Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
1434 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html - https://bugzilla.mozilla.org/show_bug.cgi?id=736537 - http://secunia.com/advisories/51439 - http://secunia.com/advisories/51440 - http://www.ubuntu.com/usn/USN-1638-1 - http://www.securityfocus.com/bid/56611 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html - http://secunia.com/advisories/51359 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:173 - https://bugzilla.mozilla.org/show_bug.cgi?id=802168 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html - http://secunia.com/advisories/51381 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ov
tml - http://secunia.com/advisories/51381 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16573 - http://www.debian.org/security/2012/dsa-2583 - https://bugzilla.mozilla.org/show_bug.cgi?id=793848 - http://secunia.com/advisories/51369 - https://bugzilla.mozilla.org/show_bug.cgi?id=805957 - http://secunia.com/advisories/51360 - http://www.mozilla.org/security/announce/2012/mfsa2012-91.html - http://www.debian.org/security/2012/dsa-2588 - https://bugzilla.mozilla.org/show_bug.cgi?id=809674
CVE ID: CVE-2012-5843 State: PUBLISHED Published: 2012-11-21T11:00:00 Last Updated: 2024-08-06T21:21:28.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=789075 - http://www.ubuntu.com/usn/USN-1638-3 - https://bugzilla.mozilla.org/show_bug.cgi?id=793253 - https://bugzilla.mozilla.org
ttp://www.ubuntu.com/usn/USN-1638-3 - https://bugzilla.mozilla.org/show_bug.cgi?id=793253 - https://bugzilla.mozilla.org/show_bug.cgi?id=784404 - http://secunia.com/advisories/51370 - http://www.ubuntu.com/usn/USN-1638-2 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html - https://bugzilla.mozilla.org/show_bug.cgi?id=774953 - https://bugzilla.mozilla.org/show_bug.cgi?id=798678 - http://www.ubuntu.com/usn/USN-1636-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html - https://bugzilla.mozilla.org/show_bug.cgi?id=788822 - https://bugzilla.mozilla.org/show_bug.cgi?id=795281 - http://secunia.com/advisories/51434 - http://lists.opensuse.org/opensuse-updat
illa.mozilla.org/show_bug.cgi?id=795281 - http://secunia.com/advisories/51434 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html - https://bugzilla.mozilla.org/show_bug.cgi?id=780778 - http://secunia.com/advisories/51439 - http://secunia.com/advisories/51440 - http://www.ubuntu.com/usn/USN-1638-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=797163 - https://bugzilla.mozilla.org/show_bug.cgi?id=781859 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html - https://bugzilla.mozilla.org/show_bug.cgi?id=791601 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html - http://secunia.com/advisories/51381 - https://bugzilla.mozilla.org/show_bug.cg
/opensuse-updates/2012-11/msg00092.html - http://secunia.com/advisories/51381 - https://bugzilla.mozilla.org/show_bug.cgi?id=787089 - https://bugzilla.mozilla.org/show_bug.cgi?id=765409 - https://bugzilla.mozilla.org/show_bug.cgi?id=760887 - http://secunia.com/advisories/51369 - http://www.mozilla.org/security/announce/2012/mfsa2012-91.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16839
CVE ID: CVE-2012-5844 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-5845 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-5846 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-5847 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-5848 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-5849 State: PUBLISHED Published: 2015-05-14T14:00:00 Last Updated: 2024-08-06T21:21:27.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) uid parameter in an add_friend action to ajax.php; id parameter in a (2) share_object, (3) add_to_fav, (4) rating, or (5) flag_object action to ajax.php; cid parameter in an (6) add_new_item, (7) remove_collection_item, (8) get_item, or (9) load_more_items action to ajax.php; (10) ci_id parameter in a get_item action to ajax.php; user parameter to (11) user_contacts.php or (12)
on to ajax.php; (10) ci_id parameter in a get_item action to ajax.php; user parameter to (11) user_contacts.php or (12) view_channel.php; (13) pid parameter to view_page.php; (14) tid parameter to view_topic.php; or (15) v parameter to watch_video.php. Additional Analyst Notes: - CVE Program Container: References: - http://forums.clip-bucket.com/showthread.php?12527-Security-Fix-ClipBucket-2-6-SQL-Injections-fix-%28Updated%29 - http://www.exploit-db.com/exploits/23252 - http://osvdb.org/88175 - http://sourceforge.net/projects/clipbucket/files/ClipBucket%20v2/ - http://osvdb.org/88177 - http://www.securityfocus.com/bid/56854 - http://osvdb.org/88179 - http://osvdb.org/88180 - http://archives.
