Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-6621 State: PUBLISHED Published: 2014-01-16T21:00:00 Last Updated: 2024-08-06T21:36:01.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Email Address or (2) Custom Permalink Structure fields in admin/settings.php; (3) path parameter to admin/upload.php; (4) err parameter to admin/theme.php; (5) error parameter to admin/pages.php; or (6) success or (7) err parameter to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vulnerability-lab.com/get_cont
in/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vulnerability-lab.com/get_content.php?id=521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75534 - http://packetstormsecurity.com/files/124711 - http://packetstormsecurity.org/files/112643/GetSimple-CMS-3.1-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/53501 - http://secunia.com/advisories/49137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75535
CVE ID: CVE-2012-6622 State: PUBLISHED Published: 2014-01-16T21:00:00 Last Updated: 2024-08-06T21:36:01.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) groupid parameter in an editgroup action or (2) usergroup_id parameter in an edit_usergroup action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49155 - http://wordpress.org/extend/plugins/forum-server/changelog/ - https://plugins.trac.wordpress.org/changeset/532
s/49155 - http://wordpress.org/extend/plugins/forum-server/changelog/ - https://plugins.trac.wordpress.org/changeset/532918 - http://www.securityfocus.com/bid/53530 - http://packetstormsecurity.org/files/112703/WordPress-WP-Forum-Server-1.7.3-SQL-Injection-Cross-Site-Scripting.html
CVE ID: CVE-2012-6623 State: PUBLISHED Published: 2014-01-16T21:00:00Z Last Updated: 2024-09-16T17:59:44.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in fs-admin/wpf-add-forum.php in the ForumPress WP Forum Server plugin before 1.7.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the groupid parameter in an addforum action to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/572188 - http://wordpress.org/extend/plugins/forum-server/changelog/ - http://secunia.com/advisories/49167 - http://packetstormsecurity.org/files/11
g/extend/plugins/forum-server/changelog/ - http://secunia.com/advisories/49167 - http://packetstormsecurity.org/files/112703/WordPress-WP-Forum-Server-1.7.3-SQL-Injection-Cross-Site-Scripting.html
CVE ID: CVE-2012-6624 State: PUBLISHED Published: 2014-01-16T21:00:00 Last Updated: 2024-08-06T21:36:01.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the SoundCloud Is Gold plugin 2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the width parameter in a soundcloud_is_gold_player_preview action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112689/WordPress-Soundcloud-Is-Gold-2.1-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/53537 - http://secunia.com/advisories/49188
CVE ID: CVE-2012-6625 State: PUBLISHED Published: 2014-01-16T21:00:00 Last Updated: 2024-08-06T21:36:01.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the groupid parameter in an editgroup action. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/forum-server/changelog/ - https://plugins.trac.wordpress.org/changeset/532918 - http://www.securityfocus.com/bid/53530 - http://packetstormsecurity.org/files/112703/WordPress-WP-Forum-Server-1.7.3-SQL-I
tp://www.securityfocus.com/bid/53530 - http://packetstormsecurity.org/files/112703/WordPress-WP-Forum-Server-1.7.3-SQL-Injection-Cross-Site-Scripting.html
CVE ID: CVE-2012-6626 State: PUBLISHED Published: 2014-01-16T21:00:00 Last Updated: 2024-08-06T21:36:01.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute arbitrary SQL commands via the username field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75568 - http://www.exploit-db.com/exploits/18882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75569 - http://archives.neohapsis.com/archives/bugtraq/2012-05/0065.html
CVE ID: CVE-2012-6627 State: PUBLISHED Published: 2014-01-16T21:00:00Z Last Updated: 2024-09-17T03:53:48.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/test_mail.php in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112694/WordPress-Newsletter-Manager-1.0-Cross-Site-Scripting.html - http://secunia.com/advisories/49152
