Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2387 State: PUBLISHED Published: 2012-08-20T18:00:00Z Last Updated: 2024-09-17T02:58:05.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/21/2 - http://www.openwall.com/lists/oss-security/2012/05/18/15 - http://www.openwall.com/lists/oss-security/2012/05/22/11
CVE ID: CVE-2012-2388 State: PUBLISHED Published: 2012-06-27T21:00:00 Last Updated: 2024-08-06T19:34:24.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76013 - http://www.securitytracker.com/id?1027110 - http://osvdb.org/82587 - http://secunia.com/advisories/49336 - http://secunia.com/advisories/49315 - http://www.securityfocus.com/bid/53752 - http://www.strongswan.org/blo
ies/49336 - http://secunia.com/advisories/49315 - http://www.securityfocus.com/bid/53752 - http://www.strongswan.org/blog/2012/05/31/strongswan-4.6.4-released-%28cve-2012-2388%29.html - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00002.html - http://secunia.com/advisories/55051 - http://secunia.com/advisories/49370 - http://www.debian.org/security/2012/dsa-2483
CVE ID: CVE-2012-2389 State: PUBLISHED Published: 2012-06-21T15:00:00 Last Updated: 2024-08-06T19:34:25.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might allow local users to obtain sensitive information such as credentials. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=824660 - http://www.openwall.com/lists/oss-security/2012/05/23/13 - http://www.openwall.com/lists/oss-security/2012/05/23/5 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:168 - http://lists.fedoraproject.org/pipermail
012/05/23/5 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:168 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081983.html - https://bugzilla.novell.com/show_bug.cgi?id=740964 - http://www.openwall.com/lists/oss-security/2012/05/23/3
CVE ID: CVE-2012-2390 State: PUBLISHED Published: 2012-06-13T10:00:00 Last Updated: 2024-08-06T19:34:24.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service (memory consumption or system crash) via invalid MAP_HUGETLB mmap operations. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c50ac050811d6485616a193eb0f37bfbd191cc89 - http://www.ubuntu.com/usn/USN-1515-1 - https://bugzilla.redhat.com/show_bug.cgi?id=824345 - http://www.ubuntu.com/usn/USN-1535-1 - http://www.openwall.com/li
- https://bugzilla.redhat.com/show_bug.cgi?id=824345 - http://www.ubuntu.com/usn/USN-1535-1 - http://www.openwall.com/lists/oss-security/2012/05/23/14 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.2 - https://github.com/torvalds/linux/commit/c50ac050811d6485616a193eb0f37bfbd191cc89
CVE ID: CVE-2012-2391 State: REJECTED Published: 2012-08-17T00:00:00Z Last Updated: 2024-09-17T00:50:53.346Z Description: No description available.
CVE ID: CVE-2012-2392 State: PUBLISHED Published: 2012-06-30T10:00:00 Last Updated: 2024-08-06T19:34:25.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 802.3, and (5) LTP dissectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2012:015 - http://www.securitytracker.com/id?1027094 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:042 - https://oval.cisecurity.org/repository/search/definition/oval%
ww.mandriva.com/security/advisories?name=MDVSA-2012:042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15604 - http://secunia.com/advisories/49226 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7120 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7124 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6805 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:080 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7119 - http://www.wireshark.org/security/wnpa-sec-2012-08.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7118
CVE ID: CVE-2012-2393 State: PUBLISHED Published: 2012-06-30T10:00:00 Last Updated: 2024-08-06T19:34:25.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers incorrect memory allocation. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2012:015 - http://www.securitytracker.com/id?1027094 - http://www.mandriva.com/security/adviso
