CVE-2012-3337

creationtimestamp| type| source ---|---|--- 2020-09-01 20:55:35+00:00| seen| https://t.me/cibsecurity/14417...

CVE-2012-3338

creationtimestamp| type| source ---|---|--- 2020-09-01 20:55:33+00:00| seen| https://t.me/cibsecurity/14416...

CVE-2012-3340

creationtimestamp| type| source ---|---|--- 2020-09-01 20:55:32+00:00| seen| https://t.me/cibsecurity/14415...

CVE-2012-3341

creationtimestamp| type| source ---|---|--- 2020-09-01 20:55:30+00:00| seen| https://t.me/cibsecurity/14414...

alchemymvc (0.0.1), alinkage (0.1.2) +216 more potentially affected by CVE-2012-6708 via jquery (>=1.5.1, <=1.8.3)

jquery NPM version =1.5.1, =0.1.0, =0.3.3, =0.0.2, =2.0.0, =2.0.1 - arale-tip 2.0.0 - artusi-auth 0.1.0-1 - artusi-drawer 0.1.0-1 - artusi-elevator 0.1.0-1 - artusi-filesystem-drawer 0.1.0-1 - artusi-hob 0.1.0-1 - artusi-kitchen 0.1.0-1 - artusi-kitchen-assistant 0.1.0-1 and more Source cves:...

CVE-2012-3340

IBM InfoSphere Guardium (versions 8.0, 8.01, 8.2) is affected by an XML External Entity (XXE) vulnerability caused by improper validation of user-supplied input. A remote authenticated attacker could disclose sensitive information (e.g., contents of server files such as database passwords). Root ...

CVE-2012-3338

Summary of CVE-2012-3338 : IBM InfoSphere Guardium (versions 8.0, 8.01, 8.2) contains an improper restriction on the create new user account functionality that could allow a remote attacker to bypass security restrictions and create unprivileged user accounts. IBM's IBM X-Force entry and the offi...

CVE-2012-3337

CVE-2012-3337 affects IBM InfoSphere Guardium 8.0, 8.01, and 8.2. A directory traversal flaw lets remote attackers send specially crafted URLs (../ sequences) to download arbitrary files. IBM’s advisory labels it a remote file disclosure vulnerability in Guardium. Remediation per the vendor invol...

CVE-2012-3336

The CVE-2012-3336 entry concerns IBM InfoSphere Guardium 8.0, 8.01, and 8.2. The vulnerability is a SQL injection in multiple Guardium scripts. A remote authenticated attacker could send specially-crafted SQL statements to these scripts, allowing view, addition, modification, or deletion of data ...

MaraCMS Arbitrary PHP File Upload

This module exploits an arbitrary file upload vulnerability in MaraCMS 7.5 and prior in order to execute arbitrary commands. The module first attempts to authenticate to MaraCMS. It then tries to upload a malicious PHP file to the web root via an HTTP POST request to codebase/handler.php. If the...

EulerOS 2.0 SP8 : xerces-j2 (EulerOS-SA-2020-1889)

According to the version of the xerces-j2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML...

CVE-2012-2201

CVE-2012-2201 affects IBM WebSphere MQ 7.1. The DoS arises from an error when handling user IDs, enabling a remote attacker to bypass security configuration on a SVRCONN channel and flood the queue manager. Connected sources confirm the vulnerability in WebSphere MQ 7.1 and describe denial-of-ser...

CVE-2012-2160

CVE-2012-2160 affects IBM Rational Change 5.3. The vulnerability arises from improper validation of user-supplied input, enabling a cross-site scripting attack via the SUPP_TEMPLATE_FLAG URL parameter. When a victim clicks a specially crafted link, an attacker could execute script in the browser ...

CVE-2012-2160

IBM Rational Change 5.3 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using the SUPPTEMPLATEFLAG parameter in a specially-crafted URL to execute script in a victim's Web browser within the security...

Eibiz i-Media Server Digital Signage 3.8.0 - Directory Traversal

Exploit Title: Eibiz i-Media Server Digital Signage 3.8.0 - Directory Traversal Date: 2020-08-22 Exploit Author: LiquidWorm Vendor Homepage: http://www.eibiz.co.th Affected version: =3.8.0 CVE: N/A Eibiz i-Media Server Digital Signage 3.8.0 oldfile File Path Traversal Vendor: EIBIZ Co.,Ltd. Produ...

Microsoft Issues Emergency Security Updates for Windows 8.1 and Server 2012 R2

Microsoft has issued an emergency out-of-band software update for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 systems to patch two new recently disclosed security vulnerabilities. Tracked as CVE-2020-1530 and CVE-2020-1537, both flaws reside in the Remote Access Service RAS in a way i...

KB4578013: Windows 8.1 and Windows Server 2012 R2 August 2020 Additional Security Update

The remote Windows host is missing security update 4578013. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Windows Remote Access improperly handles memory. CVE-2020-1530 - An elevation of privilege vulnerability exists when the Windo...

QiHang Media Web Digital Signage 3.0.9 Arbitrary File Disclosure Vulnerability

Exploit for hardware platform in category web applications QiHang Media Web QH.aspx Digital Signage 3.0.9 Arbitrary File Disclosure Vulnerability Vendor: Shenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng Automation Technology Co., Ltd. Product web page: http://www.howfor.com Affected...

Microsoft Windows Multiple Vulnerabilities (KB4571736)

This host is missing a critical security update according to Microsoft KB4571736 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft .NET Framework Multiple Vulnerabilities (KB4570508)

This host is missing an important security update according to Microsoft KB4570508 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...