CVE-2012-2452

CVE-2012-2452 affects pragmaMx 1.x up to before 1.12.2, enabling XSS via two vectors: (1) name parameter in modules.php and (2) img_url parameter in includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php. The root cause is improper sanitization of user-supplied input. Impact is cross-site sc...

CVE-2012-2517

CVE-2012-2517 is an XSS vulnerability in PrestaShop before 1.4.9. The issue arises from unsanitized input in the POST/parameter named product[] to ajax.php , allowing remote attackers to inject arbitrary HTML/JS. Reported impact is cross-site scripting with potential execution in the administrato...

CVE-2012-4519

Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS...

2020-02 Security Update for Adobe Flash Player for Windows Server 2012 for x64-based Systems (KB4537759)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2020-02 Security Update for Windows Server 2012 for x64-based Systems (KB4502496)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2020-02 Security Update for Adobe Flash Player for Windows Server 2012 R2 for x64-based Systems (KB4537759)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Security Bulletin: Multiple vulnerabilities affect Rational Publishing Engine

Summary Multiple security vulnerabilities affecting Rational Publishing Engine. Vulnerability Details CVEID: CVE-2015-0254 DESCRIPTION: Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks via a crafted XSLT extension in...

February 11, 2020—KB4537814 (Monthly Rollup)

None None...

PT-2020-1616

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server Reporting Services versions 2012 through 2016 Description A remote code execution issue exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. This could allow an attacker to execute...

Job fails to create VSS snapshot for SMB share

Challenge A File Backup/file to tape job skips VSS snapshot creation on SMB share and ends with the following message in the log: Failed to create a VSS snapshot, failing over to direct backup from the file share A File Backup job for an SMB3 File Share configured to use Backup from a Microsoft V...

KB4537803: Windows 8.1 and Windows Server 2012 R2 February 2020 Security Update

The remote Windows host is missing security update 4537803 or cumulative update 4537821. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who...

KB4537794: Windows Server 2012 February 2020 Security Update

The remote Windows host is missing security update 4537794 or cumulative update 4537814. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who...

CVE-2012-2204

creationtimestamp| type| source ---|---|--- 2020-02-10 18:37:06+00:00| seen| https://t.me/cibsecurity/9728...

CVE-2012-5828

creationtimestamp| type| source ---|---|--- 2020-02-10 18:37:05+00:00| seen| https://t.me/cibsecurity/9727...

CVE-2012-5828

CVE-2012-5828 affects BlackBerry PlayBook OS prior to 2.1, via the PlayBook browser component. The vulnerability allows an information disclosure by tricking the browser into downloading/ loading a crafted HTML file using the standard download mechanism, with the downloaded HTML potentially using...

CVE-2012-2204

The CVE-2012-2204 entry concerns the InfoSphere Guardium aix_ktap module causing a DoS. Connected sources identify the affected component as the aix_ktap module within InfoSphere Guardium and classify the impact as Availability-related DoS, but the provided documents do not specify the exact root...

CVE-2012-1994

CVE-2012-1994 affects HP Systems Insight Manager prior to version 7.0, enabling a remote user on an adjacent network to access information. The vulnerability is categorized as an information disclosure issue. The available documents confirm the affected product and the impact, but they do not pro...

CVE-2012-6449

CVE-2012-6449 affects cPanel & WHM 11.34.0 (build 8); the vulnerable components are clientconf.html and detailbw.html, with a documented cross-site scripting (XSS) vulnerability. NVD CVSSv3.1 base score 5.4 (MEDIUM) via NETWORK/vector: LOW spoofed user interaction required? The data shows UI inte...

CVE-2012-6611

Polycom Web Management Interface G3/HDX 8000 HD running Durango 2.6.0 4740 and embedded Polycom Linux Development Platform 2.14.g3 is affected. The issue is a default, blank administrative password that allows access without credential setup. CVSS metrics indicate network access, no user interact...

CVE-2012-6666

CVE-2012-6666 affects vBSeo prior to 3.6.0PL2. The issue is a reflected XSS vulnerability exploitable via the member.php u parameter. The provided documents do not specify affected platforms beyond the product/version and do not include exploit code or remediation details. No additional impact or...