28619 matches found
CVE-2012-4980
The CVE-2012-4980 entry refers to a stack-based buffer overflow in Toshiba ConfigFree’s CFProfile.exe (CF7 file parsing). Documents specify vulnerabilities in the CF7 file format, notably the profileName and comment fields, that could allow a user-assisted attacker to run arbitrary code on Window...
CVE-2013-4664
SPBAS Business Automation Software 2012 has XSS...
Cross site request forgery (csrf)
SPBAS Business Automation Software 2012 has CSRF...
Cross site scripting
SPBAS Business Automation Software 2012 has XSS...
CVE-2013-4664
SPBAS Business Automation Software 2012 has XSS...
CVE-2013-4664
The connected records (RH:CVE-2013-4664, NVD, PRION, Red Hat, CVELIST, PRION) consistently identify SPBAS Business Automation Software 2012 as vulnerable to XSS (CVE-2013-4664). The initial description states the same. Details beyond that are not provided in these documents (no explicit impact, a...
CVE-2012-4420
creationtimestamp| type| source ---|---|--- 2019-12-27 00:55:10+00:00| seen| https://t.me/cibsecurity/8863 2024-03-17 10:46:45+00:00| seen| https://t.me/ctinow/209856...
CVE-2013-4664: Improper Neutralization of Input During Web Page Generation
SPBAS Business Automation Software 2012 has XSS...
CVE-2013-4665: Cross-Site Request Forgery (CSRF)
SPBAS Business Automation Software 2012 has CSRF...
PT-2019-6963
Name of the Vulnerable Software and Affected Versions SPBAS Business Automation Software 2012 Description The issue is related to a CSRF problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this...
PT-2019-6962
Name of the Vulnerable Software and Affected Versions SPBAS Business Automation Software 2012 Description The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, which can then be...
DEBIAN-CVE-2012-3462
A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the user's SELinux user context...
CVE-2012-4420
CVE-2012-4420 affects the JVM implementation of Java SE 7 provided by OpenJDK 7, where integer arrays could be incorrectly initialized after memory allocation, allowing a remote attacker to disclose potentially sensitive information. The connected sources confirm this information disclosure in th...
CVE-2012-2736
In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network...
CVE-2012-3462
SSSD 1.9.0 contains a logic flaw in its access-provider path where HBAC rule results are ignored if the access-provider also sets the user’s SELinux context. Affected component: SSSD HBAC/access-provider integration. Impact described: incorrect HBAC evaluation under scenarios where SELinux user c...
CVE-2012-2736
CVE-2012-2736 affects NetworkManager 0.9.2.0. When a new wireless network is created with WPA/WPA2 security in AdHoc mode, the process can create an open/insecure network rather than a secure one. This has been observed in multiple feeds (NVD, OSV, SUSE, Debian trackers, etc.). The CVSS metrics i...
CVE-2012-6094
creationtimestamp| type| source ---|---|--- 2019-12-20 18:43:04+00:00| seen| https://t.me/cibsecurity/8808 2024-03-16 09:22:05+00:00| seen| https://t.me/ctinow/209428...
CVE-2012-6111
creationtimestamp| type| source ---|---|--- 2019-12-20 18:43:03+00:00| seen| https://t.me/cibsecurity/8807...