deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-1270
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16349
CVE: CVE-2013-1271
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16460
CVE: CVE-2013-1272
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16443
CVE: CVE-2013-1273
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16490
CVE: CVE-2013-1274
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16224
CVE: CVE-2013-1275
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16399
CVE: CVE-2013-1276
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16432
CVE: CVE-2013-1277
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16256
CVE: CVE-2013-1278
Published: 2013-02-13
Description: Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages incorrect handling of objects in memory, aka "Kernel Race Condition Vulnerability," a different vulnerability than CVE-2013-1279.
CVSS Score: 7.4 (HIGH)
CWE: CWE-362, CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-017; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16313
CVE: CVE-2013-1279
Published: 2013-02-13
Description: Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages incorrect handling of objects in memory, aka "Kernel Race Condition Vulnerability," a different vulnerability than CVE-2013-1278.
CVSS Score: 7.2 (HIGH)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-017; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16458
CVE: CVE-2013-1280
Published: 2013-02-13
Description: The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Reference Count Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-017; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16448
CVE: CVE-2013-1281
Published: 2013-02-13
Description: The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via an attempted renaming of a file or folder located on a read-only share, aka "NULL Dereference Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-014; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16388
CVE: CVE-2013-1313
Published: 2013-02-13
Description: Object Linking and Embedding (OLE) Automation in Microsoft Windows XP SP3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted RTF document, aka "OLE Automation Remote Code Execution Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-020; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037
CVE: CVE-2013-0208
Published: 2013-02-13
Description: The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the block_device_mapping parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/89661; http://rhn.redhat.com/errata/RHSA-2013-0208.html; http://secunia.com/advisories/51963
CVE: CVE-2012-3363
Published: 2013-02-13
Description: Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611, CWE-611
References: http://framework.zend.com/security/advisory/ZF2012-01; http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34284; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html
CVE: CVE-2012-6531
Published: 2013-02-13
Description: (1) Zend_Dom, (2) Zend_Feed, and (3) Zend_Soap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack, a different vulnerability than CVE-2012-3363.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://framework.zend.com/security/advisory/ZF2012-01; http://www.debian.org/security/2012/dsa-2505; http://www.openwall.com/lists/oss-security/2012/06/26/2
CVE: CVE-2012-6532
Published: 2013-02-13
Description: (1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service (CPU consumption) via recursive or circular references in an XML entity definition in an XML DOCTYPE declaration, aka an XML Entity Expansion (XEE) attack.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://framework.zend.com/security/advisory/ZF2012-02; http://www.mandriva.com/security/advisories?name=MDVSA-2013:115; http://framework.zend.com/security/advisory/ZF2012-02
CVE: CVE-2012-3280
Published: 2013-02-13
Description: Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via an OSS Remote Operation over an Expand connection.
CVSS Score: 6.3 (MEDIUM)
References: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03654586; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03654586
CVE: CVE-2013-0635
Published: 2013-02-13
Description: Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb13-06.html; http://www.us-cert.gov/cas/techalerts/TA13-043A.html; http://www.adobe.com/support/security/bulletins/apsb13-06.html
CVE: CVE-2013-0636
Published: 2013-02-13
Description: Stack-based buffer overflow in Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb13-06.html; http://www.us-cert.gov/cas/techalerts/TA13-043A.html; http://www.adobe.com/support/security/bulletins/apsb13-06.html
CVE: CVE-2013-1100
Published: 2013-02-13
Description: The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service (device crash) via crafted packets on TCP port (1) 80 or (2) 443, aka Bug ID CSCuc53853.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1100; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1100
CVE: CVE-2013-1111
Published: 2013-02-13
Description: The Cisco ATA 187 Analog Telephone Adaptor with firmware 9.2.1.0 and 9.2.3.1 before ES build 4 does not properly implement access control, which allows remote attackers to execute operating-system commands via vectors involving a session on TCP port 7870, aka Bug ID CSCtz67038.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130206-ata187; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130206-ata187
CVE: CVE-2013-1114
Published: 2013-02-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud87527.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1114; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1114
CVE: CVE-2013-1122
Published: 2013-02-13
Description: Cisco NX-OS on the Nexus 7000, when a certain Overlay Transport Virtualization (OTV) configuration is used, allows remote attackers to cause a denial of service (M1-Series module reload) via crafted packets, aka Bug ID CSCud15673.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1122; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1122
CVE: CVE-2013-1131
Published: 2013-02-13
Description: Cisco Small Business Wireless Access Points WAP200, WAP2000, WAP200E, and WET200 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SSID that is not properly handled during a site survey, aka Bug IDs CSCua86182, CSCua91196, CSCud36155, and CSCua86190.
