28003 matches found
CVE-2012-2204
creationtimestamp| type| source ---|---|--- 2020-02-10 18:37:06+00:00| seen| https://t.me/cibsecurity/9728...
CVE-2012-5828
creationtimestamp| type| source ---|---|--- 2020-02-10 18:37:05+00:00| seen| https://t.me/cibsecurity/9727...
CVE-2012-5828
CVE-2012-5828 affects BlackBerry PlayBook OS prior to 2.1, via the PlayBook browser component. The vulnerability allows an information disclosure by tricking the browser into downloading/ loading a crafted HTML file using the standard download mechanism, with the downloaded HTML potentially using...
CVE-2012-2204
The CVE-2012-2204 entry concerns the InfoSphere Guardium aix_ktap module causing a DoS. Connected sources identify the affected component as the aix_ktap module within InfoSphere Guardium and classify the impact as Availability-related DoS, but the provided documents do not specify the exact root...
CVE-2012-1994
CVE-2012-1994 affects HP Systems Insight Manager prior to version 7.0, enabling a remote user on an adjacent network to access information. The vulnerability is categorized as an information disclosure issue. The available documents confirm the affected product and the impact, but they do not pro...
CVE-2012-6449
CVE-2012-6449 affects cPanel & WHM 11.34.0 (build 8); the vulnerable components are clientconf.html and detailbw.html, with a documented cross-site scripting (XSS) vulnerability. NVD CVSSv3.1 base score 5.4 (MEDIUM) via NETWORK/vector: LOW spoofed user interaction required? The data shows UI inte...
CVE-2012-6611
Polycom Web Management Interface G3/HDX 8000 HD running Durango 2.6.0 4740 and embedded Polycom Linux Development Platform 2.14.g3 is affected. The issue is a default, blank administrative password that allows access without credential setup. CVSS metrics indicate network access, no user interact...
CVE-2012-6666
CVE-2012-6666 affects vBSeo prior to 3.6.0PL2. The issue is a reflected XSS vulnerability exploitable via the member.php u parameter. The provided documents do not specify affected platforms beyond the product/version and do not include exploit code or remediation details. No additional impact or...
CVE-2012-4381
creationtimestamp| type| source ---|---|--- 2020-02-08 20:33:06+00:00| seen| https://t.me/cibsecurity/9715...
CVE-2012-4512
The CSS parser khtml/css/cssparser.cpp in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via a crafted font face source, related to "type confusion."...
CVE-2012-4029
Cross-site scripting XSS vulnerability in main/dropbox/index.php in Chamilo LMS before 1.8.8.6 allows remote attackers to inject arbitrary web script or HTML via the categoryname parameter in an addsentcategory action...
CVE-2012-4381
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, 1 which could make it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack or, 2 when an authentication plugin returns a false in the strict function, could allow remo...
CVE-2012-5570
The CVE-2012-5570 entry concerns Drupal's Basic webmail module (6.x-1.x) prior to 6.x-1.2. The vulnerability allows remote authenticated users with the access basic_webmail permission to read arbitrary users’ email addresses, constituting an information-disclosure flaw. Root cause details are not...
CVE-2012-4512
Removed by vendor...
CVE-2012-4512
CVE-2012-4512 affects Konqueror’s CSS parser (khtml/css/cssparser.cpp) in KDE 4.7.3. A remote attacker can crash the browser and possibly read memory via a crafted font-face source due to a type-confusion issue. Connected advisories (MiracleLinux AXSA-2012-970:03, SUSE/Security Advisories, Gentoo...
CVE-2012-4512
The CSS parser khtml/css/cssparser.cpp in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via a crafted font face source, related to "type confusion."...
CVE-2012-4381
CVE-2012-4381 affects MediaWiki prior to 1.18.5 and 1.19.x prior to 1.19.2. The root issue is that passwords are stored in the local database in cleartext, enabling context-dependent attackers to obtain plaintext passwords via brute-force. Additionally, when an external authentication plugin retu...
CVE-2012-4029
Cross-site scripting XSS vulnerability in main/dropbox/index.php in Chamilo LMS before 1.8.8.6 allows remote attackers to inject arbitrary web script or HTML via the categoryname parameter in an addsentcategory action...
CVE-2012-4029
CVE-2012-4029 is a documented XSS vulnerability in Chamilo LMS before 1.8.8.6. The flaw occurs in main/dropbox/index.php via the category_name parameter in an addsentcategory action, allowing remote attackers to inject arbitrary web script or HTML. The issue is part of Chamilo 1.8.8.4/1.8.8.6 fam...
