Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-1057 State: PUBLISHED Published: 2012-02-14T00:00:00 Last Updated: 2024-08-06T18:45:26.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of administrators for requests that increase node rankings via the tracking code, possibly related to improper "flood control." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47851 - http://drupalcode.org/project/forward.git/commitdiff/72158fdbfbf5a0689389
ences: - http://secunia.com/advisories/47851 - http://drupalcode.org/project/forward.git/commitdiff/72158fdbfbf5a068938985e3d10ce1d8f969d9c3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72922 - http://drupal.org/node/1425150 - http://www.securityfocus.com/bid/51826 - http://drupal.org/node/1423722 - http://osvdb.org/78817
CVE ID: CVE-2012-1058 State: PUBLISHED Published: 2012-02-14T00:00:00 Last Updated: 2024-08-06T18:45:27.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18468 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73051 - http://secunia.com/advisories/47881 - http://osvdb.org/78923 - http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.ht
81 - http://osvdb.org/78923 - http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.html
CVE ID: CVE-2012-1059 State: PUBLISHED Published: 2012-02-14T00:00:00 Last Updated: 2024-08-06T18:45:27.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the value_title parameter, as demonstrated using the "Front" field in the shirt module. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/109389/VL-407.txt - http://www.vulnerability-lab.com/get_content.php?id=407 - https://github.com/osCommerce/oscommerce/commit/a5aeb044
txt - http://www.vulnerability-lab.com/get_content.php?id=407 - https://github.com/osCommerce/oscommerce/commit/a5aeb0448cc333cc4b801c0e01981b218fd9c7df - https://exchange.xforce.ibmcloud.com/vulnerabilities/72916 - http://www.securityfocus.com/bid/51831 - http://www.exploit-db.com/exploits/18455
CVE ID: CVE-2012-1060 State: PUBLISHED Published: 2012-02-14T00:00:00Z Last Updated: 2024-09-16T19:24:24.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in revisioning_theme.inc in the Taxonomy module in the Revisioning module 6.x-3.13 and other versions before 6.x-3.14 for Drupal allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via the (1) tags or (2) term parameters. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/revisioning.git/commit/768c882 - http://www.madirish.net/content/drupal-revisioning-6x-313-xss-vulnerability - http://
t/revisioning.git/commit/768c882 - http://www.madirish.net/content/drupal-revisioning-6x-313-xss-vulnerability - http://secunia.com/advisories/47931 - http://drupal.org/node/1433550 - http://www.securityfocus.com/bid/51923 - http://drupal.org/node/1431114
CVE ID: CVE-2012-1061 State: PUBLISHED Published: 2012-02-14T00:00:00 Last Updated: 2024-08-06T18:45:27.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in GForge Advanced Server 6.0.0 and other versions before 6.0.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51912 - http://secunia.com/advisories/47587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73085 - http://osvdb.org/78928 - http://gforgegroup.wordpress.com/2012/02/03/gforge-as-6_0_1-release/
CVE ID: CVE-2012-1062 State: PUBLISHED Published: 2012-02-14T00:00:00 Last Updated: 2024-08-06T18:45:27.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the (1) period parameter to showHistoryData.do; (2) selectedNetwork, (3) network, or (4) group parameters to showresource.do; (5) header parameter to AlarmView.do; or (6) attName parameter to jsp/PopUp_Graph.jsp. NOTE: the Search.do/query vector is already covered by CVE-2008-1566, and the jsp/ThresholdActionConfiguration.jsp redirectto vector is already covered
r is already covered by CVE-2008-1566, and the jsp/ThresholdActionConfiguration.jsp redirectto vector is already covered by CVE-2008-0474. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72830 - http://www.vulnerability-lab.com/get_content.php?id=115 - http://packetstormsecurity.org/files/view/109238/VL-115.txt - http://osvdb.org/78722 - http://secunia.com/advisories/47724 - http://www.securityfocus.com/bid/51796 - http://osvdb.org/78721
CVE ID: CVE-2012-1063 State: PUBLISHED Published: 2012-02-14T00:00:00 Last Updated: 2024-08-06T18:45:27.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the (1) viewId parameter to fault/AlarmView.do or (2) period parameter to showHistoryData.do. Additional Analyst Notes: - CVE Program Container: References: - http://www.vulnerability-lab.com/get_content.php?id=115 - http://packetstormsecurity.org/files/view/109238/VL-115.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/72831 - http://www.securityfocus.com/bid/51796
