Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-1578 State: PUBLISHED Published: 2012-09-09T21:00:00 Last Updated: 2024-08-06T19:01:02.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allow remote attackers to hijack the authentication of users with the block permission for requests that (1) block a user via a request to the Block module or (2) unblock a user via a request to the Unblock module. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78911 - http://www.openwall.com/lists/oss-security/2012/03/24/1 - http://lists.wi
ge.xforce.ibmcloud.com/vulnerabilities/78911 - http://www.openwall.com/lists/oss-security/2012/03/24/1 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html - http://secunia.com/advisories/48504 - https://bugzilla.wikimedia.org/show_bug.cgi?id=34212 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html - http://www.openwall.com/lists/oss-security/2012/03/22/9 - http://osvdb.org/80361 - http://www.securityfocus.com/bid/52689
CVE ID: CVE-2012-1579 State: PUBLISHED Published: 2012-09-09T21:00:00Z Last Updated: 2024-08-06T19:01:02.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private data such as CSRF tokens in a JavaScript file, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/24/1 - https://bugzilla.wikimedia.org/show_bug.cgi?id=34907 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html - http://secunia.com/advisories/48504 - http://lists.wikimedia.org/p
pipermail/mediawiki-announce/2012-March/000110.html - http://secunia.com/advisories/48504 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html - http://www.openwall.com/lists/oss-security/2012/03/22/9 - http://www.securityfocus.com/bid/52689
CVE ID: CVE-2012-1580 State: PUBLISHED Published: 2012-09-09T21:00:00 Last Updated: 2024-08-06T19:01:02.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/24/1 - http://osvdb.org/80364 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html - https://bugzilla.wikimedia.org/show_bug.cgi?id=35317 - http://secunia.
rmail/mediawiki-announce/2012-March/000110.html - https://bugzilla.wikimedia.org/show_bug.cgi?id=35317 - http://secunia.com/advisories/48504 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html - http://www.openwall.com/lists/oss-security/2012/03/22/9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74286 - http://www.securityfocus.com/bid/52689
CVE ID: CVE-2012-1581 State: PUBLISHED Published: 2012-09-09T21:00:00 Last Updated: 2024-08-06T19:01:02.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote attackers to change the passwords of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.wikimedia.org/show_bug.cgi?id=35078 - http://www.openwall.com/lists/oss-security/2012/03/24/1 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html - http://secunia.com/advisories/48504 - https://exchange.xforce.ibmcloud.com/vul
diawiki-announce/2012-March/000110.html - http://secunia.com/advisories/48504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78910 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html - http://www.openwall.com/lists/oss-security/2012/03/22/9 - http://www.securityfocus.com/bid/52689
CVE ID: CVE-2012-1582 State: PUBLISHED Published: 2012-09-09T21:00:00 Last Updated: 2024-08-06T19:01:02.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to inject arbitrary web script or HTML via a crafted page with "forged strip item markers," as demonstrated using the CharInsert extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/24/1 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html - http://secunia.com/advisories/48504 - htt
tp://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html - http://secunia.com/advisories/48504 - https://bugzilla.wikimedia.org/show_bug.cgi?id=35315 - http://osvdb.org/80363 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74288 - http://www.openwall.com/lists/oss-security/2012/03/22/9 - http://www.securityfocus.com/bid/52689
CVE ID: CVE-2012-1583 State: PUBLISHED Published: 2012-06-16T21:00:00 Last Updated: 2024-08-06T19:01:02.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d0772b70faaf8e9f2013b6c4273d94d5eac8047a - https://bugzilla.redhat.com/show_bug.cgi?id=752304 - http://www.securitytracker.com/id?1026930
13b6c4273d94d5eac8047a - https://bugzilla.redhat.com/show_bug.cgi?id=752304 - http://www.securitytracker.com/id?1026930 - http://www.securityfocus.com/bid/53139 - http://rhn.redhat.com/errata/RHSA-2012-0488.html - http://secunia.com/advisories/48881 - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - https://github.com/torvalds/linux/commit/d0772b70faaf8e9f2013b6c4273d94d5eac8047a