CVE ID: CVE-2012-6628 State: PUBLISHED Published: 2014-01-16T21:00:00Z Last Updated: 2024-09-16T20:22:57.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Newsletter Manager plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) xyz_em_campName to admin/create_campaign.php or (2) admin/edit_campaign.php, (3) xyz_em_email parameter to admin/edit_email.php, (4) xyz_em_exportbatchSize parameter to import_export.php, or (5) pagination limit in the Newsletter Manager options. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/fi
tter Manager options. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112694/WordPress-Newsletter-Manager-1.0-Cross-Site-Scripting.html - http://secunia.com/advisories/49183 - https://plugins.trac.wordpress.org/changeset/533904
CVE ID: CVE-2012-6629 State: PUBLISHED Published: 2014-01-16T21:00:00Z Last Updated: 2024-09-17T00:21:06.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change an email address or (2) conduct script insertion attacks. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49152
CVE ID: CVE-2012-6630 State: PUBLISHED Published: 2014-01-16T21:00:00Z Last Updated: 2024-09-16T18:48:20.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Media Library Categories plugin 1.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) bulk parameter to media-library-categories/add.php or (2) q parameter to media-library-categories/view.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112697/WordPress-Media-Categories-1.1.1-Cross-Site-Scripting.html - http://secunia.com/advisories/49170
CVE ID: CVE-2012-6631 State: PUBLISHED Published: 2014-01-16T21:00:00 Last Updated: 2024-08-06T21:36:01.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in accounts/admin/index.php in Vessio NetBill 1.2 allows remote attackers to hijack the authentication of administrators for requests that add accounts via a new-client action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75539 - http://www.vulnerability-lab.com/get_content.php?id=560 - http://packetstormsecurity.org/files/112655/NetBill-Billing-System-1.2-CSRF-XSS.html
y-lab.com/get_content.php?id=560 - http://packetstormsecurity.org/files/112655/NetBill-Billing-System-1.2-CSRF-XSS.html - http://www.osvdb.org/81881
CVE ID: CVE-2012-6632 State: PUBLISHED Published: 2014-01-16T21:00:00 Last Updated: 2024-08-06T21:36:01.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Vessio NetBill 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) file title to accounts/admin/index.php or (3) comment parameter in the support page to accounts/index2.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49109 - http://www.osvdb.org/81880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75538 - http://www.vulnerability-lab.com/get_content.php?id=560 - http://p
/exchange.xforce.ibmcloud.com/vulnerabilities/75538 - http://www.vulnerability-lab.com/get_content.php?id=560 - http://packetstormsecurity.org/files/112655/NetBill-Billing-System-1.2-CSRF-XSS.html
CVE ID: CVE-2012-6633 State: PUBLISHED Published: 2014-01-21T01:00:00Z Last Updated: 2024-09-16T17:08:59.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable slug field. Additional Analyst Notes: - CVE Program Container: References: - https://core.trac.wordpress.org/changeset/21083 - http://codex.wordpress.org/Version_3.3.3
CVE ID: CVE-2012-6634 State: PUBLISHED Published: 2014-01-21T01:00:00Z Last Updated: 2024-09-16T22:29:58.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value. Additional Analyst Notes: - CVE Program Container: References: - http://codex.wordpress.org/Version_3.3.3 - https://core.trac.wordpress.org/changeset/21087
CVE ID: CVE-2012-6635 State: PUBLISHED Published: 2014-01-21T01:00:00Z Last Updated: 2024-09-17T00:41:32.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated users to obtain sensitive information by visiting a draft. Additional Analyst Notes: - CVE Program Container: References: - https://core.trac.wordpress.org/changeset/21086 - http://codex.wordpress.org/Version_3.3.3
CVE ID: CVE-2012-6636 State: PUBLISHED Published: 2014-03-03T02:00:00 Last Updated: 2024-08-06T21:36:01.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary methods of Java objects by using the Java Reflection API within crafted JavaScript code that is loaded into the WebView component in an application targeted to API level 16 or earlier, a related issue to CVE-2013-4710. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf - http://www.internetsociety.org/ndss2014/prog
