Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ityfocus.com/bid/56285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79615 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091664.html - http://www.debian.org/security/2012/dsa-2566
CVE ID: CVE-2012-5672 State: PUBLISHED Published: 2012-10-25T10:00:00Z Last Updated: 2024-09-16T21:56:53.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cause a denial of service (read access violation and application crash) via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/524379
CVE ID: CVE-2012-5673 State: PUBLISHED Published: 2012-11-13T11:00:00 Last Updated: 2024-08-06T21:14:16.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79773 - http://osvdb.org/86877 - http://www.secur
er: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79773 - http://osvdb.org/86877 - http://www.securityfocus.com/bid/56377 - http://www.adobe.com/support/security/bulletins/apsb12-22.html
CVE ID: CVE-2012-5674 State: PUBLISHED Published: 2012-11-20T02:00:00 Last Updated: 2024-08-06T21:14:16.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe ColdFusion 10 before Update 5, when Internet Information Services (IIS) is used, allows attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/87555 - http://www.adobe.com/support/security/bulletins/apsb12-25.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80139
CVE ID: CVE-2012-5675 State: PUBLISHED Published: 2012-12-12T11:00:00Z Last Updated: 2024-09-16T18:43:44.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe ColdFusion 9.0 through 9.0.2, and 10, allows local users to bypass intended shared-hosting sandbox permissions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-26.html
CVE ID: CVE-2012-5676 State: PUBLISHED Published: 2012-12-12T11:00:00 Last Updated: 2024-08-06T21:14:16.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors. Additional Ana
dows and before 3.5.0.890 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00014.html - http://www.adobe.com/support/security/bulletins/apsb12-27.html
CVE ID: CVE-2012-5677 State: PUBLISHED Published: 2012-12-12T11:00:00 Last Updated: 2024-08-06T21:14:16.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors. Additional An
ndows and before 3.5.0.890 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00014.html - http://www.adobe.com/support/security/bulletins/apsb12-27.html
CVE ID: CVE-2012-5678 State: PUBLISHED Published: 2012-12-12T11:00:00 Last Updated: 2024-08-06T21:14:16.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspec
.0.890 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00014.html - http://www.adobe.com/support/security/bulletins/apsb12-27.html
CVE ID: CVE-2012-5679 State: PUBLISHED Published: 2012-12-13T11:00:00Z Last Updated: 2024-09-16T20:17:51.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer underflow in Adobe Photoshop Camera Raw before 7.3 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-28.html
CVE ID: CVE-2012-5680 State: PUBLISHED Published: 2012-12-13T11:00:00Z Last Updated: 2024-09-16T17:54:49.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Photoshop Camera Raw before 7.3 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-28.html
CVE ID: CVE-2012-5681 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-5682 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-5683 State: PUBLISHED Published: 2014-08-14T14:00:00 Last Updated: 2024-08-06T21:14:16.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create new FTP users via a CreateFTP action in the ftp_management module to the default URI, (2) conduct cross-site scripting (XSS) attacks via the inFullname parameter in an UpdateAccountSettings action in the my_account module to zpanel/, or (3) conduct SQL injection attacks via the inEmailAddress parameter in an UpdateClient action in the manage_c
zpanel/, or (3) conduct SQL injection attacks via the inEmailAddress parameter in an UpdateClient action in the manage_clients module to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/22490 - http://secunia.com/advisories/51172 - http://packetstormsecurity.com/files/117894/ZPanel-10.0.1-XSS-CSRF-SQL-Injection.html - http://osvdb.org/show/osvdb/87140 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79838
CVE ID: CVE-2012-5684 State: PUBLISHED Published: 2014-08-14T14:00:00 Last Updated: 2024-08-06T21:14:16.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the inFullname parameter in an UpdateAccountSettings action in the my_account module to zpanel/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/22490 - http://osvdb.org/show/osvdb/87139 - http://secunia.com/advisories/51172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79839 - http://packetstormsecurity.com/files/117894/ZPanel-10.0
2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79839 - http://packetstormsecurity.com/files/117894/ZPanel-10.0.1-XSS-CSRF-SQL-Injection.html
CVE ID: CVE-2012-5685 State: PUBLISHED Published: 2014-08-14T14:00:00 Last Updated: 2024-08-06T21:14:16.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the inEmailAddress parameter in an UpdateClient action in the manage_clients module to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/22490 - http://osvdb.org/show/osvdb/87142 - http://secunia.com/advisories/51172