CVE ID: CVE-2012-1584 State: PUBLISHED Published: 2012-09-06T18:00:00 Last Updated: 2024-08-06T19:01:02.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted file header field in a media file, which triggers a large memory allocation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78909 - http://www.securityfocus.com/bid/52290 - http://secunia.com/advisories/48792 - http://mail.kde.org/pipe
bilities/78909 - http://www.securityfocus.com/bid/52290 - http://secunia.com/advisories/48792 - http://mail.kde.org/pipermail/taglib-devel/2012-March/002186.html - http://www.gentoo.org/security/en/glsa/glsa-201206-16.xml - http://mail.kde.org/pipermail/taglib-devel/2012-March/002191.html - http://www.openwall.com/lists/oss-security/2012/03/26/4 - http://www.openwall.com/lists/oss-security/2012/03/21/11 - http://secunia.com/advisories/48211 - https://github.com/taglib/taglib/commit/dcdf4fd954e3213c355746fa15b7480461972308 - http://www.openwall.com/lists/oss-security/2012/03/05/19
CVE ID: CVE-2012-1585 State: PUBLISHED Published: 2012-08-17T00:00:00Z Last Updated: 2024-08-06T19:01:02.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name. Additional Analyst Notes: - CVE Program Container: References: - http://osdir.com/ml/openstack-cloud-computing/2012-03/msg01133.html - https://bugs.launchpad.net/nova/+bug/962515 - http://lwn.net/Alerts/491298/
CVE ID: CVE-2012-1586 State: PUBLISHED Published: 2012-08-27T23:00:00Z Last Updated: 2024-08-06T19:01:02.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html - http://www.openwall.com/lists/oss-security/2012/03/27/6 - http://www.openwall.com/lists/oss-security/2012/03/27/1 - https://bugzilla.samba.org/show_bug.cgi?id=8821 - http://bugs.debian.or
w.openwall.com/lists/oss-security/2012/03/27/1 - https://bugzilla.samba.org/show_bug.cgi?id=8821 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923
CVE ID: CVE-2012-1587 State: REJECTED Published: 2012-08-27T23:00:00Z Last Updated: 2024-09-17T02:05:36.355Z Description: No description available.
CVE ID: CVE-2012-1588 State: PUBLISHED Published: 2012-10-01T00:00:00 Last Updated: 2024-08-06T19:01:02.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in the _filter_url function in the text filtering system (modules/filter/filter.module) in Drupal 7.x before 7.14 allows remote authenticated users with certain roles to cause a denial of service (CPU consumption) via a long email address. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/drupal.git/commit/db79496ae983447506f016a20738c3d7e5d059fa - http://drupal.org/drupal-7.14 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 - h
a20738c3d7e5d059fa - http://drupal.org/drupal-7.14 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 - http://secunia.com/advisories/49012 - http://drupal.org/node/1557938 - http://www.securityfocus.com/bid/53368 - http://drupal.org/node/1558468
CVE ID: CVE-2012-1589 State: PUBLISHED Published: 2012-05-18T20:00:00 Last Updated: 2024-08-06T19:01:02.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81679 - http://www.securityfocus.com/bid/53365 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 - http://jvn.jp/en/jp/JVN45898075/index.html - http://secunia.com/advisories/49012 - http://drupal.org/node/1557938 - http://jvn
/jvn.jp/en/jp/JVN45898075/index.html - http://secunia.com/advisories/49012 - http://drupal.org/node/1557938 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000045
CVE ID: CVE-2012-1590 State: PUBLISHED Published: 2012-10-01T00:00:00 Last Updated: 2024-08-06T19:01:02.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: The forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished forum posts, which allows remote authenticated users to obtain sensitive information such as the post title via the forum overview page. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/drupal-7.14 - http://www.securityfocus.com/bid/53359 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 - http://secunia.com/advisories/49012 - http://drupal.org/node/1557938 - http://drupal.org/node
ries?name=MDVSA-2013:074 - http://secunia.com/advisories/49012 - http://drupal.org/node/1557938 - http://drupal.org/node/1302404 - http://drupalcode.org/project/drupal.git/commit/352645e4a636cadeb5576231b3547972eebdd8e5
