rainbutterfly/cve_corpus huggingface dataset:
CVE-2012-0079 
Unspecified vulnerability in Oracle OpenSSO 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Administration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0080 
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Management.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0081 
Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.1.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Administration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0082 
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity and availability via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0083 
Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Search.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0084 
Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect integrity via unknown vectors related to Content Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0085 
Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2 and 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0086 
Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web, a different vulnerability than CVE-2012-0095 and CVE-2012-0108.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-16T23:00:00.000Z
CVE-2012-0087 
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0101 and CVE-2012-0102.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0088 
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Benefits Administration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0089 
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0090 
Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0092.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-16T23:00:00.000Z
CVE-2012-0091 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52.05 allows remote authenticated users to affect integrity and availability via unknown vectors related to Upgrade Change Assistance.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0092 
Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0090.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-16T23:00:00.000Z
CVE-2012-0093 
Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote attackers to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0071.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-16T23:00:00.000Z
CVE-2012-0094 
Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows remote attackers to affect availability, related to TCP/IP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0095 
Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web, a different vulnerability than CVE-2012-0086 and CVE-2012-0108.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-16T23:00:00.000Z
CVE-2012-0096 
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0097 
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect confidentiality via unknown vectors related to ksh93 Shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0098 
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2011-0813.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0099 
Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to sshd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0100 
Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kerberos.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0101 
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2012-0102.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0102 
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2012-0101.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0103 
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to Kernel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0104 
Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect availability via unknown vectors related to Web Container.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0105 
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Guest Additions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0106 
Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-16T23:00:00.000Z
CVE-2012-0107 
Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote attackers to affect availability via unknown vectors related to Web.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-16T23:00:00.000Z
CVE-2012-0108 
Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web, a different vulnerability than CVE-2012-0086 and CVE-2012-0095.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-16T23:00:00.000Z
CVE-2012-0109 
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect confidentiality and availability, related to TCP/IP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0110 
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0111 
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality and integrity via unknown vectors related to Shared Folders.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0112 
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0113 
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0118.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0114 
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows local users to affect confidentiality and integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0115 
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0116 
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0117 
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0118 
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0113.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0119 
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0120 
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0485, and CVE-2012-0492.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2012-0121 
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1392.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-14T01:00:00.000Z
CVE-2012-0122 
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1393.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-14T01:00:00.000Z
CVE-2012-0123 
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1498.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-14T01:00:00.000Z
CVE-2012-0124 
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-14T01:00:00.000Z
CVE-2012-0125 
Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.31 allows local users to obtain access to diagnostic information via unknown vectors, a related issue to CVE-2012-0126.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-28T10:00:00.000Z
CVE-2012-0126 
Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.11 and 11.23 allows remote attackers to obtain access to diagnostic information via unknown vectors, a related issue to CVE-2012-0125.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-28T10:00:00.000Z
CVE-2012-0127 
Unspecified vulnerability in HP Performance Manager 9.00 allows remote attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-31T14:00:00.000Z
CVE-2012-0128 
HP Onboard Administrator (OA) before 3.50 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-04T23:00:00.000Z
CVE-2012-0129 
HP Onboard Administrator (OA) before 3.50 allows remote attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-04T23:00:00.000Z
CVE-2012-0130 
HP Onboard Administrator (OA) before 3.50 allows remote attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-04T23:00:00.000Z
CVE-2012-0131 
Distributed Computing Environment (DCE) 1.8 and 1.9 on HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-03T21:00:00.000Z
CVE-2012-0132 
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 9.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-04T22:00:00.000Z
CVE-2012-0133 
HP ProCurve 5400 zl switches with certain serial numbers include a compact flash card that contains an unspecified virus, which might allow user-assisted remote attackers to execute arbitrary code on a PC by leveraging manual transfer of this card.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-12T10:00:00.000Z
CVE-2012-0134 
Unspecified vulnerability in HP OpenVMS 7.3-2 on the Alpha platform, 8.3 and 8.4 on the Alpha and IA64 platforms, and 8.3-1h1 on the IA64 platform allows local users to cause a denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-19T21:00:00.000Z
CVE-2012-0135 
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows remote authenticated users to cause a denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-18T10:00:00.000Z
CVE-2012-0136 
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0137, and CVE-2012-0138.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-14T22:00:00.000Z
CVE-2012-0137 
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0138.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-14T22:00:00.000Z
CVE-2012-0138 
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0137.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-14T22:00:00.000Z
CVE-2012-0141 
Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel File Format Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-09T00:00:00.000Z
CVE-2012-0142 
Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel File Format Memory Corruption in OBJECTLINK Record Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-09T00:00:00.000Z
CVE-2012-0143 
Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Memory Corruption Using Various Modified Bytes Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-09T00:00:00.000Z
CVE-2012-0144 
Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-14T22:00:00.000Z
CVE-2012-0145 
Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-14T22:00:00.000Z
CVE-2012-0146 
Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "UAG Blind HTTP Redirect Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-10T21:00:00.000Z
CVE-2012-0147 
Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-10T21:00:00.000Z
CVE-2012-0148 
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "AfdPoll Elevation of Privilege Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-14T22:00:00.000Z