ity/advisories?name=MDVSA-2012:015 - http://www.securitytracker.com/id?1027094 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:042 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=42200 - http://www.securityfocus.com/bid/53652 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15558 - http://secunia.com/advisories/49226 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7138 - http://www.wireshark.org/security/wnpa-sec-2012-09.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:080 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-diameter.c?r1=42200&r2=42199&pathrev=42200
CVE ID: CVE-2012-2394 State: PUBLISHED Published: 2012-06-30T10:00:00 Last Updated: 2024-08-06T19:34:25.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2012:015 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=42393 - http://www.securitytracker.com/id?1027094 -
12:015 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=42393 - http://www.securitytracker.com/id?1027094 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:042 - http://www.wireshark.org/security/wnpa-sec-2012-10.html - http://secunia.com/advisories/49226 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7221 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:080 - http://www.securityfocus.com/bid/53653
CVE ID: CVE-2012-2395 State: PUBLISHED Published: 2012-06-16T00:00:00 Last Updated: 2024-08-06T19:34:24.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00000.html - http://www.openwall.com/lists/oss-security/2012/05/23/4 - http://www.securityfocus.com/bid/53666 - https://github.com/cobbler/cobbler/commit/6d9167e5da
ss-security/2012/05/23/4 - http://www.securityfocus.com/bid/53666 - https://github.com/cobbler/cobbler/commit/6d9167e5da44eca56bdf42b5776097a6779aaadf - http://www.openwall.com/lists/oss-security/2012/05/23/18 - https://bugs.launchpad.net/ubuntu/+source/cobbler/+bug/978999 - https://github.com/cobbler/cobbler/issues/141 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00016.html - http://www.osvdb.org/82458
CVE ID: CVE-2012-2396 State: PUBLISHED Published: 2012-04-19T21:00:00 Last Updated: 2024-08-06T19:34:25.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted MP4 file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75038 - http://www.exploit-db.com/exploits/18757/
CVE ID: CVE-2012-2397 State: PUBLISHED Published: 2012-04-20T10:00:00 Last Updated: 2024-08-06T19:34:25.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in ownCloud before 3.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences via vectors involving contacts. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/11/1 - http://www.openwall.com/lists/oss-security/2012/09/02/2 - http://secunia.com/advisories/48850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75030 - http://ownclo
/02/2 - http://secunia.com/advisories/48850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75030 - http://owncloud.org/security/advisories/CVE-2012-2397/
CVE ID: CVE-2012-2398 State: PUBLISHED Published: 2012-04-20T10:00:00 Last Updated: 2024-08-06T19:34:24.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in files/ajax/download.php in ownCloud before 3.0.3 allows remote attackers to inject arbitrary web script or HTML via the files parameter, a different vulnerability than CVE-2012-2269.4. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/11/1 - http://www.openwall.com/lists/oss-security/2012/09/02/2 - http://secunia.com/advisories/48850 - http://owncloud.org/security/advisories/cve-2012-2398/
CVE ID: CVE-2012-2399 State: PUBLISHED Published: 2012-04-21T23:00:00 Last Updated: 2024-08-06T19:34:25.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFupload 2.2.0.1 and earlier, as used in WordPress before 3.5.2, TinyMCE Image Manager 1.1 and earlier, and other products allows remote attackers to inject arbitrary web script or HTML via the buttonText parameter, a different vulnerability than CVE-2012-3414. Additional Analyst Notes: - CVE Program Container: References: - http://core.trac.wordpress.org/browser/branches/3.3/wp-includes/js/swfupload/swfupload.swf?rev=20503 - https://exchange.xforce.ibmcloud.com/vul
ess.org/browser/branches/3.3/wp-includes/js/swfupload/swfupload.swf?rev=20503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75210 - http://osvdb.org/81459 - http://secunia.com/advisories/49138 - http://packetstormsecurity.com/files/122399/tinymce11-xss.txt - http://www.osvdb.org/91134 - http://www.debian.org/security/2012/dsa-2470 - http://packetstormsecurity.com/files/120746/SWFUpload-Content-Spoofing-Cross-Site-Scripting.html - http://www.openwall.com/lists/oss-security/2013/07/18/13 - http://make.wordpress.org/core/2013/06/21/secure-swfupload/ - http://www.securityfocus.com/bid/53192 - http://wordpress.org/news/2012/04/wordpress-3-3-2/ - http://jvndb.jvn.jp/jvndb/JVNDB-2012-00211