CVE ID: CVE-2012-1064 State: PUBLISHED Published: 2013-02-06T11:00:00Z Last Updated: 2024-09-16T22:26:21.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html
CVE ID: CVE-2012-1065 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in TuxScripting.dll in the TuxSystem ActiveX control in 2X ApplicationServer 10.1 Build 1224 allows remote attackers to create or overwrite arbitrary files via the ExportSettings method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72947 - http://secunia.com/advisories/47657 - http://osvdb.org/78831 - http://www.securityfocus.com/bid/51856
CVE ID: CVE-2012-1066 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51805 - http://dl.packetstormsecurity.net/1202-exploits/smartycms-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/72918
CVE ID: CVE-2012-1067 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78820 - http://secunia.com/advisories/47870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72951 - http://www.securityfocus.com/bi
unia.com/advisories/47870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72951 - http://www.securityfocus.com/bid/51859
CVE ID: CVE-2012-1068 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging. Additional Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset/416723/wp-recentcomments/trunk/core.php?old=316325&old_path=wp-recentcomments%2Ftrunk%2Fcore.php - http://www.securityfocus.com/bid/49734 - https://exchange.xforce.ibmcloud.com
ath=wp-recentcomments%2Ftrunk%2Fcore.php - http://www.securityfocus.com/bid/49734 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70003 - http://wordpress.org/extend/plugins/wp-recentcomments/changelog/ - http://www.osvdb.org/75635 - http://secunia.com/advisories/46141
CVE ID: CVE-2012-1069 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in module/kb/search_word in the search module in lknSupport allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72926 - http://www.securityfocus.com/bid/51803 - http://dl.packetstormsecurity.net/1202-exploits/iknsupport-xss.txt
CVE ID: CVE-2012-1070 State: PUBLISHED Published: 2012-02-14T17:00:00Z Last Updated: 2024-09-16T16:58:39.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the "return url parameter." Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://www.securityfocus.com/bid/51845 - http://secunia.com/advisories/47823 - http://osvdb.org/78749
CVE ID: CVE-2012-1071 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Kitchen recipe (mv_cooking) extension before 0.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild as of February 2012. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/72934 - http://typo3.org/extensions/repository/view/mv_cooking/0.4.1/ - http://www.securityfocus
oud.com/vulnerabilities/72934 - http://typo3.org/extensions/repository/view/mv_cooking/0.4.1/ - http://www.securityfocus.com/bid/51825 - http://secunia.com/advisories/47437 - http://osvdb.org/78748
CVE ID: CVE-2012-1072 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://www.securityfocus.com/bid/51834 - http://osvdb.org/78785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72958
CVE ID: CVE-2012-1073 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://www.securityfocus.com/bid/51834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72957 - http://osvdb.org/78784
CVE ID: CVE-2012-1074 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the White Papers (mm_whtppr) extension 0.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://www.securityfocus.com/bid/51837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72959 - http://osvdb.org/78786
CVE ID: CVE-2012-1075 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Documents download (rtg_files) extension before 1.5.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/72961 - http://osvdb.org/78788 - http://typo3.org/extensions/repository/view/rtg_files/1.5.2/ - http://secunia.com/advisories/47842 - http:
b.org/78788 - http://typo3.org/extensions/repository/view/rtg_files/1.5.2/ - http://secunia.com/advisories/47842 - http://www.securityfocus.com/bid/51838
CVE ID: CVE-2012-1076 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Documents download (rtg_files) extension before 1.5.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://typo3.org/extensions/repository/view/rtg_files/1.5.2/ - http://secunia.com/advisories/47842 - http://osvdb.org/78787 - http://www.securityfocus.com/bid/51838 - https:/
