5440 matches found
CVE-2012-1544
CVE-2012-1544 is a duplicate of CVE-2012-1876; reference CVE-2012-1876 for active details. Connected sources document CVE-2012-1876 as the Internet Explorer 8 Fixed Col Span ID vulnerability (MS12-037) with multiple exploits showing memory-corruption in fixed table column spans. Affected software...
CVE-2012-1092
CVE-2012-1092 is a reservation duplicate of CVE-2012-1410. The connected sources describe CVE-2012-1410 as multiple cross-site scripting (XSS) vulnerabilities in the History Window of Kadu (versions 0.9.0 through 0.11.0) that allow remote attackers to inject arbitrary script via crafted SMS messa...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-4669. Reason: This candidate is a duplicate of CVE-2010-4669. Notes: All CVE users should reference CVE-2010-4669 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2010-4559
CVE-2010-4559 is rejected/not used; refer to CVE-2010-4670 and CVE-2010-4671.
CVE-2010-4560
CVE-2010-4560 is a duplicate of CVE-2010-4669 and refers to an ICMPv6 router advertisement flooding DoS affecting IPv6 implementations. The connected records describe remote DoS via flood of ICMPv6 Neighbor Solicitation/Router Advertisement messages impacting Windows 7 and earlier, Cisco/Juniper/...
CVE-2011-4123
CVE-2011-4123 is a duplicate of CVE-2011-3874. The underlying issue is a vulnerability in Android's libsysutils (FrameworkListener::dispatchCommand) on affected Android versions (2.2.x–2.3.x) that can lead to remote code execution when handling command arguments. Multiple sources describe a stack...
CVE-2012-0287
Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...
DEBIAN-CVE-2012-0287
Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...
CVE-2012-0287
Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...
CVE-2012-0287
Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...
CVE-2012-0287
Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...
CVE-2012-0026
CVE-2012-0026 is a duplicate of CVE-2012-0287. The connected records describe a WordPress 3.3.x XSS vulnerability (pre-3.3.1) that can be triggered by a crafted request, allowing arbitrary script execution in a user’s browser. Affected product: WordPress 3.3.x prior to 3.3.1. Root cause : cross-s...
ssh-hostkey NSE Script
Shows SSH hostkeys. Shows the target SSH server's key fingerprint and with high enough verbosity level the public key itself. It records the discovered host keys in nmap.registry for use by other scripts. Output can be controlled with the sshhostkey script argument. You may also compare the...
CVE-2011-4084
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4858. Reason: This candidate is a duplicate of CVE-2011-4858. Notes: All CVE users should reference CVE-2011-4858 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2011-4084
CVE-2011-4084 is rejected/not used; reference CVE-2011-4858.
DSA-2370-1 unbound - several
Bulletin has no description...
CVE-2011-4779
CVE-2011-4642 affects Splunk Web (Splunk 4.2.x before 4.2.5). The mappy.py component allows remote authenticated admins to execute arbitrary code via the sys module in a crafted request to the search app, enabling CSRF-like abuse. Upgrade to Splunk 4.2.5 or later. Note: CVE-2011-4779 is a reserva...
Unbound multiple denial-of-service vulnerabilities
Overview A specially crafted DNS query containing signed duplicate resource records or a malformed NSEC3 signed resource record may cause Unbound to crash. Description NLnetLabs advisory states:== Description 1: crash on signed duplicate Resource Records There are authoritative servers that...
CVE-2011-4323
CVE-2011-4323 is a duplicate of CVE-2011-2726 (Drupal 7.x before 7.5). The connected data confirms an access bypass: non-privileged users can download a file attached to a comment if they know or guess the direct URL, even when the parent node is denied access, provided file upload fields or priv...