28003 matches found
CVE-2012-2593
The connected documentation confirms a concrete issue: Atmail Webmail Server 6.4 has an XSS vulnerability in its administrative interface that can be triggered via the Date field of an email, enabling attackers to inject arbitrary script/HTML. Exploitation is evidenced by linked exploit-publicati...
CVE-2012-5618
creationtimestamp| type| source ---|---|--- 2020-02-04 16:35:13+00:00| seen| https://t.me/cibsecurity/9587...
CVE-2012-5686
CVE-2012-5686 affects ZPanel 10.0.1 and is caused by insufficient entropy in the password reset process. The Red Hat and NVD entries, as well as related advisories, consistently describe the issue as a password-reset entropy weakness in ZPanel 10.0.1. Documented impact is high/critical depending ...
CVE-2012-5618
CVE-2012-5618 affects Ushahidi prior to 2.6.1, where forgot-password tokens use insufficient entropy. This vulnerability could allow token guessing and account compromise with network access. Upgrade to Ushahidi 2.6.1 or later as the implied fix; the connected documents do not provide further exp...
CVE-2012-6133
Multiple cross-site scripting XSS vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the 1 @okmessage or 2 @errormessage parameter to issue...
CVE-2012-6133
CVE-2012-6133 concerns Roundup before version 1.4.20 with cross-site scripting (XSS) via the issue* interface, specifically through the (1) @ok_message or (2) @error_message parameters. The vulnerability allows an attacker to inject arbitrary web script or HTML through these messages. Public refe...
CVE-2012-5776
creationtimestamp| type| source ---|---|--- 2020-01-29 18:38:20+00:00| seen| https://t.me/cibsecurity/9479...
CVE-2012-4383
creationtimestamp| type| source ---|---|--- 2020-01-29 18:38:20+00:00| seen| https://t.me/cibsecurity/9480...
CVE-2012-4383
contao prior to 2.11.4 has a sql injection vulnerability...
CVE-2012-5776
CVE-2012-5776 relates to multiple XSS vulnerabilities in Dokeos 2.1.1, specifically in the profile handling path (main/auth/profile.php) via parameters named for the extra_ set. The root cause is input handling that allows injected script code to be reflected in the user’s browser. Affected produ...
CVE-2012-4383
CVE-2012-4383 affects Contao core prior to 2.11.4, with an SQL injection vulnerability in contao-2.11.3\system\modules\backend\Ajax.php. The Red Hat/GHSA/osv entries confirm this issue in the Contao core and identify 2.11.4 as the fixed version. The connected documents do not detail exploit metho...
CVE-2012-6114
creationtimestamp| type| source ---|---|--- 2020-01-28 19:37:37+00:00| seen| https://t.me/cveNotify/509...
CVE-2012-6609
Directory traversal vulnerability in agetlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...
CVE-2012-6609
Directory traversal vulnerability in agetlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...
CVE-2012-6609
CVE-2012-6609 is a directory traversal in Polycom HDX Video Endpoints (before 3.0.4) and UC APL (before 2.7.1.J). An attacker can read arbitrary files by supplying .. in the name parameter via a_getlog.cgi. The NVD entry reports CVSSv2 base score 5.0 (MEDIUM) and CVSSv3.1 base score 7.5 (HIGH), w...
CVE-2012-6114
The CVE-2012-6114 issue affects the git-changelog utility in git-extras 1.7.0. A local user can cause a symlink attack targeting /tmp/changelog or /tmp/.git-effort, enabling overwriting of arbitrary files. The root cause is a symlink/privilege-exacerbated file-write vulnerability in the utility’s...
CVE-2012-6114
The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/changelog or 2 /tmp/.git-effort...
CVE-2012-6448
CVE-2012-6448 describes a Cross-site Scripting (XSS) vulnerability in cPanel WebHost Manager (WHM) 11.34.0. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Connected sources confirm the affected product/version and provide an exploit reference (Exp...