20289 matches found
CVE-2012-4382
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not properly protect user block metadata, which allows remote administrators to read a user block reason via a reblock attempt...
CVE-2012-4379
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct clickjacking attacks via an embedded API response in an IFRAME element...
CVE-2012-4380
CVE-2012-4380 affects MediaWiki before 1.18.5 and 1.19.x before 1.19.2, allowing remote attackers to bypass the GlobalBlocking extension IP address blocking and create an account via unspecified vectors. The connected sources consistently describe the same impact across Windows/Linux OpenVAS entr...
CVE-2012-4380
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass GlobalBlocking extension IP address blocking and create an account via unspecified vectors...
CVE-2012-4379
MediaWiki versions affected: prior to 1.18.5 and 1.19.x prior to 1.19.2. The issue is that the application does not send a restrictive X-Frame-Options header, enabling clickjacking via an embedded API response in an IFRAME. The provided documents describe the vulnerability without detailing explo...
CVE-2012-6707
WordPress up to version 4.8.2 uses a weak MD5-based password hashing algorithm, making it easier for an attacker with access to hash values to determine cleartext passwords. The CVE-2012-6707 entry specifically cites this weakness as the vulnerability. Several connected sources reiterate the same...
CVE-2012-4929
creationtimestamp| type| source ---|---|--- 2017-10-09 18:29:26+00:00| seen| https://t.me/informationsecuritychannel/9760 2017-10-17 20:54:29+00:00| seen| https://t.me/informationsecuritychannel/10087 2020-02-21 20:52:02+00:00| seen| https://t.me/cibsecurity/10017 2023-11-28 11:34:55+00:00| seen|...
CVE-2012-6696
inspircd in Debian before 2.0.7 does not properly handle unsigned integers. NOTE: This vulnerability exists because of an incomplete fix to CVE-2012-1836...
CVE-2012-6696
Technical details about CVE-2012-6696 are not publicly available in the provided documents. Monitor for updates.
CVE-2012-2805
Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...
CVE-2012-2805
Technical details for CVE-2012-2805 are not publicly available in the provided documents. No affected version, impact, or remediation specifics are given here. Monitor for updates.
When combining exploits for added effect goes wrong
IntroductionSince public disclosure in April 2017, CVE-2017-0199 has been frequently used within malicious Office documents. The vulnerability allows attackers to include Ole2Link objects within RTF documents to launch remote code when HTA applications are opened and parsed by Microsoft Word.In...
CVE-2012-2781
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2778, and CVE-2012-2780...
CVE-2012-2773
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2778, CVE-2012-2780, and CVE-2012-2781...
CVE-2012-2778
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2780, and CVE-2012-2781...
CVE-2012-2781
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2778, and CVE-2012-2780...
UBUNTU-CVE-2012-2778
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2780, and CVE-2012-2781...
CVE-2012-2781
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2778, and CVE-2012-2780...