CVE-2012-2342

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-5097. Reason: This candidate is a duplicate of CVE-2010-5097. Notes: All CVE users should reference CVE-2010-5097 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2012-2345

CVE-2010-5100 and the related duplicates describe: TYPO3 Install Tool contains multiple XSS vulnerabilities in 4.2.x (before 4.2.16), 4.3.x (before 4.3.9), and 4.4.x (before 4.4.5). The vulnerability is exploitable by remote authenticated users who can inject arbitrary web script or HTML via unsp...

CVE-2012-2346

CVE-2012-2346 is a duplicate of CVE-2010-5101; the connected documents confirm a directory traversal vulnerability in TYPO3 TypoScript setup across TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5. The root cause is a file inclusion functionality-related flaw that allows remo...

CVE-2012-2342

CVE-2012-2342 is rejected/not used; reference CVE-2010-5097.

CVE-2012-2344

CVE-2012-2344 is a duplicate of CVE-2010-5099. The TYPO3 fileDenyPattern flaw described in CVE-2010-5099 allows remote access to arbitrary PHP files via path traversal (using %00 null bytes) in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5. Affected versions should be upda...

CVE-2012-2347

CVE-2012-2347 is a duplicate of CVE-2010-5102 and is marked as rejected/not to be used. The connected records show the underlying issue as a directory traversal vulnerability in TYPO3’s unzip handling (mod/tools/em/class.em_unzip.php) affecting TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4...

CVE-2012-2343

CVE-2012-2343 is a duplicate of CVE-2010-5098; the actual vulnerability is TYPO3 FORM content object XSS. Affected TYPO3 versions: 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5, where remote authenticated users can inject arbitrary web script or HTML via unspecified vectors. Rem...

CVE-2012-2349

CVE-2012-2349 is a reservation duplicate of CVE-2010-5104. The connected records show the underlying issue is TYPO3’s escapeStrForLike handling in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5, which can leak information via LIKE queries when sql_mode NO_BACKSLASH_ESCAPES ...

CVE-2012-1544

CVE-2012-1544 is a duplicate of CVE-2012-1876; reference CVE-2012-1876 for active details. Connected sources document CVE-2012-1876 as the Internet Explorer 8 Fixed Col Span ID vulnerability (MS12-037) with multiple exploits showing memory-corruption in fixed table column spans. Affected software...

CVE-2012-1092

CVE-2012-1092 is a reservation duplicate of CVE-2012-1410. The connected sources describe CVE-2012-1410 as multiple cross-site scripting (XSS) vulnerabilities in the History Window of Kadu (versions 0.9.0 through 0.11.0) that allow remote attackers to inject arbitrary script via crafted SMS messa...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-4669. Reason: This candidate is a duplicate of CVE-2010-4669. Notes: All CVE users should reference CVE-2010-4669 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2010-4559

CVE-2010-4559 is rejected/not used; refer to CVE-2010-4670 and CVE-2010-4671.

CVE-2010-4560

CVE-2010-4560 is a duplicate of CVE-2010-4669 and refers to an ICMPv6 router advertisement flooding DoS affecting IPv6 implementations. The connected records describe remote DoS via flood of ICMPv6 Neighbor Solicitation/Router Advertisement messages impacting Windows 7 and earlier, Cisco/Juniper/...

CVE-2011-4123

CVE-2011-4123 is a duplicate of CVE-2011-3874. The underlying issue is a vulnerability in Android's libsysutils (FrameworkListener::dispatchCommand) on affected Android versions (2.2.x–2.3.x) that can lead to remote code execution when handling command arguments. Multiple sources describe a stack...

CVE-2012-0287

Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...

DEBIAN-CVE-2012-0287

Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...

CVE-2012-0287

Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...

CVE-2012-0287

Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...

CVE-2012-0287

Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...

CVE-2012-0026

CVE-2012-0026 is a duplicate of CVE-2012-0287. The connected records describe a WordPress 3.3.x XSS vulnerability (pre-3.3.1) that can be triggered by a crafted request, allowing arbitrary script execution in a user’s browser. Affected product: WordPress 3.3.x prior to 3.3.1. Root cause : cross-s...