rainbutterfly/cve_corpus huggingface dataset:
CVE-2012-1214 
Cross-site scripting (XSS) vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-20T20:00:00.000Z
CVE-2012-1215 
Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-20T20:00:00.000Z
CVE-2012-1216 
Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication of administrators for requests that (1) upload a file via an add action or (2) change the contents of a file via a dit action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-20T20:00:00.000Z
CVE-2012-1217 
Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the team parameter to (1) prospects.php, (2) prospect.php, or (3) team.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-20T20:00:00.000Z
CVE-2012-1218 
Multiple SQL injection vulnerabilities in freelancerKit 2.35 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to the (1) notes and (2) tickets components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-21T00:00:00.000Z
CVE-2012-1219 
Multiple cross-site scripting (XSS) vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the (1) ticket parameter to tickets.php, (2) title parameter to notes.php, or (3) task parameter to todo.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-21T00:00:00.000Z
CVE-2012-1220 
Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows remote attackers to hijack the authentication of administrators for requests that change account information via an update action, as demonstrated by changing the password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-21T00:00:00.000Z
CVE-2012-1221 
Directory traversal vulnerability in the telnet server in RabidHamster R2/Extreme 1.65 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the File command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-21T00:00:00.000Z
CVE-2012-1222 
Stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier allows remote authenticated users to execute arbitrary code via a long string to TCP port 23.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-21T00:00:00.000Z
CVE-2012-1223 
RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-21T00:00:00.000Z
CVE-2012-1224 
Cross-site scripting (XSS) vulnerability in system/classes/login.php in ContentLion Alpha 1.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-21T00:00:00.000Z
CVE-2012-1225 
Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter (aka Member List) in list.php or (2) rowid parameter to adherents/fiche.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-21T00:00:00.000Z
CVE-2012-1226 
Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the (1) file parameter to document.php or (2) backtopage parameter in a create action to comm/action/fiche.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-21T00:00:00.000Z
CVE-2012-1227 
Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that (1) modify the admin email address or (2) modify the blog title via a settings action; (3) add a page via an editpage action, or (4) add a categorie via the blog module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-21T00:00:00.000Z
CVE-2012-1234 
SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to execute arbitrary SQL commands via a malformed URL.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0234.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-21T11:00:00.000Z
CVE-2012-1235 
Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0235.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-21T11:00:00.000Z
CVE-2012-1236 
Multiple cross-site request forgery (CSRF) vulnerabilities in Janetter before 3.3.0.0 (aka 3.3.0) allow remote attackers to hijack the authentication of arbitrary users for requests that (1) tweet, (2) upload an image file, or (3) execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T21:00:00.000Z
CVE-2012-1237 
Cross-site request forgery (CSRF) vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-06T18:00:00.000Z
CVE-2012-1238 
Session fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack web sessions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-06T18:00:00.000Z
CVE-2012-1239 
The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-06T19:00:00.000Z
CVE-2012-1240 
Cross-site scripting (XSS) vulnerability in the RECRUIT Dokodemo Rikunabi 2013 extension before 1.0.1 for Google Chrome allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-16T16:00:00.000Z
CVE-2012-1241 
GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-16T16:00:00.000Z
CVE-2012-1242 
Untrusted search path vulnerability in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and 2010, JUST Jump 4, JUST Frontier, and oreplug allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-27T18:00:00.000Z
CVE-2012-1243 
The TwitRocker2 application before 1.0.23 for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-22T01:00:00.000Z
CVE-2012-1244 
The NTT DOCOMO sp mode mail application 5400 and earlier for Android does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-27T18:00:00.000Z
CVE-2012-1245 
Cross-site scripting (XSS) vulnerability in the cleanup_urls function in forum/utils/html.py in OSQA before 1234, and 0.9.0 Beta 3 and earlier, allows remote attackers to inject arbitrary web script or HTML via vectors related to a crafted URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-27T16:00:00.000Z
CVE-2012-1246 
Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-15T20:00:00.000Z
CVE-2012-1247 
Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML by leveraging support for Cascading Style Sheets (CSS) expressions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-15T20:00:00.000Z
CVE-2012-1248 
app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-15T20:00:00.000Z
CVE-2012-1249 
The iLunascape application 1.0.4.0 and earlier for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive stored information via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T20:00:00.000Z
CVE-2012-1250 
Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings via vectors related to PPPoE authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-04T17:00:00.000Z
CVE-2012-1251 
Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-04T17:00:00.000Z
CVE-2012-1252 
Cross-site scripting (XSS) vulnerability in RSSOwl before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a feed, a different vulnerability than CVE-2006-4760.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-04T15:00:00.000Z
CVE-2012-1253 
Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-04T15:00:00.000Z
CVE-2012-1254 
Cross-site scripting (XSS) vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-04T17:00:00.000Z
CVE-2012-1255 
SQL injection vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-04T17:00:00.000Z
CVE-2012-1256 
The single sign-on (SSO) implementation in EasyVista before 2010.1.1.89 allows remote attackers to bypass authentication via a modified url_account parameter, in conjunction with a valid login name in the SSPI_HEADER parameter, to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-22T11:00:00.000Z
CVE-2012-1257 
Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-20T19:31:13.000Z
CVE-2012-1258 
cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with administrator privileges via the newuser, pwd, and selectedUserGroup parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-09T19:47:43.000Z
CVE-2012-1259 
Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allow remote attackers to execute arbitrary SQL commands via the (1) addip parameter to cgi-bin/scrut_fa_exclusions.cgi, (2) getPermissionsAndPreferences parameter to cgi-bin/login.cgi, or (3) possibly certain parameters to d4d/alarms.php as demonstrated by the search_str parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-09T19:47:46.000Z
CVE-2012-1260 
Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allows remote attackers to inject arbitrary web script or HTML via the newUser parameter. NOTE: this might not be a vulnerability, since an administrator might already have the privileges to create arbitrary script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-09T19:47:50.000Z
CVE-2012-1261 
Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow and sFlow Analyzer 8.6.2.16204 and other versions before 9.0.1.19899 allows remote attackers to inject arbitrary web script or HTML via the standalone parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-09T19:47:53.000Z
CVE-2012-1262 
Cross-site scripting (XSS) vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the dbuser parameter, a different vulnerability than CVE-2012-0318.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-03T02:00:00.000Z
CVE-2012-1264 
Unspecified vulnerability in Gretech GOM Media Player before 2.1.37.5091 allows remote attackers to execute arbitrary code via a crafted AVI file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-18T00:00:00.000Z
CVE-2012-1288 
The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-23T11:00:00.000Z
CVE-2012-1289 
Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the logfilename parameter to (1) b2b/admin/log.jsp or (2) b2b/admin/log_view.jsp in the Internet Sales (crm.b2b) component, or (3) ipc/admin/log.jsp or (4) ipc/admin/log_view.jsp in the Application Administration (com.sap.ipc.webapp.ipc) component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-23T18:00:00.000Z
CVE-2012-1290 
Cross-site scripting (XSS) vulnerability in b2b/auction/container.jsp in the Internet Sales (crm.b2b) module in SAP NetWeaver 7.0 allows remote attackers to inject arbitrary web script or HTML via the _loadPage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-23T18:00:00.000Z
CVE-2012-1291 
Unspecified vulnerability in the com.sap.aii.mdt.amt.web.AMTPageProcessor servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the Adapter Monitor via unspecified vectors, possibly related to the EnableInvokerServletGlobally property in the servlet_jsp service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-23T18:00:00.000Z
CVE-2012-1292 
Unspecified vulnerability in the MessagingSystem servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the MessagingSystem Performance Data via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-23T18:00:00.000Z
CVE-2012-1293 
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-25T23:00:00.000Z
CVE-2012-1294 
SQL injection vulnerability in CONTIMEX Impulsio CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-23T20:00:00.000Z
CVE-2012-1296 
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body parameter to admin/preview.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-26T20:00:00.000Z
CVE-2012-1297 
Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) delete users via a delete action in the user module, (2) delete news via a delete action in the news module, or (3) delete newsletters via a delete action in the newsletters module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T18:00:00.000Z
CVE-2012-1301 
The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-13T17:00:00.000Z
CVE-2012-1302 
Multiple cross-site scripting (XSS) vulnerabilities in amMap 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2) settings_file parameter to ammap.swf, or (3) the data_file parameter to amtimeline.swf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-28T02:00:00.000Z
CVE-2012-1303 
Multiple cross-site scripting (XSS) vulnerabilities in amCharts Flash 1 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2) settings_file parameter to ampie.swf; the message element in the chart_data parameter to (3) amcolumn.swf, (4) amline.swf, (5) amradar.swf, or (6) amxy.sw; or (7) the settings_file parameter to amstock.swf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-28T02:00:00.000Z
CVE-2012-1308 
Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-08T18:00:00.000Z
CVE-2012-1310 
Memory leak in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted IP packets, aka Bug ID CSCto89536.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-29T10:00:00.000Z
CVE-2012-1311 
The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue wedge and service outage) via crafted RSVP packets, aka Bug ID CSCts80643.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-29T10:00:00.000Z
CVE-2012-1312 
The MACE feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (device reload) via crafted transit traffic, aka Bug IDs CSCtq64987 and CSCtu57226.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-29T10:00:00.000Z
CVE-2012-1313 
The remote debug shell on the PALO adapter card in Cisco Unified Computing System (UCS) allows local users to gain privileges via malformed show-macstats parameters, aka Bug ID CSCub13772.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-27T20:00:00.000Z
CVE-2012-1314 
The WAAS Express feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit traffic, aka Bug ID CSCtt45381.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-29T10:00:00.000Z
CVE-2012-1315 
Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit SIP traffic, aka Bug ID CSCti46171.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-29T10:00:00.000Z
CVE-2012-1316 
Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks
Problem types: description: Security Bypass
Affected products: vendor: Cisco
product: IronPort Web Security Appliance
Published: 2020-01-15T13:11:31.000Z
CVE-2012-1317 
The multicast implementation in Cisco IOS before 15.1(1)SY allows remote attackers to cause a denial of service (Route Processor crash) by sending packets at a high rate, aka Bug ID CSCts37717.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-23T10:00:00.000Z
CVE-2012-1324 
Race condition in the Zone-Based Firewall in Cisco IOS 15.1 and 15.2, when IPS policies are configured, allows remote attackers to cause a denial of service (device crash) by sending IPv6 packets, aka Bug ID CSCtk53534.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-03T20:00:00.000Z
CVE-2012-1326 
Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks
Problem types: description: Security Bypass
Affected products: vendor: Cisco
product: IronPort Web Security Appliance
Published: 2020-01-15T13:16:01.000Z