.org/88177 - http://www.securityfocus.com/bid/56854 - http://osvdb.org/88179 - http://osvdb.org/88180 - http://archives.neohapsis.com/archives/bugtraq/2012-12/0063.html - http://archives.neohapsis.com/archives/bugtraq/2012-12/0056.html - http://osvdb.org/88178 - https://www.htbridge.com/advisory/HTB23125 - http://osvdb.org/88176
CVE ID: CVE-2012-5851 State: PUBLISHED Published: 2012-11-15T11:00:00 Last Updated: 2024-08-06T21:21:27.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not consider all possible output contexts of reflected data, which makes it easier for remote attackers to bypass a cross-site scripting (XSS) protection mechanism via a crafted string, aka rdar problem 12019108. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80072 - http://blog.opensecurityresearch.com/2012/09/simple-cross-site-scripting-vector-that.
mcloud.com/vulnerabilities/80072 - http://blog.opensecurityresearch.com/2012/09/simple-cross-site-scripting-vector-that.html - https://bugs.webkit.org/show_bug.cgi?id=92692
CVE ID: CVE-2012-5853 State: PUBLISHED Published: 2015-01-08T01:00:00 Last Updated: 2024-08-06T21:21:28.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the "the_search_function" function in cardoza_ajax_search.php in the AJAX Post Search (cardoza-ajax-search) plugin before 1.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the srch_txt parameter in a "the_search_text" action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/cardoza-ajax-search/changelog/ - http://seclists.org/bugtraq/2012/Nov/33
CVE ID: CVE-2012-5854 State: PUBLISHED Published: 2012-11-19T11:00:00 Last Updated: 2024-08-06T21:21:27.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in WeeChat 0.3.6 through 0.3.9 allows remote attackers to cause a denial of service (crash or hang) and possibly execute arbitrary code via crafted IRC colors that are not properly decoded. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/87279 - http://www.securityfocus.com/bid/56482 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092536.html - http://secunia.com/advisories/51377 - http://lists.opensuse.org/opensuse-security-announce/2013-01
ovember/092536.html - http://secunia.com/advisories/51377 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00018.html - https://savannah.nongnu.org/bugs/?37704 - http://www.openwall.com/lists/oss-security/2012/11/12/2 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0330 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00087.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092228.html - http://weechat.org/security/ - http://www.mandriva.com/security/advisories?name=MDVSA-2013:136 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092490.html
CVE ID: CVE-2012-5855 State: PUBLISHED Published: 2013-07-10T19:00:00 Last Updated: 2024-08-06T21:21:27.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue crosses privilege boundaries or whether it can be exploited without user interaction. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/524626 - https://oval.cisecurity.org/repos
- CVE Program Container: References: - http://www.securityfocus.com/archive/1/524626 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16781 - http://marc.info/?l=oss-security&m=135274330022215&w=2
CVE ID: CVE-2012-5856 State: PUBLISHED Published: 2012-11-17T19:00:00 Last Updated: 2024-08-06T21:21:27.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Uk Cookie (aka uk-cookie) plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/118053/WordPress-UK-Cookie-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/56509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80047
CVE ID: CVE-2012-5858 State: PUBLISHED Published: 2012-12-03T21:00:00 Last Updated: 2024-08-06T21:21:27.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-middle attackers to read arbitrary phone contents by spoofing or controlling the IP address. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/118154/Kies-Air-Denial-Of-Service-Authorization-Bypass.html - http://archives.neohapsis.com/archives/bugtraq/2012-11/0061.html - http://www.securityfocus.com/bid/56560 - https://exchange.xforce.ibmcloud.com/vulnerabili
es/bugtraq/2012-11/0061.html - http://www.securityfocus.com/bid/56560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80092
CVE ID: CVE-2012-5859 State: PUBLISHED Published: 2012-12-03T21:00:00 Last Updated: 2024-08-06T21:21:27.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Kies Air 2.1.207051 and 2.1.210161 allows remote attackers to cause a denial of service (crash) via a crafted request to www/apps/KiesAir/jws/ssd.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/118154/Kies-Air-Denial-Of-Service-Authorization-Bypass.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80091 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0061.html - http://www.securityfocus.com/bid/56560
