deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-0213
Published: 2013-02-02
Description: The Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a (1) FRAME or (2) IFRAME element.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00019.html; http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00042.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00029.html
CVE: CVE-2013-0214
Published: 2013-02-02
Description: Cross-site request forgery (CSRF) vulnerability in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to hijack the authentication of arbitrary users by leveraging knowledge of a password and composing requests that perform SWAT actions.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-352
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00019.html; http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00042.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00029.html
CVE: CVE-2013-1572
Published: 2013-02-03
Description: The dissect_oampdu_event_notification function in epan/dissectors/packet-slowprotocols.c in the IEEE 802.3 Slow Protocols dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle certain short lengths, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-slowprotocols.c?r1=46336&r2=46335&pathrev=46336; http://anonsvn.wireshark.org/viewvc?view=revision&revision=46336; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1573
Published: 2013-02-03
Description: The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-csn1.c?r1=46335&r2=46334&pathrev=46335; http://anonsvn.wireshark.org/viewvc?view=revision&revision=46335; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1574
Published: 2013-02-03
Description: The dissect_bthci_eir_ad_data function in epan/dissectors/packet-bthci_cmd.c in the Bluetooth HCI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a counter variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-bthci_cmd.c?r1=46345&r2=46344&pathrev=46345; http://anonsvn.wireshark.org/viewvc?view=revision&revision=46345; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1575
Published: 2013-02-03
Description: The dissect_r3_cmd_alarmconfigure function in epan/dissectors/packet-assa_r3.c in the R3 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-assa_r3.c?r1=46415&r2=46414&pathrev=46415; http://anonsvn.wireshark.org/viewvc?view=revision&revision=46415; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1576
Published: 2013-02-03
Description: The dissect_sdp_media_attribute function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly process crypto-suite parameters, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-310
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sdp.c?r1=46344&r2=46343&pathrev=46344; http://anonsvn.wireshark.org/viewvc?view=revision&revision=46344; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1577
Published: 2013-02-03
Description: The dissect_sip_p_charging_func_addresses function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle offset data associated with a quoted string, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sip.c?r1=46340&r2=46339&pathrev=46340; http://anonsvn.wireshark.org/viewvc?view=revision&revision=46340; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1578
Published: 2013-02-03
Description: The dissect_pw_eth_heuristic function in epan/dissectors/packet-pw-eth.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle apparent Ethernet address values at the beginning of MPLS data, which allows remote attackers to cause a denial of service (loop) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-pw-eth.c?r1=46420&r2=46419&pathrev=46420; http://anonsvn.wireshark.org/viewvc?view=revision&revision=46420; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1579
Published: 2013-02-03
Description: The rtps_util_add_bitmap function in epan/dissectors/packet-rtps.c in the RTPS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly implement certain nested loops for processing bitmap data, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-399
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-rtps.c?r1=47046&r2=47045&pathrev=47046; http://anonsvn.wireshark.org/viewvc?view=revision&revision=47046; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1580
Published: 2013-02-03
Description: The dissect_cmstatus_tlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/trunk/plugins/docsis/packet-cmstatus.c?r1=47045&r2=47044&pathrev=47045; http://anonsvn.wireshark.org/viewvc?view=revision&revision=47045; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1581
Published: 2013-02-03
Description: The dissect_pft_fec_detailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service (loop) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=47123&r2=47122&pathrev=47123; http://anonsvn.wireshark.org/viewvc?view=revision&revision=47123; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1582
Published: 2013-02-03
Description: The dissect_clnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly manage an offset variable, which allows remote attackers to cause a denial of service (infinite loop or application crash) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-189
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-clnp.c?r1=45646&r2=45645&pathrev=45646; http://anonsvn.wireshark.org/viewvc?view=revision&revision=45646; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1583
Published: 2013-02-03
Description: The dissect_version_4_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dtn.c?r1=46577&r2=46576&pathrev=46577; http://anonsvn.wireshark.org/viewvc?view=revision&revision=46577; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1584
Published: 2013-02-03
Description: The dissect_version_5_and_6_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dtn.c?r1=46579&r2=46578&pathrev=46579; http://anonsvn.wireshark.org/viewvc?view=revision&revision=46579; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1585
Published: 2013-02-03
Description: epan/tvbuff.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly validate certain length values for the MS-MMC dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/tvbuff.c?r1=46705&r2=46704&pathrev=46705; http://anonsvn.wireshark.org/viewvc?view=revision&revision=46705; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1586
Published: 2013-02-03
Description: The fragment_set_tot_len function in epan/reassemble.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 2.9 (LOW)
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/reassemble.c?r1=46999&r2=46998&pathrev=46999; http://anonsvn.wireshark.org/viewvc?view=revision&revision=46999; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1587
Published: 2013-02-03
Description: The dissect_rohc_ir_packet function in epan/dissectors/packet-rohc.c in the ROHC dissector in Wireshark 1.8.x before 1.8.5 does not properly handle unknown profiles, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 2.9 (LOW)
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-rohc.c?r1=44700&r2=44699&pathrev=44700; http://anonsvn.wireshark.org/viewvc?view=revision&revision=44700; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1588
Published: 2013-02-03
Description: Multiple buffer overflows in the dissect_pft_fec_detailed function in the DCP-ETSI dissector in epan/dissectors/packet-dcp-etsi.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=47098&r2=47097&pathrev=47098; http://anonsvn.wireshark.org/viewvc?view=revision&revision=47098; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1589
Published: 2013-02-03
Description: Double free vulnerability in epan/proto.c in the dissection engine in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-399
