rainbutterfly/cve_corpus huggingface dataset:
CVE-2012-4059 
Cross-site request forgery (CSRF) vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authentication of arbitrary users for requests that change user security questions and answers via an upd action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-25T21:00:00.000Z
CVE-2012-4060 
Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) profile.asp, (2) forum.asp, or (3) topic.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-25T21:00:00.000Z
CVE-2012-4061 
Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to diary_view.asp or (2) view_date parameter to default.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-25T21:00:00.000Z
CVE-2012-4063 
The Apache Santuario configuration in Eucalyptus before 3.1.1 does not properly restrict applying XML Signature transforms to documents, which allows remote attackers to cause a denial of service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-01T23:00:00.000Z
CVE-2012-4064 
Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to gain privileges by sending a message to (1) Cloud Controller or (2) Walrus with the internal message format and a modified user id.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-01T23:00:00.000Z
CVE-2012-4065 
Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to bypass unspecified authorization checks and obtain direct access to a (1) Cloud Controller or (2) Walrus service via a crafted message, as demonstrated by changes to a volume, snapshot, or cloud configuration setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-01T23:00:00.000Z
CVE-2012-4066 
The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to (1) delete or (2) upload snapshots.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-08T18:00:00.000Z
CVE-2012-4067 
Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted XML message containing a DTD, as demonstrated by a bucket-logging request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-17T01:00:00.000Z
CVE-2012-4068 
Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string associated with date and time data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-26T19:00:00.000Z
CVE-2012-4069 
Dir2web 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request for system/db/website.db.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-12T17:00:00.000Z
CVE-2012-4070 
SQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote attackers to execute arbitrary SQL commands via the oid parameter in a homepage action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-12T17:00:00.000Z
CVE-2012-4071 
Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to inject arbitrary web script or HTML via crafted BBCode markup in a comment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-10T10:00:00.000Z
CVE-2012-4072 
The KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate's private key, aka Bug ID CSCte90327.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-20T16:00:00.000Z
CVE-2012-4073 
The KVM subsystem in the client in Cisco Unified Computing System (UCS) does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers, and read or modify KVM data, via a crafted certificate, aka Bug ID CSCte90332.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-20T16:00:00.000Z
CVE-2012-4074 
The Board Management Controller (BMC) in the Serial over LAN (SoL) subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded private key, which allows man-in-the-middle attackers to obtain sensitive information or modify the data stream by leveraging knowledge of this key, aka Bug ID CSCte90338.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-20T16:00:00.000Z
CVE-2012-4075 
Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-05T10:00:00.000Z
CVE-2012-4076 
Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-14T01:00:00.000Z
CVE-2012-4077 
Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCtf25457 and CSCtf27651.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-14T01:00:00.000Z
CVE-2012-4078 
The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-24T10:00:00.000Z
CVE-2012-4079 
The XML API service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) allows remote attackers to cause a denial of service (API service outage) via a malformed XML document in a packet, aka Bug ID CSCtg48206.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-26T10:00:00.000Z
CVE-2012-4081 
MCServer in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (application crash) via invalid MCTools parameters, aka Bug ID CSCtg20734.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-20T18:00:00.000Z
CVE-2012-4082 
MCTools in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to gain privileges by entering crafted command-line parameters on a Fabric Interconnect device, aka Bug ID CSCtg20749.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-20T18:00:00.000Z
CVE-2012-4083 
Multiple buffer overflows in the administrative web interface in Cisco Unified Computing System (UCS) allow remote authenticated users to cause a denial of service (memory corruption and session termination) via long string values for unspecified parameters, aka Bug ID CSCtg20751.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-20T16:00:00.000Z
CVE-2012-4084 
Cross-site request forgery (CSRF) vulnerability in the web-management interface in the fabric interconnect (FI) component in Cisco Unified Computing System (UCS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCtg20755.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-05T10:00:00.000Z
CVE-2012-4085 
The Intelligent Platform Management Interface (IPMI) implementation in the Blade Management Controller in Cisco Unified Computing System (UCS) allows remote attackers to enumerate valid usernames by observing IPMI interface responses, aka Bug ID CSCtg20761.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-24T10:00:00.000Z
CVE-2012-4086 
A setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute arbitrary commands via invalid parameters, aka Bug ID CSCtg20790.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-25T10:00:00.000Z
CVE-2012-4087 
A cluster setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute arbitrary commands via invalid parameters, aka Bug ID CSCtg20793.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-24T10:00:00.000Z
CVE-2012-4088 
The FTP server in Cisco Unified Computing System (UCS) has a hardcoded password for an unspecified user account, which makes it easier for remote attackers to read or modify files by leveraging knowledge of this password, aka Bug ID CSCtg20769.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-26T10:00:00.000Z
CVE-2012-4089 
MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management Controller (BMC) commands by leveraging (1) local, (2) shell-level, or (3) debug-level privileges at the operating-system layer, aka Bug ID CSCtg76239.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-24T10:00:00.000Z
CVE-2012-4090 
The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the network-operator role, aka Bug ID CSCti09089.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-05T10:00:00.000Z
CVE-2012-4091 
The RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service (engine restart) via a malformed (1) RIPv4 or (2) RIPv6 message, aka Bug ID CSCtj73415.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-05T10:00:00.000Z
CVE-2012-4092 
The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity of vCenter consoles, which allows man-in-the-middle attackers to read or modify an inter-device data stream by spoofing an identity, aka Bug ID CSCtk00683.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-26T10:00:00.000Z
CVE-2012-4093 
The Manager component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via an invalid Smart Call Home contact address, aka Bug ID CSCtl00186.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-20T16:00:00.000Z
