Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0675 State: PUBLISHED Published: 2012-05-11T01:00:00 Last Updated: 2024-08-06T18:30:54.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Time Machine in Apple Mac OS X before 10.7.4 does not require continued use of SRP-based authentication after this authentication method is first used, which allows remote attackers to read Time Capsule credentials by spoofing the backup volume. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53445 - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
CVE ID: CVE-2012-0676 State: PUBLISHED Published: 2012-05-11T01:00:00 Last Updated: 2024-08-06T18:30:54.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attackers to fill in form fields on the pages of arbitrary web sites via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81787 - http://www.securitytracker.com/id?1027053 - http://support.apple.com/kb/HT5282 - http://lists.apple.com/archives/security-announce/2012/May/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7547
.apple.com/archives/security-announce/2012/May/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75474 - http://secunia.com/advisories/47292
CVE ID: CVE-2012-0677 State: PUBLISHED Published: 2012-06-12T14:00:00 Last Updated: 2024-08-06T18:30:53.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17016 - http://lists.apple.com/archives/security-announce/2012/Jun/msg00000.html
CVE ID: CVE-2012-0678 State: PUBLISHED Published: 2012-07-25T19:00:00Z Last Updated: 2024-09-17T03:02:25.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML via a feed:// URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html - http://support.apple.com/kb/HT5400
CVE ID: CVE-2012-0679 State: PUBLISHED Published: 2012-07-25T19:00:00Z Last Updated: 2024-09-16T16:53:32.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 6.0 allows remote attackers to read arbitrary files via a feed:// URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html - http://support.apple.com/kb/HT5400
CVE ID: CVE-2012-0680 State: PUBLISHED Published: 2012-07-25T19:00:00 Last Updated: 2024-08-06T18:30:53.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows remote attackers to bypass authentication by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://www.securityfocus.com/bid/54688 - http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html - http://support.apple.com/kb/HT5400
CVE ID: CVE-2012-0681 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-06T18:30:53.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, which allows remote attackers to obtain cleartext VNC session content by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55100 - http://lists.apple.com/archives/security-announce/2012/Aug/msg00000.html - http://support.apple.com/kb/HT5433
CVE ID: CVE-2012-0682 State: PUBLISHED Published: 2012-07-25T20:00:00 Last Updated: 2024-08-06T18:30:53.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5485 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://lists.apple.com/archives/security-announ
y-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html - http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html - http://support.apple.com/kb/HT5400
CVE ID: CVE-2012-0683 State: PUBLISHED Published: 2012-07-25T20:00:00 Last Updated: 2024-08-06T18:30:54.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5485 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://lists.apple.com/archives/security-announ
CVE ID: CVE-2012-0684 State: PUBLISHED Published: 2012-05-09T10:00:00Z Last Updated: 2024-09-16T20:03:08.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD record types, a different vulnerability than CVE-2012-0685. Additional Analyst Notes: - CVE Program Container: References: - http://technet.microsoft.com/en-us/security/msvr/msvr12-001
CVE ID: CVE-2012-0685 State: PUBLISHED Published: 2012-05-09T10:00:00Z Last Updated: 2024-09-17T01:51:11.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD record types, a different vulnerability than CVE-2012-0684. Additional Analyst Notes: - CVE Program Container: References: - http://technet.microsoft.com/en-us/security/msvr/msvr12-001
CVE ID: CVE-2012-0687 State: PUBLISHED Published: 2012-03-13T10:00:00Z Last Updated: 2024-09-16T18:55:51.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0; TIBCO BusinessEvents Runtime in Enterprise and Inference Editions 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks E
s 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks Engine in TIBCO Silver Fabric ActiveMatrix BusinessWorks Distribution 5.9.2 and ActiveMatrix BusinessWorks before 5.9.3 allow remote attackers to obtain sensitive information via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp - http://www.tibco.com/multimedia/businessworks_advisory_20120308_tcm8-15730.txt - http://www.tibco.com/multimedia/activematrix2_advisory_20120308_tcm8-15726.txt - http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15
activematrix2_advisory_20120308_tcm8-15726.txt - http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt - http://www.tibco.com/multimedia/businessevents_advisory_20120308_tcm8-15729.txt
