deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-3640
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3641
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3642
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3644
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3645
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3646
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3653
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3655
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3656
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3661
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3663
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3664
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3665
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3666
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3667
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3668
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3669
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3670
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3674
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3678
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3679
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3680
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3681
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3682
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3683
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3686
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-2152
Published: 2012-07-25
Description: Stack-based buffer overflow in the get_packet method in socket.c in dhcpcd 3.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2012/dsa-2498; http://www.openwall.com/lists/oss-security/2012/05/02/4; http://www.openwall.com/lists/oss-security/2012/05/02/5
CVE: CVE-2012-2296
Published: 2012-07-25
Description: The Janrain Engage (formerly RPX) module for Drupal 6.x-1.x. 6.x-2.x before 6.x-2.2, and 7.x-2.x before 7.x-2.2 stores user profile data from Engage in session tables, which might allow remote attackers to obtain sensitive information by leveraging a separate vulnerability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://drupal.org/node/1515114; http://drupal.org/node/1515120; http://drupal.org/node/1515282
CVE: CVE-2012-2302
Published: 2012-07-25
Description: Site Documentation (Sitedoc) module for Drupal 6.x-1.x before 6.x-1.4 does not properly check the save location when archiving, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://drupal.org/node/1546224; http://drupal.org/node/1547686; http://drupalcode.org/project/sitedoc.git/commitdiff/521721c
CVE: CVE-2012-2305
Published: 2012-07-25
Description: Cross-site request forgery (CSRF) vulnerability in the Node Gallery module for Drupal 6.x-3.1 and earlier allows remote attackers to hijack the authentication of certain users for requests that create node galleries.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://drupal.org/node/1557852; http://www.openwall.com/lists/oss-security/2012/05/03/1; http://www.openwall.com/lists/oss-security/2012/05/03/2
CVE: CVE-2012-2306
Published: 2012-07-25
Description: SQL injection vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://drupal.org/node/1557868; http://www.openwall.com/lists/oss-security/2012/05/03/1; http://www.openwall.com/lists/oss-security/2012/05/03/2
CVE: CVE-2012-2307
Published: 2012-07-25
Description: Cross-site request forgery (CSRF) vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://drupal.org/node/1557868; http://www.openwall.com/lists/oss-security/2012/05/03/1; http://www.openwall.com/lists/oss-security/2012/05/03/2
CVE: CVE-2012-2308
Published: 2012-07-25
Description: Cross-site scripting (XSS) vulnerability in the Taxonomy Grid : Catalog module for Drupal 6.x-1.6 and earlier allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://drupal.org/node/1557872; http://www.openwall.com/lists/oss-security/2012/05/03/1; http://www.openwall.com/lists/oss-security/2012/05/03/2
CVE: CVE-2012-2309
Published: 2012-07-25
Description: Cross-site scripting (XSS) vulnerability in the Glossify Internal Links Auto SEO module for Drupal 6.x-2.5 and earlier allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://drupal.org/node/1557874; http://www.openwall.com/lists/oss-security/2012/05/03/1; http://www.openwall.com/lists/oss-security/2012/05/03/2
CVE: CVE-2012-2310
Published: 2012-07-25
Description: Cross-site scripting (XSS) vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10 allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://drupal.org/node/1508098; http://drupal.org/node/1508100; http://drupal.org/node/1558248
CVE: CVE-2012-2442
Published: 2012-07-25
Description: Buffer overflow in the Video Manager in Nokia PC Suite 7.1.180.64 and earlier allows remote attackers to cause a denial of service via a crafted mp4 file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/81498; http://packetstormsecurity.org/files/112295/Nokia-CP-Suite-Video-Manager-7.1.180.64-Denial-Of-Service.html; http://www.exploit-db.com/exploits/18795
CVE: CVE-2012-4054
Published: 2012-07-25
Description: Buffer overflow in the readfile function in CPE17 Autorun Killer 1.7.1 and earlier allows physically proximate attackers to execute arbitrary code via a crafted inf file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/81496; http://www.exploit-db.com/exploits/18792; http://www.securityfocus.com/bid/53286
CVE: CVE-2012-4055
Published: 2012-07-25
Description: SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/files/112287/Uiga-FanClub-SQL-Injection.html; http://www.securityfocus.com/bid/53295; https://exchange.xforce.ibmcloud.com/vulnerabilities/75288
CVE: CVE-2012-4056
Published: 2012-07-25
Description: SQL injection vulnerability in index2.php in Uiga Personal Portal allows remote attackers to execute arbitrary SQL commands via the p parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/files/112288/Uiga-Personal-Portal-SQL-Injection.html; http://www.securityfocus.com/bid/53296; https://exchange.xforce.ibmcloud.com/vulnerabilities/75281
CVE: CVE-2012-4057
Published: 2012-07-25
Description: Buffer overflow in the Player in Remote-Anything 5.60.15 allows remote attackers to execute arbitrary code via a crafted flm file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/49008; http://www.exploit-db.com/exploits/18799; http://www.securityfocus.com/bid/53303
CVE: CVE-2012-4058
Published: 2012-07-25
Description: Cross-site scripting (XSS) vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/81532; http://packetstormsecurity.org/files/112090/SocketMail-Pro-2.2.9-Cross-Site-Request-Forgery-Cross-Site-Scripting.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/75113
CVE: CVE-2012-4059
Published: 2012-07-25
Description: Cross-site request forgery (CSRF) vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authentication of arbitrary users for requests that change user security questions and answers via an upd action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.org/files/112090/SocketMail-Pro-2.2.9-Cross-Site-Request-Forgery-Cross-Site-Scripting.html; http://www.osvdb.org/81531; https://exchange.xforce.ibmcloud.com/vulnerabilities/75114
CVE: CVE-2012-4060
Published: 2012-07-25
Description: Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) profile.asp, (2) forum.asp, or (3) topic.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/files/112259/ASP-DEv-XM-Forums-SQL-Injection.html; http://www.securityfocus.com/bid/53292; https://exchange.xforce.ibmcloud.com/vulnerabilities/75261
CVE: CVE-2012-4061
Published: 2012-07-25
Description: Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to diary_view.asp or (2) view_date parameter to default.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/files/112257/ASP-DEv-XM-Diary-SQL-Injection.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/75262; http://packetstormsecurity.org/files/112257/ASP-DEv-XM-Diary-SQL-Injection.html
CVE: CVE-2012-3005
Published: 2012-07-26
Description: Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 6.9 (MEDIUM)
References: http://www.us-cert.gov/control_systems/pdf/ICSA-12-177-02.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-177-02.pdf