Microsoft Windows NFS Portmapper 安全漏洞

Microsoft Windows NFS is a network file system from Microsoft USA. A security vulnerability exists in Microsoft Windows NFS Portmapper. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809...

Microsoft Windows Win32K 安全漏洞

Microsoft Windows Win32k is a system file for Windows multi-user administration from Microsoft USA. A security vulnerability exists in Microsoft Windows Win32K. The following products and versions are affected:Windows 10 for 32-bit Systems,Windows 10 for x64-based Systems,Windows 10 Version 1607...

Microsoft Windows Network File System 安全漏洞

Microsoft Windows Network File System is a file sharing solution from Microsoft that lets you transfer files between computers running Windows Server and UNIX operating systems using the NFS protocol. A security vulnerability exists in Microsoft Windows Network File System. The following products...

KB5026411: Windows Server 2012 Security Update (May 2023)

The remote Windows host is missing security update 5026411. It is, therefore, affected by multiple vulnerabilities - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability CVE-2023-24943 - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

Security Bulletin: Atlas eDiscovery Process Management is affected by a vulnerable org.apache.xerces_2.9.0.v201101211617-4.8.0.jar

Summary Atlas eDiscovery Process Management is affected by a vulnerable org.apache.xerces2.9.0.v201101211617-4.8.0.jar. Hence org.apache.xerces2.9.0.v201101211617-4.8.0.jar upgraded to org.apache.xerces2.12.2.v201101211617-4.8.0.jar to fix vulnerabilities. Vulnerability Details CVEID:CVE-2012-088...

Security Bulletin: TADDM is vulnerable to a denial of service due to vulnerabilities in Apache HttpClient

Summary Apache HttpClient used by IBM Tivoli Application Dependency Discovery Manager and is vulnerable to CVE-2011-1498, CVE-2012-5783, CVE-2012-6153, CVE-2014-3577,CVE-2015-5262 Vulnerability Details CVEID:CVE-2011-1498 DESCRIPTION: Apache HttpComponents could allow a remote attacker to obtain...

CVE-2012-5872

creationtimestamp| type| source ---|---|--- 2023-04-26 07:30:31+00:00| seen| https://t.me/cibsecurity/62881 2025-02-06 02:40:19+00:00| seen| Telegram/eO4z271fFUjb1hvwipwcheq26dgX7Vqs2rLvFGdgWl7NvM...

CVE-2012-5873

creationtimestamp| type| source ---|---|--- 2023-04-26 07:30:30+00:00| seen| https://t.me/cibsecurity/62880 2025-02-06 02:40:19+00:00| seen| Telegram/xJakhf0XtSKNu3PrrkBKw3i2TQ71viiQC8nHpCtqbAqSHfGC...

CVE-2012-5873

ARC aka ARC2 through 2011-12-01 allows reflected XSS via the endpoint.php query parameter in an output=htmltab action...

CVE-2012-5873

ARC aka ARC2 through 2011-12-01 allows reflected XSS via the endpoint.php query parameter in an output=htmltab action...

CVE-2012-5873

ARC aka ARC2 through 2011-12-01 allows reflected XSS via the endpoint.php query parameter in an output=htmltab action...

CVE-2012-5873

ARC (aka ARC2) up to 2011-12-01 is affected by a reflected XSS through the end_point.php query parameter when action output=htmltab is used. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE lists, and enrichment feeds) with a common description: input reflected in HTML o...

CVE-2012-5872

ARC aka ARC2 through 2011-12-01 allows blind SQL Injection in getTriplePatternSQL in ARC2StoreSelectQueryHandler.php via comments in a SPARQL WHERE clause...

CVE-2012-10014

creationtimestamp| type| source ---|---|--- 2023-04-24 22:25:07+00:00| seen| https://t.me/cibsecurity/62764...

CVE-2012-10013

creationtimestamp| type| source ---|---|--- 2023-04-24 22:25:03+00:00| seen| https://t.me/cibsecurity/62763...

CVE-2012-10014

CVE-2012-10014 affects Kau-Boy Backend Localization Plugin for WordPress (version 2.0). The vulnerability resides in backend_localization.php (functions backend_localization_admin_settings, backend_localization_save_setting, backend_localization_login_form, localize_backend) and enables cross-sit...

CVE-2012-10013

CVE-2012-10013 affects the WordPress plugin “Kau-Boy Backend Localization Plugin” up to version 1.6.1. The vulnerability lies in the file backend_localization.php where input/processing leads to cross-site scripting (XSS) . It can be exploited remotely over the network. Remediation provided in th...

Amazon Linux 2 : emacs (ALAS-2023-2012)

The version of emacs installed on the remote host is prior to 27.2-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2012 advisory. org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a fi...

Security Bulletin: AIX is vulnerable to an SSL server spoof due to Apache Commons HttpClient (CVE-2012-5783)

Summary A vulnerability in Apache Commons HttpClient could allow a remote attacker to conduct spoofing attacks CVE-2012-5783. AIX ships Apache Commons HttpClient as part of Electronic Customer Care. Vulnerability Details CVEID:CVE-2012-5783 DESCRIPTION: Apache Commons HttpClient, as used in Amazo...

AIX is vulnerable to an SSL server spoof due to Apache Commons HttpClient

IBM SECURITY ADVISORY First Issued: Thu Apr 13 13:44:57 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/commonshttpadvisory.asc Security Bulletin: AIX is vulnerable to an SSL server spoof due to Apache Commons HttpClient...