20289 matches found
CVE-2012-6721
CVE-2012-6721 describes multiple CSRF vulnerabilities in the SocialEngine platform, affecting the (1) Forum, (2) Event, and (3) Classifieds plugins when running versions earlier than 4.2.4. The connected documents provide the concrete details: the vulnerable software components are the three Soci...
CVE-2012-2452
CVE-2012-2452 affects pragmaMx 1.x up to before 1.12.2, enabling XSS via two vectors: (1) name parameter in modules.php and (2) img_url parameter in includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php. The root cause is improper sanitization of user-supplied input. Impact is cross-site sc...
CVE-2012-4519
Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS...
Security Bulletin: Multiple vulnerabilities affect Rational Publishing Engine
Summary Multiple security vulnerabilities affecting Rational Publishing Engine. Vulnerability Details CVEID: CVE-2015-0254 DESCRIPTION: Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks via a crafted XSLT extension in...
CVE-2012-2204
creationtimestamp| type| source ---|---|--- 2020-02-10 18:37:06+00:00| seen| https://t.me/cibsecurity/9728...
CVE-2012-5828
CVE-2012-5828 affects BlackBerry PlayBook OS prior to 2.1, via the PlayBook browser component. The vulnerability allows an information disclosure by tricking the browser into downloading/ loading a crafted HTML file using the standard download mechanism, with the downloaded HTML potentially using...
CVE-2012-2204
The CVE-2012-2204 entry concerns the InfoSphere Guardium aix_ktap module causing a DoS. Connected sources identify the affected component as the aix_ktap module within InfoSphere Guardium and classify the impact as Availability-related DoS, but the provided documents do not specify the exact root...
CVE-2012-1994
CVE-2012-1994 affects HP Systems Insight Manager prior to version 7.0, enabling a remote user on an adjacent network to access information. The vulnerability is categorized as an information disclosure issue. The available documents confirm the affected product and the impact, but they do not pro...
CVE-2012-6449
CVE-2012-6449 affects cPanel & WHM 11.34.0 (build 8); the vulnerable components are clientconf.html and detailbw.html, with a documented cross-site scripting (XSS) vulnerability. NVD CVSSv3.1 base score 5.4 (MEDIUM) via NETWORK/vector: LOW spoofed user interaction required? The data shows UI inte...
CVE-2012-6611
Polycom Web Management Interface G3/HDX 8000 HD running Durango 2.6.0 4740 and embedded Polycom Linux Development Platform 2.14.g3 is affected. The issue is a default, blank administrative password that allows access without credential setup. CVSS metrics indicate network access, no user interact...
CVE-2012-6666
CVE-2012-6666 affects vBSeo prior to 3.6.0PL2. The issue is a reflected XSS vulnerability exploitable via the member.php u parameter. The provided documents do not specify affected platforms beyond the product/version and do not include exploit code or remediation details. No additional impact or...
CVE-2012-4381
creationtimestamp| type| source ---|---|--- 2020-02-08 20:33:06+00:00| seen| https://t.me/cibsecurity/9715...
CVE-2012-4512
The CSS parser khtml/css/cssparser.cpp in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via a crafted font face source, related to "type confusion."...
CVE-2012-4029
Cross-site scripting XSS vulnerability in main/dropbox/index.php in Chamilo LMS before 1.8.8.6 allows remote attackers to inject arbitrary web script or HTML via the categoryname parameter in an addsentcategory action...
CVE-2012-4381
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, 1 which could make it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack or, 2 when an authentication plugin returns a false in the strict function, could allow remo...
CVE-2012-5570
The CVE-2012-5570 entry concerns Drupal's Basic webmail module (6.x-1.x) prior to 6.x-1.2. The vulnerability allows remote authenticated users with the access basic_webmail permission to read arbitrary users’ email addresses, constituting an information-disclosure flaw. Root cause details are not...
CVE-2012-4512
Removed by vendor...
CVE-2012-4512
CVE-2012-4512 affects Konqueror’s CSS parser (khtml/css/cssparser.cpp) in KDE 4.7.3. A remote attacker can crash the browser and possibly read memory via a crafted font-face source due to a type-confusion issue. Connected advisories (MiracleLinux AXSA-2012-970:03, SUSE/Security Advisories, Gentoo...
CVE-2012-4512
The CSS parser khtml/css/cssparser.cpp in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via a crafted font face source, related to "type confusion."...