Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-3809 State: PUBLISHED Published: 2020-01-09T21:54:07 Last Updated: 2024-08-06T20:21:03.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Kies before 2.5.0.12094_27_11 has arbitrary directory modification. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/55936 - https://www.tenable.com/plugins/nessus/65612 - https://packetstormsecurity.com/files/cve/CVE-2012-3809
CVE ID: CVE-2012-3810 State: PUBLISHED Published: 2020-01-09T21:56:09 Last Updated: 2024-08-06T20:21:03.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Kies before 2.5.0.12094_27_11 has registry modification. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/55936 - https://www.tenable.com/plugins/nessus/65612 - https://packetstormsecurity.com/files/cve/CVE-2012-3809
CVE ID: CVE-2012-3811 State: PUBLISHED Published: 2012-07-03T19:00:00Z Last Updated: 2024-09-16T17:33:28.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-12-106/ - https://downloads.avaya.com/css/P8/documents/100164021
CVE ID: CVE-2012-3812 State: PUBLISHED Published: 2012-07-09T22:00:00 Last Updated: 2024-08-06T20:21:02.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones allows remote authenticated users to cause a denial of service (daemon crash) by establishing multiple voicemail sessions and accessing both the Urgent mailbox and the INBOX mailbox. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50687 -
e INBOX mailbox. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50687 - http://secunia.com/advisories/50756 - http://www.securityfocus.com/bid/54317 - http://www.debian.org/security/2012/dsa-2550 - https://issues.asterisk.org/jira/browse/ASTERISK-20052 - http://downloads.asterisk.org/pub/security/AST-2012-011.html
CVE ID: CVE-2012-3814 State: PUBLISHED Published: 2012-06-27T21:00:00Z Last Updated: 2024-09-16T18:04:07.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a .php.ttf extension, then accessing it via a direct request to the file in font-uploader/fonts. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18994 - http://secunia.com/advisories/49327 - http://osvdb.org/82657
CVE ID: CVE-2012-3815 State: PUBLISHED Published: 2012-06-27T21:00:00 Last Updated: 2024-08-06T20:21:03.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/82654 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf - http://secunia.com/advisories/49395 - http://www.s3cur1ty.de/m1adv2012-001 - http://securitytra
pdf/ICSA-12-213-01.pdf - http://secunia.com/advisories/49395 - http://www.s3cur1ty.de/m1adv2012-001 - http://securitytracker.com/id?1027128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76060 - http://archives.neohapsis.com/archives/bugtraq/2012-06/0009.html - http://www.sielcosistemi.com/en/news/index.html?id=70 - http://www.securityfocus.com/bid/53811 - http://www.sielcosistemi.com/en/news/index.html?id=69
CVE ID: CVE-2012-3816 State: PUBLISHED Published: 2012-06-27T21:00:00 Last Updated: 2024-08-06T20:21:03.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Request packet. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-05/0135.html - http://www.securityfocus.com/bid/53702 - http://secunia.com/advisories/49299 - http://www.exploit-db.com/exploits/18945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75890
CVE ID: CVE-2012-3817 State: PUBLISHED Published: 2012-07-25T10:00:00 Last Updated: 2024-08-06T20:21:03.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries. Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004 - http://secunia.com
ttp://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004 - http://secunia.com/advisories/51096 - http://rhn.redhat.com/errata/RHSA-2012-1123.html - http://lists.opensuse.org/opensuse-updates/2012-08/msg00015.html - http://rhn.redhat.com/errata/RHSA-2012-1122.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://www.securitytracker.com/id?1027296 - http://www.debian.org/security/2012/dsa-2517 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00013.html - http://www.ubuntu.com/usn/USN-1518-1 - http://support.apple.com/kb/HT5880 - https://kb.isc.org/article/AA-00729
CVE ID: CVE-2012-3818 State: PUBLISHED Published: 2012-06-29T17:00:00Z Last Updated: 2024-09-17T00:35:27.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fpm exporter in Revelation 0.4.13-2 and earlier encrypts the version number but not the password when exporting a file, which might allow local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://als.regnet.cz/fpm2/feedback/2 - http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html
CVE ID: CVE-2012-3819 State: PUBLISHED Published: 2012-10-04T10:00:00 Last Updated: 2024-08-06T20:21:03.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and other products, allows remote attackers to cause a denial of service (daemon crash) via a long request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/524273 - http://sadgeeksinsnow.blogspot.dk/2012/09/my-first-experiences-bug-hunting-part-1.html
CVE ID: CVE-2012-3820 State: PUBLISHED Published: 2014-08-14T14:00:00 Last Updated: 2024-08-06T20:21:03.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL commands via the (1) SerialNumber field to activate.asp or (2) UID field to User-Edit.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50969 - http://osvdb.org/86492 - http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79507 - http
2012/10/my-first-experiences-bug-hunting-part-2.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79507 - http://osvdb.org/86491
