28003 matches found
CVE-2012-1124
creationtimestamp| type| source ---|---|--- 2020-02-11 22:37:25+00:00| seen| https://t.me/cibsecurity/9771...
Security Bulletin: Security Vulnerabilities have been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2012-5783, CVE-2018-1614, CVE-2014-0114, CVE-2015-0899)
Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about security vulnerabilities affecting Websphere Application Server has been published in security bulletins. Vulnerability Details Please consult the security bulletins: Security Bulletin:...
CVE-2012-1124
SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...
CVE-2012-1124
The CVE-2012-1124 entry concerns a SQL injection vulnerability in the search.php component of phxEventManager 2.0 beta 5, where user-supplied search_terms can be exploited to execute arbitrary SQL commands. According to the connected NVD entry, the flaw enables remote attackers to target the appl...
CVE-2012-6720
CVE-2012-6720 concerns a Cross-Site Scripting (XSS) vulnerability in SocialEngine prior to version 4.2.4. The issue allows remote attackers to inject arbitrary web script or HTML through specific parameters: (1) title to music/create, (2) location to events/create, and (3) search to widget/index/...
CVE-2012-6721
CVE-2012-6721 describes multiple CSRF vulnerabilities in the SocialEngine platform, affecting the (1) Forum, (2) Event, and (3) Classifieds plugins when running versions earlier than 4.2.4. The connected documents provide the concrete details: the vulnerable software components are the three Soci...
CVE-2012-2216
SocialEngine before 4.2.4 has multiple vulnerabilities: CVE-2012-6720 (XSS) via the title parameter to music/create, the location parameter to events/create, or the search parameter to widget/index/content_id/*; CVE-2012-6721 (CSRF) in the Forum, Event, and Classifieds plugins. No exploit details...
CVE-2012-2452
CVE-2012-2452 affects pragmaMx 1.x up to before 1.12.2, enabling XSS via two vectors: (1) name parameter in modules.php and (2) img_url parameter in includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php. The root cause is improper sanitization of user-supplied input. Impact is cross-site sc...
CVE-2012-2517
CVE-2012-2517 is an XSS vulnerability in PrestaShop before 1.4.9. The issue arises from unsanitized input in the POST/parameter named product[] to ajax.php , allowing remote attackers to inject arbitrary HTML/JS. Reported impact is cross-site scripting with potential execution in the administrato...
CVE-2012-4519
Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS...
2020-02 Security Update for Adobe Flash Player for Windows Server 2012 for x64-based Systems (KB4537759)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2020-02 Security Update for Windows Server 2012 for x64-based Systems (KB4502496)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2020-02 Security Update for Adobe Flash Player for Windows Server 2012 R2 for x64-based Systems (KB4537759)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Security Bulletin: Multiple vulnerabilities affect Rational Publishing Engine
Summary Multiple security vulnerabilities affecting Rational Publishing Engine. Vulnerability Details CVEID: CVE-2015-0254 DESCRIPTION: Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks via a crafted XSLT extension in...
February 11, 2020—KB4537814 (Monthly Rollup)
None None...
PT-2020-1616 · Microsoft · Sql Server Reporting Services +1
Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Reporting Services versions 2012 through 2016 Description: A remote code execution issue exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. This could allow an attacker to execute...
KB4537794: Windows Server 2012 February 2020 Security Update
The remote Windows host is missing security update 4537794 or cumulative update 4537814. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who...
Job fails to create VSS snapshot for SMB share
Challenge A File Backup/file to tape job skips VSS snapshot creation on SMB share and ends with the following message in the log: Failed to create a VSS snapshot, failing over to direct backup from the file share A File Backup job for an SMB3 File Share configured to use Backup from a Microsoft V...
KB4537803: Windows 8.1 and Windows Server 2012 R2 February 2020 Security Update
The remote Windows host is missing security update 4537803 or cumulative update 4537821. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who...