Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-1212 State: PUBLISHED Published: 2012-02-20T19:00:00 Last Updated: 2024-08-06T18:53:36.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the smwfOnSfSetTargetName function in extensions/SMWHalo/includes/SMW_Initialize.php in Semantic Enterprise Wiki (SMW+) 1.5.6, 1.6.0_2 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter to index.php/Special:FormEdit. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47968 - https://exchange.xforce.ibmcloud.com/vulnerabili
Program Container: References: - http://secunia.com/advisories/47968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73167 - http://www.securityfocus.com/bid/51980 - http://st2tea.blogspot.com/2012/02/smw-enterprise-wiki-156-cross-site.html - http://packetstormsecurity.org/files/109637/SMW-1.5.6-Cross-Site-Scripting.html
CVE ID: CVE-2012-1213 State: PUBLISHED Published: 2012-02-20T19:00:00 Last Updated: 2024-08-06T18:53:36.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73168 - http://packetstormsecurity.org/files/109710/Zimbra-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/51974 - https://bugzilla.zimbra.com/show_bug.cgi?
10/Zimbra-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/51974 - https://bugzilla.zimbra.com/show_bug.cgi?id=63849 - http://st2tea.blogspot.com/2012/02/zimbra-cross-site-scripting.html
CVE ID: CVE-2012-1214 State: PUBLISHED Published: 2012-02-20T20:00:00 Last Updated: 2024-08-06T18:53:36.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action. Additional Analyst Notes: - CVE Program Container: References: - http://support.yoono.com/yoono/topics/xss-w35in - http://packetstormsecurity.org/files/109618/Yoono-Desktop-1.8.16-Cross-Site-Scripting.html - http://packetstormsecurity.org/files/109618/#comment-10343 - https://exchange.xforce.ibmcloud.com/vu
te-Scripting.html - http://packetstormsecurity.org/files/109618/#comment-10343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73149
CVE ID: CVE-2012-1215 State: PUBLISHED Published: 2012-02-20T20:00:00 Last Updated: 2024-08-06T18:53:36.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/109617/Yoono-Firefox-7.7.0-Cross-Site-Scripting.html - http://support.yoono.com/yoono/topics/xss-w35in - http://www.securityfocus.com/bid/51970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73
oono/topics/xss-w35in - http://www.securityfocus.com/bid/51970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73150 - http://packetstormsecurity.org/files/109617/#comment-10344
CVE ID: CVE-2012-1216 State: PUBLISHED Published: 2012-02-20T20:00:00Z Last Updated: 2024-09-16T20:02:51.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication of administrators for requests that (1) upload a file via an add action or (2) change the contents of a file via a dit action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/109706/PBBoard-2.1.4-Cross-Site-Request-Forgery-Shell-Upload.html - http://secunia.com/advisories/47948
CVE ID: CVE-2012-1217 State: PUBLISHED Published: 2012-02-20T20:00:00 Last Updated: 2024-08-06T18:53:36.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the team parameter to (1) prospects.php, (2) prospect.php, or (3) team.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51991 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73154 - http://0nto.wordpress.com/2012/02/13/sths-v2-web-portal-2-2-sql-injection-vulnerabilty/ - http://packetstormsecurity.org/files/109665/STHS-v2-Web
/2012/02/13/sths-v2-web-portal-2-2-sql-injection-vulnerabilty/ - http://packetstormsecurity.org/files/109665/STHS-v2-Web-Portal-2.2-SQL-Injection.html
CVE ID: CVE-2012-1218 State: PUBLISHED Published: 2012-02-21T00:00:00 Last Updated: 2024-08-06T18:53:36.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in freelancerKit 2.35 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to the (1) notes and (2) tickets components. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73105 - http://www.securityfocus.com/bid/51946 - http://www.vulnerability-lab.com/get_content.php?id=402 - http://secunia.com/advisories/47766
CVE ID: CVE-2012-1219 State: PUBLISHED Published: 2012-02-21T00:00:00 Last Updated: 2024-08-06T18:53:36.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the (1) ticket parameter to tickets.php, (2) title parameter to notes.php, or (3) task parameter to todo.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73104 - http://www.securityfocus.com/bid/51946 - http://www.vulnerability-lab.com/get_content
mcloud.com/vulnerabilities/73104 - http://www.securityfocus.com/bid/51946 - http://www.vulnerability-lab.com/get_content.php?id=402 - http://secunia.com/advisories/47766
CVE ID: CVE-2012-1220 State: PUBLISHED Published: 2012-02-21T00:00:00 Last Updated: 2024-08-06T18:53:36.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows remote attackers to hijack the authentication of administrators for requests that change account information via an update action, as demonstrated by changing the password. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72991 - http://secunia.com/advisories/47947 - http://www.exploit-db.com/exploits/18464
CVE ID: CVE-2012-1221 State: PUBLISHED Published: 2012-02-21T00:00:00 Last Updated: 2024-08-06T18:53:36.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the telnet server in RabidHamster R2/Extreme 1.65 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the File command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73114 - http://aluigi.org/adv/r2_1-adv.txt - http://www.securityfocus.com/bid/52061 - http://www.osvdb.org/79094
