5524 matches found
CVE-2012-2342
CVE-2012-2342 is rejected/not used; reference CVE-2010-5097.
CVE-2012-2344
CVE-2012-2344 is a duplicate of CVE-2010-5099. The TYPO3 fileDenyPattern flaw described in CVE-2010-5099 allows remote access to arbitrary PHP files via path traversal (using %00 null bytes) in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5. Affected versions should be upda...
CVE-2012-2343
CVE-2012-2343 is a duplicate of CVE-2010-5098; the actual vulnerability is TYPO3 FORM content object XSS. Affected TYPO3 versions: 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5, where remote authenticated users can inject arbitrary web script or HTML via unspecified vectors. Rem...
CVE-2012-2349
CVE-2012-2349 is a reservation duplicate of CVE-2010-5104. The connected records show the underlying issue is TYPO3’s escapeStrForLike handling in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5, which can leak information via LIKE queries when sql_mode NO_BACKSLASH_ESCAPES ...
CVE-2012-1544
CVE-2012-1544 is a duplicate of CVE-2012-1876; reference CVE-2012-1876 for active details. Connected sources document CVE-2012-1876 as the Internet Explorer 8 Fixed Col Span ID vulnerability (MS12-037) with multiple exploits showing memory-corruption in fixed table column spans. Affected software...
CVE-2012-1092
CVE-2012-1092 is a reservation duplicate of CVE-2012-1410. The connected sources describe CVE-2012-1410 as multiple cross-site scripting (XSS) vulnerabilities in the History Window of Kadu (versions 0.9.0 through 0.11.0) that allow remote attackers to inject arbitrary script via crafted SMS messa...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-4669. Reason: This candidate is a duplicate of CVE-2010-4669. Notes: All CVE users should reference CVE-2010-4669 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2010-4559
CVE-2010-4559 is rejected/not used; refer to CVE-2010-4670 and CVE-2010-4671.
CVE-2010-4560
CVE-2010-4560 is a duplicate of CVE-2010-4669 and refers to an ICMPv6 router advertisement flooding DoS affecting IPv6 implementations. The connected records describe remote DoS via flood of ICMPv6 Neighbor Solicitation/Router Advertisement messages impacting Windows 7 and earlier, Cisco/Juniper/...
CVE-2011-4123
CVE-2011-4123 is a duplicate of CVE-2011-3874. The underlying issue is a vulnerability in Android's libsysutils (FrameworkListener::dispatchCommand) on affected Android versions (2.2.x–2.3.x) that can lead to remote code execution when handling command arguments. Multiple sources describe a stack...
CVE-2012-0287
Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...
DEBIAN-CVE-2012-0287
Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...
CVE-2012-0287
Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...
CVE-2012-0287
Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...
CVE-2012-0287
Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...
CVE-2012-0026
CVE-2012-0026 is a duplicate of CVE-2012-0287. The connected records describe a WordPress 3.3.x XSS vulnerability (pre-3.3.1) that can be triggered by a crafted request, allowing arbitrary script execution in a user’s browser. Affected product: WordPress 3.3.x prior to 3.3.1. Root cause : cross-s...
ssh-hostkey NSE Script
Shows SSH hostkeys. Shows the target SSH server's key fingerprint and with high enough verbosity level the public key itself. It records the discovered host keys in nmap.registry for use by other scripts. Output can be controlled with the sshhostkey script argument. You may also compare the...
CVE-2011-4084
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4858. Reason: This candidate is a duplicate of CVE-2011-4858. Notes: All CVE users should reference CVE-2011-4858 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...