Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-4608 State: PUBLISHED Published: 2012-12-05T11:00:00Z Last Updated: 2024-09-17T01:36:49.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-12/0002.html
CVE ID: CVE-2012-4609 State: PUBLISHED Published: 2012-12-05T11:00:00Z Last Updated: 2024-09-16T20:28:03.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-12/0002.html
CVE ID: CVE-2012-4610 State: PUBLISHED Published: 2012-10-31T10:00:00 Last Updated: 2024-08-06T20:42:54.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to the proxy client. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79661 - http://www.securityfocus.com/bid/56317 - http://www.securityfocus.com/archive/1/524532
CVE ID: CVE-2012-4611 State: PUBLISHED Published: 2012-11-27T21:00:00 Last Updated: 2024-08-06T20:42:54.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Adaptive Authentication On-Premise (AAOP) before 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56699 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0096.html - http://osvdb.org/87876 - http://www.securitytracker.com/id?1027811 - http://secunia.com/advisories/51394 - http://packetstormsecurity.com/files/118381/RSA-A
securitytracker.com/id?1027811 - http://secunia.com/advisories/51394 - http://packetstormsecurity.com/files/118381/RSA-Adaptive-Authentication-On-Premise-6.x-XSS.html
CVE ID: CVE-2012-4612 State: PUBLISHED Published: 2012-11-16T00:00:00 Last Updated: 2024-08-06T20:42:54.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EMC RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56506 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0050.html
CVE ID: CVE-2012-4613 State: PUBLISHED Published: 2012-11-16T00:00:00 Last Updated: 2024-08-06T20:42:55.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-11/0050.html - http://www.securityfocus.com/bid/56508
CVE ID: CVE-2012-4614 State: PUBLISHED Published: 2012-11-27T21:00:00 Last Updated: 2024-08-06T20:42:54.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of EMC Smarts Network Configuration Manager (NCM) before 9.1 does not require authentication for database access, which allows remote attackers to have an unspecified impact via a network session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027812 - http://secunia.com/advisories/51408 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0095.html - http://www.securityfocus.com/bid/56682 - http://osvdb.org/87877
CVE ID: CVE-2012-4615 State: PUBLISHED Published: 2012-11-27T21:00:00 Last Updated: 2024-08-06T20:42:54.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Smarts Network Configuration Manager (NCM) before 9.1 uses a hardcoded encryption key for the storage of credentials, which allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/87878 - http://www.securitytracker.com/id?1027812 - http://secunia.com/advisories/51408 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0095.html - http://www.securityfocus.com/bid/56682 - http://packetstormsecurity.org/files/118358/EMC-
es/bugtraq/2012-11/0095.html - http://www.securityfocus.com/bid/56682 - http://packetstormsecurity.org/files/118358/EMC-Smarts-Network-Configuration-Manager-Bypass.html
CVE ID: CVE-2012-4616 State: PUBLISHED Published: 2012-12-26T20:00:00Z Last Updated: 2024-09-17T00:20:31.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor (DPA) 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-12/0125.html
CVE ID: CVE-2012-4617 State: PUBLISHED Published: 2012-09-27T00:00:00 Last Updated: 2024-08-06T20:42:54.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BGP implementation in Cisco IOS 15.2, IOS XE 3.5.xS before 3.5.2S, and IOS XR 4.1.0 through 4.2.2 allows remote attackers to cause a denial of service (multiple connection resets) by leveraging a peer relationship and sending a malformed attribute, aka Bug IDs CSCtt35379, CSCty58300, CSCtz63248, and CSCtz62914. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-bgp - http://www.securityfocus.com/bid/55694 - http://www.secur
y/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-bgp - http://www.securityfocus.com/bid/55694 - http://www.securitytracker.com/id?1027576