CVE ID: CVE-2012-1222 State: PUBLISHED Published: 2012-02-21T00:00:00 Last Updated: 2024-08-06T18:53:36.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier allows remote authenticated users to execute arbitrary code via a long string to TCP port 23. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/79093 - http://secunia.com/advisories/47966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73113 - http://aluigi.org/adv/r2_1-adv.txt - http://www.securityfocus.com/bid/52061
CVE ID: CVE-2012-1223 State: PUBLISHED Published: 2012-02-21T00:00:00 Last Updated: 2024-08-06T18:53:36.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47966 - http://aluigi.org/adv/r2_1-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/73115 - http://osvdb.org/79095
CVE ID: CVE-2012-1224 State: PUBLISHED Published: 2012-02-21T00:00:00Z Last Updated: 2024-09-16T19:04:47.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in system/classes/login.php in ContentLion Alpha 1.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.darksecurity.de/advisories/2012/SSCHADV2012-004.txt - http://osvdb.org/78833
CVE ID: CVE-2012-1225 State: PUBLISHED Published: 2012-02-21T00:00:00Z Last Updated: 2024-09-16T19:41:24.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter (aka Member List) in list.php or (2) rowid parameter to adherents/fiche.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47969 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0056.html - http://www.securityfocus.com/bid/51956 - http://osvdb.org/79011
CVE ID: CVE-2012-1226 State: PUBLISHED Published: 2012-02-21T00:00:00 Last Updated: 2024-08-06T18:53:36.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the (1) file parameter to document.php or (2) backtopage parameter in a create action to comm/action/fiche.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/5381986e50dd6055f2b3b63281eaacffa0449da2 - https://github.com/Dolibarr/dolibarr/commit/8f9b9987ffb42cfbe907fe31ded3001bfc1b3417 - htt
055f2b3b63281eaacffa0449da2 - https://github.com/Dolibarr/dolibarr/commit/8f9b9987ffb42cfbe907fe31ded3001bfc1b3417 - http://www.vulnerability-lab.com/get_content.php?id=428 - http://www.securityfocus.com/archive/1/521583 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0168.html - http://www.exploit-db.com/exploits/18480 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73136
CVE ID: CVE-2012-1227 State: PUBLISHED Published: 2012-02-21T00:00:00Z Last Updated: 2024-09-16T20:21:50.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that (1) modify the admin email address or (2) modify the blog title via a settings action; (3) add a page via an editpage action, or (4) add a categorie via the blog module. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18474 - http://secunia.com/advisories/47934 - http://osvdb.org/79005
CVE ID: CVE-2012-1234 State: PUBLISHED Published: 2012-02-21T11:00:00Z Last Updated: 2024-09-17T01:41:31.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to execute arbitrary SQL commands via a malformed URL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0234. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf
CVE ID: CVE-2012-1235 State: PUBLISHED Published: 2012-02-21T11:00:00Z Last Updated: 2024-09-17T00:11:36.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0235. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf
CVE ID: CVE-2012-1236 State: PUBLISHED Published: 2012-03-19T21:00:00 Last Updated: 2024-08-06T18:53:36.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Janetter before 3.3.0.0 (aka 3.3.0) allow remote attackers to hijack the authentication of arbitrary users for requests that (1) tweet, (2) upload an image file, or (3) execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000027 - http://janetter.net/history.html - http://secunia.com/advisories/48480 - http://jvn.jp/en/jp/JVN83459967/index.html - http://blog.janetter.net/
CVE ID: CVE-2012-1237 State: PUBLISHED Published: 2012-04-06T18:00:00 Last Updated: 2024-08-06T18:53:36.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://oss.icz.co.jp/news/?p=501 - http://www.securityfocus.com/bid/52900 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000029 - http://jvn.jp/en/jp/JVN44913777/index.html
CVE ID: CVE-2012-1238 State: PUBLISHED Published: 2012-04-06T18:00:00 Last Updated: 2024-08-06T18:53:36.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://oss.icz.co.jp/news/?p=501 - http://www.securityfocus.com/bid/52900 - http://jvn.jp/en/jp/JVN97200417/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000030 - http://osvdb.org/81020
CVE ID: CVE-2012-1239 State: PUBLISHED Published: 2012-04-06T19:00:00Z Last Updated: 2024-09-17T00:07:00.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN92830293/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000028 - http://www.toshibatec.co.jp/information/2012/20120405/
CVE ID: CVE-2012-1240 State: PUBLISHED Published: 2012-04-16T16:00:00 Last Updated: 2024-08-06T18:53:36.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the RECRUIT Dokodemo Rikunabi 2013 extension before 1.0.1 for Google Chrome allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48813 - http://jvn.jp/en/jp/JVN90055996/index.html - https://chrome.google.com/webstore/detail/cfmkbngdlheahmooldblflapbpngmmbg - http://www.securityfocus.com/bid/53008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74893
ooldblflapbpngmmbg - http://www.securityfocus.com/bid/53008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74893 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000032
