Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-4709 State: PUBLISHED Published: 2013-10-13T10:00:00Z Last Updated: 2024-09-16T19:31:54.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invensys Wonderware InTouch HMI 2012 R2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-276-01
CVE ID: CVE-2012-4710 State: PUBLISHED Published: 2013-04-04T16:00:00Z Last Updated: 2024-09-17T00:55:47.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-067-02.pdf
CVE ID: CVE-2012-4711 State: PUBLISHED Published: 2013-02-15T11:00:00 Last Updated: 2024-08-06T20:42:55.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-043-02.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-13-043-02A
CVE ID: CVE-2012-4712 State: PUBLISHED Published: 2013-02-15T11:00:00Z Last Updated: 2024-09-16T22:30:19.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-042-01.pdf - http://www.moxa.com/support/download.aspx?type=support&id=492
CVE ID: CVE-2012-4713 State: PUBLISHED Published: 2013-04-18T01:00:00Z Last Updated: 2024-09-16T19:46:05.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (service outage or RNADiagReceiver.exe daemon crash) via UDP data that specifies a negative integer value. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-095-02.pdf - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/5
- http://ics-cert.us-cert.gov/pdf/ICSA-13-095-02.pdf - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599
CVE ID: CVE-2012-4714 State: PUBLISHED Published: 2013-04-18T01:00:00Z Last Updated: 2024-09-16T20:46:39.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (service outage or RNADiagReceiver.exe daemon crash) via UDP data that specifies a large integer value. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-095-02.pdf - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599
CVE ID: CVE-2012-4715 State: PUBLISHED Published: 2013-04-18T10:00:00 Last Updated: 2024-08-06T20:42:54.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a UDP packet with a certain integer length value that is (1) too large or (2) too small, leading to improper handling by Logger.dll. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-095-02.pdf - https://rockwella
yst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-095-02.pdf - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599
CVE ID: CVE-2012-4716 State: PUBLISHED Published: 2015-06-13T18:00:00 Last Updated: 2024-08-06T20:42:55.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: N-Tron 702-W Industrial Wireless Access Point devices use the same (1) SSH and (2) HTTPS private keys across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-160-01
CVE ID: CVE-2012-4717 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-4718 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-4719 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-4720 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-4721 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-4722 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-4723 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-4724 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-4725 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-4726 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-4728 State: PUBLISHED Published: 2014-06-05T20:00:00 Last Updated: 2024-08-06T20:42:55.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) QProGetNotebookWindowHandle and (2) Ordinal132 functions in QPW160.dll in Corel Quattro Pro X6 Standard Edition 16.0.0.388 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted QPW file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82707 - http://osvdb.org/91040 - http://osvdb.org/91039 - http://packetstormsecurity.com/files/120713/Corel-Quattro-Pro-X6-Standard-Edition-NULL-Pointer-Dere
://osvdb.org/91039 - http://packetstormsecurity.com/files/120713/Corel-Quattro-Pro-X6-Standard-Edition-NULL-Pointer-Dereference.html - http://archives.neohapsis.com/archives/bugtraq/2013-03/0048.html - https://www.htbridge.com/advisory/HTB23112 - http://www.securityfocus.com/bid/58386
CVE ID: CVE-2012-4729 State: PUBLISHED Published: 2012-10-26T10:00:00 Last Updated: 2024-08-06T20:42:54.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wing FTP Server before 4.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via two zip commands. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-10/0052.html - http://www.securityfocus.com/bid/55847 - http://osvdb.org/86132 - http://www.wftpserver.com/serverhistory.htm
CVE ID: CVE-2012-4730 State: PUBLISHED Published: 2012-11-11T11:00:00Z Last Updated: 2024-09-16T23:56:34.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote authenticated users with ModifySelf or AdminUser privileges to inject arbitrary email headers and conduct phishing attacks or obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html
CVE ID: CVE-2012-4731 State: PUBLISHED Published: 2012-11-11T11:00:00Z Last Updated: 2024-09-16T17:38:59.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51111 - http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html - http://www.debian.org/security/2012/dsa-2568 - http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000215.html - http://secunia.com/ad
ty/2012/dsa-2568 - http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000215.html - http://secunia.com/advisories/51062
CVE ID: CVE-2012-4732 State: PUBLISHED Published: 2012-11-11T11:00:00 Last Updated: 2024-08-06T20:42:55.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html - http://osvdb.org/86714
CVE ID: CVE-2012-4733 State: PUBLISHED Published: 2013-08-23T16:00:00Z Last Updated: 2024-09-16T20:36:33.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html - http://www.osvdb.org/93611 - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html - http://secunia.com/advisories/53522
CVE ID: CVE-2012-4734 State: PUBLISHED Published: 2012-11-11T11:00:00 Last Updated: 2024-08-06T20:42:55.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote attackers to conduct a "confused deputy" attack to bypass the CSRF warning protection mechanism and cause victims to "modify arbitrary state" via unknown vectors related to a crafted link. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86709 - http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html
CVE ID: CVE-2012-4735 State: REJECTED Published: 2013-07-24T10:00:00Z Last Updated: 2024-09-16T16:33:50.120Z Description: No description available.