CVE ID: CVE-2012-4618 State: PUBLISHED Published: 2012-09-27T00:00:00 Last Updated: 2024-08-06T20:42:55.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP ALG feature in the NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2 allows remote attackers to cause a denial of service (device reload) via transit IP packets, aka Bug ID CSCtn76183. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-nat - http://www.securitytracker.com/id?1027579 - http://www.securityfocus.com/bid/55693
CVE ID: CVE-2012-4619 State: PUBLISHED Published: 2012-09-27T00:00:00 Last Updated: 2024-08-06T20:42:54.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2 allows remote attackers to cause a denial of service (device reload) via transit IP packets, aka Bug ID CSCtr46123. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-nat - http://www.securityfocus.com/bid/55705 - http://www.securitytracker.com/id?1027579
CVE ID: CVE-2012-4620 State: PUBLISHED Published: 2012-09-27T00:00:00 Last Updated: 2024-08-06T20:42:54.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 and 15.0 through 15.2 on Cisco 10000 series routers, when a tunnel interface exists, allows remote attackers to cause a denial of service (interface queue wedge) via tunneled (1) GRE/IP, (2) IPIP, or (3) IPv6 in IPv4 packets, aka Bug ID CSCts66808. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-c10k-tunnels - http://www.securitytracker.com/id?1027578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7888
926-c10k-tunnels - http://www.securitytracker.com/id?1027578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78883 - http://www.securityfocus.com/bid/55696
CVE ID: CVE-2012-4621 State: PUBLISHED Published: 2012-09-27T00:00:00 Last Updated: 2024-08-06T20:42:54.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Device Sensor feature in Cisco IOS 15.0 through 15.2 allows remote attackers to cause a denial of service (device reload) via a DHCP packet, aka Bug ID CSCty96049. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027572 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-dhcp
CVE ID: CVE-2012-4622 State: PUBLISHED Published: 2012-09-27T00:00:00 Last Updated: 2024-08-06T20:42:54.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 03.02.00.XO.15.0(2)XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cause a denial of service (card reload) via malformed packets that trigger uncorrected ECC error messages, aka Bug ID CSCty88456. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-ecc - http://osvdb.org/85821 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78886 - http://www.s
sco-sa-20120926-ecc - http://osvdb.org/85821 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78886 - http://www.securityfocus.com/bid/55701 - http://www.securitytracker.com/id?1027573
CVE ID: CVE-2012-4623 State: PUBLISHED Published: 2012-09-27T00:00:00 Last Updated: 2024-08-06T20:42:54.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCPv6 server in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x, 3.1.xS before 3.1.4S, 3.1.xSG and 3.2.xSG before 3.2.5SG, 3.2.xS, 3.2.xXO, 3.3.xS, and 3.3.xSG before 3.3.1SG allows remote attackers to cause a denial of service (device reload) via a malformed DHCPv6 packet, aka Bug ID CSCto57723. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78885 - http://osvdb.org/85810 - http://www.securitytracker.com/id?1027577 - h
hange.xforce.ibmcloud.com/vulnerabilities/78885 - http://osvdb.org/85810 - http://www.securitytracker.com/id?1027577 - http://www.securityfocus.com/bid/55700 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-dhcpv6
CVE ID: CVE-2012-4629 State: PUBLISHED Published: 2012-09-12T23:00:00 Last Updated: 2024-08-06T20:42:54.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances (ASA) devices, and Prime Security Manager (aka PRSM) before 9.0.2-103, allows remote attackers to cause a denial of service (disk consumption and application hang) via unspecified IPv4 packets that trigger log entries, aka Bug ID CSCub70603. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-asacx - http://www.securityfocus.com/bid/
ools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-asacx - http://www.securityfocus.com/bid/55515
