Skip to content

Commit 48f28a0

Browse files
trickest-workflowstrickest-workflows
committed
Update Sat Jan 4 04:04:16 UTC 2025
1 parent de6b7e3 commit 48f28a0

30 files changed

Lines changed: 203 additions & 18 deletions

‎2010/CVE-2010-1157.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@ Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote a
1212
#### Reference
1313
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
1414
- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
15+
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19492
1516

1617
#### Github
1718
- https://github.com/RodeoWhopper/TSGK-PCAP-Analysis

‎2012/CVE-2012-3381.md‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
### [CVE-2012-3381](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3381)
2+
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
3+
![](https://img.shields.io/static/v1?label=Version&message=%3D%20n%2Fa%20&color=brighgreen)
4+
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
5+
6+
### Description
7+
8+
sfcb in sblim-sfcb places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
9+
10+
### POC
11+
12+
#### Reference
13+
- http://sourceforge.net/tracker/index.php?func=detail&aid=3541554&group_id=128809&atid=712784
14+
15+
#### Github
16+
No PoCs found on GitHub currently.
17+

‎2012/CVE-2012-4580.md‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
### [CVE-2012-4580](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4580)
2+
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
3+
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
4+
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
5+
6+
### Description
7+
8+
Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote attackers to inject arbitrary web script or HTML via vectors related to the McAfee Security Appliance Management Console/Dashboard.
9+
10+
### POC
11+
12+
#### Reference
13+
- https://kc.mcafee.com/corporate/index?page=content&id=SB10020
14+
15+
#### Github
16+
No PoCs found on GitHub currently.
17+

‎2012/CVE-2012-4581.md‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
### [CVE-2012-4581](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4581)
2+
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
3+
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
4+
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
5+
6+
### Description
7+
8+
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not disable the server-side session token upon the closing of the Management Console/Dashboard, which makes it easier for remote attackers to hijack sessions by capturing a session cookie and then modifying the response to a login attempt, related to a "Logout Failure" issue.
9+
10+
### POC
11+
12+
#### Reference
13+
- https://kc.mcafee.com/corporate/index?page=content&id=SB10020
14+
15+
#### Github
16+
No PoCs found on GitHub currently.
17+

‎2012/CVE-2012-4582.md‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
### [CVE-2012-4582](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4582)
2+
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
3+
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
4+
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
5+
6+
### Description
7+
8+
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to reset the passwords of arbitrary administrative accounts via unspecified vectors.
9+
10+
### POC
11+
12+
#### Reference
13+
- https://kc.mcafee.com/corporate/index?page=content&id=SB10020
14+
15+
#### Github
16+
No PoCs found on GitHub currently.
17+

‎2012/CVE-2012-4583.md‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
### [CVE-2012-4583](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4583)
2+
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
3+
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
4+
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
5+
6+
### Description
7+
8+
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to obtain the session tokens of arbitrary users by navigating within the Dashboard.
9+
10+
### POC
11+
12+
#### Reference
13+
- https://kc.mcafee.com/corporate/index?page=content&id=SB10020
14+
15+
#### Github
16+
No PoCs found on GitHub currently.
17+

‎2012/CVE-2012-4584.md‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
### [CVE-2012-4584](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4584)
2+
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
3+
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
4+
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
5+
6+
### Description
7+
8+
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authenticated users to obtain sensitive information by reading a backup file, as demonstrated by obtaining password hashes.
9+
10+
### POC
11+
12+
#### Reference
13+
- https://kc.mcafee.com/corporate/index?page=content&id=SB10020
14+
15+
#### Github
16+
No PoCs found on GitHub currently.
17+

‎2012/CVE-2012-4585.md‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
### [CVE-2012-4585](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4585)
2+
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
3+
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
4+
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
5+
6+
### Description
7+
8+
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL.
9+
10+
### POC
11+
12+
#### Reference
13+
- https://kc.mcafee.com/corporate/index?page=content&id=SB10020
14+
15+
#### Github
16+
No PoCs found on GitHub currently.
17+

‎2012/CVE-2012-4586.md‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
### [CVE-2012-4586](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4586)
2+
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
3+
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
4+
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
5+
6+
### Description
7+
8+
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated users to bypass intended permission settings by requesting a file.
9+
10+
### POC
11+
12+
#### Reference
13+
- https://kc.mcafee.com/corporate/index?page=content&id=SB10020
14+
15+
#### Github
16+
No PoCs found on GitHub currently.
17+

‎2023/CVE-2023-32890.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ In modem EMM, there is a possible system crash due to improper input validation.
1010
### POC
1111

1212
#### Reference
13-
No PoCs from references.
13+
- https://corp.mediatek.com/product-security-bulletin/April-2024
1414

1515
#### Github
1616
- https://github.com/fkie-cad/nvd-json-data-feeds

0 commit comments

Comments
 (0)