KB4530698: Windows Server 2012 December 2019 Security Update

The remote Windows host is missing security update 4530698 or cumulative update 4530691. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the...

CVE-2012-2092

creationtimestamp| type| source ---|---|--- 2019-12-06 20:48:10+00:00| seen| https://t.me/cibsecurity/8555 2024-03-07 21:12:08+00:00| seen| https://t.me/ctinow/202772...

CVE-2012-2130

creationtimestamp| type| source ---|---|--- 2019-12-06 20:48:09+00:00| seen| https://t.me/cibsecurity/8554 2024-03-07 21:41:28+00:00| seen| https://t.me/ctinow/202807...

CVE-2012-2148

creationtimestamp| type| source ---|---|--- 2019-12-06 20:48:08+00:00| seen| https://t.me/cibsecurity/8553 2024-03-07 21:41:30+00:00| seen| https://t.me/ctinow/202808...

CVE-2012-2130

A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys...

CVE-2012-2148

Technical details (affected product/version, root cause, impact, or mitigations) are not publicly available in the provided documents. Monitor for updates to official advisories and vendor notices.

CVE-2012-2130

CVE-2012-2130 affects PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption issue in DH and RSA key generation, leading to a Security Bypass. Public advisories (SUSE, UBuntu, Gentoo GLSA 201310-10, Gentoo NASL) confirm the same vector and impact across multiple distributions. The root cause is...

CVE-2012-1615

CVE-2012-1615 affects Fedora’s sectool. The vulnerability is a local privilege escalation caused by an incorrect DBus file in sectool, enabling partial confidentiality/integ rity/availability impact as described in the NVD metrics. Exploitation status is not provided in the documents. The issue w...

CVE-2012-1115

creationtimestamp| type| source ---|---|--- 2019-12-06 00:48:27+00:00| seen| https://t.me/cibsecurity/8534 2024-03-07 15:11:48+00:00| seen| https://t.me/ctinow/202455...

CVE-2012-1105

creationtimestamp| type| source ---|---|--- 2019-12-05 22:27:23+00:00| seen| https://t.me/cibsecurity/8531...

CVE-2012-1592

A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files...

CVE-2012-1114

A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the filter parameter to cmd.php in an export and exporterid action. and the filteruid parameter to list.php...

CVE-2012-1592

Apache Struts2 is affected by a local code execution vulnerability involving processing malformed XSLT files. The issue affects Struts2 versions prior to 2.5.22 and can allow a malicious user to upload and execute arbitrary files on the server. A fix exists with Struts 2.5.22 or later; advisory e...

CVE-2012-1104

creationtimestamp| type| source ---|---|--- 2019-12-05 20:27:27+00:00| seen| https://t.me/cibsecurity/8526...

CVE-2012-1115

A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the export, addvalueform, and dn parameters to cmd.php...

CVE-2012-1115

CVE-2012-1115 affects LDAP Account Manager (LAM) Pro 3.6, with a Cross-Site Scripting (XSS) vulnerability in the export, add_value_form, and dn parameters to cmd.php. All connected sources confirm the XSS issue in LAM Pro 3.6; no specific patch/version to remediate is provided in the supplied doc...

CVE-2012-1105

An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner...

CVE-2012-1105

CVE-2012-1105: A information-disclosure vulnerability exists in the Jasig php-pear-CAS 1.2.2 package where the Central Authentication Service client library archives the debug logging file insecurely in /tmp, exposing partial confidentiality. Affected component: phpCAS library; root cause: insecu...

CVE-2012-1104

A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed...

CVE-2012-1104

CVE-2012-1104 affects phpCAS (Central Authentication Service) library version 1.2.2 from the Jasig project, where the security bypass arises from how proxying of services is managed. The vulnerability enables bypass of certain security controls due to the proxying logic rather than a flaw in the ...