ityfocus.com/bid/53192 - http://wordpress.org/news/2012/04/wordpress-3-3-2/ - http://jvndb.jvn.jp/jvndb/JVNDB-2012-002110 - http://jvn.jp/en/jp/JVN25280162/index.html - http://seclists.org/fulldisclosure/2013/Mar/110
CVE ID: CVE-2012-2400 State: PUBLISHED Published: 2012-04-21T23:00:00 Last Updated: 2024-08-06T19:34:24.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49138 - http://osvdb.org/81460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75209 - http://www.debian.org/security/2012/dsa-2470 - http://core.trac.wordpress.org/changeset/20499/branches/3.3/wp-includes/js/swfobject.js - http://www.securityfocus.com/bid/53192 - http://wordpress.org/news/2012/04/wordpress
s/3.3/wp-includes/js/swfobject.js - http://www.securityfocus.com/bid/53192 - http://wordpress.org/news/2012/04/wordpress-3-3-2/
CVE ID: CVE-2012-2401 State: PUBLISHED Published: 2012-04-21T23:00:00 Last Updated: 2024-08-06T19:34:24.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which the SWF content was loaded, which allows remote attackers to bypass the Same Origin Policy via crafted content. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81461 - http://secunia.com/advisories/49138 - http://www.plupload.com/punbb/viewtopic.php?id=1685 - http://core.trac.wordpress.org/browser/branches/3.3/wp-includes/js/plupload?rev
upload.com/punbb/viewtopic.php?id=1685 - http://core.trac.wordpress.org/browser/branches/3.3/wp-includes/js/plupload?rev=20487 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75208 - http://www.debian.org/security/2012/dsa-2470 - https://nealpoole.com/blog/2012/05/xss-and-csrf-via-swf-applets-swfupload-plupload/ - http://core.trac.wordpress.org/browser/branches/3.3/wp-includes/js/plupload/changelog.txt?rev=20487 - http://www.securityfocus.com/bid/53192 - http://wordpress.org/news/2012/04/wordpress-3-3-2/
CVE ID: CVE-2012-2402 State: PUBLISHED Published: 2012-04-21T23:00:00 Last Updated: 2024-08-06T19:34:25.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75090 - http://secunia.com/advisories/49138 - http://secunia.com/advisories/48957 - http://core.trac.wordpress.org/changeset/20526/branches/3.3/wp-admin/plugi
49138 - http://secunia.com/advisories/48957 - http://core.trac.wordpress.org/changeset/20526/branches/3.3/wp-admin/plugins.php - http://www.debian.org/security/2012/dsa-2470 - http://www.securityfocus.com/bid/53192 - http://wordpress.org/news/2012/04/wordpress-3-3-2/ - http://osvdb.org/81462
CVE ID: CVE-2012-2403 State: PUBLISHED Published: 2012-04-21T23:00:00 Last Updated: 2024-08-06T19:34:25.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81463 - http://secunia.com/advisories/49138 - http://secunia.com/advisories/48957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75206 - http://www.debian.org/security/2012/dsa-2470 - http://core.trac.wordpress.org/change
bmcloud.com/vulnerabilities/75206 - http://www.debian.org/security/2012/dsa-2470 - http://core.trac.wordpress.org/changeset/20493/branches/3.3/wp-includes/capabilities.php - http://core.trac.wordpress.org/changeset/20493/branches/3.3/wp-includes/formatting.php - http://www.securityfocus.com/bid/53192 - http://wordpress.org/news/2012/04/wordpress-3-3-2/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/75093
CVE ID: CVE-2012-2404 State: PUBLISHED Published: 2012-04-21T23:00:00 Last Updated: 2024-08-06T19:34:25.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81464 - http://secunia.com/advisories/49138 - http://secunia.com/advisories/48957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75202 - http://www.debian.org/security/2012/dsa-2470 - http://www.securityfocus.com/bid/53192 - http://wordpress.org/news/20
2 - http://www.debian.org/security/2012/dsa-2470 - http://www.securityfocus.com/bid/53192 - http://wordpress.org/news/2012/04/wordpress-3-3-2/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/75092 - http://core.trac.wordpress.org/changeset/20486/branches/3.3/wp-comments-post.php
