20289 matches found
CVE-2012-0945
whoopsie-daisy before 0.1.26: Root user can remove arbitrary files...
CVE-2012-1562
Joomla! core before 2.5.3 allows unauthorized password change...
CVE-2012-1563
Joomla! before 2.5.3 allows Admin Account Creation...
CVE-2012-1316
CVE-2012-1316 affects the Cisco IronPort Web Security Appliance, where the product does not check for certificate revocation, potentially enabling MITM attacks. The linked sources show an impact on integrity (CVSS3.1: HIGH) with network exposure (CVSS3.1: AV:N, AC:H, PR:N, UI:N, S:U) and a CVSSv2...
CVE-2012-1563
CVE-2012-1563 is described across multiple sources as a Joomla! vulnerability that allows an attacker to create an administrator account in affected installations. The core issue is consistently referenced as Joomla! before 2.5.3, with exploit tooling and public writeups targeting Joomla! 2.5.x (...
CVE-2012-1562
CVE-2012-1562 affects Joomla! core prior to 2.5.3, allowing unauthorized password changes. This is corroborated by multiple sources (NVD, Red Hat, Nessus) in the provided documents. No concrete exploit details or remediation steps are present in the connected documents; remediation/version fixes ...
CVE-2012-0945
CVE-2012-0945 affects whoopsie-daisy prior to 0.1.26. The reported vulnerability allows the root user to remove arbitrary files, describing a root‑level impact due to the underlying cause in whoopsie-daisy. The entry is corroborated across multiple sources in this set (e.g., Red Hat/TLP and NVD r...
CVE-2012-4750
The only concrete details available concern Ezhometech EzServer 7.0. A memory corruption/Code Execution vulnerability stems from memcpy being fed an uncontrolled size while processing AMF requests in the RTMP path after the handshake, enabling a remote attacker to potentially crash or execute cod...
CVE-2012-4761
A Privilege Escalation vulnerability exists in the unquoted Service Binary in SDPAgent or SDBAgent in Safend Data Protector Agent 3.4.5586.9772, which could let a local malicious user obtain privileges...
CVE-2012-4761
Summary: CVE-2012-4761 affects Safend Data Protector Agent 3.4.5586.9772. The vulnerability arises from an unquoted Service Binary for SDPAgent/SDBAgent, enabling a local attacker to escalate privileges. What’s vulnerable: the Windows service path containing spaces (SDBAgent.exe/SDPAgent.exe) and...
CVE-2012-4760
CVE-2012-4760 and CVE-2012-4761 pertain to Safend Data Protector Agent 3.4.5586.9772. The issues involve the SDBAgent/SDPAgent components: (1) WRITE_DAC privileges granted to all local users on the SDBAgent.exe file, enabling a local user to rewrite ACLs and potentially gain full local admin priv...
CVE-2012-4603
Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2 and earlier could allow remote attackers to execute arbitrary code by convincing a target to open a specially crafted file from an SMB or WebDAV fileserver...
CVE-2012-3823
creationtimestamp| type| source ---|---|--- 2020-01-10 20:32:51+00:00| seen| https://t.me/cibsecurity/9119...
CVE-2012-4603
CVE-2012-4603 affects Citrix XenApp Online Plug-in for Windows (12.1 and earlier) and Citrix Receiver for Windows (3.2 and earlier). Reported vulnerability allows remote code execution when a user opens a specially crafted file from an SMB or WebDAV fileserver. The initial description does not sp...
CVE-2012-4603
Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2 and earlier could allow remote attackers to execute arbitrary code by convincing a target to open a specially crafted file from an SMB or WebDAV fileserver...
CVE-2012-4284
A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code...
CVE-2012-3821
A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field...
DSquare Exploit Pack: D2SEC_VISCOSITY
Name| d2secviscosity ---|--- CVE| CVE-2012-4284 Exploit Pack| D2ExploitPack Description| d2secviscosity Notes|...
CVE-2012-3821
CVE-2012-3821 affects Arial Software Campaign Enterprise prior to or up to version 11.0.551, with a Security Bypass in the activate.asp page that could allow a remote attacker to modify the SerialNumber field. The trusted impact stated in sources is that this bypass enables unauthorized modificat...
CVE-2012-4284
A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code...