CVE ID: CVE-2012-1591 State: PUBLISHED Published: 2012-10-01T00:00:00 Last Updated: 2024-08-06T19:01:02.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: The image module in Drupal 7.x before 7.14 does not properly check permissions when caching derivative image styles of private images, which allows remote attackers to read private image styles. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1507988 - http://drupal.org/drupal-7.14 - http://www.securityfocus.com/bid/53359 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 - http://secunia.com/advisories/49012 - http://drupal.org/node/1557938 - http://drupalcode.org/project
me=MDVSA-2013:074 - http://secunia.com/advisories/49012 - http://drupal.org/node/1557938 - http://drupalcode.org/project/drupal.git/commit/3bf6761ff7537dc68e22ea73f155134f3cfd41a8
CVE ID: CVE-2012-1592 State: PUBLISHED Published: 2019-12-05T20:57:22 Last Updated: 2024-08-06T19:01:02.750Z Vendors: libstruts1.2-java Products: libstruts1.2-java Problem Types: xsltResult local code execution flaw Description: A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-1592 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1592 - https://access.redhat.com/security/cve/cve-2012-1592 - http://www.openwall.com/lists/oss-security/2012/03/28/12 - https://lis
://access.redhat.com/security/cve/cve-2012-1592 - http://www.openwall.com/lists/oss-security/2012/03/28/12 - https://lists.apache.org/thread.html/r348ed455a140273c40b974f0615dee692f7c9b26c6de2118b4280ef2%40%3Cissues.struts.apache.org%3E - https://lists.apache.org/thread.html/r93c4e3f6cb138cd117c739714f07e47af547183ba099ba46be2b2a5b%40%3Cissues.struts.apache.org%3E - https://lists.apache.org/thread.html/r593ebb2f4c95b064e6901fd273eff256c493db952bdb484395948ffc%40%3Cissues.struts.apache.org%3E
CVE ID: CVE-2012-1593 State: PUBLISHED Published: 2012-04-11T10:00:00 Last Updated: 2024-08-06T19:01:02.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18758 - http://secunia.com/advisories/48986 - http://www.wireshark.org/security/wnpa-sec-2012-04.html - http://www.openwall.com/lists/oss-security/2012/03/28/13 - https://bugs.wireshark.org/bugz
urity/wnpa-sec-2012-04.html - http://www.openwall.com/lists/oss-security/2012/03/28/13 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6823 - http://lists.opensuse.org/opensuse-updates/2012-04/msg00060.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078770.html - http://secunia.com/advisories/48548 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078769.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14991 - http://www.securitytracker.com/id?1026874 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=40962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74361
CVE ID: CVE-2012-1594 State: PUBLISHED Published: 2012-04-11T10:00:00 Last Updated: 2024-08-06T19:01:02.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2012-05.html - http://www.openwall.com/lists/oss-security/2012/03/28/13 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74362 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6809 - https://oval.cisecurity.org/repository/sear
abilities/74362 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6809 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15244 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=40967 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078770.html - http://www.securityfocus.com/bid/52738 - http://secunia.com/advisories/48548 - http://www.securitytracker.com/id?1026874
CVE ID: CVE-2012-1595 State: PUBLISHED Published: 2012-04-11T10:00:00 Last Updated: 2024-08-06T19:01:02.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pcap_process_pseudo_header function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a WTAP_ENCAP_ERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size, related to the pcap and pcap-ng file parsers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52737 - http://secunia.com/advisories/48986 - https://oval.cisecurity.org/repository/
- http://www.securityfocus.com/bid/52737 - http://secunia.com/advisories/48986 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15548 - http://www.openwall.com/lists/oss-security/2012/03/28/13 - http://secunia.com/advisories/48947 - http://lists.opensuse.org/opensuse-updates/2012-04/msg00060.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078770.html - http://www.wireshark.org/security/wnpa-sec-2012-06.html - http://www.wireshark.org/news/20120327.html - http://secunia.com/advisories/48548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74364 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/07876