CVE ID: CVE-2012-3821 State: PUBLISHED Published: 2020-01-10T19:21:51 Last Updated: 2024-08-06T20:21:03.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field. Additional Analyst Notes: - CVE Program Container: References: - http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79508 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0103.html - https://www.securityfocus.com/archive/1/524462 - https://www.securi
s.neohapsis.com/archives/bugtraq/2012-10/0103.html - https://www.securityfocus.com/archive/1/524462 - https://www.securityfocus.com/bid/56117/info
CVE ID: CVE-2012-3822 State: PUBLISHED Published: 2020-01-10T16:49:44 Last Updated: 2024-08-06T20:21:03.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials. Additional Analyst Notes: - CVE Program Container: References: - http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79509
CVE ID: CVE-2012-3823 State: PUBLISHED Published: 2020-01-10T16:52:44 Last Updated: 2024-08-06T20:21:02.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arial Campaign Enterprise before 11.0.551 stores passwords in clear text and these may be retrieved. Additional Analyst Notes: - CVE Program Container: References: - http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79510
CVE ID: CVE-2012-3824 State: PUBLISHED Published: 2020-01-10T16:55:11 Last Updated: 2024-08-06T20:21:02.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authorization. Additional Analyst Notes: - CVE Program Container: References: - http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79506
CVE ID: CVE-2012-3825 State: PUBLISHED Published: 2012-06-30T10:00:00 Last Updated: 2024-08-06T20:21:03.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7122 - http://www.securitytracker.com/id?1027094 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7121 - http://secunia.com/advisories/49226
tracker.com/id?1027094 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7121 - http://secunia.com/advisories/49226 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15478 - http://www.wireshark.org/security/wnpa-sec-2012-08.html
CVE ID: CVE-2012-3826 State: PUBLISHED Published: 2012-06-30T10:00:00 Last Updated: 2024-08-06T20:21:03.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer underflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (loop) via vectors related to the R3 dissector, a different vulnerability than CVE-2012-2392. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027094 - http://secunia.com/advisories/49226 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15536 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7125 - h
ory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15536 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7125 - http://www.wireshark.org/security/wnpa-sec-2012-08.html
CVE ID: CVE-2012-3828 State: PUBLISHED Published: 2012-07-03T22:00:00 Last Updated: 2024-08-06T20:21:04.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Joomla! 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the Host HTTP Header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75223 - http://packetstormsecurity.org/files/112249/Joomla-2.5.3-Host-Header-Cross-Site-Scripting.html
CVE ID: CVE-2012-3829 State: PUBLISHED Published: 2012-07-03T22:00:00Z Last Updated: 2024-09-17T02:20:48.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112249/Joomla-2.5.3-Host-Header-Cross-Site-Scripting.html
CVE ID: CVE-2012-3830 State: PUBLISHED Published: 2012-07-03T22:00:00 Last Updated: 2024-08-06T20:21:03.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via the video directive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53332 - http://osvdb.org/81637 - http://secunia.com/advisories/48931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75333 - https://github.com/milesj/php-decoda/commit/4068257bb4e1071d1d60577289d3da922c296c83 - http://www.redteam-pentesting.de/
https://github.com/milesj/php-decoda/commit/4068257bb4e1071d1d60577289d3da922c296c83 - http://www.redteam-pentesting.de/en/advisories/rt-sa-2012-002/-php-decoda-cross-site-scripting-in-video-tags - https://github.com/milesj/php-decoda/commit/666778f326dff3bd213be9f624f0fcb337c0b4c9
CVE ID: CVE-2012-3831 State: PUBLISHED Published: 2012-07-03T22:00:00 Last Updated: 2024-08-06T20:21:03.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.1 allows remote attackers to inject arbitrary web script or HTML via multiple URLs in an img tag. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81637 - https://github.com/milesj/php-decoda/commit/104afad9d3cb1fbb766c4bc5b98e070a8a13fbd8
CVE ID: CVE-2012-3832 State: PUBLISHED Published: 2012-07-03T22:00:00Z Last Updated: 2024-09-16T16:28:13.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in decoda/Decoda.php in Decoda before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to (1) b or (2) div tags. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/milesj/php-decoda/commit/6f2b9fb48bc110edeab17459038feb2627d52320
CVE ID: CVE-2012-3833 State: PUBLISHED Published: 2012-07-03T22:00:00 Last Updated: 2024-08-06T20:21:04.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112243/Quick.CMS-4.0-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75224 - http://www.securityfocus.com/bid/53273 - http://hauntit.blogspot.com/2012/03/en-quickcmsv40-xss-over-get.html
