CVE-2012-1957: Improper Neutralization of Input During Web Page Generation

An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handle EMBED elements within description elements in RSS feeds, which allows remot...

Mozilla: Improper filtering of javascript in HTML feed-view (MFSA 2012-47)

An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handle EMBED elements within description elements in RSS feeds, which allows remot...

CVE-2012-2722

The node selection interface in the WYSIWYG editor CKEditor in the Node Embed module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.0 for Drupal does not properly check permissions, which allows remote attackers to bypass intended access restrictions and read node titles...

Design/Logic Flaw

The node selection interface in the WYSIWYG editor CKEditor in the Node Embed module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.0 for Drupal does not properly check permissions, which allows remote attackers to bypass intended access restrictions and read node titles...

CVE-2012-2722

The CVE-2012-2722 issue affects the Drupal Node Embed module (CKEditor-based node picker). The vulnerability is a permissions-check bypass in the node selection interface, allowing remote readers to view node titles without proper access. Affected versions are Node Embed 6.x-1.x before 6.x-1.5 an...

CVE-2012-2722

The node selection interface in the WYSIWYG editor CKEditor in the Node Embed module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.0 for Drupal does not properly check permissions, which allows remote attackers to bypass intended access restrictions and read node titles...

CVE-2012-2722: Undefined Security Weakness

The node selection interface in the WYSIWYG editor CKEditor in the Node Embed module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.0 for Drupal does not properly check permissions, which allows remote attackers to bypass intended access restrictions and read node titles...

SA-CONTRIB-2012-093 - Node Embed - Access Bypass

Node Embed gives content editors an interface for selecting and embedding nodes using a WYSIWYG editor. The interface for selecting nodes is a page that had no access check, allowing users to view node titles they might not have access to. This issue only affects your site if you have unpublished...

Wordpress Video Embed & Thumbnail Generator 1.1 RCE (Windows)

Remote code execution vulnerability in Wordpress Video Embed & Thumbnail Generator plugin Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Wordpress Video Embed & Thumbnail Generator 1.1 RCE (Linux)

Remote code execution vulnerability in Wordpress Video Embed & Thumbnail Generator plugin Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Design/Logic Flaw

The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors...

CVE-2012-1786

The CVE-2012-1786 entry concerns the WordPress plugin Video Embed & Thumbnail Generator (pre-2.0). Affected component: Media Upload form. Root cause: path disclosure allowing remote attackers to obtain the installation path via unknown vectors. Impact: information disclosure; exploitation details...

CVE-2012-1786

The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors...

CVE-2012-1785: Improper Input Validation

kgcallffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2012-1786: Exposure of Sensitive Information to an Unauthorized Actor

The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors...

WordPress Video Embed & Thumbnail Generator Plugin <= 1.9 - Path Disclosure

Because of this vulnerability, the attackers can obtain the installation path via unknown vectors. Solution Update the plugin...

DEDECMS full version gotopage variable XSS ROOTKITS, 0DAY-vulnerability warning-the black bar safety net

Affected versions: DEDECMS full version The vulnerability described in: DEDECMS background landing template gotopage variable is not tested incoming data, leading toXSSvulnerabilities. \dede\templets\login.htm 6 5 the left and right input type="hidden" name="gotopage" value="? php if!...

CVE-2011-1894

The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for embedded content in an HTML document, which allows...

CVE-2011-1894

The CVE-2011-1894 issue affects the MHTML protocol handler used by Microsoft Windows components (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/R2, Windows 7 SP1). The vulnerability arises from improper handling of a MIME format in requests for embedded content within an HTML docume...

PT-2011-3455 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1...