ner: References: - http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf - http://www.internetsociety.org/ndss2014/programme#session3 - http://openwall.com/lists/oss-security/2014/02/07/9 - https://support.lenovo.com/us/en/product_security/len_6421 - http://50.56.33.56/blog/?p=314 - http://developer.android.com/reference/android/os/Build.VERSION_CODES.html#JELLY_BEAN_MR1 - http://developer.android.com/reference/android/webkit/WebView.html#addJavascriptInterface%28java.lang.Object%2C%20java.lang.String%29 - http://jvn.jp/en/jp/JVN62161191/index.html
CVE ID: CVE-2012-6637 State: PUBLISHED Published: 2014-03-03T02:00:00 Last Updated: 2024-08-06T21:36:01.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier do not anchor the end of domain-name regular expressions, which allows remote attackers to bypass a whitelist protection mechanism via a domain name that contains an acceptable name as an initial substring. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf - http://www.internetsociety.org/ndss2014/programme#session3 - http://seclists.org/bugtraq/2014/Jan/96 - http://labs.mwrinfosecurity.co
ternetsociety.org/ndss2014/programme#session3 - http://seclists.org/bugtraq/2014/Jan/96 - http://labs.mwrinfosecurity.com/blog/2012/04/30/building-android-javajavascript-bridges/ - http://openwall.com/lists/oss-security/2014/02/07/9 - http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt
CVE ID: CVE-2012-6638 State: PUBLISHED Published: 2014-02-15T11:00:00Z Last Updated: 2024-09-16T16:14:01.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.24 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fdf5af0daf8019cec2396cdef8fb042d80fe71fa - https://github.com/tor
linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fdf5af0daf8019cec2396cdef8fb042d80fe71fa - https://github.com/torvalds/linux/commit/fdf5af0daf8019cec2396cdef8fb042d80fe71fa - https://bugzilla.redhat.com/show_bug.cgi?id=826702
CVE ID: CVE-2012-6639 State: PUBLISHED Published: 2019-11-25T17:29:09 Last Updated: 2024-08-06T21:36:01.960Z Vendors: cloud-init Products: cloud-init Problem Types: insecure transmission of EC2 instance data can lead to root privilege escalation Description: An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-6639 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6639 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-6639 - https://access.redhat.com/security/cve/cve-2012-6639
2-6639 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-6639 - https://access.redhat.com/security/cve/cve-2012-6639 - http://www.openwall.com/lists/oss-security/2014/03/06/7 - https://www.securityfocus.com/bid/66019/references
CVE ID: CVE-2012-6640 State: PUBLISHED Published: 2014-04-05T21:00:00Z Last Updated: 2024-09-16T17:14:04.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/announce/2012/000775.html - https://github.com/horde/horde/commit/08c699f744b6d2be1a5f3a2ba7203f4631b4c5dc - http://lists.horde.org/archive
5.html - https://github.com/horde/horde/commit/08c699f744b6d2be1a5f3a2ba7203f4631b4c5dc - http://lists.horde.org/archives/announce/2012/000840.html
CVE ID: CVE-2012-6641 State: PUBLISHED Published: 2014-04-07T15:00:00 Last Updated: 2024-08-06T21:36:01.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in redirect.php in the Socolissimo module (modules/socolissimo/) in PrestaShop before 1.4.7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to "parameter names and values." Additional Analyst Notes: - CVE Program Container: References: - http://www.prestashop.com/de/entwickler-versionen/changelog/1.4.7.2 - http://www.securityfocus.com/bid/52962 - http://secunia.com/advisories/48036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74773
CVE ID: CVE-2012-6642 State: PUBLISHED Published: 2014-04-08T14:00:00Z Last Updated: 2024-09-17T02:56:29.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ClipBucket 2.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter to view_channel.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78199 - http://secunia.com/advisories/47474
CVE ID: CVE-2012-6643 State: PUBLISHED Published: 2014-04-08T14:00:00 Last Updated: 2024-08-06T21:36:01.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the update_counter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to (1) videos.php or (2) channels.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51321 - http://packetstormsecurity.org/files/108489/clipbucket-sqlxss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/7
tp://packetstormsecurity.org/files/108489/clipbucket-sqlxss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/72245 - http://osvdb.org/78201 - http://osvdb.org/78202 - http://secunia.com/advisories/47474