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/proto.c?r1=47114&r2=47113&pathrev=47114; http://anonsvn.wireshark.org/viewvc?view=revision&revision=47114; http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html
CVE: CVE-2013-1590
Published: 2013-02-03
Description: Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 2.9 (LOW)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html; http://www.debian.org/security/2013/dsa-2625
CVE: CVE-2013-1471
Published: 2013-02-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via (1) the Add field for the Black List under Antispam Management User Preferences or (2) the User name field for the Personal Black/White List in the AntiSpam section.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.fortiguard.com/advisory/FG-IR-013-001.html; http://www.vulnerability-lab.com/get_content.php?id=701; http://www.youtube.com/watch?v=5d7cIaM80oY
CVE: CVE-2011-1350
Published: 2013-02-05
Description: The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: http://code.google.com/p/android/issues/detail?id=21522; http://jon.oberheide.org/files/levitator.c; http://code.google.com/p/android/issues/detail?id=21522
CVE: CVE-2011-1352
Published: 2013-02-05
Description: The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory corruption using crafted user data to the pvrsrvkm device.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-119
References: http://code.google.com/p/android/issues/detail?id=21523; http://jon.oberheide.org/files/levitator.c; http://code.google.com/p/android/issues/detail?id=21523
CVE: CVE-2011-4575
Published: 2013-02-05
Description: Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2013-0191.html; http://rhn.redhat.com/errata/RHSA-2013-0192.html; http://rhn.redhat.com/errata/RHSA-2013-0193.html
CVE: CVE-2012-0034
Published: 2013-02-05
Description: The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0, Web Platform (EWP) 5.1.2 and 5.2.0, and BRMS Platform before 5.3.1 logs the username and password in cleartext when an exception is thrown, which allows local users to obtain sensitive information by reading the log file.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://rhn.redhat.com/errata/RHSA-2012-0108.html; http://rhn.redhat.com/errata/RHSA-2012-1072.html; http://rhn.redhat.com/errata/RHSA-2013-0191.html
CVE: CVE-2012-0874
Published: 2013-02-05
Description: The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 do not require authentication by default in certain profiles, which might allow remote attackers to invoke MBean methods and execute arbitrary code via unspecified vectors.  NOTE: this issue can only be exploited when the interceptor is not properly configured with a "second layer of authentication," or when used in conjunction with other vulnerabilities that bypass this second layer.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/bugtraq/2013-12/0134.html; http://rhn.redhat.com/errata/RHSA-2013-0191.html; http://rhn.redhat.com/errata/RHSA-2013-0192.html
CVE: CVE-2012-3369
Published: 2013-02-05
Description: The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user's password to be used.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2013-0191.html; http://rhn.redhat.com/errata/RHSA-2013-0192.html; http://rhn.redhat.com/errata/RHSA-2013-0193.html
CVE: CVE-2012-3370
Published: 2013-02-05
Description: The SecurityAssociation.getCredential method in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 returns the credentials of the previous user when a security context is not provided, which allows remote attackers to gain privileges as other users.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2013-0191.html; http://rhn.redhat.com/errata/RHSA-2013-0192.html; http://rhn.redhat.com/errata/RHSA-2013-0193.html
CVE: CVE-2012-5478
Published: 2013-02-05
Description: The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2013-0191.html; http://rhn.redhat.com/errata/RHSA-2013-0192.html; http://rhn.redhat.com/errata/RHSA-2013-0193.html
CVE: CVE-2013-0176
Published: 2013-02-05
Description: The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a "Client: Diffie-Hellman Key Exchange Init" packet.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098065.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098094.html; http://secunia.com/advisories/51982
CVE: CVE-2013-0218
Published: 2013-02-05
Description: The GUI installer in JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) 5.2.0 and possibly 5.1.2 uses world-readable permissions for the auto-install XML file, which allows local users to obtain the administrator password and the sucker password by reading this file.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2013-0206.html; http://rhn.redhat.com/errata/RHSA-2013-0207.html; http://rhn.redhat.com/errata/RHSA-2013-0833.html
CVE: CVE-2012-1064
Published: 2013-02-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html; http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html
CVE: CVE-2012-2292
Published: 2013-02-06
Description: The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 does not restrict access to the Archer application, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html; http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html
CVE: CVE-2012-2293
Published: 2013-02-06
Description: Directory traversal vulnerability in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allows remote authenticated users to upload files, and consequently execute arbitrary code, via a relative path.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html; http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html
CVE: CVE-2012-2294
Published: 2013-02-06
Description: EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allow remote attackers to conduct clickjacking attacks via a crafted web page.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html; http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html
CVE: CVE-2012-3279
Published: 2013-02-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9.1x, and 9.20 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03652323; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03652323
CVE: CVE-2012-3281
Published: 2013-02-06
Description: Unspecified vulnerability in Device Manager in HP XP P9000 Command View Advanced Edition before 7.4.0-00 allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 7.8 (HIGH)
References: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03650706; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03650706
CVE: CVE-2012-3282
Published: 2013-02-06
Description: Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1468.
CVSS Score: 10.0 (HIGH)
References: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318
CVE: CVE-2012-3283
Published: 2013-02-06
Description: Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1511.
CVSS Score: 10.0 (HIGH)
References: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318
CVE: CVE-2012-3284
Published: 2013-02-06
Description: Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1512.
CVSS Score: 10.0 (HIGH)
References: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318
CVE: CVE-2012-3285
Published: 2013-02-06
Description: Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1513.
CVSS Score: 10.0 (HIGH)
References: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318
CVE: CVE-2012-5186
Published: 2013-02-06
Description: Cross-site scripting (XSS) vulnerability in FLUGELz netmania myu-s and PHP WeblogSystem allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN99681273/995249/index.html; http://jvn.jp/en/jp/JVN99681273/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000003