CVE ID: CVE-2012-0688 State: PUBLISHED Published: 2012-03-13T10:00:00Z Last Updated: 2024-09-17T03:54:21.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp - http://www.tibco.com/multimedia
http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp - http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt
CVE ID: CVE-2012-0689 State: PUBLISHED Published: 2012-03-13T10:00:00Z Last Updated: 2024-09-16T16:18:59.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to discover credentials via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp - http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.t
ies/amx-be-spotfire-advisory_20120308.jsp - http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt
CVE ID: CVE-2012-0690 State: PUBLISHED Published: 2012-03-13T10:00:00Z Last Updated: 2024-09-17T01:41:36.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before 3.3.3; and Web Player, Automation Services, and Professional before 4.0.2 allow remote attackers to obtain sensitive information via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp - http://www.tibco.com/multimedia/spotfire_advisory
om/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp - http://www.tibco.com/multimedia/spotfire_advisory_20120308_tcm8-15731.txt
CVE ID: CVE-2012-0691 State: PUBLISHED Published: 2012-10-02T21:00:00 Last Updated: 2024-08-06T18:30:53.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA License (aka CA Licensing) before 1.90.03 does not properly restrict system commands, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-10/0011.html - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B79CE87E4-7A35-48A3-99BA-5A0DBEDECA94%7D - http://www.securitytracker.com/id?1027588
CVE ID: CVE-2012-0692 State: PUBLISHED Published: 2012-10-02T21:00:00 Last Updated: 2024-08-06T18:30:53.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA License (aka CA Licensing) before 1.90.03 allows local users to modify or create arbitrary files, and consequently gain privileges, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-10/0011.html - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B79CE87E4-7A35-48A3-99BA-5A0DBEDECA94%7D - http://www.securitytracker.com/id?1027588
CVE ID: CVE-2012-0693 State: PUBLISHED Published: 2012-01-14T02:00:00 Last Updated: 2024-08-06T18:30:54.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: submitticket.php in WHMCompleteSolution (WHMCS) 5.03 allows remote attackers to inject arbitrary code into a subject field via crafted ticket data, a different vulnerability than CVE-2011-5061. NOTE: the vendor disputes this issue, noting that some of the details overlap CVE-2011-5061, but that it "says it affects V5.0.3, and the submitticket.php file, both of which are wrong. Additional Analyst Notes: - CVE Program Container: References: - http://www.oscommerceuniversity.com/lounge/index.php/board%2C23.0.html - http://www.osc
Program Container: References: - http://www.oscommerceuniversity.com/lounge/index.php/board%2C23.0.html - http://www.oscommerceuniversity.com/lounge/index.php/topic%2C1209.0.html
CVE ID: CVE-2012-0694 State: PUBLISHED Published: 2019-10-29T20:37:25 Last Updated: 2024-08-06T18:30:53.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers to execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-0694 - https://www.exploit-db.com/exploits/19381 - https://seclists.org/bugtraq/2012/Jun/165
CVE ID: CVE-2012-0695 State: PUBLISHED Published: 2012-01-12T18:00:00 Last Updated: 2024-08-06T18:30:53.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.27 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14268 - http://googlechromereleases.blogspot.com/2012/01/beta-channel-update-for-chromebooks.html
CVE ID: CVE-2012-0696 State: PUBLISHED Published: 2012-01-13T02:00:00 Last Updated: 2024-08-06T18:30:53.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via unspecified requests to (1) aspnet_client or (2) evserver/createcontrol.js. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/78217 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM26682 - http://securitytracker.com/id?1026491 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72198 - http://www.osvdb.org/
tp://securitytracker.com/id?1026491 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72198 - http://www.osvdb.org/78216 - http://secunia.com/advisories/47487 - http://www.securityfocus.com/bid/51326
CVE ID: CVE-2012-0697 State: PUBLISHED Published: 2012-01-13T02:00:00 Last Updated: 2024-08-06T18:30:54.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perform administrative tasks via unspecified vectors, a different vulnerability than CVE-2011-4788. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72372 - http://zerodayinitiative.com/advisories/ZDI-12-015/ - http://archives.neohapsis.com/archives/bugtraq/2012-01/0088.html
CVE ID: CVE-2012-0698 State: PUBLISHED Published: 2012-11-26T11:00:00 Last Updated: 2024-08-06T18:30:54.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_offset value in a TCP packet to port 30003. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=3473554&group_id=126012&atid=704358 - http://www.debian.org/security/2012/dsa-2576 - http://trousers.git.sourceforge.net/git/gitweb.cgi?p=trousers/trousers%3Ba=commit%3Bh=50dd06a6f639b76b3bb629606ef71b2dc5407601 - http://trousers.git.sourceforge.ne
