|
290201
|
- |
|
microsoft
|
windows_server_2008
windows_xp
windows_7
windows_server_2003
windows_vista
|
Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remote attackers to execute arbitrary code via …
|
CWE-94
Code Injection
|
CVE-2012-4774
|
2024-11-21 10:43 |
2012-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290202
|
- |
|
ibm
|
informix_dynamic_server
|
Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users to execute arbitrary code via a crafted SQL statement.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-4857
|
2024-11-21 10:43 |
2012-12-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290203
|
- |
|
ibm
|
flex_system_chassis_management_module
integrated_management_module_ii
|
IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS…
|
NVD-CWE-noinfo
|
CVE-2012-4838
|
2024-11-21 10:43 |
2012-12-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290204
|
- |
|
rockwellautomation
|
plc-5_controller
ab_micrologix_controller
slc_500_controller
|
Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platform, when Static status is not enabled, allow remote attacke…
|
CWE-16
Configuration
|
CVE-2012-4690
|
2024-11-21 10:43 |
2012-12-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290205
|
- |
|
postoaktraffic
|
awam_bluetooth_reader
|
Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key…
|
CWE-310
Cryptographic Issues
|
CVE-2012-4687
|
2024-11-21 10:43 |
2012-12-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290206
|
- |
|
vmware
|
springsource_spring_security
|
DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the user is not found, which makes the respons…
|
CWE-200
Information Exposure
|
CVE-2012-5055
|
2024-11-21 10:43 |
2012-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290207
|
- |
|
forescout
|
counteract
|
The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-4985
|
2024-11-21 10:43 |
2012-12-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290208
|
- |
|
forescout
|
counteract
|
Multiple cross-site scripting (XSS) vulnerabilities on the Forescout CounterACT NAC device before 7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the a parameter to assets/l…
|
CWE-79
Cross-site Scripting
|
CVE-2012-4983
|
2024-11-21 10:43 |
2012-12-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290209
|
- |
|
forescout
|
counteract
|
Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL i…
|
CWE-20
Improper Input Validation
|
CVE-2012-4982
|
2024-11-21 10:43 |
2012-12-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290210
|
- |
|
ibm
|
rational_developer_for_system_z
|
The Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not properly store the SSL certificate password, which allows local users to obtain sensitive information via u…
|
CWE-255
Credentials Management
|
CVE-2012-4862
|
2024-11-21 10:43 |
2012-12-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