CVE ID: CVE-2012-5686 State: PUBLISHED Published: 2020-02-04T13:30:35 Last Updated: 2024-08-06T21:14:16.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZPanel 10.0.1 has insufficient entropy for its password reset process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79841
CVE ID: CVE-2012-5687 State: PUBLISHED Published: 2012-11-01T10:00:00 Last Updated: 2024-08-06T21:14:16.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to the help/ URI. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/117749/TP-LINK-TL-WR841N-Local-File-Inclusion.html - http://archives.neohapsis.com/archives/bugtraq/2012-10/0154.html - https://exchange.xforce.ibmcloud.com/vulnerabilit
l - http://archives.neohapsis.com/archives/bugtraq/2012-10/0154.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79662 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0154.html
CVE ID: CVE-2012-5688 State: PUBLISHED Published: 2012-12-06T11:00:00 Last Updated: 2024-08-06T21:14:16.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1549.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://www.ubuntu.com/usn/USN-1657-1 - https://
tp://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://www.ubuntu.com/usn/USN-1657-1 - https://kb.isc.org/article/AA-00828 - http://support.apple.com/kb/HT5880
CVE ID: CVE-2012-5689 State: PUBLISHED Published: 2013-01-25T11:00:00 Last Updated: 2024-08-06T21:14:16.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/article/AA-00855/ - http://www.isc.org/software/bind/advisories/cve-2012-5689 - http://www.ubuntu.com/usn/USN-2693-1 - http://rhn.redhat.com/errata/RHSA-2013-
/software/bind/advisories/cve-2012-5689 - http://www.ubuntu.com/usn/USN-2693-1 - http://rhn.redhat.com/errata/RHSA-2013-0550.html
CVE ID: CVE-2012-5690 State: PUBLISHED Published: 2012-12-19T11:00:00Z Last Updated: 2024-09-16T17:08:26.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an invalid pointer. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/12142012_player/en/
CVE ID: CVE-2012-5691 State: PUBLISHED Published: 2012-12-19T11:00:00Z Last Updated: 2024-09-16T20:32:36.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/12142012_player/en/
CVE ID: CVE-2012-5692 State: PUBLISHED Published: 2012-10-31T10:00:00Z Last Updated: 2024-09-16T18:49:53.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3.x has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://community.invisionpower.com/topic/371625-ipboard-31x-32x-and-33x-security-update/ - http://secunia.com/advisories/51104 - http://www.securityfocus.com/bid/56288
CVE ID: CVE-2012-5693 State: PUBLISHED Published: 2020-01-03T19:30:24 Last Updated: 2024-08-06T21:14:16.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddressTB parameter to (1) remoteAttack.pl or (2) guessPassword.pl in frameworkgui/; the filename parameter to (3) CSAttack.pl or (4) SEAttack.pl in frameworkgui/; the phNo2Attack parameter to (5) CSAttack.pl or (6) SEAttack.pl in frameworkgui/; the (7) platformDD2 parameter to frameworkgui/SEAttack.pl; the (8) agentURLPath or (9) agentControlKey parameter to frameworkgui/attach2
DD2 parameter to frameworkgui/SEAttack.pl; the (8) agentURLPath or (9) agentControlKey parameter to frameworkgui/attach2agents.pl; or the (10) controlKey parameter to frameworkgui/attachMobileModem.pl. NOTE: The hostingPath parameter to CSAttack.pl and SEAttack.pl vectors and the appURLPath parameter to attachMobileModem.pl vector are covered by CVE-2012-5878. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23123
CVE ID: CVE-2012-5694 State: PUBLISHED Published: 2014-10-20T16:00:00 Last Updated: 2024-08-06T21:14:16.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allow remote attackers to execute arbitrary SQL commands via the (1) agentPhNo, (2) controlPhNo, (3) agentURLPath, (4) agentControlKey, or (5) platformDD1 parameter to frameworkgui/attach2Agents.pl; the (6) modemPhoneNo, (7) controlKey, or (8) appURLPath parameter to frameworkgui/attachMobileModem.pl; the agentsDD parameter to (9) escalatePrivileges.pl, (10) getContacts.pl, (11) getDatabase.pl, (12) sendSMS.pl, or (13) takeP
gentsDD parameter to (9) escalatePrivileges.pl, (10) getContacts.pl, (11) getDatabase.pl, (12) sendSMS.pl, or (13) takePic.pl in frameworkgui/; or the modemNoDD parameter to (14) escalatePrivileges.pl, (15) getContacts.pl, (16) getDatabase.pl, (17) SEAttack.pl, (18) sendSMS.pl, (19) takePic.pl, or (20) CSAttack.pl in frameworkgui/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/87325 - http://secunia.com/advisories/51414 - https://www.htbridge.com/advisory/HTB23123 - http://osvdb.org/87324 - https://twitter.com/georgiaweidman/statuses/269138431567855618
CVE ID: CVE-2012-5695 State: PUBLISHED Published: 2014-10-20T16:00:00 Last Updated: 2024-08-06T21:14:16.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allow remote attackers to hijack the authentication of administrators for requests that conduct (1) shell metacharacter or (2) SQL injection attacks or (3) send an SMS message. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/87327 - https://www.htbridge.com/advisory/HTB23123 - https://twitter.com/georgiaweidman/statuses/269138431567855618 - https://www.htbridge.com
