Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121107_00 - http://www.kb.cert.org/vuls/id/985625 - http://www.securitytracker.com/id?1027726 - http://www.securityfocus.com/bid/56399
CVE ID: CVE-2012-4954 State: PUBLISHED Published: 2012-11-15T11:00:00 Last Updated: 2024-08-06T20:50:18.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: The edit-profile page in Vanilla Forums before 2.1a32 allows remote authenticated users to modify arbitrary profile settings by replacing the UserID value during a man-in-the-middle attack, related to a "parameter manipulation" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80000 - http://www.kb.cert.org/vuls/id/611988
CVE ID: CVE-2012-4955 State: PUBLISHED Published: 2012-11-15T11:00:00 Last Updated: 2024-08-06T20:50:18.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Dell OpenManage Server Administrator (OMSA) before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/87405 - http://secunia.com/advisories/51297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80071 - http://www.kb.cert.org/vuls/id/558132 - http://www.dell.com/support/drivers/us/en/19/DriverDetails/Product/p
ies/80071 - http://www.kb.cert.org/vuls/id/558132 - http://www.dell.com/support/drivers/us/en/19/DriverDetails/Product/poweredge-r710?driverId=PCXMR&osCode=WNET&fileId=3082295344 - http://www.dell.com/support/drivers/us/en/19/DriverDetails/Product/poweredge-r710?driverId=JJMWP&osCode=WNET&fileId=3082295338 - http://www.securityfocus.com/bid/56518 - http://www.dell.com/support/drivers/us/en/19/DriverDetails/Product/poweredge-r710?driverId=5JDN0&osCode=WNET&fileId=3082293694
CVE ID: CVE-2012-4956 State: PUBLISHED Published: 2012-11-18T19:00:00 Last Updated: 2024-08-06T20:50:18.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/273371 - http://osvdb.org/87574 - https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959
CVE ID: CVE-2012-4957 State: PUBLISHED Published: 2012-11-18T19:00:00Z Last Updated: 2024-09-17T04:24:22.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/273371 - https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959
CVE ID: CVE-2012-4958 State: PUBLISHED Published: 2012-11-18T19:00:00Z Last Updated: 2024-09-17T03:54:24.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/273371 - https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959
CVE ID: CVE-2012-4959 State: PUBLISHED Published: 2012-11-18T19:00:00Z Last Updated: 2024-09-16T20:43:13.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/273371 - https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959
CVE ID: CVE-2012-4960 State: PUBLISHED Published: 2013-06-20T15:00:00 Last Updated: 2024-08-06T20:50:18.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500, Eudemon1000, Eudemon1000E-U/USG5300, Eudemon1000E-X/USG5500, Eudemon8080E/USG9300, Eudemon8160E/USG9300, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E
0, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E-X3/USG5100, E200E-X5/USG5100, E200E-X7/USG5100, E200E-B/USG2100, E200E-X1/USG2100, E200E-X2/USG2100, SVN5300, SVN2000, SVN5000, SVN3000, NIP100, NIP200, NIP1000, NIP2100, NIP2200, and NIP5100 use the DES algorithm for stored passwords, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/948096 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-u_194373.htm
CVE ID: CVE-2012-4964 State: PUBLISHED Published: 2012-11-28T01:00:00Z Last Updated: 2024-09-16T18:23:20.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung printer firmware before 20121031 has a hardcoded read-write SNMP community, which makes it easier for remote attackers to obtain administrative access via an SNMP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/281284
CVE ID: CVE-2012-4965 State: REJECTED Published: 2013-07-02T20:00:00Z Last Updated: 2024-09-17T02:21:31.294Z Description: No description available.
CVE ID: CVE-2012-4966 State: REJECTED Published: 2013-07-02T20:00:00Z Last Updated: 2024-09-16T22:25:18.049Z Description: No description available.
CVE ID: CVE-2012-4967 State: REJECTED Published: 2013-07-02T20:00:00Z Last Updated: 2024-09-16T17:04:14.506Z Description: No description available.
CVE ID: CVE-2012-4968 State: PUBLISHED Published: 2012-09-17T17:00:00Z Last Updated: 2024-09-16T19:11:05.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted string to the AbsoluteLinks, (2) BigSummary, (3) ContextSummary, (4) EscapeXML, (5) FirstParagraph, (6) FirstSentence, (7) Initial, (8) LimitCharacters, (9) LimitSentences, (10) LimitWordCount, (11) LimitWordCountXML, (12) Lower, (13) LowerCase, (14) NoHTML, (15) Summary, (16) Upper, (17) UpperCase, or (18) URL method in a template, diffe
2) Lower, (13) LowerCase, (14) NoHTML, (15) Summary, (16) Upper, (17) UpperCase, or (18) URL method in a template, different vectors than CVE-2012-0976. Additional Analyst Notes: - CVE Program Container: References: - http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.7 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.13 - https://github.com/silverstripe/sapphire/commit/0085876
CVE ID: CVE-2012-4969 State: PUBLISHED Published: 2012-09-18T10:00:00.000Z Last Updated: 2025-10-22T00:05:46.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA12-265A.html - http://www.kb.cert.org/vuls/id/480095 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15729 - http://www.
