deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-3277
Published: 2012-12-13
Description: HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN programs, which allows remote attackers to cause a denial of service via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03599086; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03599086
CVE: CVE-2012-4991
Published: 2012-12-13
Description: Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated users to (1) read, (2) delete, or (3) create files, or (4) list directories, via a ..%5C (encoded dot dot backslash) in a URI.
CVSS Score: 8.5 (HIGH)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/23324/; http://www.exploit-db.com/exploits/23324/
CVE: CVE-2012-5510
Published: 2012-12-13
Description: Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.
CVSS Score: 4.7 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html; http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html
CVE: CVE-2012-5511
Published: 2012-12-13
Description: Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html; http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html
CVE: CVE-2012-5512
Published: 2012-12-13
Description: Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.
CVSS Score: 3.2 (LOW)
CWE: CWE-16
References: http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html; http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html
CVE: CVE-2012-5513
Published: 2012-12-13
Description: The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved range.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html
CVE: CVE-2012-5514
Published: 2012-12-13
Description: The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors.
CVSS Score: 4.7 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html; http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html
CVE: CVE-2012-5515
Published: 2012-12-13
Description: The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value.
CVSS Score: 4.7 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html
CVE: CVE-2012-5525
Published: 2012-12-13
Description: The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a crafted GFN that triggers a buffer over-read.
CVSS Score: 4.7 (MEDIUM)
References: http://secunia.com/advisories/51397; http://secunia.com/advisories/55082; http://security.gentoo.org/glsa/glsa-201309-24.xml
CVE: CVE-2012-5679
Published: 2012-12-13
Description: Buffer underflow in Adobe Photoshop Camera Raw before 7.3 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb12-28.html; http://www.adobe.com/support/security/bulletins/apsb12-28.html
CVE: CVE-2012-5680
Published: 2012-12-13
Description: Buffer overflow in Adobe Photoshop Camera Raw before 7.3 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb12-28.html; http://www.adobe.com/support/security/bulletins/apsb12-28.html
CVE: CVE-2012-5966
Published: 2012-12-13
Description: The restricted telnet shell on the D-Link DSL2730U router allows remote authenticated users to bypass intended command restrictions via shell metacharacters that follow a whitelisted command.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/876780; http://www.kb.cert.org/vuls/id/876780
CVE: CVE-2012-6333
Published: 2012-12-13
Description: Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU consumption) via a large input.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html; http://secunia.com/advisories/51397
CVE: CVE-2012-5195
Published: 2012-12-18
Description: Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service (memory consumption and crash) or possibly execute arbitrary code via the 'x' string repeat operator.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
CVE: CVE-2012-6422
Published: 2012-12-18
Description: The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones/; http://forum.xda-developers.com/showthread.php?p=35469999; http://forum.xda-developers.com/showthread.php?t=2051290
CVE: CVE-2012-5468
Published: 2012-12-18
Description: Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01; http://bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6973; http://bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6975
CVE: CVE-2012-5563
Published: 2012-12-18
Description: OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining.  NOTE: this issue exists because of a CVE-2012-3426 regression.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-255
References: http://rhn.redhat.com/errata/RHSA-2012-1557.html; http://secunia.com/advisories/51423; http://secunia.com/advisories/51436
CVE: CVE-2012-5571
Published: 2012-12-18
Description: A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) tokens when a user's role has been removed from a tenant. An attacker can leverage a token associated with a removed user role to gain unauthorized access.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-639, CWE-255
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html; http://rhn.redhat.com/errata/RHSA-2012-1556.html; http://rhn.redhat.com/errata/RHSA-2012-1557.html
CVE: CVE-2012-5574
Published: 2012-12-18
Description: lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-December/093698.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-December/093920.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-December/093922.html
CVE: CVE-2012-5576
Published: 2012-12-18
Description: Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large (1) red, (2) green, or (3) blue color mask in an XWD file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://git.gnome.org/browse/gimp/commit/?id=2873262fccba12af144ed96ed91be144d92ff2e1; http://lists.opensuse.org/opensuse-updates/2012-12/msg00017.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00014.html
CVE: CVE-2012-5606
Published: 2012-12-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) file name to apps/files_versions/js/versions.js or (2) apps/files/js/filelist.js; or (3) event title to 3rdparty/fullcalendar/js/fullcalendar.js.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://owncloud.org/changelog/; http://owncloud.org/security/advisories/oc-sa-2012-001/; http://secunia.com/advisories/51357
CVE: CVE-2012-5607
Published: 2012-12-18
Description: The "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly check the security token, which allows remote attackers to change an accounts password via unspecified vectors related to a "Remote Timing Attack."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://owncloud.org/changelog/; http://owncloud.org/security/advisories/oc-sa-2012-002/; http://www.openwall.com/lists/oss-security/2012/11/30/3
CVE: CVE-2012-5608
Published: 2012-12-18
Description: Cross-site scripting (XSS) vulnerability in apps/user_webdavauth/settings.php in ownCloud 4.5.x before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via arbitrary POST parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://owncloud.org/changelog/; http://owncloud.org/security/advisories/oc-sa-2012-003/; http://secunia.com/advisories/51357
CVE: CVE-2012-5609
Published: 2012-12-18
Description: Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted mount.php file in a ZIP file.
