28619 matches found
CVE-2012-1637
Cross-site scripting vulnerability XSS in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal...
CVE-2012-2079
The CVE-2012-2079 CSRF vulnerability affects the Drupal Activity module (6.x-1.x). The 6.x-1.x branch does not filter output correctly and does not confirm user intent when removing an activity, enabling unauthorized state-changing requests to the server. Impact details in public advisories descr...
CVE-2012-2078
Cross-site scripting XSS vulnerability in the Activity module 6.x-1.x for Drupal...
CVE-2012-2078
Activity module 6.x-1.x (Drupal) is affected by a cross-site scripting (XSS) vulnerability due to output not being properly filtered, and an associated issue where removing an activity could trigger a cross-site request forgery (CSRF). Exploitation requires a user with the permissions to access a...
CVE-2012-1637
The CVE-2012-1637 vulnerability affects the Drupal Quick Tabs contributed module, not Drupal core. It is a Cross-Site Scripting (XSS) issue caused by insufficient filtering of user-supplied text. Affected versions are Quicktabs 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7....
CVE-2012-1001
Chyrp contains multiple XSS flaws identified as CVE-2012-1001. The vulnerabilities occur in Chyrp before 2.1.2 and before 2.5 Beta 2, enabling remote attackers to inject arbitrary scripts via the content parameter to includes/ajax.php or the body parameter to includes/error.php. The root cause is...
CVE-2012-3460
cumin: At installation postgresql database user created without password...
CVE-2012-2945
Hadoop 1.0.3 contains a symlink vulnerability...
CVE-2012-2350
pamshield before 0.9.4: Default configuration does not perform protective action...
CVE-2012-2350
pamshield before 0.9.4: Default configuration does not perform protective action...
CVE-2012-2238
trytond 2.4: ModelView.button fails to validate authorization...
CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
CVE-2012-2350
pamshield before 0.9.4: Default configuration does not perform protective action...
CVE-2012-2238
trytond 2.4: ModelView.button fails to validate authorization...
CVE-2012-4524
CVE-2012-4524 affects Xlockmore (pre-5.43) in dclock mode. The vulnerability arises from how arguments are passed to localtime(), enabling a Denial of Service and potentially exposing the graphical session to compromise. Public advisories (GLSA 201309-03) and related vendor notes describe the iss...
CVE-2012-3460
CVE-2012-3460 affects cumin; the installation process creates a PostgreSQL database user without a password. This root cause enables potential unauthorized access to the database, contributing to a critical risk profile (CVSS v3.1: CRITICAL, 9.8; CVSS v2: HIGH, 7.5). The vulnerability details ava...
CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
CVE-2012-3543
Technical details about CVE-2012-3543 are not publicly provided in the supplied documents. Monitor for updates from vendors or vulnerability trackers for affected software, impact, and fixed versions.