CVE ID: CVE-2012-6644 State: PUBLISHED Published: 2014-04-08T14:00:00 Last Updated: 2024-08-06T21:36:01.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to channels.php, (2) collections.php, (3) groups.php, or (4) videos.php; (5) query parameter to search_result.php; or (6) type parameter to view_collection.php or (7) view_item.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78195 - http://www.securityfocus.com/bid/51321 - http://osvdb.org/78194 - http://osvdb.org/78199 - http://pack
osvdb.org/78195 - http://www.securityfocus.com/bid/51321 - http://osvdb.org/78194 - http://osvdb.org/78199 - http://packetstormsecurity.org/files/108489/clipbucket-sqlxss.txt - http://osvdb.org/78196 - http://www.exploit-db.com/exploits/18341 - http://osvdb.org/78197 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72245 - http://osvdb.org/78193 - http://osvdb.org/78198 - http://secunia.com/advisories/47474 - http://osvdb.org/78200
CVE ID: CVE-2012-6645 State: PUBLISHED Published: 2014-04-08T14:00:00 Last Updated: 2024-08-06T21:36:01.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via the title of a node, a different vulnerability than CVE-2012-1561. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1432320 - http://drupal.org/node/1432318 - http://www.openwall.com/lists/oss-security/2012/03/19/9 - http://drupalcode.org/project/find
//drupal.org/node/1432318 - http://www.openwall.com/lists/oss-security/2012/03/19/9 - http://drupalcode.org/project/finder.git/commit/bc0cc82 - http://www.osvdb.org/79015 - http://www.openwall.com/lists/oss-security/2012/03/16/9 - http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://secunia.com/advisories/47941 - http://drupalcode.org/project/finder.git/commit/58443aa - http://drupalcode.org/project/finder.git/commit/13e2d0c - https://drupal.org/node/1432970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73110 - http://secunia.com/advisories/47943 - http://drupalcode.org/pr
ps://exchange.xforce.ibmcloud.com/vulnerabilities/73110 - http://secunia.com/advisories/47943 - http://drupalcode.org/project/finder.git/commit/758fcf9
CVE ID: CVE-2012-6646 State: PUBLISHED Published: 2014-04-18T14:00:00Z Last Updated: 2024-09-16T23:40:49.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: F-Secure Anti-Virus, Safe Anywhere, and PSB Workstation Security before 11500 for Mac OS X allows local users to disable the Mac OS X firewall via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.f-secure.com/en/web/labs_global/fsc-2012-2
CVE ID: CVE-2012-6647 State: PUBLISHED Published: 2014-05-26T22:00:00 Last Updated: 2024-08-06T21:36:01.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: The futex_wait_requeue_pi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have two different futex addresses, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted FUTEX_WAIT_REQUEUE_PI command. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f7b0a2a5c0fb03be7c25bd1745baa50582348ef - https://gi
rnel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f7b0a2a5c0fb03be7c25bd1745baa50582348ef - https://github.com/torvalds/linux/commit/6f7b0a2a5c0fb03be7c25bd1745baa50582348ef - https://bugzilla.redhat.com/show_bug.cgi?id=1097746 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.1 - http://www.openwall.com/lists/oss-security/2014/05/14/9
CVE ID: CVE-2012-6648 State: PUBLISHED Published: 2014-05-22T23:00:00 Last Updated: 2024-08-06T21:36:01.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: gdm/guest-session-cleanup.sh in gdm-guest-session 0.24 and earlier, as used in Ubuntu Linux 10.04 LTS, 10.10, and 11.04, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT from CVE-2012-0943 per ADT1/ADT2 due to different codebases and affected versions. CVE-2012-0943 is used for the guest-account issue. Additional Analyst Notes: - CVE Program Container: References: - https://launchpadlibrarian.net/96474113/gdm-guest-session.secure-cleanup.debdiff - https://b
am Container: References: - https://launchpadlibrarian.net/96474113/gdm-guest-session.secure-cleanup.debdiff - https://bugs.launchpad.net/ubuntu/%2Bsource/lightdm/%2Bbug/953044 - http://ubuntu.com/usn/usn-1399-1
CVE ID: CVE-2012-6649 State: PUBLISHED Published: 2020-01-23T21:53:13 Last Updated: 2024-08-06T21:36:01.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53909 - http://www.openwall.com/lists/oss-security/2014/06/26/4