s/id/480095 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15729 - http://www.us-cert.gov/cas/techalerts/TA12-262A.html - http://www.securityweek.com/new-internet-explorer-zero-day-being-exploited-wild - http://technet.microsoft.com/security/advisory/2757760 - http://www.us-cert.gov/cas/techalerts/TA12-255A.html - http://blog.vulnhunt.com/index.php/2012/09/17/ie-execcommand-fuction-use-after-free-vulnerability-0day_en/ - http://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/ie_execcommand_uaf.rb - http://www.securitytracker.com/id?1027538 - http://eromang.zataz.com/2012/09/16/zero-day-season-is-really-
mand_uaf.rb - http://www.securitytracker.com/id?1027538 - http://eromang.zataz.com/2012/09/16/zero-day-season-is-really-not-over-yet/
CVE ID: CVE-2012-4970 State: PUBLISHED Published: 2013-01-01T11:00:00 Last Updated: 2024-08-06T20:50:18.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1_J, and commercial software before 3.0.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027926 - http://archives.neohapsis.com/archives/bugtraq/2012-12/0146.html - http://knowledgebase-iframe.polycom.com/kb/knowledgebase/End%20User/Tech%20Alerts/Vide
hives/bugtraq/2012-12/0146.html - http://knowledgebase-iframe.polycom.com/kb/knowledgebase/End%20User/Tech%20Alerts/Video/15990_fHDX%20XSS%20Vulnerability%20-%20Security%20Bulletin%20101521.pdf
CVE ID: CVE-2012-4971 State: PUBLISHED Published: 2012-12-12T11:00:00Z Last Updated: 2024-09-16T23:21:03.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) reqclass parameter to editrequestenduser.asp; the (2) sys_request_id parameter to editrequestuser.asp; the (3) sys_request_id parameter to enduseractions.asp; the (4) sys_request_id or (5) confirm parameter to enduserreopenrequeststatus.asp; the (6) searchsql, (7) back, or (8) status parameter to enduserrequests.asp; the (9) sys_userpwd parameter to validateenduserlogin.asp; the (10) sys_userpwd
tatus parameter to enduserrequests.asp; the (9) sys_userpwd parameter to validateenduserlogin.asp; the (10) sys_userpwd parameter to validateuserlogin.asp; the (11) sql parameter to editenduseruser.asp; the (12) sql parameter to manageenduserrequestclasses.asp; the (13) sql parameter to resetpwdenduser.asp; the (14) sql parameter to disableloginenduser.asp; the (15) sql parameter to deleteenduseruser.asp; the (16) sql parameter to manageendusers.asp; or the (17) site parameter to statsrequestagereport.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.reactionpenetrationtesting.co.uk/helpbox-sql-injection.html
CVE ID: CVE-2012-4972 State: PUBLISHED Published: 2012-12-12T11:00:00 Last Updated: 2024-08-06T20:50:18.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) sys_solution_id, (2) sys_requesttype_id, (3) sys_problem_desc, (4) sys_solution_desc, (5) sys_problemsummary, (6) usr_Action_testing, (7) usr_Escalation, or (8) usr_Additional_Resources parameter to writesolutionuser.asp or the (9) sys_solution_id parameter to deletesolution.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.reactionpenetrationtestin
eletesolution.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.reactionpenetrationtesting.co.uk/helpbox-embedded-xss.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79658 - http://www.reactionpenetrationtesting.co.uk/helpbox-reflected-xss.html
CVE ID: CVE-2012-4974 State: PUBLISHED Published: 2012-12-12T11:00:00Z Last Updated: 2024-09-17T00:25:44.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Layton Helpbox 4.4.0 allows remote authenticated users to change the login context and gain privileges via a modified (1) loggedinenduser, (2) loggedinendusername, (3) loggedinuserusergroup, (4) loggedinuser, or (5) loggedinusername cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.reactionpenetrationtesting.co.uk/helpbox-login-bypass.html
CVE ID: CVE-2012-4975 State: PUBLISHED Published: 2012-12-12T11:00:00 Last Updated: 2024-08-06T20:50:18.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data via a modified sys_request_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.reactionpenetrationtesting.co.uk/helpbox-auth-bypass.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79644
CVE ID: CVE-2012-4976 State: PUBLISHED Published: 2012-12-12T11:00:00Z Last Updated: 2024-09-16T19:29:54.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=sys_asset_id request, which is not properly handled during construction of an error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.reactionpenetrationtesting.co.uk/helpbox-creds-error-page.html
CVE ID: CVE-2012-4977 State: PUBLISHED Published: 2012-12-12T11:00:00Z Last Updated: 2024-09-17T00:01:09.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Layton Helpbox 4.4.0 allows remote attackers to discover cleartext credentials for the login page by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.reactionpenetrationtesting.co.uk/helpbox-cleartext-login.html
CVE ID: CVE-2012-4980 State: PUBLISHED Published: 2019-12-27T20:21:46 Last Updated: 2024-08-06T20:50:18.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55644 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78801
CVE ID: CVE-2012-4981 State: PUBLISHED Published: 2020-01-23T14:25:37 Last Updated: 2024-08-06T20:50:18.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78800
CVE ID: CVE-2012-4982 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T20:50:18.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the a parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.reactionpenetrationtesting.co.uk/forescout-cross-site-redirection.html - http://www.securityfocus.com/bid/56687