CVSS Score: 6.4 (MEDIUM)
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1131; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1131
CVE: CVE-2012-5188
Published: 2013-02-14
Description: Untrusted search path vulnerability in mora Downloader before 1.0.0.1 allows remote attackers to trigger the launch of a .exe file via unspecified vectors.
CVSS Score: 10.0 (HIGH)
References: http://jvn.jp/en/jp/JVN91387819/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000006; http://mora.jp/help/information?60
CVE: CVE-2013-0640
Published: 2013-02-14
Description: Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html; http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html
CVE: CVE-2013-0641
Published: 2013-02-14
Description: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html; http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html; http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit
CVE: CVE-2013-0701
Published: 2013-02-14
Description: SQL injection vulnerability in Cybozu Garoon 2.5.0 through 3.5.3 allows remote authenticated users to execute arbitrary SQL commands by leveraging a logging privilege.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89
References: http://cs.cybozu.co.jp/information/20130125up02.php; http://jvn.jp/en/jp/JVN07629635/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000007
CVE: CVE-2013-0702
Published: 2013-02-14
Description: Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 3.5.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://cs.cybozu.co.jp/information/20130125up01.php; http://jvn.jp/en/jp/JVN95863326/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000008
CVE: CVE-2012-5564
Published: 2013-02-14
Description: android-tools 4.1.1 in Android Debug Bridge (ADB) allows local users to overwrite arbitrary files via a symlink attack on /tmp/adb.log.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688280; http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098527.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098529.html
CVE: CVE-2012-5634
Published: 2013-02-14
Description: Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-16
References: http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html; http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html; http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html
CVE: CVE-2012-6127
Published: 2013-02-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none.  Reason: This was originally reported as an issue in jakarta-commons-httpclient involving wildcard matching in the SSL hostname verifier, but further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2013-0153
Published: 2013-02-14
Description: The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests.
CVSS Score: 4.7 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html; http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html; http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html
CVE: CVE-2013-1402
Published: 2013-02-14
Description: DigiLIBE 3.4 and possibly other versions sends a redirect but does not exit, which allows remote attackers to obtain sensitive configuration information via a direct request to configuration/general_configuration.html.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2013-01/0095.html; http://archives.neohapsis.com/archives/bugtraq/2013-01/0095.html
CVE: CVE-2012-4694
Published: 2013-02-15
Description: Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.
CVSS Score: 7.6 (HIGH)
CWE: CWE-310
References: http://ics-cert.us-cert.gov/pdf/ICSA-13-042-01.pdf; http://www.moxa.com/support/download.aspx?type=support&id=492; http://ics-cert.us-cert.gov/pdf/ICSA-13-042-01.pdf
CVE: CVE-2012-4701
Published: 2013-02-15
Description: Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging (1) valid credentials or (2) the guest feature.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://ics-cert.us-cert.gov/pdf/ICSA-13-045-01.pdf; https://www.niagara-central.com/ord?portal:/dev/wiki/Niagara_AX_Security_Patch_11-Feb-2013; http://ics-cert.us-cert.gov/pdf/ICSA-13-045-01.pdf
CVE: CVE-2012-4711
Published: 2013-02-15
Description: Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted packet.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://ics-cert.us-cert.gov/advisories/ICSA-13-043-02A; http://ics-cert.us-cert.gov/pdf/ICSA-13-043-02.pdf; http://ics-cert.us-cert.gov/advisories/ICSA-13-043-02A
CVE: CVE-2012-4712
Published: 2013-02-15
Description: Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-798
References: http://ics-cert.us-cert.gov/pdf/ICSA-13-042-01.pdf; http://www.moxa.com/support/download.aspx?type=support&id=492; http://ics-cert.us-cert.gov/pdf/ICSA-13-042-01.pdf
CVE: CVE-2013-0658
Published: 2013-02-15
Description: Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://ics-cert.us-cert.gov/pdf/ICSA-13-043-01.pdf; http://ics-cert.us-cert.gov/pdf/ICSA-13-043-01.pdf
CVE: CVE-2013-0703
Published: 2013-02-15
Description: Cross-site scripting (XSS) vulnerability in imgboard.com imgboard before 1.22R6.1 u and 20xx before 2010u allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN09223079/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000009; http://www.big.or.jp/~talk/t-club/soft/mini_r6/index.cgi
CVE: CVE-2013-0704
Published: 2013-02-15
Description: Directory traversal vulnerability in the GREE application before 1.3.3 for Android allows remote attackers to obtain sensitive information via a crafted URL, which is not properly handled during interaction with other applications.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN78601526/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000010; http://jvn.jp/en/jp/JVN78601526/index.html
CVE: CVE-2013-0705
Published: 2013-02-15
Description: Directory traversal vulnerability in LSI 3ware Disk Manager (3DM) before 2 allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://jvn.jp/en/jp/JVN02596643/995349/index.html; http://jvn.jp/en/jp/JVN02596643/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000011