CVE ID: CVE-2012-5860 State: PUBLISHED Published: 2012-11-14T11:00:00 Last Updated: 2024-08-06T21:21:27.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on Oberthur ID-One COSMO 5.2, 5.2a, and 64 smart cards makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging the generation of non-compliant public keys. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/659615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80039
CVE ID: CVE-2012-5861 State: PUBLISHED Published: 2012-11-23T11:00:00 Last Updated: 2025-07-08T15:23:14.405Z Severity: N/A (CVSS 7.8 AV:N/AC:L/Au:N/C:C/I:N/A:N) Vendors: Sinapsi Products: eSolar, eSolar DUO, eSolar Light Problem Types: CWE-89 Description: These Sinapsi devices do not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication within the device, attackers can leak information from the device. This could allow the attacker to compromise confidentiality. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/21273/ - http://archives.neohapsis.com/archives/bug
Program Container: References: - http://www.exploit-db.com/exploits/21273/ - http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80200 - https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01 - http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
CVE ID: CVE-2012-5862 State: PUBLISHED Published: 2012-11-23T11:00:00 Last Updated: 2025-07-08T15:29:24.539Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: Sinapsi Products: eSolar, eSolar DUO, eSolar Light Problem Types: CWE-259 Description: These Sinapsi devices store hard-coded passwords in the PHP file of the device. By using the hard-coded passwords in the device, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/21273/ - http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html - https://exchan
//www.exploit-db.com/exploits/21273/ - http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80200 - https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01 - http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
CVE ID: CVE-2012-5863 State: PUBLISHED Published: 2012-11-23T11:00:00 Last Updated: 2025-07-08T15:25:08.554Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: Sinapsi Products: eSolar, eSolar DUO, eSolar Light Problem Types: CWE-78 Description: These Sinapsi devices do not check for special elements in commands sent to the system. By accessing certain pages with administrative privileges that do not require authentication within the device, attackers can execute arbitrary, unexpected, or dangerous commands directly onto the operating system. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/21273/ - http://archives.neohapsis.com/arc
es: - CVE Program Container: References: - http://www.exploit-db.com/exploits/21273/ - http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80200 - https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01 - http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
CVE ID: CVE-2012-5864 State: PUBLISHED Published: 2012-11-23T11:00:00 Last Updated: 2025-07-08T15:27:10.014Z Severity: N/A (CVSS 9.4 AV:N/AC:L/Au:N/C:C/I:C/A:N) Vendors: Sinapsi Products: eSolar, eSolar DUO, eSolar Light Problem Types: CWE-287 Description: These Sinapsi devices do not check if users that visit pages within the device have properly authenticated. By directly visiting the pages within the device, attackers can gain unauthorized access with administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/21273/ - http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html - https://exchange.xforce.ibmcloud.com/v
loits/21273/ - http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80200 - https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01 - http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
CVE ID: CVE-2012-5865 State: PUBLISHED Published: 2014-10-20T15:00:00 Last Updated: 2024-08-06T21:21:28.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the activityid parameter in a stats action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/88184 - http://packetstormsecurity.com/files/118673/Achievo-1.4.5-Cross-Site-Scripting-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80570 - https://www.htbridge.com/advisory/HTB23126 - http://www.securityfocus.com/bid/56858
CVE ID: CVE-2012-5866 State: PUBLISHED Published: 2014-10-20T15:00:00 Last Updated: 2024-08-06T21:21:27.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/118673/Achievo-1.4.5-Cross-Site-Scripting-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80571 - https://www.htbridge.com/advisory/HTB23126 - http://www.securityfocus.com/bid/56858