CVE ID: CVE-2012-4983 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T20:50:18.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities on the Forescout CounterACT NAC device before 7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the a parameter to assets/login or (2) the query parameter to assets/rangesearch. Additional Analyst Notes: - CVE Program Container: References: - http://www.reactionpenetrationtesting.co.uk/forescout-nac-xss.html - http://www.securityfocus.com/bid/56688
CVE ID: CVE-2012-4985 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T20:50:18.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80284 - http://www.reactionpenetrationtesting.co.uk/forescout-nac-icmp-arp.html - http://www.securityfocus.com/bid/56689 - http://osvdb.org/87895
CVE ID: CVE-2012-4987 State: PUBLISHED Published: 2012-11-04T15:00:00 Last Updated: 2024-08-06T20:50:18.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP file that triggers incorrect processing of long pathnames by the Watch Folders feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56324 - http://seclists.org/fulldisclosure/2012/Oct/189 - http://www.reactionpenetrationtesting.co.uk/realplayer-watchfolders.html - http://packetstormsecurity.org/files/117691/Realplayer-Watchfolde
enetrationtesting.co.uk/realplayer-watchfolders.html - http://packetstormsecurity.org/files/117691/Realplayer-Watchfolders-Long-Filepath-Overflow.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79663 - http://osvdb.org/86721
CVE ID: CVE-2012-4988 State: PUBLISHED Published: 2014-07-09T14:00:00 Last Updated: 2024-08-06T20:50:18.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.99.1 allows remote attackers to execute arbitrary code via a crafted JLS image file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2012/Oct/36 - http://www.reactionpenetrationtesting.co.uk/xnview-jls-heap.html - https://www.exploit-db.com/exploits/21741/ - http://secunia.com/advisories/50825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79030 - http
xploits/21741/ - http://secunia.com/advisories/50825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79030 - http://osvdb.org/show/osvdb/85893 - http://www.securityfocus.com/bid/55787
CVE ID: CVE-2012-4989 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T20:50:18.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/plugin-index.php in OpenX 2.8.10 before revision 81823 allows remote attackers to inject arbitrary web script or HTML via the parent parameter in an info action. Additional Analyst Notes: - CVE Program Container: References: - https://svn.openx.org/openx/trunk/lib/templates/admin/plugin-group-view.html - http://archives.neohapsis.com/archives/bugtraq/2012-10/0065.html - http://secunia.com/advisories/50877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79196 - https://ww
065.html - http://secunia.com/advisories/50877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79196 - https://www.htbridge.com/advisory/HTB23116 - http://osvdb.org/86092 - http://www.securityfocus.com/bid/55860
CVE ID: CVE-2012-4990 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T20:50:18.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids[] parameter in a link action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79199 - http://osvdb.org/86093 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0065.html - http://secunia.com/advisories/50877 - https://www.htbridge.com/advisory/HTB23116 - https://svn.openx.org/openx/trunk
l - http://secunia.com/advisories/50877 - https://www.htbridge.com/advisory/HTB23116 - https://svn.openx.org/openx/trunk/www/admin/campaign-zone-link.php - http://www.securityfocus.com/bid/55860
CVE ID: CVE-2012-4991 State: PUBLISHED Published: 2012-12-13T11:00:00Z Last Updated: 2024-09-16T23:51:07.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated users to (1) read, (2) delete, or (3) create files, or (4) list directories, via a ..%5C (encoded dot dot backslash) in a URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/23324/
CVE ID: CVE-2012-4992 State: PUBLISHED Published: 2012-09-19T19:00:00 Last Updated: 2024-08-06T20:50:18.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code via a long unicode string to (1) TListbox or (2) TComboBox. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18555 - http://www.flashfxp.com/forum/news/15473-flashfxp-4-2-released.html#post81101 - http://osvdb.org/79767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73626 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0002.html - http://seclist
e.ibmcloud.com/vulnerabilities/73626 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0002.html - http://seclists.org/fulldisclosure/2012/Mar/7 - http://www.securityfocus.com/bid/52259 - http://www.vulnerability-lab.com/get_content.php?id=462
CVE ID: CVE-2012-4993 State: PUBLISHED Published: 2012-09-19T19:00:00Z Last Updated: 2024-09-16T16:18:37.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18553
CVE ID: CVE-2012-4994 State: PUBLISHED Published: 2012-09-19T19:00:00 Last Updated: 2024-08-06T20:50:18.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/admin.php in LimeSurvey before 1.91+ Build 120224 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a browse action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/79688 - http://www.limesurvey.org/en/stable-release - https://exchange.xforce.ibmcloud.com/vulnerabilities/73564 - http://freecode.com/projects/limesurvey/releases/342070 - http://sec
xchange.xforce.ibmcloud.com/vulnerabilities/73564 - http://freecode.com/projects/limesurvey/releases/342070 - http://secunia.com/advisories/48184