CVE ID: CVE-2012-4736 State: PUBLISHED Published: 2012-08-29T22:00:00 Last Updated: 2024-08-06T20:42:55.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block use of exFAT USB flash drives, which makes it easier for local users to bypass intended access restrictions and copy sensitive information to a drive via multiple removal and reattach operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.sophos.com/support/knowledgebase/1376/1380/114138.aspx - https://exchang
CVE Program Container: References: - http://www.sophos.com/support/knowledgebase/1376/1380/114138.aspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/78580
CVE ID: CVE-2012-4737 State: PUBLISHED Published: 2012-08-31T14:00:00 Last Updated: 2024-08-06T20:42:55.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert7, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 does not enforce ACL rules during certain uses of peer credentials, which allows remote authenticated users to bypass intended outbound-call restrictions by leveraging the availability of these credentials. Additional Analyst Notes: - CVE Program Container: References: - h
by leveraging the availability of these credentials. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2012-013.html - http://secunia.com/advisories/50687 - http://secunia.com/advisories/50756 - http://www.securitytracker.com/id?1027461 - http://www.debian.org/security/2012/dsa-2550 - http://www.securityfocus.com/bid/55335
CVE ID: CVE-2012-4739 State: PUBLISHED Published: 2012-08-31T20:00:00 Last Updated: 2024-08-06T20:42:54.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote attackers to inject arbitrary web script or HTML via the (1) policyLaunching, (2) resourcePrefix, or (3) actionPath parameter in showUserResourceCategories.do; (4) list or (5) path parameter to fileSystem.do; or (6) return-To parameter to launchAgent.do. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/54761 - https://www.barracudanetworks.com/ns/support/tech_alert
ontainer: References: - http://www.securityfocus.com/bid/54761 - https://www.barracudanetworks.com/ns/support/tech_alert.php - http://archives.neohapsis.com/archives/bugtraq/2012-08/0003.html - http://www.securitytracker.com/id?1027279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77365
CVE ID: CVE-2012-4740 State: PUBLISHED Published: 2012-08-31T22:00:00 Last Updated: 2024-08-06T20:42:55.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the captive portal in PacketFence before 3.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/mailarchive/message.php?msg_id=29126135 - http://www.securityfocus.com/bid/53027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74887 - http://secunia.com/advisories/48833
CVE ID: CVE-2012-4741 State: PUBLISHED Published: 2012-08-31T22:00:00 Last Updated: 2024-08-06T20:42:55.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication for users with custom VLAN assignment extensions, which allows remote attackers to spoof user identities via the User-Name RADIUS attribute. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/mailarchive/message.php?msg_id=29126135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78868 - http://www.packetfence.org/bugs/view.php?id=1390
CVE ID: CVE-2012-4742 State: PUBLISHED Published: 2012-08-31T22:00:00Z Last Updated: 2024-09-17T02:12:18.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web_node_register function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetfence.org/bugs/view.php?id=763 - http://www.packetfence.org/bugs/changelog_page.php
CVE ID: CVE-2012-4743 State: PUBLISHED Published: 2012-08-31T22:00:00 Last Updated: 2024-08-06T20:42:55.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the (1) ss, (2) sm, (3) align, or (4) category parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vulnerability-lab.com/get_content.php?id=504 - http://www.securityfocus.com/bid/53035 - http://osvdb.org/81178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74916 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0099.html
CVE ID: CVE-2012-4744 State: PUBLISHED Published: 2012-08-31T22:00:00 Last Updated: 2024-08-06T20:42:55.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vulnerability-lab.com/get_content.php?id=504 - http://www.osvdb.org/81179 - http://www.securityfocus.com/bid/53035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74914 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0099.html
