CVE-2012-1261

CVE-2012-1261 describes a cross-site scripting (XSS) vulnerability in Scrutinizer NetFlow and sFlow Analyzer. The issue affects the CGI endpoint /cgi-bin/scrut_fa_exclusions.cgi, where the standalone parameter can be used to inject arbitrary web script/HTML on affected versions (8.6.2.16204 and o...

CVE-2012-1260

Cross-site scripting XSS vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allows remote attackers to inject arbitrary web script or HTML via the newUser parameter. NOTE: this might not ...

CVE-2012-1260

The CVE-2012-1260 entry describes multiple vulnerabilities in Plixer Scrutinizer NetFlow & sFlow Analyzer (Scrutinizer) up to version 8.6.2.16204, possibly affecting earlier builds, with remediation implemented in 9.0.1 (9.0.1.19899). Concrete issues include: Cross-site scripting (XSS) in cgi-bin...

CVE-2012-1258

The CVE-2012-1258 issue affects Plixer Scrutinizer NetFlow & sFlow Analyzer prior to version 9.0.1.19899, where the web application in cgi-bin/userprefs.cgi does not properly enforce permissions, enabling remote attackers to add administrator accounts via parameters newuser, pwd, and selectedUser...

CVE-2012-5693

creationtimestamp| type| source ---|---|--- 2020-01-03 22:49:09+00:00| seen| https://t.me/cibsecurity/8995...

CVE-2012-4451

creationtimestamp| type| source ---|---|--- 2020-01-03 20:49:18+00:00| seen| https://t.me/cibsecurity/8991...

CVE-2012-5878

CVE-2012-5878 concerns the Smartphone Pentest Framework (SPF) versions 0.1.2–0.1.4. The connected records confirm a remote OS command injection vulnerability in SPF’s web GUI, triggered by unsanitized input in the hostingPath parameter for SEAttack.pl and CSAttack.pl (frameworkgui/), and the appU...

CVE-2012-5693

Bulb Security’s Smartphone Pentest Framework (SPF) is affected by OS command injection in SPF web GUI. CVE-2012-5693 (and related CVE-2012-5878) describe that remote attackers can execute arbitrary commands by supplying shell metacharacters in various input fields (ipAddressTB, hostingPath, appUR...

CVE-2012-4451

Zend Framework 2.0.x (before 2.0.1) contains multiple XSS vulnerabilities related to Escaper, exploitable via input to components such as Debug, Feed\PubSubHubbub, Log\Formatter\Xml, Tag\Cloud\Decorator, Uri, View\Helper\HeadStyle, View\Helper\Navigation\Sitemap, and View\Helper\Placeholder\Conta...

CVE-2012-6621

creationtimestamp| type| source ---|---|--- 2020-01-03 00:37:05+00:00| seen| https://t.me/VulnerabilityNews/11576 2020-01-03 00:49:13+00:00| seen| https://t.me/cibsecurity/8977...

Update for the d3dcompiler_47.dll component on Windows Server 2012, Windows 7, and Windows Server 2008 R2

Update for the d3dcompiler47.dll component on Windows Server 2012, Windows 7, and Windows Server 2008 R2 This article describes an update that addresses an issue in Windows Server 2012, Windows 7 Service Pack 1 SP1, and Windows Server 2008 R2 SP1 that is described in the following Knowledge Base...

CVE-2019-20223

In Support Incident Tracker SiT! 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235...

Design/Logic Flaw

In Support Incident Tracker SiT! 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235...

CVE-2019-20223

In Support Incident Tracker SiT! 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235...

CVE-2012-5617

creationtimestamp| type| source ---|---|--- 2019-12-31 22:56:32+00:00| seen| https://t.me/cibsecurity/8934 2019-12-31 23:03:08+00:00| seen| https://t.me/VulnerabilityNews/11532 2024-02-27 08:16:55+00:00| seen| https://t.me/ctinow/194073...

Security feature bypass

gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it did not fixed the security issue...

CVE-2012-5663

creationtimestamp| type| source ---|---|--- 2019-12-31 00:56:34+00:00| seen| https://t.me/cibsecurity/8925 2024-03-18 11:42:11+00:00| seen| https://t.me/ctinow/210405...

CVE-2012-5474

creationtimestamp| type| source ---|---|--- 2019-12-30 22:26:24+00:00| seen| https://t.me/cibsecurity/8921 2024-03-18 11:42:09+00:00| seen| https://t.me/ctinow/210402...

CVE-2012-5645

creationtimestamp| type| source ---|---|--- 2019-12-30 22:26:22+00:00| seen| https://t.me/cibsecurity/8919 2024-03-18 11:42:10+00:00| seen| https://t.me/ctinow/210404...

CVE-2012-5663

The CVE-2012-5663 entry affects the isearch package (textproc/isearch) prior to version 1.47.01nb1. The root cause is the use of tempnam() to create temporary files in /tmp, a publicly-writable directory, leading to potential integrity concerns. Per the referenced data, the vulnerability has inte...