CVE ID: CVE-2012-1241 State: PUBLISHED Published: 2012-04-16T16:00:00 Last Updated: 2024-08-06T18:53:36.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000031 - http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-list/47170 - http://www.securityfocus.com/bid/53011 - http://secunia.com/advisories/48811 - https://exchange.xforce.ibmcl
ist/47170 - http://www.securityfocus.com/bid/53011 - http://secunia.com/advisories/48811 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74866 - http://jvn.jp/en/jp/JVN33283707/index.html
CVE ID: CVE-2012-1242 State: PUBLISHED Published: 2012-04-27T18:00:00 Last Updated: 2024-08-06T18:53:36.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and 2010, JUST Jump 4, JUST Frontier, and oreplug allows local users to gain privileges via a Trojan horse DLL in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81472 - http://www.justsystems.com/jp/info/js12001.html - http://jvndb.jvn.jp/jvndb/JVNDB
References: - http://osvdb.org/81472 - http://www.justsystems.com/jp/info/js12001.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000034 - http://jvn.jp/en/jp/JVN95378720/index.html
CVE ID: CVE-2012-1243 State: PUBLISHED Published: 2012-04-22T01:00:00 Last Updated: 2024-08-06T18:53:36.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TwitRocker2 application before 1.0.23 for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN00000601/index.html - http://www.securityfocus.com/bid/53173 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000033 - http://secunia.com/advisories/48894 - https://play.google.com/store/apps/details?id=com.studiohitori.twitrocker2 - https://exchange.xforce.ibmclo
ries/48894 - https://play.google.com/store/apps/details?id=com.studiohitori.twitrocker2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75036 - http://osvdb.org/81447
CVE ID: CVE-2012-1244 State: PUBLISHED Published: 2012-04-27T18:00:00 Last Updated: 2024-08-06T18:53:36.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTT DOCOMO sp mode mail application 5400 and earlier for Android does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75159 - http://www.securityfocus.com/bid/53254 - http://jvn.jp/en/jp/JVN82029095/index.html - http://secunia.com/advisories/48955 - http://osvdb.org/81629 - http://j
4 - http://jvn.jp/en/jp/JVN82029095/index.html - http://secunia.com/advisories/48955 - http://osvdb.org/81629 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000037
CVE ID: CVE-2012-1245 State: PUBLISHED Published: 2012-04-27T16:00:00 Last Updated: 2024-08-06T18:53:36.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the cleanup_urls function in forum/utils/html.py in OSQA before 1234, and 0.9.0 Beta 3 and earlier, allows remote attackers to inject arbitrary web script or HTML via vectors related to a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://svn.osqa.net/changelog/OSQA/osqa/trunk?cs=1234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75182 - http://jvn.jp/en/jp/JVN15503729/index.html - http://www.securityfocus.com/bid/53259 - http://jvndb.jvn.jp
lities/75182 - http://jvn.jp/en/jp/JVN15503729/index.html - http://www.securityfocus.com/bid/53259 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000036
CVE ID: CVE-2012-1246 State: PUBLISHED Published: 2012-05-15T20:00:00 Last Updated: 2024-08-06T18:53:36.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53539 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000041 - http://jvn.jp/en/jp/JVN47536971/index.html - http://www.kent-web.com/cart/mart.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75673
CVE ID: CVE-2012-1247 State: PUBLISHED Published: 2012-05-15T20:00:00 Last Updated: 2024-08-06T18:53:36.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML by leveraging support for Cascading Style Sheets (CSS) expressions. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000042 - http://www.securityfocus.com/bid/53541 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75674 - http://jvn.jp/en/jp/JVN63941302/index.html - http://www.kent-web.com/cart/mar
force.ibmcloud.com/vulnerabilities/75674 - http://jvn.jp/en/jp/JVN63941302/index.html - http://www.kent-web.com/cart/mart.html
CVE ID: CVE-2012-1248 State: PUBLISHED Published: 2012-05-15T20:00:00 Last Updated: 2024-08-06T18:53:36.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000043 - http://jvn.jp/en/jp/JVN53465692/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75660 - http://basercms.net/security/1 - http://www.securityfocus.com/bid/53543
CVE ID: CVE-2012-1249 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-06T18:53:36.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iLunascape application 1.0.4.0 and earlier for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive stored information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000044 - http://osvdb.org/82035 - https://play.google.com/store/apps/details?id=jp.co.lunascape.android.ilunascape - http://jvn.jp/en/jp/JVN86044443/index.html - http://secunia.com/advisories/49253 - http://www.securityfocus.com
ascape - http://jvn.jp/en/jp/JVN86044443/index.html - http://secunia.com/advisories/49253 - http://www.securityfocus.com/bid/53619
CVE ID: CVE-2012-1250 State: PUBLISHED Published: 2012-06-04T17:00:00 Last Updated: 2024-08-06T18:53:36.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings via vectors related to PPPoE authentication. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49289 - http://jvn.jp/en/jp/JVN85934986/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000051 - http://www.securityfocus.com/bid/53685 - http://www.logitec.co.jp/info/2012/0516.html