20289 matches found
CVE-2012-1114
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the filter parameter to cmd.php in an export and exporterid action. and the filteruid parameter to list.php...
CVE-2012-1592
Apache Struts2 is affected by a local code execution vulnerability involving processing malformed XSLT files. The issue affects Struts2 versions prior to 2.5.22 and can allow a malicious user to upload and execute arbitrary files on the server. A fix exists with Struts 2.5.22 or later; advisory e...
CVE-2012-1104
creationtimestamp| type| source ---|---|--- 2019-12-05 20:27:27+00:00| seen| https://t.me/cibsecurity/8526...
CVE-2012-1115
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the export, addvalueform, and dn parameters to cmd.php...
CVE-2012-1115
CVE-2012-1115 affects LDAP Account Manager (LAM) Pro 3.6, with a Cross-Site Scripting (XSS) vulnerability in the export, add_value_form, and dn parameters to cmd.php. All connected sources confirm the XSS issue in LAM Pro 3.6; no specific patch/version to remediate is provided in the supplied doc...
CVE-2012-1105
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner...
CVE-2012-1105
CVE-2012-1105: A information-disclosure vulnerability exists in the Jasig php-pear-CAS 1.2.2 package where the Central Authentication Service client library archives the debug logging file insecurely in /tmp, exposing partial confidentiality. Affected component: phpCAS library; root cause: insecu...
CVE-2012-1104
A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed...
CVE-2012-1104
CVE-2012-1104 affects phpCAS (Central Authentication Service) library version 1.2.2 from the Jasig project, where the security bypass arises from how proxying of services is managed. The vulnerability enables bypass of certain security controls due to the proxying logic rather than a flaw in the ...
CVE-2012-4576
creationtimestamp| type| source ---|---|--- 2019-12-03 16:03:06+00:00| seen| https://t.me/cibsecurity/8454 2024-03-05 08:41:42+00:00| seen| https://t.me/ctinow/200005...
CVE-2012-4480
mom creates world-writable pid files in /var/run...
CVE-2012-4576
FreeBSD: Input Validation Flaw allows local users to gain elevated privileges...
CVE-2012-5562
CVE-2012-5562 affects the rhn-proxy component used with Red Hat Satellite. The flaw enables the proxy to transmit user credentials in clear text when accessing RHN Satellite, leading to potential exposure of sensitive authentication details (information disclosure). Public references and CVSS dat...
CVE-2012-4576
CVE-2012-4576 is described as a FreeBSD input-validation flaw that enables local privilege escalation. The connected data corroborate a Linux compatibility layer input-validation error where improper validation of Linux system-call handling can lead to memory locations being accessed, allowing lo...
CVE-2012-4526
piwigo has XSS in password.php incomplete fix for CVE-2012-4525...
CVE-2012-4526
Piwigo is affected by a cross-site scripting (XSS) vulnerability in password.php. This entry (CVE-2012-4526) indicates an incomplete fix for CVE-2012-4525, with XSS described in the same file and linked citations. The provided documents do not specify affected versions, exploit status, in-the-wil...
CVE-2012-4525
Piwigo has a Cross-Site Scripting (XSS) vulnerability in password.php (CVE-2012-4525). Multiple sources confirm the issue exists in Piwigo and some Red Hat/Ubuntu entries describe an incomplete fix for CVE-2012-4525, indicating remediation is not fully clear from the provided documents. The affec...
CVE-2012-4480
mom creates world-writable pid files in /var/run...
CVE-2012-4480
CVE-2012-4480 affects the mom tool, where it creates world-writable PID files in /var/run. This local issue could let an attacker influence PID handling and terminate other processes, as indicated by CNVD/Fedora advisories and the NVD entry. The vulnerability is tied to local access and uncertain...