28003 matches found
CVE-2012-5362
CVE-2012-5362 describes a DoS in the IPv6 stack of Microsoft Windows 7 and earlier caused by a flood of ICMPv6 Neighbor Solicitation messages. The CVE is tied to the Windows IPv6 ND implementation and allows remote attackers to exhaust CPU/resources, leading to potential system unavailability. Th...
CVE-2012-5365
The CVE-2012-5365 entry describes a denial-of-service vulnerability in the IPv6 implementation of FreeBSD and NetBSD (year 2012 and earlier). A remote attacker can overwhelm a target by sending ICMPv6 Router Advertisement packets that contain multiple Routing entries, exploiting how the IPv6 stac...
CVE-2012-5364
The CVE-2012-5364 entry documents a vulnerability in the IPv6 implementation of Microsoft Windows 7 and earlier that enables remote denial of service by flooding with ICMPv6 Router Advertisement messages carrying multiple Routing entries. Affected scope is Windows IPv6 stack (Windows 7 and earlie...
CVE-2012-5366
The CVE-2012-5366 entry describes a DoS vulnerability in the IPv6 implementation of Apple Mac OS X (unknown versions up to 2012) triggered by a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries. The affected component is the OS X IPv6 stack; the underlying root caus...
CVE-2012-2629
CVE-2012-2629 describes multiple CSRF and XSS vulnerabilities in Axous 1.1.1 and earlier. The issues allow remote attackers to hijack administrator sessions and perform actions such as adding admin accounts (CSRF via admin/administrators_add.php) or injecting script via multiple parameters (for e...
CVE-2012-1932
creationtimestamp| type| source ---|---|--- 2020-02-19 18:52:18+00:00| seen| https://t.me/cibsecurity/9936...
CVE-2012-6614
creationtimestamp| type| source ---|---|--- 2020-02-19 18:52:17+00:00| seen| https://t.me/cibsecurity/9935...
CVE-2012-6685
creationtimestamp| type| source ---|---|--- 2020-02-19 18:52:16+00:00| seen| https://t.me/cibsecurity/9934...
CVE-2012-0055
CVE-2012-0055 concerns OverlayFS in the Linux kernel, affected in versions before 3.0.0-16.28 (as used in Ubuntu 10.04 LTS and 11.10). The vulnerability stems from missing inode security checks in OverlayFS, enabling an attacker to bypass security restrictions and perform unauthorized actions. Th...
UBUNTU-CVE-2012-6685
Nokogiri before 1.5.4 is vulnerable to XXE attacks...
CVE-2012-6685
Nokogiri prior to 1.5.4 is vulnerable to XML External Entity (XXE) attacks. The issue arises in the XML parsing path (XXE) and is documented under CVE-2012-6685. Exploitation details are not provided beyond the XXE description. Affected software: Nokogiri (Ruby library). Root cause: XXE in XML pr...
CVE-2012-1932
CVE-2012-1932 is an XSS vulnerability in Wolf CMS 0.75 and earlier. The issue allows an attacker to inject arbitrary web script or HTML via the setting[admin_email] parameter to admin/setting. Public references in the connected records confirm the affected software/component and the faulty input ...
CVE-2012-6614
CVE-2012-6614 affects the D-Link DSR-250N family, specifically firmware versions before 1.08B31. The vulnerability allows remote authenticated users to obtain persistent root access via the BusyBox CLI, demonstrated by overwriting the superuser password. Reported impact includes high confidential...
CVE-2012-0718
creationtimestamp| type| source ---|---|--- 2020-02-18 20:36:05+00:00| seen| https://t.me/cibsecurity/9900...
CVE-2012-0718
IBM Tivoli Endpoint Manager 8 is affected by CVE-2012-0718 due to not setting the HttpOnly flag on cookies. This can expose cookies to client-side access, impacting confidentiality and integrity (CVSS 3.1 base score 5.4). The vulnerability is network-based with low impact on confidentiality and i...
CVE-2012-4531
creationtimestamp| type| source ---|---|--- 2020-02-18 00:36:07+00:00| seen| https://t.me/cibsecurity/9873...
CVE-2012-2412
creationtimestamp| type| source ---|---|--- 2020-02-18 00:36:07+00:00| seen| https://t.me/cibsecurity/9873...