CVE-2012-4094 
Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers to cause a denial of service by reading and forging control messages associated with Smart Call Home reports, aka Bug ID CSCtl00198.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-24T10:00:00.000Z
CVE-2012-4095 
The local file editor in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges, and read or modify arbitrary files, via unspecified key bindings, aka Bug ID CSCtn04521.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T22:00:00.000Z
CVE-2012-4096 
The local file editor in the Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privileges and modify arbitrary fabric-interconnect files, in the context of a vi process, via unspecified commands, aka Bug ID CSCtn06574.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-01T00:00:00.000Z
CVE-2012-4097 
The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial of service (BGP service reset) via a malformed UPDATE message, aka Bug ID CSCtn13043.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-14T01:00:00.000Z
CVE-2012-4098 
The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP service reset and resync) via a malformed UPDATE message, aka Bug ID CSCtn13055.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-05T10:00:00.000Z
CVE-2012-4099 
The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP service reset and resync) via a malformed UPDATE message, aka Bug ID CSCtn13065.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-14T01:00:00.000Z
CVE-2012-4102 
The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq02600.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T22:00:00.000Z
CVE-2012-4103 
ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq02686.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T22:00:00.000Z
CVE-2012-4104 
Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T22:00:00.000Z
CVE-2012-4105 
The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (component crash) via crafted "debug hardware" parameters, aka Bug ID CSCtq86468.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2012-4106 
The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution of every script, which allows local users to gain privileges and execute arbitrary commands via an unspecified script-execution approach, aka Bug ID CSCtq86477.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2012-4107 
The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary commands via crafted parameters to a file-related command, aka Bug ID CSCtq86489.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2012-4108 
The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary operating-system commands via crafted parameters to a file-related command, aka Bug ID CSCtq86554.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2012-4109 
The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86559.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T22:00:00.000Z
CVE-2012-4110 
run-script in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86560.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T22:00:00.000Z
CVE-2012-4111 
The create certreq command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86563.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T22:00:00.000Z
CVE-2012-4112 
The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary commands via crafted command parameters within the command-line interface, aka Bug ID CSCtr43330.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-19T10:00:00.000Z
CVE-2012-4113 
The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and read arbitrary files via crafted command parameters within the command-line interface, aka Bug ID CSCtr43374.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-19T10:00:00.000Z
CVE-2012-4114 
The fabric-interconnect KVM module in Cisco Unified Computing System (UCS) does not encrypt video data, which allows man-in-the-middle attackers to watch KVM display content by sniffing the network or modify this traffic by inserting packets into the client-server data stream, aka Bug ID CSCtr72949.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-19T10:00:00.000Z
CVE-2012-4115 
The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM virtual-media data, which allows man-in-the-middle attackers to obtain sensitive information by sniffing the network or modify this traffic by inserting packets into the client-server data stream, aka Bug ID CSCtr72964.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-21T10:00:00.000Z
CVE-2012-4116 
The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM media traffic, which allows remote attackers to obtain sensitive information, and consequently complete the authentication process for a server connection, by sniffing the network, aka Bug ID CSCtr72970.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-19T10:00:00.000Z
CVE-2012-4117 
The fabric-interconnect component in Cisco Unified Computing System (UCS) does not properly verify X.509 certificates, which allows man-in-the-middle attackers to watch SSL KVM video-channel traffic or modify this traffic via a crafted certificate, aka Bug ID CSCtr73033.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-19T10:00:00.000Z
CVE-2012-4121 
Cisco NX-OS allows local users to gain privileges, and read or modify arbitrary files, via the sed (1) r and (2) w commands, aka Bug IDs CSCts56559, CSCts56565, CSCts56570, and CSCts56574.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-14T01:00:00.000Z
CVE-2012-4122 
The CLI parser in Cisco NX-OS allows local users to bypass intended access restrictions, and overwrite or create arbitrary files, via shell output redirection, aka Bug IDs CSCts56672 and CSCts56669.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-05T10:00:00.000Z
CVE-2012-4131 
Directory traversal vulnerability in tar in Cisco NX-OS allows local users to access arbitrary files via crafted command-line arguments, aka Bug IDs CSCty07157, CSCty07159, CSCty07162, and CSCty07164.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-21T11:00:00.000Z
CVE-2012-4135 
Directory traversal vulnerability in filesys in Cisco NX-OS 6.1(2) and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-21T11:00:00.000Z
CVE-2012-4136 
The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) does not properly bind the cluster service to the management interface, which allows remote attackers to obtain sensitive information or cause a denial of service (peer-syncing outage) via a TELNET connection, aka Bug ID CSCtz72910.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-03T10:00:00.000Z
CVE-2012-4141 
Directory traversal vulnerability in the CLI parser in Cisco NX-OS allows local users to create arbitrary script files via a relative pathname in the "file name" parameter, aka Bug IDs CSCua71557 and CSCua71551.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-05T10:00:00.000Z
CVE-2012-4142 
Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, ignores some characters in HTML documents in unspecified circumstances, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-06T16:00:00.000Z
CVE-2012-4143 
Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog, a different vulnerability than CVE-2012-1924.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-06T16:00:00.000Z
CVE-2012-4144 
Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM elements, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-06T16:00:00.000Z
CVE-2012-4145 
Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, has unknown impact and attack vectors, related to a "low severity issue."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-06T16:00:00.000Z
CVE-2012-4146 
Opera before 12.01 allows remote attackers to cause a denial of service (application crash) via a crafted web site, as demonstrated by the Lenovo "Shop now" page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-06T16:00:00.000Z