CVE-2012-5693

creationtimestamp| type| source ---|---|--- 2020-01-03 22:49:09+00:00| seen| https://t.me/cibsecurity/8995...

CVE-2012-4451

creationtimestamp| type| source ---|---|--- 2020-01-03 20:49:18+00:00| seen| https://t.me/cibsecurity/8991...

CVE-2012-5878

CVE-2012-5878 concerns the Smartphone Pentest Framework (SPF) versions 0.1.2–0.1.4. The connected records confirm a remote OS command injection vulnerability in SPF’s web GUI, triggered by unsanitized input in the hostingPath parameter for SEAttack.pl and CSAttack.pl (frameworkgui/), and the appU...

CVE-2012-5693

Bulb Security’s Smartphone Pentest Framework (SPF) is affected by OS command injection in SPF web GUI. CVE-2012-5693 (and related CVE-2012-5878) describe that remote attackers can execute arbitrary commands by supplying shell metacharacters in various input fields (ipAddressTB, hostingPath, appUR...

CVE-2012-4451

Zend Framework 2.0.x (before 2.0.1) contains multiple XSS vulnerabilities related to Escaper, exploitable via input to components such as Debug, Feed\PubSubHubbub, Log\Formatter\Xml, Tag\Cloud\Decorator, Uri, View\Helper\HeadStyle, View\Helper\Navigation\Sitemap, and View\Helper\Placeholder\Conta...

CVE-2012-6621

creationtimestamp| type| source ---|---|--- 2020-01-03 00:37:05+00:00| seen| https://t.me/VulnerabilityNews/11576 2020-01-03 00:49:13+00:00| seen| https://t.me/cibsecurity/8977...

Update for the d3dcompiler_47.dll component on Windows Server 2012, Windows 7, and Windows Server 2008 R2

Update for the d3dcompiler47.dll component on Windows Server 2012, Windows 7, and Windows Server 2008 R2 This article describes an update that addresses an issue in Windows Server 2012, Windows 7 Service Pack 1 SP1, and Windows Server 2008 R2 SP1 that is described in the following Knowledge Base...

CVE-2019-20223

In Support Incident Tracker SiT! 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235...

Design/Logic Flaw

In Support Incident Tracker SiT! 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235...

CVE-2019-20223

In Support Incident Tracker SiT! 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235...

CVE-2012-5617

creationtimestamp| type| source ---|---|--- 2019-12-31 22:56:32+00:00| seen| https://t.me/cibsecurity/8934 2019-12-31 23:03:08+00:00| seen| https://t.me/VulnerabilityNews/11532 2024-02-27 08:16:55+00:00| seen| https://t.me/ctinow/194073...

Security feature bypass

gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it did not fixed the security issue...

CVE-2012-5663

creationtimestamp| type| source ---|---|--- 2019-12-31 00:56:34+00:00| seen| https://t.me/cibsecurity/8925 2024-03-18 11:42:11+00:00| seen| https://t.me/ctinow/210405...

CVE-2012-5474

creationtimestamp| type| source ---|---|--- 2019-12-30 22:26:24+00:00| seen| https://t.me/cibsecurity/8921 2024-03-18 11:42:09+00:00| seen| https://t.me/ctinow/210402...

CVE-2012-5645

creationtimestamp| type| source ---|---|--- 2019-12-30 22:26:22+00:00| seen| https://t.me/cibsecurity/8919 2024-03-18 11:42:10+00:00| seen| https://t.me/ctinow/210404...

CVE-2012-5663

The CVE-2012-5663 entry affects the isearch package (textproc/isearch) prior to version 1.47.01nb1. The root cause is the use of tempnam() to create temporary files in /tmp, a publicly-writable directory, leading to potential integrity concerns. Per the referenced data, the vulnerability has inte...

CVE-2012-5645

A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption...

CVE-2012-5476

Within the RHOS Essex Preview 2012.2 of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the admin password and token value...

CVE-2012-5474

The file /etc/openstack-dashboard/localsettings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release python-django-horizon package before 2012.1.1 is world readable and exposes the secret key value...

CVE-2012-5476

Within the RHOS Essex Preview 2012.2 of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the admin password and token value...