CVE ID: CVE-2012-2405 State: PUBLISHED Published: 2012-04-22T18:00:00 Last Updated: 2024-08-06T19:34:25.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a different vulnerability than CVE-2012-1113. Additional Analyst Notes: - CVE Program Container: References: - http://gallery.menalto.com/gallery_3_0_3_and_gallery_2_3_2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75201 - https://bugzilla.redhat.com/show_bug.cgi?id=812045
CVE ID: CVE-2012-2406 State: PUBLISHED Published: 2012-05-18T18:00:00 Last Updated: 2024-08-06T19:34:25.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49193 - http://www.securitytracker.com/id?1027076 - http://service.real.com/realplayer/security/05152012_player/en/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/75647 - http://osvdb.org/81943
CVE ID: CVE-2012-2407 State: PUBLISHED Published: 2012-09-12T10:00:00 Last Updated: 2024-08-06T19:34:24.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted AAC file that is not properly handled during stream-data unpacking. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78384 - http://service.real.com/realplayer/security/09072012_player/en/
CVE ID: CVE-2012-2408 State: PUBLISHED Published: 2012-09-12T10:00:00 Last Updated: 2024-08-06T19:34:25.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted AAC file that is not properly handled during decoding. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78385 - http://service.real.com/realplayer/security/09072012_player/en/
CVE ID: CVE-2012-2409 State: PUBLISHED Published: 2012-09-12T10:00:00 Last Updated: 2024-08-06T19:34:25.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than CVE-2012-2410. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78386 - http://service.real.com/realplayer/security/09072012_player/en/
CVE ID: CVE-2012-2410 State: PUBLISHED Published: 2012-09-12T10:00:00 Last Updated: 2024-08-06T19:34:25.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than CVE-2012-2409. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78387 - http://service.real.com/realplayer/security/09072012_player/en/
CVE ID: CVE-2012-2411 State: PUBLISHED Published: 2012-05-18T18:00:00 Last Updated: 2024-08-06T19:34:25.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RealJukebox Media file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49193 - http://www.securitytracker.com/id?1027076 - http://service.real.com/realplayer/security/05152012_player/en/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/75648 - http://osvdb.org/81944
CVE ID: CVE-2012-2412 State: REJECTED Published: 2020-02-17T21:34:48 Last Updated: 2020-02-17T21:34:48 Description: No description available.
CVE ID: CVE-2012-2413 State: PUBLISHED Published: 2014-10-20T14:00:00 Last Updated: 2024-08-06T19:34:25.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ja_purity template for Joomla! 1.5.26 and earlier allows remote attackers to inject arbitrary web script or HTML via the Mod* cookie parameter to html/modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/advisory-87.html - http://www.securityfocus.com/bid/53382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75398 - http://archives.neohapsis.com/archives/bugtraq/2012-05/0021.html
CVE ID: CVE-2012-2414 State: PUBLISHED Published: 2012-04-30T20:00:00 Last Updated: 2024-08-06T19:34:25.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: main/manager.c in the Manager Interface in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4 does not properly enforce System class authorization requirements, which allows remote authenticated users to execute arbitrary commands via (1) the originate action in the MixMonitor application, (2) the SHELL and EVAL functions in the GetVar manager action, or (3) the SHELL and EVAL functions in the Status manager action. Additional Analyst N
ons in the GetVar manager action, or (3) the SHELL and EVAL functions in the Status manager action. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2460 - http://osvdb.org/81454 - http://www.securitytracker.com/id?1026961 - http://downloads.asterisk.org/pub/security/AST-2012-004.html - http://secunia.com/advisories/48941 - http://www.securityfocus.com/bid/53206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75100 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079759.html - http://secunia.com/advisories/48891