deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-4144
Published: 2012-02-02
Description: Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 before P02 allows local users to obtain "highest super user privileges" by leveraging system administrator privileges.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2012-02/0005.html; http://archives.neohapsis.com/archives/bugtraq/2012-02/0005.html
CVE: CVE-2011-4194
Published: 2012-02-02
Description: Buffer overflow in Novell iPrint Server in Novell Open Enterprise Server 2 (OES2) through SP3 on Linux allows remote attackers to execute arbitrary code via a crafted attributes-natural-language field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.novell.com/support/viewContent.do?externalId=7010084; http://www.novell.com/support/viewContent.do?externalId=7010084
CVE: CVE-2010-4562
Published: 2012-02-02
Description: Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping. NOTE: due to a typo, some sources map CVE-2010-4562 to a ProFTPd mod_sql vulnerability, but that issue is covered by CVE-2010-4652.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/dailydave/2011/q2/25; http://seclists.org/fulldisclosure/2011/Apr/254; http://seclists.org/dailydave/2011/q2/25
CVE: CVE-2010-4563
Published: 2012-02-02
Description: The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/dailydave/2011/q2/25; http://seclists.org/fulldisclosure/2011/Apr/254; http://seclists.org/dailydave/2011/q2/25
CVE: CVE-2011-2393
Published: 2012-02-02
Description: The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD, NetBSD, and possibly other BSD-based operating systems allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, a similar vulnerability to CVE-2010-4670.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://seclists.org/fulldisclosure/2011/Apr/86; http://www.mh-sec.de/downloads/mh-RA_flooding_CVE-2010-multiple.txt; http://seclists.org/fulldisclosure/2011/Apr/86
CVE: CVE-2012-0975
Published: 2012-02-02
Description: Cross-site scripting (XSS) vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and earlier allows remote attackers to inject arbitrary web script or HTML via the showseries parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/78660; http://packetstormsecurity.org/files/view/109240/dpi10-xss.txt; http://secunia.com/advisories/47786
CVE: CVE-2012-0976
Published: 2012-02-02
Description: Cross-site scripting (XSS) vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with Content Authors privileges to inject arbitrary web script or HTML via the Title parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 2.1 (LOW)
CWE: CWE-79
References: http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.13; http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.7; http://osvdb.org/78677
CVE: CVE-2012-0977
Published: 2012-02-02
Description: Stack-based buffer overflow in jp2_x.dll in LuraWave JP2 ActiveX Control 2.1.5.5 and other versions before 2.1.5.11 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/78661; http://secunia.com/advisories/47350; http://www.securityfocus.com/bid/51744
CVE: CVE-2012-0978
Published: 2012-02-02
Description: Stack-based buffer overflow in npjp2.dll in LuraWave JP2 Browser Plug-In 1.1.1.11 and other versions before 2.1.1.11 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/78662; http://secunia.com/advisories/47831; http://www.securityfocus.com/bid/51732
CVE: CVE-2012-0979
Published: 2012-02-02
Description: Cross-site scripting (XSS) vulnerability in TWiki allows remote attackers to inject arbitrary web script or HTML via the organization field in a profile, involving (1) registration or (2) editing of the user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/78664; http://packetstormsecurity.org/files/109246/twiki-xss.txt; http://secunia.com/advisories/47784
CVE: CVE-2012-0980
Published: 2012-02-02
Description: SQL injection vulnerability in download.php in phux Download Manager allows remote attackers to execute arbitrary SQL commands via the file parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/18432; http://www.securityfocus.com/bid/51725; https://exchange.xforce.ibmcloud.com/vulnerabilities/72826
CVE: CVE-2012-0981
Published: 2012-02-02
Description: Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image files via a .. (dot dot) in the r parameter to index.php.  NOTE: Some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/47802; http://www.exploit-db.com/exploits/18435; https://exchange.xforce.ibmcloud.com/vulnerabilities/72824
CVE: CVE-2012-0982
Published: 2012-02-02
Description: SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the price_from parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/18441; http://www.securityfocus.com/bid/51773; https://exchange.xforce.ibmcloud.com/vulnerabilities/72879
CVE: CVE-2012-0983
Published: 2012-02-02
Description: SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/18438; http://www.securityfocus.com/bid/51781; https://exchange.xforce.ibmcloud.com/vulnerabilities/72809
CVE: CVE-2011-3444
Published: 2012-02-02
Description: Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://support.apple.com/kb/HT5130; http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE: CVE-2011-3446
Published: 2012-02-02
Description: Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font that is accessed by Font Book.