CVSS Score: 6.5 (MEDIUM)
References: http://owncloud.org/changelog/; http://owncloud.org/security/advisories/oc-sa-2012-004/; http://secunia.com/advisories/51357
CVE: CVE-2012-5610
Published: 2012-12-18
Description: Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a special crafted name.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://owncloud.org/changelog/; http://owncloud.org/security/advisories/oc-sa-2012-005/; http://secunia.com/advisories/51357
CVE: CVE-2012-5622
Published: 2012-12-18
Description: Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/88333; http://rhn.redhat.com/errata/RHSA-2012-1555.html; https://bugzilla.redhat.com/show_bug.cgi?id=883227
CVE: CVE-2012-4691
Published: 2012-12-18
Description: Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service (memory consumption) via crafted packets.
CVSS Score: 3.3 (LOW)
CWE: CWE-399
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-783261.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-349-01.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-783261.pdf
CVE: CVE-2012-4693
Published: 2012-12-18
Description: Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Ps_security.ini, which makes it easier for local users to discover passwords by reading this file.
CVSS Score: 1.9 (LOW)
CWE: CWE-310
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-370812.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-348-01.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-370812.pdf
CVE: CVE-2012-4898
Published: 2012-12-18
Description: Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source of entropy for SSH keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-310
References: https://www.cisa.gov/news-events/ics-advisories/icsa-12-297-01; http://www.us-cert.gov/control_systems/pdf/ICSA-12-297-01.pdf
CVE: CVE-2012-4348
Published: 2012-12-18
Description: The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/56846; http://www.securitytracker.com/id?1027863; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121210_00
CVE: CVE-2012-4350
Published: 2012-12-18
Description: Multiple unquoted Windows search path vulnerabilities in the (1) Manager and (2) Agent components in Symantec Enterprise Security Manager (ESM) before 11.0 allow local users to gain privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/bid/56915; http://www.securitytracker.com/id?1027874; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121213_00
CVE: CVE-2012-3329
Published: 2012-12-19
Description: IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a (1) temporary file or (2) log file.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5092090; https://exchange.xforce.ibmcloud.com/vulnerabilities/78044; http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5092090
CVE: CVE-2012-3546
Published: 2012-12-19
Description: org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2012-12/0044.html; http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html; http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
CVE: CVE-2012-4431
Published: 2012-12-19
Description: org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2012-12/0045.html; http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html; http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
CVE: CVE-2012-4534
Published: 2012-12-19
Description: org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.
CVSS Score: 2.6 (LOW)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/bugtraq/2012-12/0043.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00051.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00061.html
CVE: CVE-2012-4846
Published: 2012-12-19
Description: IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, aka SPRs JMAS7TRNLN and SRAO8U3Q68.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg21619604; http://www.ibm.com/support/docview.wss?uid=swg21620361; https://exchange.xforce.ibmcloud.com/vulnerabilities/79535
CVE: CVE-2012-4848
Published: 2012-12-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the (1) First Name or (2) Last Name field.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg21620319; https://exchange.xforce.ibmcloud.com/vulnerabilities/79537; http://www.ibm.com/support/docview.wss?uid=swg21620319
CVE: CVE-2012-5177
Published: 2012-12-19
Description: Cross-site scripting (XSS) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN18731696/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000108; http://www.welcart.com/community/archives/4524
CVE: CVE-2012-5178
Published: 2012-12-19
Description: Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that complete a purchase.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN53269985/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000109; http://www.welcart.com/community/archives/4524
CVE: CVE-2012-5690
Published: 2012-12-19
Description: RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an invalid pointer.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://service.real.com/realplayer/security/12142012_player/en/; http://service.real.com/realplayer/security/12142012_player/en/
CVE: CVE-2012-5691
Published: 2012-12-19
Description: Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/12142012_player/en/; http://service.real.com/realplayer/security/12142012_player/en/
CVE: CVE-2012-5967
Published: 2012-12-19
Description: SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote authenticated users to execute arbitrary SQL commands via the menu parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://forge.centreon.com/projects/centreon/repository/revisions/13749; http://www.kb.cert.org/vuls/id/856892; https://github.com/centreon/centreon/commit/434e291eebcd8f56771ac96b37831634fa52b6a8#diff[PII_REDACTED]71c4a66ae2668f7ad2b617
CVE: CVE-2012-5968
Published: 2012-12-19
Description: The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to the LAN network.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm; http://www.kb.cert.org/vuls/id/871148; http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm
CVE: CVE-2012-5969
Published: 2012-12-19
Description: Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the PATH_INFO of an sdcard/ request or (2) modify arbitrary files via a .. (dot dot) in the req_page parameter to en/sms.cgi.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-22
References: http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm; http://www.kb.cert.org/vuls/id/871148; http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm
CVE: CVE-2012-5970
Published: 2012-12-19
Description: The Huawei E585 device allows remote attackers to cause a denial of service (NULL pointer dereference and device outage) via crafted HTTP requests, as demonstrated by unspecified vulnerability-scanning software.
CVSS Score: 6.1 (MEDIUM)
References: http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198240.htm; http://www.kb.cert.org/vuls/id/871148; http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198240.htm
CVE: CVE-2012-5978
Published: 2012-12-19
Description: Multiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View Security Server in VMware View 4.x before 4.6.2 and 5.x before 5.1.2 allow remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.securitytracker.com/id?1027875; http://www.vmware.com/security/advisories/VMSA-2012-0017.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17049