CVE ID: CVE-2012-4638 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T20:42:54.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 15.1(1)SY allows local users to cause a denial of service (device reload) by establishing an outbound SSH session, aka Bug ID CSCto00318. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf
CVE ID: CVE-2012-4643 State: PUBLISHED Published: 2012-10-29T20:00:00 Last Updated: 2024-08-06T20:42:55.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 before 7.2(5.8), 7.1 before 7.2(5.8), 7.2 before 7.2(5.8), 8.0 before 8.0(5.28), 8.1 before 8.1(2.56), 8.2 before 8.2(5.27), 8.3 before 8.3(2.31), 8.4 before 8.4(3.10), 8.5 before 8.5(1.9), and 8.6 before 8.6(1.5) does not properly allocate memory for DHCP packets, which allows remote attackers to cause a denial of service (device reload) via a series of c
te memory for DHCP packets, which allows remote attackers to cause a denial of service (device reload) via a series of crafted IPv4 packets, aka Bug ID CSCtw84068. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55861 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-asa - http://osvdb.org/86145
CVE ID: CVE-2012-4651 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T20:42:54.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 15.3(2)T, when scansafe is enabled, allows remote attackers to cause a denial of service (latency) via SYN packets that are not accompanied by SYN-ACK packets from the Scan Safe Tower, aka Bug ID CSCub85451. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/ios/15_3m_and_t/release/notes/15_3m_and_t.pdf
CVE ID: CVE-2012-4655 State: PUBLISHED Published: 2012-09-24T17:00:00 Last Updated: 2024-08-06T20:42:54.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac - http://secunia.com/advisories/50669 - https://exchange.xforce.ibmcloud.com/vuln
oSecurityAdvisory/cisco-sa-20120620-ac - http://secunia.com/advisories/50669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78677 - http://www.securityfocus.com/bid/55606
CVE ID: CVE-2012-4658 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T20:42:55.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ios-authproxy implementation in Cisco IOS before 15.1(1)SY3 allows remote attackers to cause a denial of service (webauth and HTTP service outage) via vectors that trigger incorrectly terminated HTTP sessions, aka Bug ID CSCtz99447. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf
CVE ID: CVE-2012-4659 State: PUBLISHED Published: 2012-10-29T20:00:00 Last Updated: 2024-08-06T20:42:54.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.30) and 8.3 before 8.3(2.34) allows remote attackers to cause a denial of service (device reload) via a crafted authentication response, aka Bug ID CSCtz04566. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-
s: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-asa - http://www.securityfocus.com/bid/55865 - http://osvdb.org/86137
CVE ID: CVE-2012-4660 State: PUBLISHED Published: 2012-10-29T20:00:00 Last Updated: 2024-08-06T20:42:54.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.17), 8.3 before 8.3(2.28), 8.4 before 8.4(2.13), 8.5 before 8.5(1.4), and 8.6 before 8.6(1.5) allows remote attackers to cause a denial of service (device reload) via a crafted SIP media-update packet, aka Bug ID CSCtr63728. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/conten
Ctr63728. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-asa - http://www.securityfocus.com/bid/55864 - http://osvdb.org/86144
CVE ID: CVE-2012-4661 State: PUBLISHED Published: 2012-10-29T20:00:00 Last Updated: 2024-08-06T20:42:55.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2.34), 8.4 before 8.4(4.4), 8.5 before 8.5(1.13), and 8.6 before 8.6(1.3) and the Firewall Services Module (FWSM) 4.1 before 4.1(9) in Cisco Catalyst 6500 series switches and 7600 series routers might allow remote attackers to execute arbitrary code via a crafted DCERPC packet, aka Bug IDs CSCtr21359 a
ies routers might allow remote attackers to execute arbitrary code via a crafted DCERPC packet, aka Bug IDs CSCtr21359 and CSCtr27522. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55863 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-fwsm - http://secunia.com/advisories/50857 - http://osvdb.org/86146 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-asa - https://exchange.xforce.ibmcloud.com/vulnerabilities/79173
