CVE-2012-1932

CVE-2012-1932 is an XSS vulnerability in Wolf CMS 0.75 and earlier. The issue allows an attacker to inject arbitrary web script or HTML via the setting[admin_email] parameter to admin/setting. Public references in the connected records confirm the affected software/component and the faulty input ...

CVE-2012-6614

CVE-2012-6614 affects the D-Link DSR-250N family, specifically firmware versions before 1.08B31. The vulnerability allows remote authenticated users to obtain persistent root access via the BusyBox CLI, demonstrated by overwriting the superuser password. Reported impact includes high confidential...

CVE-2012-0718

IBM Tivoli Endpoint Manager 8 is affected by CVE-2012-0718 due to not setting the HttpOnly flag on cookies. This can expose cookies to client-side access, impacting confidentiality and integrity (CVSS 3.1 base score 5.4). The vulnerability is network-based with low impact on confidentiality and i...

CVE-2012-4531

creationtimestamp| type| source ---|---|--- 2020-02-18 00:36:07+00:00| seen| https://t.me/cibsecurity/9873...

CVE-2012-2412

...

CVE-2012-6091

CVE-2012-6091 : Magento prior to 1.7.0.2 has an information disclosure vulnerability in the Zend_XmlRpc implementation (Magento’s XML-RPC handling). The weakness affects the Zend_XmlRpc_Server/XmlRpc handling and can allow a remote attacker to view sensitive information. Affected product is Magen...

CVE-2012-5623

CVE-2012-5623 concerns Squirrelmail 4.0 using the outdated MD5 hashing algorithm for passwords. According to the connected records, the issue arises from the use of MD5 for password hashing, which can lead to weakened password security. The NVD entry lists CVSSv3.1 metrics with a base score of 7....

CVE-2012-1903

The vulnerability described by CVE-2012-1903 is a cross-site scripting (XSS) flaw in Telligent Community 5.6.583.20496 related to a Flash file and the allowScriptAccess parameter. Affected product: Telligent Community (version 5.6.583.20496). Root cause: improper handling of Flash content via all...

CVE-2012-1500

CVE-2012-1500 is a Stored XSS vulnerability impacting JIRA 4.4.3 and GreenHopper before 5.9.8, where UpdateFieldJson.jspa can be abused to inject arbitrary script code. The exposure is evidenced across multiple sources in the provided documents, and the vulnerability is described as a stored cros...

CVE-2012-0951

creationtimestamp| type| source ---|---|--- 2020-02-12 20:37:23+00:00| seen| https://t.me/cibsecurity/9794...

CVE-2012-0951

A Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown function in the file proc/driver/nvidia/registry...

CVE-2012-0951

A Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown function in the file proc/driver/nvidia/registry...

CVE-2012-0951

CVE-2012-0951 affects NVIDIA Graphics Drivers 29549, with a memory corruption vulnerability caused by an unknown function in proc/driver/nvidia/registry. CVSSv3.1: LOCAL, LOW privileges, NONE user interaction, with HIGH confidentiality, integrity, and availability impact. Exploitation status not ...

CVE-2012-0810

creationtimestamp| type| source ---|---|--- 2020-02-12 16:37:06+00:00| seen| https://t.me/cibsecurity/9783...

CVE-2012-0810

CVE-2012-0810 affects the Linux kernel up to version prior to 3.3, where the int3 handler uses a per-CPU debug stack and can be abused by a local, unprivileged user to cause stack corruption and a denial of service via crafted lock-contention scenarios. Publicly available connected documents conf...

Design/Logic Flaw

The WebView class and use of the WebView.addJavascriptInterface method in the Boat Browser application 8.0 and 8.0.1 for Android allow remote attackers to execute arbitrary code via a crafted web site, a related issue to CVE-2012-6636...

Security Bulletin: Security Vulnerabilities have been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2012-5783, CVE-2018-1614, CVE-2014-0114, CVE-2015-0899)

Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about security vulnerabilities affecting Websphere Application Server has been published in security bulletins. Vulnerability Details Please consult the security bulletins: Security Bulletin:...

CVE-2012-1124

SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...

CVE-2012-1124

The CVE-2012-1124 entry concerns a SQL injection vulnerability in the search.php component of phxEventManager 2.0 beta 5, where user-supplied search_terms can be exploited to execute arbitrary SQL commands. According to the connected NVD entry, the flaw enables remote attackers to target the appl...

CVE-2012-6720

CVE-2012-6720 concerns a Cross-Site Scripting (XSS) vulnerability in SocialEngine prior to version 4.2.4. The issue allows remote attackers to inject arbitrary web script or HTML through specific parameters: (1) title to music/create, (2) location to events/create, and (3) search to widget/index/...