CVE-2012-6134

Cross-site request forgery CSRF vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state...

CVE-2012-4362

hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$agent account, which allows remote attackers to obtain access to a management service via a login: request to TCP port 13838...

CVE-2012-1292

Unspecified vulnerability in the MessagingSystem servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the MessagingSystem Performance Data via unspecified vectors...

CVE-2012-2235

Cross-site scripting XSS vulnerability in Support Incident Tracker SiT! 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message...

CVE-2012-1625

Eval injection vulnerability in the fillpdfformexportdecode function in fillpdf.admin.inc in the Fill PDF module 6.x-1.x before 6.x-1.16 and 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with administer PDFs privileges to execute arbitrary PHP code via unspecified vectors...

CVE-2012-1632

Cross-site scripting XSS vulnerability in passwordpolicy.admin.inc in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote authenticated users with administer policies permissions to inject arbitrary web script or HTML via the name parameter...

CVE-2012-10015

A vulnerability was found in BestWebSoft Twitter Plugin up to 2.14 on WordPress. It has been classified as problematic. Affected is the function twttrsettingspage of the file twitter.php of the component Settings Page. The manipulation leads to cross-site request forgery. It is possible to launch...

CVE-2012-10009

A vulnerability was found in 404like Plugin up to 1.0.2 on WordPress. It has been classified as critical. Affected is the function checkPage of the file 404Like.php. The manipulation of the argument searchWord leads to sql injection. It is possible to launch the attack remotely. Upgrading to...

CVE-2012-10005

A vulnerability has been found in manikandan170890 php-form-builder-class and classified as problematic. Affected by this vulnerability is an unknown functionality of the file PFBC/Element/Textarea.php of the component Textarea Handler. The manipulation of the argument value leads to cross site...

CVE-2012-10014

A vulnerability classified as problematic has been found in Kau-Boy Backend Localization Plugin 2.0 on WordPress. Affected is the function backendlocalizationadminsettings/backendlocalizationsavesetting/backendlocalizationloginform/localizebackend of the file backendlocalization.php. The...

CVE-2012-20001

PrestaShop before 1.5.2 allows XSS via the "...

CVE-2012-6708 affecting package python-blinker for versions less than 1.7.0-4

CVE-2012-6708 affecting package python-blinker for versions less than 1.7.0-4. An upgraded version of the package is available that resolves this issue...

CVE-2012-3425 affecting package syslinux for versions less than 6.04-11

CVE-2012-3425 affecting package syslinux for versions less than 6.04-11. A patched version of the package is available...

Security Bulletin: IBM Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.9

Summary Apache Portable Runtime, The Expat XML Parser and DOORS Web Access are identified as vulnerable components with multiple reported vulnerabilities. The IBM Engineering Requirements Management DOORS/DWA product version 9.7.2.8 is vulnerable to the below mentioned CVEs. Remediation actions a...

CVE-2012-12232

creationtimestamp| type| source ---|---|--- 2025-04-14 00:31:44+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmqcqmhckk2i 2025-04-14 00:36:42+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmqczimsqk2q 2025-04-14 00:42:39+00:00| seen|...

Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities

Summary IBM Cloud Pak for Security includes components with known vulnerabilities. These have been updated in the latest release and vulnerabilities have been addressed. Please follow the instructions in the Remediation/Fixes section below to update to the latest version of Cloud Pak for Security...

Security Bulletin: Multiple vulnerabilities in DITA, Apache Batik, Apache FOP may affect IBM Business Automation Workflow and IBM Case Manager

Summary IBM Business Automation Workflow and IBM Case Manager packages DITA for documentation generation in Case Management. Multiple CVEs have been reported for open source libraries repackaged in DITA. A few of the same open source libraries, such as Apache Batik and Apache FOP, are also used f...

CVE-2012-42013

creationtimestamp| type| source ---|---|--- 2025-03-04 21:01:59+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ljleeqjnfo2u...

Linux Distros Unpatched Vulnerability : CVE-2012-0207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The igmpheardquery function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service divide-by-zero error and...

Linux Distros Unpatched Vulnerability : CVE-2012-1823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sapi/cgi/cgimain.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script aka php- cgi, does not properly handle query strings that lack a...