28507 matches found
CVE-2012-0055
CVE-2012-0055 concerns OverlayFS in the Linux kernel, affected in versions before 3.0.0-16.28 (as used in Ubuntu 10.04 LTS and 11.10). The vulnerability stems from missing inode security checks in OverlayFS, enabling an attacker to bypass security restrictions and perform unauthorized actions. Th...
UBUNTU-CVE-2012-6685
Nokogiri before 1.5.4 is vulnerable to XXE attacks...
CVE-2012-6685
Nokogiri prior to 1.5.4 is vulnerable to XML External Entity (XXE) attacks. The issue arises in the XML parsing path (XXE) and is documented under CVE-2012-6685. Exploitation details are not provided beyond the XXE description. Affected software: Nokogiri (Ruby library). Root cause: XXE in XML pr...
CVE-2012-1932
CVE-2012-1932 is an XSS vulnerability in Wolf CMS 0.75 and earlier. The issue allows an attacker to inject arbitrary web script or HTML via the setting[admin_email] parameter to admin/setting. Public references in the connected records confirm the affected software/component and the faulty input ...
CVE-2012-6614
CVE-2012-6614 affects the D-Link DSR-250N family, specifically firmware versions before 1.08B31. The vulnerability allows remote authenticated users to obtain persistent root access via the BusyBox CLI, demonstrated by overwriting the superuser password. Reported impact includes high confidential...
CVE-2012-0718
creationtimestamp| type| source ---|---|--- 2020-02-18 20:36:05+00:00| seen| https://t.me/cibsecurity/9900...
CVE-2012-0718
IBM Tivoli Endpoint Manager 8 is affected by CVE-2012-0718 due to not setting the HttpOnly flag on cookies. This can expose cookies to client-side access, impacting confidentiality and integrity (CVSS 3.1 base score 5.4). The vulnerability is network-based with low impact on confidentiality and i...
CVE-2012-2412
creationtimestamp| type| source ---|---|--- 2020-02-18 00:36:07+00:00| seen| https://t.me/cibsecurity/9873...
CVE-2012-4531
creationtimestamp| type| source ---|---|--- 2020-02-18 00:36:07+00:00| seen| https://t.me/cibsecurity/9873...
CVE-2012-5623
creationtimestamp| type| source ---|---|--- 2020-02-13 22:49:10+00:00| seen| https://t.me/cibsecurity/9834...
CVE-2012-1500
creationtimestamp| type| source ---|---|--- 2020-02-13 20:49:12+00:00| seen| https://t.me/cibsecurity/9830...
CVE-2012-1903
creationtimestamp| type| source ---|---|--- 2020-02-13 20:49:11+00:00| seen| https://t.me/cibsecurity/9829...
CVE-2012-6091
CVE-2012-6091 : Magento prior to 1.7.0.2 has an information disclosure vulnerability in the Zend_XmlRpc implementation (Magento’s XML-RPC handling). The weakness affects the Zend_XmlRpc_Server/XmlRpc handling and can allow a remote attacker to view sensitive information. Affected product is Magen...
CVE-2012-5623
CVE-2012-5623 concerns Squirrelmail 4.0 using the outdated MD5 hashing algorithm for passwords. According to the connected records, the issue arises from the use of MD5 for password hashing, which can lead to weakened password security. The NVD entry lists CVSSv3.1 metrics with a base score of 7....
CVE-2012-1903
The vulnerability described by CVE-2012-1903 is a cross-site scripting (XSS) flaw in Telligent Community 5.6.583.20496 related to a Flash file and the allowScriptAccess parameter. Affected product: Telligent Community (version 5.6.583.20496). Root cause: improper handling of Flash content via all...
CVE-2012-1500
CVE-2012-1500 is a Stored XSS vulnerability impacting JIRA 4.4.3 and GreenHopper before 5.9.8, where UpdateFieldJson.jspa can be abused to inject arbitrary script code. The exposure is evidenced across multiple sources in the provided documents, and the vulnerability is described as a stored cros...
CVE-2020-0674: Internet Explorer Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in some versions of Internet Explorer. An attacker who is able to convince a user to visit a malicious or compromised website may be able to execute code on the affected system, with the same permissions as the user. The vulnerability affects IE 9 on...