1.5.2/ - http://secunia.com/advisories/47842 - http://osvdb.org/78787 - http://www.securityfocus.com/bid/51838 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72960
CVE ID: CVE-2012-1077 State: PUBLISHED Published: 2012-02-14T17:00:00Z Last Updated: 2024-09-16T16:38:24.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Post data records to facebook (bc_post2facebook) extension before 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://osvdb.org/78790 - http://typo3.org/extensions/repository/view/bc_post2facebook/0.2.2/
CVE ID: CVE-2012-1078 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System Utilities (sysutils) extension 1.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unspecified vectors related to improper "protection" of the "backup output directory." Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/sysutils/1.0.4/ - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://www.securityfocus.com/bid/51844 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7
typo3-ext-sa-2012-001/ - http://www.securityfocus.com/bid/51844 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72964 - http://www.osvdb.org/78791
CVE ID: CVE-2012-1079 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Webservices for TYPO3 (typo3_webservice) extension before 0.3.8 for TYPO3 allows remote authenticated users to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://osvdb.org/78792 - http://www.securityfocus.com/bid/51843 - http://typo3.org/extensions/repository/view/typo3_webservice/0.3.8/ - https://exchange.xforce.ibmcloud.com/vulnerabiliti
http://typo3.org/extensions/repository/view/typo3_webservice/0.3.8/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/72965
CVE ID: CVE-2012-1080 State: PUBLISHED Published: 2012-02-14T17:00:00Z Last Updated: 2024-09-17T01:10:43.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Euro Calculator (skt_eurocalc) extension 0.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://www.securityfocus.com/bid/51848 - http://osvdb.org/78794
CVE ID: CVE-2012-1081 State: PUBLISHED Published: 2012-02-14T17:00:00Z Last Updated: 2024-09-17T03:52:57.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Yet another Google search (ya_googlesearch) extension before 0.3.10 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://osvdb.org/78795 - http://typo3.org/extensions/repository/view/ya_googlesearch/0.3.10/ - http://www.securityfocus.com/bid/51851
CVE ID: CVE-2012-1082 State: PUBLISHED Published: 2012-02-14T17:00:00Z Last Updated: 2024-09-17T01:57:01.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://www.securityfocus.com/bid/51849 - http://osvdb.org/78796
CVE ID: CVE-2012-1083 State: PUBLISHED Published: 2012-02-14T17:00:00Z Last Updated: 2024-09-17T04:19:44.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://osvdb.org/78797 - http://www.securityfocus.com/bid/51849
CVE ID: CVE-2012-1084 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://www.securityfocus.com/bid/51852 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72974 - http://osvdb.org/78798
CVE ID: CVE-2012-1085 State: PUBLISHED Published: 2012-02-14T17:00:00 Last Updated: 2024-08-06T18:45:27.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://www.securityfocus.com/bid/51852 - http://osvdb.org/78799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72973
CVE ID: CVE-2012-1086 State: PUBLISHED Published: 2012-02-14T17:00:00Z Last Updated: 2024-09-17T00:30:52.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the UrlTool (aeurltool) extension 0.1.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://osvdb.org/78801 - http://www.securityfocus.com/bid/51855
CVE ID: CVE-2012-1087 State: PUBLISHED Published: 2012-02-14T17:00:00Z Last Updated: 2024-09-17T00:56:38.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Post data records to facebook (bc_post2facebook) extension before 0.2.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://osvdb.org/78789 - http://typo3.org/extensions/repository/view/bc_post2facebook/0.2.2/
CVE ID: CVE-2012-1088 State: PUBLISHED Published: 2014-02-15T11:00:00 Last Updated: 2024-08-06T18:45:27.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by (1) configure or (2) examples/dhcp-client-script. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/shemminger/iproute2.git%3Ba=commit%3Bh=20ed7b24df05eadf83168d1d0ce0052a31380928 - http://git.kernel.org/?p=linux/kernel/git/shemminger/iproute2.git%3Ba=commit%3Bh=e557d1ac3a156ba7521ba44b0b412af4542f83f8 - https://bugzilla.redhat.com/show_bug.cgi?id=797878
proute2.git%3Ba=commit%3Bh=e557d1ac3a156ba7521ba44b0b412af4542f83f8 - https://bugzilla.redhat.com/show_bug.cgi?id=797878 - http://marc.info/?l=bugtraq&m=139447903326211&w=2