web.cgi?p=trousers/trousers%3Ba=commit%3Bh=50dd06a6f639b76b3bb629606ef71b2dc5407601 - http://trousers.git.sourceforge.net/git/gitweb.cgi?p=trousers/trousers%3Ba=commit%3Bh=ae0c2f8c1fd7a96ba0191f83b6057f8cbc51e786 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692649 - https://bugzilla.redhat.com/show_bug.cgi?id=781648 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80226 - http://www.exploit-db.com/exploits/22904/ - http://packetstormsecurity.com/files/118281/TrouSerS-Denial-Of-Service.html - http://secunia.com/advisories/51295 - https://blogs.oracle.com/sunsecurity/entry/cve_2012_0698_denial_of
CVE ID: CVE-2012-0699 State: PUBLISHED Published: 2018-01-11T20:00:00 Last Updated: 2024-08-06T18:30:53.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (1) add news via an add action to familynews.php or (2) add a prayer via an add action to prayers.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18667
CVE ID: CVE-2012-0700 State: PUBLISHED Published: 2013-01-31T11:00:00 Last Updated: 2024-08-06T18:30:53.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in InfoSphere FastTrack 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly store credentials, which allows local users to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21623501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73266
CVE ID: CVE-2012-0701 State: PUBLISHED Published: 2013-01-31T11:00:00 Last Updated: 2024-08-06T18:30:54.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 rely on client-side access control, which allows remote authenticated users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21623501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73285
CVE ID: CVE-2012-0702 State: PUBLISHED Published: 2013-01-31T11:00:00 Last Updated: 2024-08-06T18:30:53.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly determine authorization, which allows remote authenticated users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21623501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73287
CVE ID: CVE-2012-0703 State: PUBLISHED Published: 2013-01-31T11:00:00 Last Updated: 2024-08-06T18:30:53.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21623501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73289
CVE ID: CVE-2012-0705 State: PUBLISHED Published: 2013-01-31T11:00:00 Last Updated: 2024-08-06T18:30:54.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: InfoSphere Import Export Manager in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, 8.7, and 9.1 does not validate unspecified input data, which allows remote authenticated users to execute arbitrary commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73292 - http://www-01.ibm.com/support/docview.wss?uid=swg21623501
CVE ID: CVE-2012-0706 State: PUBLISHED Published: 2013-04-07T17:00:00 Last Updated: 2024-08-06T18:30:53.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Scale Out Network Attached Storage (SONAS) 1.3 before 1.3.2.3 requires cleartext storage of LDAP credentials without recommending a less privileged LDAP account, which might allow attackers to obtain sensitive server information by leveraging root access to a client machine. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73309 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004292
CVE ID: CVE-2012-0707 State: PUBLISHED Published: 2012-02-23T11:00:00 Last Updated: 2024-08-06T18:30:54.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Lombardi Edition 7.2 allows remote attackers to inject arbitrary web script or HTML via crafted text input to a coach that is configured with a document attachment control section. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC79890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73376 - http://secunia.com/advisories/48055
CVE ID: CVE-2012-0708 State: PUBLISHED Published: 2012-04-22T18:00:00 Last Updated: 2024-08-06T18:30:53.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a RegisterSchemaRepoFromFileByDbSet function-prototype mismatch. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73492 - http://osvdb.org/81443 - http
uritytracker.com/id?1026958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73492 - http://osvdb.org/81443 - http://www.ibm.com/support/docview.wss?uid=swg21591705 - http://www.securityfocus.com/bid/53170 - http://secunia.com/advisories/48933
CVE ID: CVE-2012-0709 State: PUBLISHED Published: 2012-03-20T20:00:00 Last Updated: 2024-08-06T18:30:54.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended restrictions on viewing table data by leveraging the CREATEIN privilege to execute crafted SQL CREATE VARIABLE statements. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC81387 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC81390 - http://www-01.ibm.com/support/docview.wss?uid=swg21588100 - http://ww
w-01.ibm.com/support/docview.wss?uid=swg1IC81390 - http://www-01.ibm.com/support/docview.wss?uid=swg21588100 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC81836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73493 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15004