 - https://groups.google.com/forum/?fromgroups#%21topic/jease/2BHaDww-5ac%5B1-25%5D
CVE ID: CVE-2012-4053 State: PUBLISHED Published: 2012-07-25T19:00:00 Last Updated: 2024-08-06T20:28:05.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/83676 - http://share.ez.no/community-project/security-advisories/ezsa-2012-009-ezoe-flash-player-csrf-security-issues - https://exchange.xforce.ibmcloud.com/vulnerabilities/76811 - http://secunia.com/advisories/49812
CVE ID: CVE-2012-4054 State: PUBLISHED Published: 2012-07-25T21:00:00 Last Updated: 2024-08-06T20:28:06.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the readfile function in CPE17 Autorun Killer 1.7.1 and earlier allows physically proximate attackers to execute arbitrary code via a crafted inf file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18792 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75238 - http://osvdb.org/81496 - http://www.securityfocus.com/bid/53286
CVE ID: CVE-2012-4055 State: PUBLISHED Published: 2012-07-25T21:00:00 Last Updated: 2024-08-06T20:28:07.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75288 - http://www.securityfocus.com/bid/53295 - http://packetstormsecurity.org/files/112287/Uiga-FanClub-SQL-Injection.html
CVE ID: CVE-2012-4056 State: PUBLISHED Published: 2012-07-25T21:00:00 Last Updated: 2024-08-06T20:28:05.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index2.php in Uiga Personal Portal allows remote attackers to execute arbitrary SQL commands via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112288/Uiga-Personal-Portal-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75281 - http://www.securityfocus.com/bid/53296
CVE ID: CVE-2012-4057 State: PUBLISHED Published: 2012-07-25T21:00:00 Last Updated: 2024-08-06T20:28:05.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Player in Remote-Anything 5.60.15 allows remote attackers to execute arbitrary code via a crafted flm file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49008 - http://www.securityfocus.com/bid/53303 - http://www.exploit-db.com/exploits/18799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75237
CVE ID: CVE-2012-4058 State: PUBLISHED Published: 2012-07-25T21:00:00 Last Updated: 2024-08-06T20:28:05.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75113 - http://packetstormsecurity.org/files/112090/SocketMail-Pro-2.2.9-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - http://osvdb.org/81532
CVE ID: CVE-2012-4059 State: PUBLISHED Published: 2012-07-25T21:00:00 Last Updated: 2024-08-06T20:28:06.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authentication of arbitrary users for requests that change user security questions and answers via an upd action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112090/SocketMail-Pro-2.2.9-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75114 - http://www.osvdb.org/81531
CVE ID: CVE-2012-4060 State: PUBLISHED Published: 2012-07-25T21:00:00 Last Updated: 2024-08-06T20:28:07.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) profile.asp, (2) forum.asp, or (3) topic.asp. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112259/ASP-DEv-XM-Forums-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75261 - http://www.securityfocus.com/bid/53292
CVE ID: CVE-2012-4061 State: PUBLISHED Published: 2012-07-25T21:00:00 Last Updated: 2024-08-06T20:28:06.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to diary_view.asp or (2) view_date parameter to default.asp. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112257/ASP-DEv-XM-Diary-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75262
CVE ID: CVE-2012-4063 State: PUBLISHED Published: 2012-10-01T23:00:00 Last Updated: 2024-08-06T20:28:06.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apache Santuario configuration in Eucalyptus before 3.1.1 does not properly restrict applying XML Signature transforms to documents, which allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78617 - http://www.eucalyptus.com/eucalyptus-cloud/security/esa-05
CVE ID: CVE-2012-4064 State: PUBLISHED Published: 2012-10-01T23:00:00Z Last Updated: 2024-09-16T16:17:39.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to gain privileges by sending a message to (1) Cloud Controller or (2) Walrus with the internal message format and a modified user id. Additional Analyst Notes: - CVE Program Container: References: - http://www.eucalyptus.com/eucalyptus-cloud/security/esa-06
CVE ID: CVE-2012-4065 State: PUBLISHED Published: 2012-10-01T23:00:00Z Last Updated: 2024-09-17T04:09:24.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to bypass unspecified authorization checks and obtain direct access to a (1) Cloud Controller or (2) Walrus service via a crafted message, as demonstrated by changes to a volume, snapshot, or cloud configuration setting. Additional Analyst Notes: - CVE Program Container: References: - http://www.eucalyptus.com/eucalyptus-cloud/security/esa-07
CVE ID: CVE-2012-4066 State: PUBLISHED Published: 2013-03-08T18:00:00Z Last Updated: 2024-09-16T17:14:53.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to (1) delete or (2) upload snapshots. Additional Analyst Notes: - CVE Program Container: References: - http://www.eucalyptus.com/eucalyptus-cloud/security/esa-08
CVE ID: CVE-2012-4067 State: PUBLISHED Published: 2013-09-17T01:00:00Z Last Updated: 2024-09-16T16:58:30.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted XML message containing a DTD, as demonstrated by a bucket-logging request. Additional Analyst Notes: - CVE Program Container: References: - https://eucalyptus.atlassian.net/browse/EUCA-5277 - http://www.eucalyptus.com/resources/security/advisories/esa-09
CVE ID: CVE-2012-4068 State: PUBLISHED Published: 2012-07-26T19:00:00 Last Updated: 2024-08-06T20:28:06.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string associated with date and time data. Additional Analyst Notes: - CVE Program Container: References: - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75311 - http://support.citri
-reports/articles/index.xhtml?id=979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75311 - http://support.citrix.com/article/ctx133039 - http://www.securitytracker.com/id?1027004 - http://osvdb.org/81664
CVE ID: CVE-2012-4069 State: PUBLISHED Published: 2012-08-12T17:00:00Z Last Updated: 2024-09-17T02:01:37.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dir2web 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request for system/db/website.db. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-08/0045.html
CVE ID: CVE-2012-4070 State: PUBLISHED Published: 2012-08-12T17:00:00Z Last Updated: 2024-09-16T21:07:59.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote attackers to execute arbitrary SQL commands via the oid parameter in a homepage action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-08/0045.html
CVE ID: CVE-2012-4071 State: PUBLISHED Published: 2012-08-10T10:00:00Z Last Updated: 2024-09-16T18:03:29.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to inject arbitrary web script or HTML via crafted BBCode markup in a comment. Additional Analyst Notes: - CVE Program Container: References: - http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html - http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142 - http://joomlacode.or
released_16845.0.html - http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142 - http://joomlacode.org/gf/project/rsgallery2/news/ - http://joomlacode.org/gf/download/frsrelease/17326/75428/com_rsgallery2_3.2.0.zip - http://joomlacode.org/gf/download/frsrelease/17325/75427/com_rsgallery2_2.3.0.zip
CVE ID: CVE-2012-4072 State: PUBLISHED Published: 2013-09-20T16:00:00 Last Updated: 2024-08-06T20:28:07.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate's private key, aka Bug ID CSCte90327. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029067 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4072
CVE ID: CVE-2012-4073 State: PUBLISHED Published: 2013-09-20T16:00:00 Last Updated: 2024-08-06T20:28:06.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KVM subsystem in the client in Cisco Unified Computing System (UCS) does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers, and read or modify KVM data, via a crafted certificate, aka Bug ID CSCte90332. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029068 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4073