|
295281
|
- |
|
cisco
|
unified_communications_manager
|
The voice-sipstack component in Cisco Unified Communications Manager (CUCM) 8.5 allows remote attackers to cause a denial of service (core dump) via vectors involving SIP messages that arrive after a…
|
NVD-CWE-noinfo
|
CVE-2012-0376
|
2024-11-21 10:34 |
2012-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295282
|
- |
|
oracle
|
sun_products_suite
|
Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unk…
|
NVD-CWE-noinfo
|
CVE-2012-0208
|
2024-11-21 10:34 |
2012-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295283
|
- |
|
cisco
|
ios
|
The extended ACL functionality in Cisco IOS 12.2(58)SE2 and 15.0(1)SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in o…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-0362
|
2024-11-21 10:34 |
2012-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295284
|
- |
|
cisco
|
ip_communicator
|
The sccp-protocol component in Cisco IP Communicator (CIPC) 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager (CUCM), which allows remote attackers to c…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-0361
|
2024-11-21 10:34 |
2012-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295285
|
- |
|
cisco
|
ios
|
Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET connections from arbitrary …
|
CWE-20
Improper Input Validation
|
CVE-2012-0339
|
2024-11-21 10:34 |
2012-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295286
|
- |
|
cisco
|
ios
|
Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish SSH connections from arbitrary sou…
|
CWE-20
Improper Input Validation
|
CVE-2012-0338
|
2024-11-21 10:34 |
2012-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295287
|
- |
|
cisco
|
unified_meetingplace
|
SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939.
|
CWE-89
SQL Injection
|
CVE-2012-0337
|
2024-11-21 10:34 |
2012-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295288
|
- |
|
cisco
|
adaptive_security_appliance_software 5500_series_adaptive_security_appliance
|
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote …
|
CWE-287
Improper Authentication
|
CVE-2012-0335
|
2024-11-21 10:34 |
2012-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295289
|
- |
|
cisco
|
small_business_ip_phone_firmware small_business_ip_phone
|
Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML doc…
|
CWE-287
Improper Authentication
|
CVE-2012-0333
|
2024-11-21 10:34 |
2012-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295290
|
- |
|
quest
|
toad_for_data_analysts
|
Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse f…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-0279
|
2024-11-21 10:34 |
2012-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|