Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
%3Aorg.mitre.oval%3Adef%3A16170 - http://www.securityfocus.com/bid/53578 - http://lists.apple.com/archives/security-announce/2012/May/msg00005.html
CVE ID: CVE-2012-0266 State: PUBLISHED Published: 2012-01-15T02:00:00 Last Updated: 2024-08-06T18:16:20.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long bstrParams parameter to the Check method, a long bstrUrl parameter to the (3) Download or (4) DownloadModule method during construction of a .ntr pathname, or a long bstrUrl parameter to the (5) Download or (6) DownloadModule method during construction of a URL. Additional Analyst Notes: - CVE Program Container: References: - http
ownloadModule method during construction of a URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2012-1/ - http://archives.neohapsis.com/archives/bugtraq/2012-01/0074.html - http://www.exploit-db.com/exploits/21841 - http://secunia.com/advisories/45166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72292 - http://osvdb.org/78252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72291
CVE ID: CVE-2012-0267 State: PUBLISHED Published: 2012-01-15T02:00:00 Last Updated: 2024-08-06T18:16:20.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45166 - http://www.exploit-db.com/exploits/21839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72295 - http://secunia.com/secunia_research/2012-2/
CVE ID: CVE-2012-0268 State: PUBLISHED Published: 2012-01-19T15:00:00Z Last Updated: 2024-09-17T01:46:26.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47041
CVE ID: CVE-2012-0269 State: PUBLISHED Published: 2012-04-27T18:00:00Z Last Updated: 2024-09-16T19:01:01.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and 2010, JUST Jump 4, JUST Frontier, oreplug, Shuriken Pro4, Shuriken 2007 through 2010, Shuriken Pro4 Corporate Edition, Shuriken CE/2007 through CE/2009 Corporate Edition, Shuriken 2010 Corporate Edition, Rekishimail Sengokubusho no missho, and Bakumatsushishi no missho allows remote attackers to execute arbitrary code via a craft
mail Sengokubusho no missho, and Bakumatsushishi no missho allows remote attackers to execute arbitrary code via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN09619876/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000035 - http://www.justsystems.com/jp/info/js12001.html
CVE ID: CVE-2012-0270 State: PUBLISHED Published: 2014-02-17T16:00:00 Last Updated: 2024-08-06T18:23:29.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted (1) hetro file to the getnum function in util/heti_main.c or (2) PVOC file to the getnum function in util/pv_import.c. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2012-3/ - http://secunia.com/advisories/47585 - http://sourceforge.net/projects/csound/files/csound5/csound5.16/Version5.16_Notes/view - http://lists.opensuse.org/opensuse-security-announ
net/projects/csound/files/csound5/csound5.16/Version5.16_Notes/view - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00027.html - http://lists.opensuse.org/opensuse-updates/2012-03/msg00027.html
CVE ID: CVE-2012-0271 State: PUBLISHED Published: 2012-09-19T10:00:00 Last Updated: 2024-08-06T18:23:29.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before SP1 might allow remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow, as demonstrated by a request with -1 in the Content-Length HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7010769 - http://www.protekresearchlab.com/index.php?option=com_content&view=
ttp://www.novell.com/support/kb/doc.php?id=7010769 - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=61&Itemid=61 - https://bugzilla.novell.com/show_bug.cgi?id=746199 - http://osvdb.org/85426
CVE ID: CVE-2012-0272 State: PUBLISHED Published: 2012-09-19T10:00:00 Last Updated: 2024-08-06T18:23:29.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML via the merge parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=702785 - http://www.securitytracker.com/id?1027615 - http://www.novell.com/support/kb/doc.php?id=7010368 - https://bugzilla.novell.com/show_bug.cgi?id=740563
CVE ID: CVE-2012-0273 State: PUBLISHED Published: 2014-06-20T14:00:00 Last Updated: 2024-08-06T18:23:29.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in MinaliC 2.0.0 allow remote attackers to execute arbitrary code via a (1) session_id cookie in a request to the get_cookie_value function in response.c, (2) directory name in a request to the add_default_file function in response.c, or (3) file name in a request to the retrieve_physical_file_name_or_brows function in response.c. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74651
ontainer: References: - http://secunia.com/advisories/45462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74651 - http://secunia.com/secunia_research/2012-5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74652 - http://www.securityfocus.com/bid/52873