CVSS Score: 7.5 (HIGH)
References: http://support.apple.com/kb/HT5130; http://support.apple.com/kb/HT5130
CVE: CVE-2011-3447
Published: 2012-02-02
Description: CFNetwork in Apple Mac OS X 10.7.x before 10.7.3 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://support.apple.com/kb/HT5130; http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE: CVE-2011-3448
Published: 2012-02-02
Description: Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://support.apple.com/kb/HT5130; http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE: CVE-2011-3449
Published: 2012-02-02
Description: Use-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted embedded font in a document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://support.apple.com/kb/HT5130; http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE: CVE-2011-3450
Published: 2012-02-02
Description: CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption and application crash) via a long URL.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://support.apple.com/kb/HT5130; http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE: CVE-2011-3452
Published: 2012-02-02
Description: Internet Sharing in Apple Mac OS X before 10.7.3 does not preserve the Wi-Fi configuration across software updates, which allows remote attackers to obtain sensitive information by leveraging the lack of a WEP password for a Wi-Fi network.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://support.apple.com/kb/HT5130; http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE: CVE-2011-3453
Published: 2012-02-02
Description: Integer overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via crafted DNS data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00002.html
CVE: CVE-2011-3457
Published: 2012-02-02
Description: The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language (aka GLSL) compilation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted program.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://support.apple.com/kb/HT5130
CVE: CVE-2011-3458
Published: 2012-02-02
Description: QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP4 file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://lists.apple.com/archives/security-announce/2012/May/msg00005.html; http://support.apple.com/kb/HT5130
CVE: CVE-2011-3459
Published: 2012-02-02
Description: Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted rdrf atom in a movie file that triggers a buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://lists.apple.com/archives/security-announce/2012/May/msg00005.html; http://support.apple.com/kb/HT5130
CVE: CVE-2011-3460
Published: 2012-02-02
Description: Buffer overflow in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PNG file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://lists.apple.com/archives/security-announce/2012/May/msg00005.html; http://support.apple.com/kb/HT5130
CVE: CVE-2011-3462
Published: 2012-02-02
Description: Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows remote attackers to obtain sensitive information contained in new backups by spoofing this storage object, a different vulnerability than CVE-2010-1803.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://support.apple.com/kb/HT5130; http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE: CVE-2011-3463
Published: 2012-02-02
Description: WebDAV Sharing in Apple Mac OS X 10.7.x before 10.7.3 does not properly perform authentication, which allows local users to gain privileges by leveraging access to (1) the server or (2) a bound directory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://support.apple.com/kb/HT5130; http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE: CVE-2012-0440
Published: 2012-02-02
Description: Cross-site request forgery (CSRF) vulnerability in jsonrpc.cgi in Bugzilla 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 allows remote attackers to hijack the authentication of arbitrary users for requests that use the JSON-RPC API.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/47814; http://www.bugzilla.org/security/3.4.13/; http://www.securitytracker.com/id?1026623
CVE: CVE-2012-0448
Published: 2012-02-02
Description: Bugzilla 2.x and 3.x before 3.4.14, 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 does not reject non-ASCII characters in e-mail addresses of new user accounts, which makes it easier for remote authenticated users to spoof other user accounts by choosing a similar e-mail address.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/47814; http://www.bugzilla.org/security/3.4.13/; http://www.securityfocus.com/bid/51784
CVE: CVE-2011-4791
Published: 2012-02-03
Description: DBServer.exe in HP Data Protector Media Operations 6.11 and earlier allows remote attackers to execute arbitrary code via a crafted request containing a large value in a length field.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/521472; http://zerodayinitiative.com/advisories/ZDI-11-112/; http://www.securityfocus.com/archive/1/521472
CVE: CVE-2012-0314
Published: 2012-02-03
Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the eAccess Pocket WiFi (aka GP02) router before 2.00 with firmware 11.203.11.05.168 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://emobile.jp/topics/info20120201_01.html; http://jvn.jp/en/jp/JVN33021167/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000010
CVE: CVE-2011-4508
Published: 2012-02-03
Description: The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime generates predictable authentication tokens for cookies, which makes it easier for remote attackers to bypass authentication via a crafted cookie.
CVSS Score: 9.3 (HIGH)
CWE: CWE-287
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf
CVE: CVE-2011-4509
Published: 2012-02-03
Description: The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime has an improperly selected default password for the administrator account, which makes it easier for remote attackers to obtain access via a brute-force approach involving many HTTP requests.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf
CVE: CVE-2011-4510
Published: 2012-02-03
Description: Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4511.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf
CVE: CVE-2011-4511
Published: 2012-02-03
Description: Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4510.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf
CVE: CVE-2011-4512
Published: 2012-02-03
Description: CRLF injection vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-94
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf
CVE: CVE-2011-4513
Published: 2012-02-03
Description: Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allow user-assisted remote attackers to execute arbitrary code via a crafted project file, related to the HMI web server and runtime loader.
CVSS Score: 10.0 (HIGH)
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf
CVE: CVE-2011-4514
Published: 2012-02-03
Description: The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not perform authentication, which makes it easier for remote attackers to obtain access via a TCP session.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf
CVE: CVE-2011-4875
Published: 2012-02-03
Description: Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute arbitrary code via vectors related to Unicode strings.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://aluigi.org/adv/winccflex_1-adv.txt; http://www.exploit-db.com/exploits/18166; http://www.osvdb.org/77380
CVE: CVE-2011-4876
Published: 2012-02-03
Description: Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute, read, create, modify, or delete arbitrary files via a .. (dot dot) in a string.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://aluigi.org/adv/winccflex_1-adv.txt; http://secunia.com/advisories/46997; http://www.exploit-db.com/exploits/18166
CVE: CVE-2011-4877
Published: 2012-02-03
Description: HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to cause a denial of service (application crash) by sending crafted data over TCP.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://aluigi.org/adv/winccflex_1-adv.txt; http://www.exploit-db.com/exploits/18166; http://www.osvdb.org/77382
CVE: CVE-2011-4878
Published: 2012-02-03
Description: Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to read arbitrary files via a ..%5c (dot dot backslash) in a URI.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://aluigi.org/adv/winccflex_1-adv.txt; http://www.exploit-db.com/exploits/18166; http://www.osvdb.org/77383