bridge.com/advisory/HTB23123 - https://twitter.com/georgiaweidman/statuses/269138431567855618 - https://www.htbridge.com/advisory/HTB23127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80313 - http://secunia.com/advisories/51415
CVE ID: CVE-2012-5696 State: PUBLISHED Published: 2014-10-20T16:00:00 Last Updated: 2024-08-06T21:14:16.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote attackers to obtain the plaintext database password via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23123 - https://twitter.com/georgiaweidman/statuses/269138431567855618
CVE ID: CVE-2012-5697 State: PUBLISHED Published: 2014-10-20T16:00:00 Last Updated: 2024-08-06T21:14:16.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The btinstall installation script in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 uses weak permissions (777) for all files in the frameworkgui/ directory, which allows local users to obtain sensitive information or inject arbitrary Perl code via direct access to these files. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23123 - https://twitter.com/georgiaweidman/statuses/269138431567855618 - http://secunia.com/advisories/51415
CVE ID: CVE-2012-5698 State: PUBLISHED Published: 2020-01-23T14:11:58 Last Updated: 2024-08-06T21:14:16.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: BabyGekko before 1.2.4 has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80085
CVE ID: CVE-2012-5699 State: PUBLISHED Published: 2020-01-23T14:10:22 Last Updated: 2024-08-06T21:14:16.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: BabyGekko before 1.2.4 allows PHP file inclusion. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80086
CVE ID: CVE-2012-5700 State: PUBLISHED Published: 2014-09-22T15:00:00 Last Updated: 2024-08-06T21:14:16.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/index.php or the (2) username or (3) password parameter in blocks/loginbox/loginbox.template.php to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51260 - https://www.htbridge.com/advisory/HTB23122 - https://exchange.xforce.ib
erences: - http://secunia.com/advisories/51260 - https://www.htbridge.com/advisory/HTB23122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80087 - http://www.exploit-db.com/exploits/22741 - http://www.securityfocus.com/bid/56523
CVE ID: CVE-2012-5701 State: PUBLISHED Published: 2014-10-20T15:00:00 Last Updated: 2024-08-06T21:14:16.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in dotProject before 2.1.7 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) search_string or (2) where parameter in a contacts action, (3) dept_id parameter in a departments action, (4) project_id[] parameter in a project action, or (5) company_id parameter in a system action to index.php. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References:
llow remote attackers to execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/87625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80223 - https://www.htbridge.com/advisory/HTB23124 - http://www.securityfocus.com/bid/56624 - http://packetstormsecurity.com/files/118274/dotProject-2.1.6-Cross-Site-Scripting-SQL-Injection.html - http://sourceforge.net/projects/dotproject/files/dotproject/dotProject%20Version%202.1.7/
CVE ID: CVE-2012-5702 State: PUBLISHED Published: 2014-10-21T14:00:00 Last Updated: 2024-08-06T21:14:16.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in dotProject before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) callback parameter in a color_selector action, (2) field parameter in a date_format action, or (3) company_name parameter in an addedit action to index.php. NOTE: the date parameter vector is already covered by CVE-2008-3886. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/87627 - https://www.htbridge.com/advisory/HTB23124 - http://www.securit
rogram Container: References: - http://osvdb.org/87627 - https://www.htbridge.com/advisory/HTB23124 - http://www.securityfocus.com/bid/56624 - http://sourceforge.net/projects/dotproject/files/dotproject/dotProject%20Version%202.1.7/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/80216 - http://secunia.com/advisories/51332
CVE ID: CVE-2012-5703 State: PUBLISHED Published: 2012-11-20T02:00:00 Last Updated: 2024-08-06T21:14:16.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1) RetrieveProp or (2) RetrievePropEx SOAP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027782 - http://www.securityfocus.com/bid/56571 - http://www.coresecurity.com/content/vmware-esx-input-validation-error - http://www.vmware.com/security/advisories/VMSA-2012-0016.html
CVE ID: CVE-2012-5704 State: PUBLISHED Published: 2012-11-01T10:00:00Z Last Updated: 2024-09-16T22:19:48.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to cause a denial of service (infinite loop and time out) via a block that references itself. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/04/6 - http://drupal.org/node/1732828 - http://www.madirish.net/543 - http://drupal.org/node/1732946 - http://www.openwall.com/lists/oss-security/2012/10/07/1