CVE-2012-6077

The CVE-2012-6077 issue affects the WordPress W3 Total Cache plugin (versions before 0.9.2.5). The root cause is insecure storage of database cache files, enabling remote attackers to retrieve password hash information. Documents indicate exposure of usernames and password hashes via the plugin’s...

CVE-2012-0812

PostfixAdmin 2.3.4 has multiple XSS vulnerabilities...

CVE-2012-0877

Technical details about CVE-2012-0877 are not provided in the connected documents. Public information in the initial description is limited to the vulnerability name and general impact. Monitor for updates.

CVE-2012-0812

PostfixAdmin 2.3.4 is affected by multiple XSS vulnerabilities due to insufficient input validation in the web interface. Impact stated as client-side code execution possibilities; exploitation details are not provided in the supplied documents. A remediation exists: upgrade to PostfixAdmin 2.3.5...

CVE-2012-3407

CVE-2012-3407 concerns the open-source utility plow (a command-line playlist generator). Connected sources indicate a local buffer overflow vulnerability in plow. The CNVD entry explains the root cause as memory operations performed without proper data boundary validation, leading to reads/writes...

CVE-2012-1637

Cross-site scripting vulnerability XSS in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal...

CVE-2012-2079

The CVE-2012-2079 CSRF vulnerability affects the Drupal Activity module (6.x-1.x). The 6.x-1.x branch does not filter output correctly and does not confirm user intent when removing an activity, enabling unauthorized state-changing requests to the server. Impact details in public advisories descr...

CVE-2012-2078

Cross-site scripting XSS vulnerability in the Activity module 6.x-1.x for Drupal...

CVE-2012-2078

Activity module 6.x-1.x (Drupal) is affected by a cross-site scripting (XSS) vulnerability due to output not being properly filtered, and an associated issue where removing an activity could trigger a cross-site request forgery (CSRF). Exploitation requires a user with the permissions to access a...

CVE-2012-1637

The CVE-2012-1637 vulnerability affects the Drupal Quick Tabs contributed module, not Drupal core. It is a Cross-Site Scripting (XSS) issue caused by insufficient filtering of user-supplied text. Affected versions are Quicktabs 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7....

CVE-2012-1001

Chyrp contains multiple XSS flaws identified as CVE-2012-1001. The vulnerabilities occur in Chyrp before 2.1.2 and before 2.5 Beta 2, enabling remote attackers to inject arbitrary scripts via the content parameter to includes/ajax.php or the body parameter to includes/error.php. The root cause is...

CVE-2012-3460

cumin: At installation postgresql database user created without password...

CVE-2012-2945

Hadoop 1.0.3 contains a symlink vulnerability...

CVE-2012-2350

pamshield before 0.9.4: Default configuration does not perform protective action...

CVE-2012-3543

mono 2.10.x ASP.NET Web Form Hash collision DoS...

CVE-2012-2238

trytond 2.4: ModelView.button fails to validate authorization...

CVE-2012-2350

pamshield before 0.9.4: Default configuration does not perform protective action...

CVE-2012-2350

pamshield before 0.9.4: Default configuration does not perform protective action...

CVE-2012-2238

trytond 2.4: ModelView.button fails to validate authorization...

CVE-2012-4524

CVE-2012-4524 affects Xlockmore (pre-5.43) in dclock mode. The vulnerability arises from how arguments are passed to localtime(), enabling a Denial of Service and potentially exposing the graphical session to compromise. Public advisories (GLSA 201309-03) and related vendor notes describe the iss...