e.xforce.ibmcloud.com/vulnerabilities/74364 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078769.html - http://www.securitytracker.com/id?1026874 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6804 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=41008
CVE ID: CVE-2012-1596 State: PUBLISHED Published: 2012-04-11T10:00:00 Last Updated: 2024-08-06T19:01:02.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp2t_process_fragmented_payload function in epan/dissectors/packet-mp2t.c in the MP2T dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a packet containing an invalid pointer value that triggers an incorrect memory-allocation attempt. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2012-07.html - http://secunia.com/advisories/48986 - http://www.openwall.com/lists/oss-secur
shark.org/security/wnpa-sec-2012-07.html - http://secunia.com/advisories/48986 - http://www.openwall.com/lists/oss-security/2012/03/28/13 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74363 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6833 - http://lists.opensuse.org/opensuse-updates/2012-04/msg00060.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=41001 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078770.html - http://www.securityfocus.com/bid/52736 - http://secunia.com/advisories/48548 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078769.html - http://www.securitytracker.com/id?1026874 - https://oval.cise
ct.org/pipermail/package-announce/2012-April/078769.html - http://www.securitytracker.com/id?1026874 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15194
CVE ID: CVE-2012-1597 State: PUBLISHED Published: 2012-08-17T00:00:00Z Last Updated: 2024-09-16T18:49:23.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezsystems/ezjscore/commit/58854564c7b8672090c25c4b1677d08620d870f2 - http://www.openwall.com/lists/oss-security/2012/05/11/6 - http://share.ez.no/community-project/security-advisories/ezsa-2012-006-xss-exploit-on-ezjscor
ss-security/2012/05/11/6 - http://share.ez.no/community-project/security-advisories/ezsa-2012-006-xss-exploit-on-ezjscore-run-command-when-using-firefox
CVE ID: CVE-2012-1598 State: PUBLISHED Published: 2012-12-03T21:00:00Z Last Updated: 2024-09-16T17:42:51.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 1.5.x before 1.5.26 has unspecified impact and attack vectors related to "insufficient randomness" and a "password reset vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/27/6 - http://www.openwall.com/lists/oss-security/2012/03/29/5 - http://developer.joomla.org/security/news/396-20120305-core-password-change.html
CVE ID: CVE-2012-1599 State: PUBLISHED Published: 2012-12-03T21:00:00Z Last Updated: 2024-09-16T22:40:52.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 1.5.x before 1.5.26 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end information" via unknown vectors. NOTE: this might be a duplicate of CVE-2012-1611. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/29/5 - http://developer.joomla.org/security/news/397-20120306-core-information-disclosure.html
CVE ID: CVE-2012-1600 State: PUBLISHED Published: 2014-05-14T00:00:00 Last Updated: 2024-08-06T19:01:02.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52761 - http://www.postgresql.org/message-id/4F6B447C.6080204%40dalibo.com - http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html - http://www.openwall.com/lists/oss-security/2012/03/29/6 - https://github.com/phppgadmin/
updates/2012-04/msg00033.html - http://www.openwall.com/lists/oss-security/2012/03/29/6 - https://github.com/phppgadmin/phppgadmin/commit/74174ad639664b52cc1609ede0af8bc403e98a00 - https://github.com/phppgadmin/phppgadmin/commit/e92a003624609a445c4cf57c9c3d1fcef0eae47c#diff-0 - http://www.openwall.com/lists/oss-security/2012/03/30/7 - http://secunia.com/advisories/48574 - http://sourceforge.net/p/phppgadmin/mailman/message/28783470/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/74440 - https://bugzilla.redhat.com/show_bug.cgi?id=808439 - http://www.openwall.com/lists/oss-security/2012/03/28/11 - http://www.osvdb.org/80870
CVE ID: CVE-2012-1601 State: PUBLISHED Published: 2012-05-17T10:00:00 Last Updated: 2024-08-06T19:01:02.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of service (NULL pointer dereference and host OS crash) by making a KVM_CREATE_IRQCHIP ioctl call after a virtual CPU already exists. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/9c895160d25a76c21b65bad141b08e8d4f99afef - https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html - http://www.debian.org/security/2012/dsa-2469 - http://www.openwall.com/lis