CVE ID: CVE-2012-5867 State: PUBLISHED Published: 2020-01-23T14:07:41 Last Updated: 2024-08-06T21:21:26.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47095 - http://www.openwall.com/lists/oss-security/2012/11/14/15
CVE ID: CVE-2012-5868 State: PUBLISHED Published: 2012-12-27T11:00:00Z Last Updated: 2024-09-16T19:36:42.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack. Additional Analyst Notes: - CVE Program Container: References: - http://whiteoaksecurity.com/blog/2012/12/17/cve-2012-5868-wordpress-342-sessions-not-terminated-upon-explicit-user-logout
CVE ID: CVE-2012-5872 State: PUBLISHED Published: 2023-04-25T00:00:00.000Z Last Updated: 2025-02-03T21:05:45.720Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: ARC (aka ARC2) through 2011-12-01 allows blind SQL Injection in getTriplePatternSQL in ARC2_StoreSelectQueryHandler.php via comments in a SPARQL WHERE clause. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ush.it/2012/11/22/arc-v2011-12-01-multiple-vulnerabilities/
CVE ID: CVE-2012-5873 State: PUBLISHED Published: 2023-04-25T00:00:00.000Z Last Updated: 2025-02-03T21:01:43.573Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: ARC (aka ARC2) through 2011-12-01 allows reflected XSS via the end_point.php query parameter in an output=htmltab action. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ush.it/2012/11/22/arc-v2011-12-01-multiple-vulnerabilities/
CVE ID: CVE-2012-5874 State: PUBLISHED Published: 2013-01-12T02:00:00Z Last Updated: 2024-09-16T18:03:33.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the (1) update_whosonline_reg and (2) update_whosonline_guest functions in Elite Bulletin Board before 2.1.22 allow remote attackers to execute arbitrary SQL commands via the PATH_INFO to (a) checkuser.php, (b) groups.php, (c) index.php, (d) login.php, (e) quicklogin.php, (f) register.php, (g) Search.php, (h) viewboard.php, or (i) viewtopic.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/23575 - http://www.osvdb.org/88531 - http
tes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/23575 - http://www.osvdb.org/88531 - http://elite-board.us/Community/viewtopic.php?bid=1&tid=310 - https://www.htbridge.com/advisory/HTB23133 - http://packetstormsecurity.com/files/118962/Elite-Bulletin-Board-2.1.21-SQL-Injection.html - http://archives.neohapsis.com/archives/bugtraq/2012-12/0114.html - http://secunia.com/advisories/51622
CVE ID: CVE-2012-5875 State: PUBLISHED Published: 2013-01-18T11:00:00Z Last Updated: 2024-09-17T03:47:57.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefly Media Server 1.0.0.1359 allows remote attackers to cause a denial of service (NULL pointer dereference) via a (1) crafted Connection HTTP header; a return carriage control character in the (2) Accept Language header, (3) User-agent header, (4) Host header, or (5) protocol version; or a (6) crafted HTTP protocol version. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-12/0115.html - http://www.exploit-db.com/exploits/23574 - https://www.htbridge.com/a
neohapsis.com/archives/bugtraq/2012-12/0115.html - http://www.exploit-db.com/exploits/23574 - https://www.htbridge.com/advisory/HTB23129 - http://www.securitytracker.com/id?1027917
CVE ID: CVE-2012-5876 State: PUBLISHED Published: 2014-05-30T14:00:00 Last Updated: 2024-08-06T21:21:27.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service (crash) via a long string in the (1) request line or (2) HTTP Referer header to TCP port 54444, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81103 - http://www.osvdb.org/89150 - http://www.securityfocus.com/bid/57253 - http://archives.neohapsis.com/archives/bugtraq/201
http://www.osvdb.org/89150 - http://www.securityfocus.com/bid/57253 - http://archives.neohapsis.com/archives/bugtraq/2013-01/0037.html - http://osvdb.org/89149 - https://www.htbridge.com/advisory/HTB23130 - http://www.exploit-db.com/exploits/24022
CVE ID: CVE-2012-5877 State: PUBLISHED Published: 2014-05-30T14:00:00 Last Updated: 2024-08-06T21:21:27.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an HTTP header without a name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81107 - http://www.securityfocus.com/bid/57253 - http://archives.neohapsis.com/archives/bugtraq/2013-01/0037.html - http://osvdb.org/89151 - https://www.htbridge.com/advisory/HTB23130 - http://www.exploit-db.com/exploits/24022
CVE ID: CVE-2012-5878 State: PUBLISHED Published: 2020-01-03T19:30:28 Last Updated: 2024-08-06T21:21:28.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or (2) CSAttack.pl in frameworkgui/ or the (3) appURLPath parameter to frameworkgui/attachMobileModem.pl. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23123 - https://www.htbridge.com/advisory/HTB23127