CVE ID: CVE-2012-3834 State: PUBLISHED Published: 2012-07-03T22:00:00 Last Updated: 2024-08-06T20:21:03.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OSSIM) 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time[0][0] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53331 - http://www.exploit-db.com/exploits/18800 - http://secunia.com/advisories/49005 - http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-002.txt - http://www.darksecurity.de/index.php?/211-KORAMIS-ADV
- http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-002.txt - http://www.darksecurity.de/index.php?/211-KORAMIS-ADV2012-002-Alienvault-OSSIM-Open-Source-SIEM-3.1-Multiple-security-vulnerabilities.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75290
CVE ID: CVE-2012-3835 State: PUBLISHED Published: 2012-07-03T22:00:00 Last Updated: 2024-08-06T20:21:03.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to top.php or (2) time[0][0] parameter to forensics/base_qry_main.php, which is not properly handled in an error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53331 - http://www.exploit-db.com/exploits/18800 - http://secunia.com/advisories/49005 - http://www.koram
yfocus.com/bid/53331 - http://www.exploit-db.com/exploits/18800 - http://secunia.com/advisories/49005 - http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-002.txt - http://www.darksecurity.de/index.php?/211-KORAMIS-ADV2012-002-Alienvault-OSSIM-Open-Source-SIEM-3.1-Multiple-security-vulnerabilities.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75297
CVE ID: CVE-2012-3836 State: PUBLISHED Published: 2012-07-03T22:00:00Z Last Updated: 2024-09-17T01:32:06.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) groupname parameter in a savecategory in the users module; (2) virtual_filename, (3) branch, (4) contact_person, (5) street, (6) city, (7) province, (8) postal, (9) country, (10) tollfree, (11) phone, (12) fax, or (13) mobile parameter in a saveitem action in the contacts module; (14) title parameter in a savecategory action in the menus module; (15) firstname or (16) lastnam
n the contacts module; (14) title parameter in a savecategory action in the menus module; (15) firstname or (16) lastname in a saveitem action in the users module; (17) meta_key or (18) meta_description in a saveitem action in the blog module; or (19) the PATH_INFO to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php - http://www.exploit-db.com/exploits/18827 - http://secunia.com/advisories/49023 - http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html - http://www.securityfocus.com/bid/53366
CVE ID: CVE-2012-3837 State: PUBLISHED Published: 2012-07-03T22:00:00Z Last Updated: 2024-09-16T19:10:56.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) email_address, (3) password, (4) password_verify, (5) firstname, (6) lastname, or (7) verification_code parameter to users/action/register. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilitie
nformation. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php - http://www.exploit-db.com/exploits/18827 - http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html - http://www.securityfocus.com/bid/53366 - http://secunia.com/advisories/49052
CVE ID: CVE-2012-3838 State: PUBLISHED Published: 2012-07-03T22:00:00Z Last Updated: 2024-09-16T20:57:39.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/babygekko/index.php or (2) templates/html5demo/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php - http://www.exploit-db.com/exploits/18827 - http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html
CVE ID: CVE-2012-3839 State: PUBLISHED Published: 2012-07-03T22:00:00 Last Updated: 2024-08-06T20:21:04.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in application/core/MY_Model.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the (1) invoice_number or (2) tags parameter to index.php/invoice_search. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48961 - https://bitbucket.org/jesseterry/myclientbase/changeset/789099396f05 - http://www.exploit-db.com/exploits/18814 - http://www.securityfocus.com/bid/53311 - http://myclientbase.com/ - https://exchange.xf
.exploit-db.com/exploits/18814 - http://www.securityfocus.com/bid/53311 - http://myclientbase.com/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/75298
CVE ID: CVE-2012-3840 State: PUBLISHED Published: 2012-07-03T22:00:00 Last Updated: 2024-08-06T20:21:03.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php/users/form/user_id in MyClientBase 0.12 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name or (2) last_name parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48961 - http://www.exploit-db.com/exploits/18814 - http://www.securityfocus.com/bid/53311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75299
CVE ID: CVE-2012-3841 State: PUBLISHED Published: 2012-07-03T22:00:00 Last Updated: 2024-08-06T20:21:04.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ehtrace.dll that is located in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112218/KMPlayer-3.2.0.19-DLL-Hijack.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75193 - http://osvdb.org/81558
CVE ID: CVE-2012-3842 State: PUBLISHED Published: 2012-07-03T22:00:00Z Last Updated: 2024-09-16T23:46:32.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via the (1) select0 or (2) select8 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53281 - http://www.vulnerability-lab.com/get_content.php?id=509 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0214.html