CVE ID: CVE-2012-0275 State: PUBLISHED Published: 2012-09-04T10:00:00 Last Updated: 2024-08-06T18:23:29.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted TIFF image with SGI24LogLum compression. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78185 - http://www.adobe.com/support/security/bulletins/apsb12-20.html - http://secunia.com/secunia_research/2012-29/ - http:/
- http://www.adobe.com/support/security/bulletins/apsb12-20.html - http://secunia.com/secunia_research/2012-29/ - http://www.adobe.com/support/security/bulletins/apsb12-11.html - http://www.securitytracker.com/id?1027477
CVE ID: CVE-2012-0276 State: PUBLISHED Published: 2012-07-17T21:00:00 Last Updated: 2024-08-06T18:23:29.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a (1) SGI32LogLum compressed TIFF image or (2) SGI32LogLum compressed TIFF image with the PhotometricInterpretation encoding set to LogL. Additional Analyst Notes: - CVE Program Container: References: - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=49 - http://newsgroup.xnview.com/viewtopic.php?f=35&t=25858 - http://secunia.com
.php?option=com_content&view=article&id=49 - http://newsgroup.xnview.com/viewtopic.php?f=35&t=25858 - http://secunia.com/advisories/48666 - http://www.exploit-db.com/exploits/19338 - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=48 - http://www.exploit-db.com/exploits/19337
CVE ID: CVE-2012-0277 State: PUBLISHED Published: 2012-07-17T21:00:00 Last Updated: 2024-08-06T18:23:29.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PCT image. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/19336 - http://newsgroup.xnview.com/viewtopic.php?f=35&t=25858 - http://secunia.com/advisories/48666 - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=50
CVE ID: CVE-2012-0278 State: PUBLISHED Published: 2012-04-18T10:00:00 Last Updated: 2024-08-06T18:23:29.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a .fpx file containing a crafted FlashPix image that is not properly handled during decompression. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53009 - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=41&Itemid=41 - http://secunia.com/advisories/48772
CVE ID: CVE-2012-0279 State: PUBLISHED Published: 2012-05-01T23:00:00 Last Updated: 2024-08-06T18:23:29.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2012-13/ - http://secunia.com/advisories/48663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75192 - http://www.securityfocus.com/bid/53276
CVE ID: CVE-2012-0282 State: PUBLISHED Published: 2012-07-17T21:00:00 Last Updated: 2024-08-06T18:23:29.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ImageLeftPosition value in an ImageDescriptor structure in a GIF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/83086 - http://newsgroup.xnview.com/viewtopic.php?f=35&t=25858 - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=51 - http://secunia.com/advisories/48666 - http://www.explo
researchlab.com/index.php?option=com_content&view=article&id=51 - http://secunia.com/advisories/48666 - http://www.exploit-db.com/exploits/19335
CVE ID: CVE-2012-0283 State: PUBLISHED Published: 2012-07-13T21:00:00 Last Updated: 2024-08-06T18:23:29.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/54439 - http://security.gentoo.org/glsa/glsa-201301-07.xml - http://bugs.dokuwiki.org/index.php?do=details&task_id=2561 - http://lists.fedoraproject.org/pipermail/package-announce/2
http://bugs.dokuwiki.org/index.php?do=details&task_id=2561 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090755.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090938.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090899.html - http://secunia.com/secunia_research/2012-24/
CVE ID: CVE-2012-0284 State: PUBLISHED Published: 2012-07-19T15:00:00 Last Updated: 2024-08-06T18:23:29.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument (aka the sURL argument). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2012-25/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/77085 - http://archives.neohapsis.com/archives/bugtraq/2012-07/0113.html -
exchange.xforce.ibmcloud.com/vulnerabilities/77085 - http://archives.neohapsis.com/archives/bugtraq/2012-07/0113.html - http://www.securityfocus.com/bid/54588 - http://www.securitytracker.com/id?1027259
CVE ID: CVE-2012-0285 State: PUBLISHED Published: 2012-01-24T15:00:00Z Last Updated: 2024-09-17T01:16:11.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://infosec42.blogspot.com/2012/01/cve-2012-0285-and-cve-2012-0286.html - http://www.stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf - http://www.stone-ware.com/swql.jsp?kb=d1960
