rainbutterfly/cve_corpus huggingface dataset:
CVE-2012-1754 
Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1732.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:00:00.000Z
CVE-2012-1755 
Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 allows remote attackers to affect integrity via vectors related to PeopleBooks - PSOL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-17T01:30:00.000Z
CVE-2012-1756 
Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:00:00.000Z
CVE-2012-1757 
Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1758 
Unspecified vulnerability in the Oracle AutoVue component in Oracle Supply Chain Products Suite 20.0.2 and 20.1 allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-1759.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1759 
Unspecified vulnerability in the Oracle AutoVue component in Oracle Supply Chain Products Suite 20.0.2 and 20.1 allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-1758.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1760 
Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1742.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1761 
Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to UI Framework.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1762 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect integrity, related to TECH, a different vulnerability than CVE-2012-3111.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1763 
Unspecified vulnerability in the Oracle Clinical/Remote Data Capture component in Oracle Industry Applications 4.6.0 and 4.6.2 allows remote authenticated users to affect confidentiality, related to HTML Surround.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-16T23:00:00.000Z
CVE-2012-1764 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect integrity, related to MCF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1765 
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknown vectors related to Branded Zone.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1766 
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1767, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1767 
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1768 
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-3109.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1769 
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1770 
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1771 
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1770, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1772 
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1773 
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:39:00.000Z
CVE-2012-1774 
Unspecified vulnerability in the Open URL feature in Gretech GOM Media Player before 2.1.39.5101 has unknown impact and attack vectors, a different vulnerability than CVE-2007-5779 and CVE-2012-1264.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-18T00:00:00.000Z
CVE-2012-1775 
Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T16:00:00.000Z
CVE-2012-1776 
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T16:00:00.000Z
CVE-2012-1777 
SQL injection vulnerability in my.activation.php3 in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 allows remote attackers to execute arbitrary SQL commands via the state parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-04T10:00:00.000Z
CVE-2012-1778 
SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T18:00:00.000Z
CVE-2012-1779 
Cross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T18:00:00.000Z
CVE-2012-1780 
SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands via the category parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T18:00:00.000Z
CVE-2012-1781 
Multiple cross-site scripting (XSS) vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) TREF_email_address or (2) TR_name parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T18:00:00.000Z
CVE-2012-1782 
Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the (1) url bar or (2) picture bar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T18:00:00.000Z
CVE-2012-1783 
Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET request without an HTTP version number.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T18:00:00.000Z
CVE-2012-1784 
SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter in a profile action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T18:00:00.000Z
CVE-2012-1785 
kg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T18:00:00.000Z
CVE-2012-1786 
The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T18:00:00.000Z
CVE-2012-1787 
Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) FILE, or (3) DOMAIN parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T18:00:00.000Z
CVE-2012-1788 
Multiple cross-site scripting (XSS) vulnerabilities in wonderdesk.cgi in WonderDesk SQL 4.14 allow remote attackers to inject arbitrary web script or HTML via the (1) cus_email parameter in a cust_lostpw action; or (2) help_name, (3) help_email, (4) help_website, or (5) help_example_url parameters in an hd_modify_record action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T18:00:00.000Z
CVE-2012-1789 
Multiple cross-site scripting (XSS) vulnerabilities in Kongreg8 1.7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) surname or (2) firstname parameters to modules/members/addmember.php; or (3) groupdescription or (4) groupname parameters to modules/groups/addgroupform.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T18:00:00.000Z
CVE-2012-1790 
Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T18:00:00.000Z
CVE-2012-1792 
Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Setup/Application/Install/RPC/DBCheck.php in OSCommerce Online Merchant 3.0.2, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the name parameter to oscommerce/index.php, which is not properly handled in an error message.  NOTE: this might not be a vulnerability, since the ability to access oscommerce/index.php during installation may already imply administrator privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-27T19:00:00.000Z
CVE-2012-1795 
webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-20T18:00:00.000Z
CVE-2012-1796 
Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privileges via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-20T20:00:00.000Z
CVE-2012-1797 
IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-20T20:00:00.000Z
CVE-2012-1798 
The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted EXIF IFD in a TIFF image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-05T22:00:00.000Z
CVE-2012-1799 
The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit the rate of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack on the administrative password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-18T10:00:00.000Z
CVE-2012-1800 
Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 allows remote attackers to cause a denial of service (device outage) or possibly execute arbitrary code via a crafted DCP frame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-18T10:00:00.000Z
CVE-2012-1801 
Multiple stack-based buffer overflows in (1) COM and (2) ActiveX controls in ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Server, QuickTeach, RobotStudio S4, and RobotStudio Lite allow remote attackers to execute arbitrary code via crafted input data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-18T10:00:00.000Z
CVE-2012-1802 
Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, X-300EEC before 3.7.2, XR-300 before 3.7.2, and X-300 before 3.7.2 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a malformed URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-18T10:00:00.000Z
CVE-2012-1803 
RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) TELNET, (2) remote shell (aka rsh), or (3) serial-console session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-28T00:00:00.000Z
CVE-2012-1804 
The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-14T20:00:00.000Z
CVE-2012-1805 
Buffer overflow in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 allows remote attackers to execute arbitrary code via long strings in unspecified parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-13T17:00:00.000Z
CVE-2012-1806 
The ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 supports a maximum password length of 8 bytes, which makes it easier for remote attackers to obtain access via a brute-force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-13T17:00:00.000Z
CVE-2012-1807 
Cross-site scripting (XSS) vulnerability in the web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-13T17:00:00.000Z
CVE-2012-1808 
The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 does not require authentication, which allows remote attackers to perform unspecified functions via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-13T17:00:00.000Z
CVE-2012-1809 
The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-13T17:00:00.000Z
CVE-2012-1810 
EOSCoreScada.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service (daemon restart) by sending data to TCP port (1) 5050 or (2) 24004.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-11-13T11:00:00.000Z
CVE-2012-1811 
EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-11-13T11:00:00.000Z
CVE-2012-1812 
eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-11-13T11:00:00.000Z
CVE-2012-1813 
eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-11-13T11:00:00.000Z
CVE-2012-1814 
Cross-site scripting (XSS) vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-08T18:00:00.000Z
CVE-2012-1815 
SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-08T18:00:00.000Z
CVE-2012-1816 
PORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to cause a denial of service (daemon crash) via a crafted (1) TCP or (2) UDP packet to port 111.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-08T18:00:00.000Z
CVE-2012-1817 
Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via an invalid field in a project file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-08T18:00:00.000Z
CVE-2012-1818 
An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-08T18:00:00.000Z
CVE-2012-1819 
Untrusted search path vulnerability in WellinTech KingView 6.53 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T22:00:00.000Z
CVE-2012-1820 
The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-13T15:00:00.000Z
CVE-2012-1821 
The Network Threat Protection module in the Manager component in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.700x on Windows Server 2003 allows remote attackers to cause a denial of service (web-server outage, or daemon crash or hang) via a flood of packets that triggers automated blocking of network traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-24T00:00:00.000Z
CVE-2012-1823 
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-11T10:00:00.000Z