CVE ID: CVE-2012-4662 State: PUBLISHED Published: 2012-10-29T20:00:00 Last Updated: 2024-08-06T20:42:54.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2.25), 8.4 before 8.4(2.5), and 8.5 before 8.5(1.13) and the Firewall Services Module (FWSM) 4.1 before 4.1(7) in Cisco Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via a crafted DCERPC packet, aka Bug IDs CSCtr21376 and CSCtr27524. Additional Analyst Note
l of service (device reload) via a crafted DCERPC packet, aka Bug IDs CSCtr21376 and CSCtr27524. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55862 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-fwsm - https://exchange.xforce.ibmcloud.com/vulnerabilities/79174 - http://osvdb.org/86147 - http://secunia.com/advisories/50857 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-asa
CVE ID: CVE-2012-4663 State: PUBLISHED Published: 2012-10-29T20:00:00 Last Updated: 2024-08-06T20:42:55.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2.25), 8.4 before 8.4(2.5), and 8.5 before 8.5(1.13) and the Firewall Services Module (FWSM) 4.1 before 4.1(7) in Cisco Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via a crafted DCERPC packet, aka Bug IDs CSCtr21346 and CSCtr27521. Additional Analyst Note
l of service (device reload) via a crafted DCERPC packet, aka Bug IDs CSCtr21346 and CSCtr27521. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55862 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-fwsm - https://exchange.xforce.ibmcloud.com/vulnerabilities/79175 - http://secunia.com/advisories/50857 - http://osvdb.org/86148 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-asa
CVE ID: CVE-2012-4667 State: PUBLISHED Published: 2012-08-25T10:00:00 Last Updated: 2024-08-06T20:42:54.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) virus, (3) source, or (4) user parameter to (a) clwarn.cgi, (b) clwarn.cgi.de_DE, (c) clwarn.cgi.en_EN, (d) clwarn.cgi.fr_FR, (e) clwarn.cgi.pt_BR, or (f) clwarn.cgi.ru_RU in cgi-bin/. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/25/1 - http://squidclamav.darold.net/news.html - http://www.openwa
- http://www.openwall.com/lists/oss-security/2012/08/25/1 - http://squidclamav.darold.net/news.html - http://www.openwall.com/lists/oss-security/2012/08/16/4 - http://www.openwall.com/lists/oss-security/2012/08/16/2 - http://freecode.com/projects/squidclamav/releases/346722
CVE ID: CVE-2012-4668 State: PUBLISHED Published: 2012-08-25T10:00:00Z Last Updated: 2024-09-17T02:10:40.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email. Additional Analyst Notes: - CVE Program Container: References: - http://trac.roundcube.net/ticket/1488613 - http://www.openwall.com/lists/oss-security/2012/08/20/9 - https://github.com/roundcube/roundcubemail/commit/c086978f6a91eacb339fd2976202fca9dad2ef32 - http://www.openwall.com/lists/oss-security/2012/08/20/2 - http://sourceforge.net/news/?group_id=13
2976202fca9dad2ef32 - http://www.openwall.com/lists/oss-security/2012/08/20/2 - http://sourceforge.net/news/?group_id=139281&id=309011
CVE ID: CVE-2012-4669 State: PUBLISHED Published: 2012-08-25T16:00:00Z Last Updated: 2024-09-16T18:38:55.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted. Additional Analyst Notes: - CVE Program Container: References: - http://isode.com/company/wordpress/xmpp-server-dialback/ - http://xmpp.org/resources/security-notices/server-dialback/
CVE ID: CVE-2012-4670 State: PUBLISHED Published: 2012-08-25T16:00:00 Last Updated: 2024-08-06T20:42:55.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response. Additional Analyst Notes: - CVE Program Container: References: - http://xmpp.org/resources/security-notices/server-dialback/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/77985 - https://projects.tigase.org/projects/tigase-server/repository/revisions/2953/diff - http://www.tigase.org/content/finally-versi
/projects.tigase.org/projects/tigase-server/repository/revisions/2953/diff - http://www.tigase.org/content/finally-version-510-final-available