CVE ID: CVE-2012-0286 State: PUBLISHED Published: 2012-01-24T15:00:00Z Last Updated: 2024-09-16T18:28:34.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication of unspecified victims for requests that modify user accounts. Additional Analyst Notes: - CVE Program Container: References: - http://infosec42.blogspot.com/2012/01/cve-2012-0285-and-cve-2012-0286.html - http://www.stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf - http://www.stone-ware.com/swql.jsp?kb=d1960
CVE ID: CVE-2012-0287 State: PUBLISHED Published: 2012-01-06T02:00:00 Last Updated: 2024-08-06T18:23:29.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected" feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026542 - http://oldmanlab.blogspot.com/2012/01/wordpress-33-xss-vulnerability.html - http://www.securityfocus.com/bid/51237
42 - http://oldmanlab.blogspot.com/2012/01/wordpress-33-xss-vulnerability.html - http://www.securityfocus.com/bid/51237 - https://wordpress.org/news/2012/01/wordpress-3-3-1/
CVE ID: CVE-2012-0289 State: PUBLISHED Published: 2012-05-23T21:00:00 Last Updated: 2024-08-06T18:23:29.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec Network Access Control (SNAC) 11.0.600x through 11.0.710x allows local users to gain privileges, and modify data or cause a denial of service, via a crafted script. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120522_01 - http://www.securityfocus.com/bid/51795 - http://www.securitytrac
ory&pvid=security_advisory&year=2012&suid=20120522_01 - http://www.securityfocus.com/bid/51795 - http://www.securitytracker.com/id?1027093
CVE ID: CVE-2012-0290 State: PUBLISHED Published: 2012-02-06T20:00:00 Last Updated: 2024-08-06T18:23:29.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) do not properly handle the client state after abnormal termination of a remote session, which allows remote attackers to obtain access to the client by leveraging an "open client session." Additional Analyst Notes: - CVE Program Co
ackers to obtain access to the client by leveraging an "open client session." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51862 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72996 - http://secunia.com/advisories/48092
CVE ID: CVE-2012-0291 State: PUBLISHED Published: 2012-02-22T11:00:00 Last Updated: 2024-08-06T18:23:30.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allow remote attackers to cause a denial of service (application crash or hang) via (1) malformed data from a client, (2) malformed data from a server, or (3) an invalid response. Additional Analyst Notes: - CVE Program Container:
lient, (2) malformed data from a server, or (3) an invalid response. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00 - http://www.securityfocus.com/bid/51965 - http://secunia.com/advisories/48092
CVE ID: CVE-2012-0292 State: PUBLISHED Published: 2012-03-08T02:00:00 Last Updated: 2024-08-06T18:23:29.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5
ession on port 5631. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52094 - http://www.exploit-db.com/exploits/18493/ - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120301_00 - http://secunia.com/advisories/48092
CVE ID: CVE-2012-0293 State: PUBLISHED Published: 2012-03-17T10:00:00 Last Updated: 2024-08-06T18:23:30.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Symantec Altiris WISE Package Studio before 8.0MR1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80201 - http://www.securityfocus.com/bid/52392 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120314_00
CVE ID: CVE-2012-0294 State: PUBLISHED Published: 2012-05-23T21:00:00 Last Updated: 2024-08-06T18:23:30.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to delete files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120522_01 - http://www.securityfocus.com/bid/53182 - http://www.securitytracker.com/id?1027093
CVE ID: CVE-2012-0295 State: PUBLISHED Published: 2012-05-23T21:00:00 Last Updated: 2024-08-06T18:23:29.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120522_01 - http://www.securityfocus.com/bid/53184 - http://www.securityfocus.com/bid/53183 - htt
isory&year=2012&suid=20120522_01 - http://www.securityfocus.com/bid/53184 - http://www.securityfocus.com/bid/53183 - http://www.securitytracker.com/id?1027093
CVE ID: CVE-2012-0296 State: PUBLISHED Published: 2012-05-21T20:00:00Z Last Updated: 2024-09-16T18:23:52.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00 - http://www.securityfocus.com/bid/53396
CVE ID: CVE-2012-0297 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-06T18:23:30.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53444 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00 - https://exchange.xforce.ibmcloud.com/vulnerabi
fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75731
CVE ID: CVE-2012-0298 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-06T18:23:29.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to (1) read or (2) delete arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75732 - http://www.securityfocus.com/bid/53442