rainbutterfly/cve_corpus huggingface dataset:
CVE-2012-6435 Rockwell Automation ControlLogix PLC Improper Access Control
When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the CPU to stop logic execution and enter a fault state, a DoS can occur. This situation could cause loss of availability and a disruption of communication with other connected devices.





Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: Rockwell Automation
product: 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix L32E and L35E controllers
default_status: unaffected
vendor: Rockwell Automation
product: 1788-ENBT FLEXLogix adapter
default_status: unaffected
vendor: Rockwell Automation
product: 1794-AENTR FLEX I/O EtherNet/IP adapter
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix, CompactLogix, GuardLogix, and SoftLogix
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix and SoftLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix and GuardLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: MicroLogix
default_status: unaffected
Credits: lang: en
value: Rubén Santamarta of IOActive identified vulnerabilities in Rockwell Automation’s ControlLogix PLC and released proof-of-concept (exploit) code at the Digital Bond S4 Conference on January 19, 2012.
Published: 2013-01-24T21:00:00.000Z
CVE-2012-6436 Rockwell Automation ControlLogix PLC Improper Input Validation
The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP, which creates a buffer overflow and causes the CPU to crash. Successful exploitation of this vulnerability could cause loss of availability and a disruption in communications with other connected devices.







Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: Rockwell Automation
product: 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix L32E and L35E controllers
default_status: unaffected
vendor: Rockwell Automation
product: 1788-ENBT FLEXLogix adapter
default_status: unaffected
vendor: Rockwell Automation
product: 1794-AENTR FLEX I/O EtherNet/IP adapter
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix, CompactLogix, GuardLogix, and SoftLogix
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix and SoftLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix and GuardLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: MicroLogix
default_status: unaffected
Credits: lang: en
value: Rubén Santamarta of IOActive identified vulnerabilities in Rockwell Automation’s ControlLogix PLC and released proof-of-concept (exploit) code at the Digital Bond S4 Conference on January 19, 2012.
Published: 2013-01-24T21:00:00.000Z
CVE-2012-6437 Rockwell Automation ControlLogix PLC Improper Authentication
The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware image to the Ethernet card, whether it is a corrupt or legitimate firmware image. Successful exploitation of this vulnerability could cause loss of availability, integrity, and confidentiality and a disruption in communications with other connected devices.





Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: Rockwell Automation
product: 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix L32E and L35E controllers
default_status: unaffected
vendor: Rockwell Automation
product: 1788-ENBT FLEXLogix adapter
default_status: unaffected
vendor: Rockwell Automation
product: 1794-AENTR FLEX I/O EtherNet/IP adapter
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix, CompactLogix, GuardLogix, and SoftLogix
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix and SoftLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix and GuardLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: MicroLogix
default_status: unaffected
Credits: lang: en
value: Rubén Santamarta of IOActive identified vulnerabilities in Rockwell Automation’s ControlLogix PLC and released proof-of-concept (exploit) code at the Digital Bond S4 Conference on January 19, 2012.
Published: 2013-01-24T21:00:00.000Z
CVE-2012-6438 Rockwell Automation ControlLogix PLC Improper Input Validation
The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP, which creates a buffer overflow and causes the NIC to crash. Successful exploitation of this vulnerability could cause loss of availability and a disruption in communications with other connected devices.





Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: Rockwell Automation
product: 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix L32E and L35E controllers
default_status: unaffected
vendor: Rockwell Automation
product: 1788-ENBT FLEXLogix adapter
default_status: unaffected
vendor: Rockwell Automation
product: 1794-AENTR FLEX I/O EtherNet/IP adapter
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix, CompactLogix, GuardLogix, and SoftLogix
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix and SoftLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix and GuardLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: MicroLogix
default_status: unaffected
Credits: lang: en
value: Rubén Santamarta of IOActive identified vulnerabilities in Rockwell Automation’s ControlLogix PLC and released proof-of-concept (exploit) code at the Digital Bond S4 Conference on January 19, 2012.
Published: 2013-01-24T21:00:00.000Z
CVE-2012-6439 Rockwell Automation ControlLogix PLC Improper Access Control
When an affected 
product receives a valid CIP message from an unauthorized or unintended 
source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 
44818/UDP that changes the product’s configuration and network 
parameters, a DoS condition can occur. This situation could cause loss 
of availability and a disruption of communication with other connected 
devices. 

Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: Rockwell Automation
product: 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix L32E and L35E controllers
default_status: unaffected
vendor: Rockwell Automation
product: 1788-ENBT FLEXLogix adapter
default_status: unaffected
vendor: Rockwell Automation
product: 1794-AENTR FLEX I/O EtherNet/IP adapter
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix, CompactLogix, GuardLogix, and SoftLogix
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix and SoftLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix and GuardLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: MicroLogix
default_status: unaffected
Credits: lang: en
value: Rubén Santamarta of IOActive identified vulnerabilities in Rockwell Automation’s ControlLogix PLC and released proof-of-concept (exploit) code at the Digital Bond S4 Conference on January 19, 2012.
Published: 2013-01-24T21:00:00.000Z
CVE-2012-6440 Rockwell Automation ControlLogix PLC Improper Input Validation
The Web server password authentication mechanism used by the products is vulnerable to a MitM and Replay attack. Successful exploitation of this vulnerability will allow unauthorized access of the product’s Web server to view and alter product configuration and diagnostics information.



Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: Rockwell Automation
product: 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix L32E and L35E controllers
default_status: unaffected
vendor: Rockwell Automation
product: 1788-ENBT FLEXLogix adapter
default_status: unaffected
vendor: Rockwell Automation
product: 1794-AENTR FLEX I/O EtherNet/IP adapter
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix, CompactLogix, GuardLogix, and SoftLogix
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix and SoftLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix and GuardLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: MicroLogix
default_status: unaffected
Credits: lang: en
value: This vulnerability was discovered by Rockwell Automation engineers as they were investigating other vulnerabilities reported at the Digital Bond S4 2012 Conference.
Published: 2013-01-24T21:00:00.000Z
CVE-2012-6441 Rockwell Automation ControlLogix PLC Information Exposure
An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP. Successful exploitation of this vulnerability could cause loss of confidentiality.





Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Rockwell Automation
product: 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix L32E and L35E controllers
default_status: unaffected
vendor: Rockwell Automation
product: 1788-ENBT FLEXLogix adapter
default_status: unaffected
vendor: Rockwell Automation
product: 1794-AENTR FLEX I/O EtherNet/IP adapter
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix, CompactLogix, GuardLogix, and SoftLogix
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix and SoftLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix and GuardLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: MicroLogix
default_status: unaffected
Credits: lang: en
value: This vulnerability was discovered by Rockwell Automation engineers as they were investigating other vulnerabilities reported at the Digital Bond S4 2012 Conference.
Published: 2013-01-24T21:00:00.000Z
CVE-2012-6442 Rockwell Automation ControlLogix PLC Improper Access Control
When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the product to reset, a DoS can occur. This situation could cause loss of availability and a disruption of communication with other connected devices.



Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: Rockwell Automation
product: 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix L32E and L35E controllers
default_status: unaffected
vendor: Rockwell Automation
product: 1788-ENBT FLEXLogix adapter
default_status: unaffected
vendor: Rockwell Automation
product: 1794-AENTR FLEX I/O EtherNet/IP adapter
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix, CompactLogix, GuardLogix, and SoftLogix
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix and SoftLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: ControlLogix and GuardLogix controllers
default_status: unaffected
vendor: Rockwell Automation
product: MicroLogix
default_status: unaffected
Credits: lang: en
value: Rubén Santamarta of IOActive identified vulnerabilities in Rockwell Automation’s ControlLogix PLC and released proof-of-concept (exploit) code at the Digital Bond S4 Conference on January 19, 2012.
Published: 2013-01-24T21:00:00.000Z
CVE-2012-6447 
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 5.0.0 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-23T15:00:00.000Z
CVE-2012-6448 
Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T21:32:21.000Z
CVE-2012-6449 
The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-10T14:57:53.000Z
CVE-2012-6451 
Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-24T14:31:07.000Z
CVE-2012-6452 
Axway Secure Messenger before 6.5 Updated Release 7, as used in Axway Email Firewall, provides different responses to authentication requests depending on whether the user exists, which allows remote attackers to enumerate users via a series of requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-27T15:00:00.000Z
CVE-2012-6453 
Cross-site scripting (XSS) vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a crafted feed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-31T11:00:00.000Z
CVE-2012-6458 
Multiple cross-site scripting (XSS) vulnerabilities in the SilverStripe e-commerce module 3.0 for SilverStripe CMS allow remote attackers to inject arbitrary web script or HTML via the (1) FirstName, (2) Surname, or (3) Email parameter to code/forms/OrderFormAddress.php; or the (4) FirstName or (5) Surname parameter to code/forms/ShopAccountForm.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-09T22:00:00.000Z
CVE-2012-6459 
ConnMan 1.3 on Tizen continues to list the bluetooth service after offline mode has been enabled, which might allow remote attackers to obtain sensitive information via Bluetooth packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-01T15:00:00.000Z
CVE-2012-6460 
Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-02T11:00:00.000Z
CVE-2012-6461 
The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attackers to trigger a false indication of successful revocation-status checking by causing a failure of a single checking service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-02T11:00:00.000Z
CVE-2012-6462 
Opera before 12.10 does not properly implement the Cross-Origin Resource Sharing (CORS) specification, which allows remote attackers to bypass intended page-content restrictions via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-02T11:00:00.000Z
CVE-2012-6463 
Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an unspecified sequence of loading of documents and loading of data: URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-02T11:00:00.000Z
CVE-2012-6464 
Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript code that overrides methods of unspecified native objects in documents that have different origins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-02T11:00:00.000Z
CVE-2012-6465 
Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed SVG image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-02T11:00:00.000Z
CVE-2012-6466 
Opera before 12.10 does not properly handle incorrect size data in a WebP image, which allows remote attackers to obtain potentially sensitive information from process memory by using a crafted image as the fill pattern for a canvas.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-02T11:00:00.000Z
CVE-2012-6467 
Opera before 12.10 follows Internet shortcuts that are referenced by a (1) IMG element or (2) other inline element, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site, as exploited in the wild in November 2012.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-02T11:00:00.000Z
CVE-2012-6468 
Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long HTTP response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-02T11:00:00.000Z
CVE-2012-6469 
Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web script in an error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-02T11:00:00.000Z
CVE-2012-6470 
Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a malformed image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-02T11:00:00.000Z
CVE-2012-6471 
Opera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-02T11:00:00.000Z
CVE-2012-6472 
Opera before 12.12 on UNIX uses weak permissions for the profile directory, which allows local users to obtain sensitive information by reading a (1) cache file, (2) password file, or (3) configuration file, or (4) possibly gain privileges by modifying or overwriting a configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-02T11:00:00.000Z
CVE-2012-6493 
Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-04T17:00:00.000Z
CVE-2012-6494 
Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote attackers to capture a user's session and gain unauthorized access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-25T18:41:34.000Z