CVE ID: CVE-2012-4745 State: PUBLISHED Published: 2012-08-31T22:00:00 Last Updated: 2024-08-06T20:42:55.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74919 - http://www.securityfocus.com/bid/53048 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0125.html - http://yehg.net/lab/pr0js/advisories/%5Bacuity_cms2.6.x_%28asp%29%5D_xss
CVE ID: CVE-2012-4746 State: PUBLISHED Published: 2012-08-31T22:00:00Z Last Updated: 2024-09-16T23:26:26.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0a_Z29_OV allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18722
CVE ID: CVE-2012-4747 State: PUBLISHED Published: 2012-09-04T10:00:00Z Last Updated: 2024-09-17T00:47:04.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to read (1) template (aka .tmpl) files, (2) other custom extension files under extensions/, or (3) custom documentation files under docs/ via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugzilla.org/security/3.6.10/ - https://bugzilla.mo
nal Analyst Notes: - CVE Program Container: References: - http://www.bugzilla.org/security/3.6.10/ - https://bugzilla.mozilla.org/show_bug.cgi?id=785511 - https://bugzilla.mozilla.org/show_bug.cgi?id=785522
CVE ID: CVE-2012-4750 State: PUBLISHED Published: 2020-01-13T19:37:03 Last Updated: 2024-08-06T20:42:55.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Code Execution vulnerability exists in the memcpy function when processing AMF requests in Ezhometech EzServer 7.0, which could let a remote malicious user execute arbitrary code or cause a Denial of Service Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79267 - https://www.securityfocus.com/archive/1/524430 - https://packetstormsecurity.com/files/117391/Ezhometech-EzServer-7.0-Remote-Heap-Corruption.html - https://www.securityfocus.com/bid/55938
CVE ID: CVE-2012-4751 State: PUBLISHED Published: 2012-10-22T16:00:00 Last Updated: 2024-08-06T20:42:55.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x before 3.0.17, and 3.1.x before 3.1.11 allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with whitespace before a javascript: URL in the SRC attribute of an element, as demonstrated by an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-01/msg00036.html - http://www.securityfocus.com/bid/56093 -
ferences: - http://lists.opensuse.org/opensuse-updates/2013-01/msg00036.html - http://www.securityfocus.com/bid/56093 - http://znuny.com/assets/proof_of_concept_cve_2012-4751-znuny.py - http://www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2012-03/ - http://znuny.com/en/#%21/advisory/ZSA-2012-03 - http://www.kb.cert.org/vuls/id/603276 - http://packetstormsecurity.org/files/117504/OTRS-3.1-Cross-Site-Scripting.html
CVE ID: CVE-2012-4752 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-09-16T23:46:49.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors. NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/11/1 - http://www.openwall.com/lists/oss-security/2012/09/02/2 - http://owncloud.org/changelog/ - https://github.com/owncloud/core/commit/9605e1926c6081e88326bf78a0
urity/2012/09/02/2 - http://owncloud.org/changelog/ - https://github.com/owncloud/core/commit/9605e1926c6081e88326bf78a02c1d1b83126c4f
CVE ID: CVE-2012-4753 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-09-16T23:30:31.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.5 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/changelog/
CVE ID: CVE-2012-4754 State: PUBLISHED Published: 2012-09-06T10:00:00Z Last Updated: 2024-09-17T04:24:37.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in MindManager 2012 10.0.493 allow local users to gain privileges via a Trojan horse (1) ssgp.dll or (2) dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mmap file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5068.php - http://secunia.com/advisories/47797
CVE ID: CVE-2012-4755 State: PUBLISHED Published: 2012-09-06T10:00:00Z Last Updated: 2024-09-17T00:17:28.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in SciTools Understand before 2.6 build 600 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .udb file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47921 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5071.php - http://www.scitools.com/support/buildLogs/und