Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-5476 State: PUBLISHED Published: 2019-12-30T19:02:14 Last Updated: 2024-08-06T21:05:47.286Z Vendors: openstack-dashboard Products: openstack-dashboard Problem Types: Other Description: Within the RHOS Essex Preview (2012.2) of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the admin password and token value. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-5476 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5476 - https://access.redhat.com/security/cve/cve-2012-5476
CVE ID: CVE-2012-5477 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T21:05:47.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify files created by the daemon via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://theforeman.org/security.html - http://projects.theforeman.org/issues/1929
CVE ID: CVE-2012-5478 State: PUBLISHED Published: 2013-02-05T23:11:00 Last Updated: 2024-08-06T21:05:47.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-2013-0198.html - http://rhn
nces: - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-2013-0198.html - http://rhn.redhat.com/errata/RHSA-2013-0195.html - http://rhn.redhat.com/errata/RHSA-2013-0221.html - http://www.osvdb.org/89580 - http://rhn.redhat.com/errata/RHSA-2013-0196.html - http://rhn.redhat.com/errata/RHSA-2013-0193.html - http://secunia.com/advisories/51984 - http://securitytracker.com/id?1028042 - http://secunia.com/advisories/52054 - http://rhn.redhat.com/errata/RHSA-2013-0191.html - http://rhn.redhat.com/errata/RHSA-2013-0533.html - http://rhn.redhat.com/errata/RHSA-2013-0197.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/81514 - http://rhn.redhat.com/errat
om/errata/RHSA-2013-0197.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/81514 - http://rhn.redhat.com/errata/RHSA-2013-0194.html
CVE ID: CVE-2012-5479 State: PUBLISHED Published: 2012-11-21T11:00:00 Last Updated: 2024-08-06T21:05:47.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to upload and execute files via a modified Portfolio API callback. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56505 - https://moodle.org/mod/forum/discuss.php?d=216159 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36346 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-33791 - http://openwall.com/lis
mmit&s=MDL-36346 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-33791 - http://openwall.com/lists/oss-security/2012/11/19/1
CVE ID: CVE-2012-5480 State: PUBLISHED Published: 2012-11-21T11:00:00 Last Updated: 2024-08-06T21:05:47.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56505 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-35558 - https://moodle.org/mod/forum/discuss.php?d=216160 - http://openwall.com/lists/oss-security/2012/11/19/1
CVE ID: CVE-2012-5481 State: PUBLISHED Published: 2012-11-21T11:00:00 Last Updated: 2024-08-06T21:05:47.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.3.x before 2.3.3 allows remote authenticated users to bypass the moodle/role:manage capability requirement and read all capability data by visiting the Check Permissions page. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=216161 - http://www.securityfocus.com/bid/56505 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-35381 - http://openwall.com/lists/oss-security/2012/11/19/1
CVE ID: CVE-2012-5482 State: PUBLISHED Published: 2012-11-11T11:00:00 Last Updated: 2024-08-06T21:05:47.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4573. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51174 - https://github.com/openstack/glance/commit/b591304b8980d8aca8fa6cda9ea1621aca000c88 - http://www.openwall.com/lists/oss-security/2012/11/08/2 - https://bugs.launchpad.
304b8980d8aca8fa6cda9ea1621aca000c88 - http://www.openwall.com/lists/oss-security/2012/11/08/2 - https://bugs.launchpad.net/glance/+bug/1076506 - http://www.securityfocus.com/bid/56437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80019 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092192.html - http://www.openwall.com/lists/oss-security/2012/11/07/6 - http://www.openwall.com/lists/oss-security/2012/11/09/5 - http://osvdb.org/87248 - https://github.com/openstack/glance/commit/fc0ee7623ec59c87ac6fc671e95a9798d6f2e2c3 - http://www.openwall.com/lists/oss-security/2012/11/09/1 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00002.html
CVE ID: CVE-2012-5483 State: PUBLISHED Published: 2012-12-26T22:00:00 Last Updated: 2024-08-06T21:05:47.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable permissions for /etc/keystone/ec2rc, which allows local users to obtain access to EC2 services by reading administrative access and secret values from this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56888 - http://rhn.redhat.com/errata/RHSA-2012-1556.html - https://bugzilla.redhat.com/show_bug.cgi?id=873447 - https://exchang
http://rhn.redhat.com/errata/RHSA-2012-1556.html - https://bugzilla.redhat.com/show_bug.cgi?id=873447 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80612 - http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html
CVE ID: CVE-2012-5484 State: PUBLISHED Published: 2013-01-27T18:00:00 Last Updated: 2024-08-06T21:05:47.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=31e41eea6c2322689826e6065ceba82551c565aa - http://www.freeipa.org/page/CVE-2012-5484 - http://www.freeipa.org/page/Releases/3.1.2 - http://git.fedorahosted.org/cgit/freeipa.git/commit
rg/page/CVE-2012-5484 - http://www.freeipa.org/page/Releases/3.1.2 - http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=a1991aeac19c3fec1fdd0d184c6760c90c9f9fc9 - http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=18eea90ebb24a9c22248f0b7e18646cc6e3e3e0f - http://rhn.redhat.com/errata/RHSA-2013-0188.html - http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=91f4af7e6af53e1c6bf17ed36cb2161863eddae4 - http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=a40285c5a0288669b72f9d991508d4405885bffc - http://rhn.redhat.com/errata/RHSA-2013-0189.html
CVE ID: CVE-2012-5485 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone-hotfix/releases/20121106 - http://rhn.redhat.com/errata/RHSA-2014-1194.html - https://plone.org/products/plone/security/advisories/201
s/20121106 - http://rhn.redhat.com/errata/RHSA-2014-1194.html - https://plone.org/products/plone/security/advisories/20121106/01
CVE ID: CVE-2012-5486 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/zope2/+bug/930812 - https://plone.org/products/plone/security/advisories/20121106/02 - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone-hotfix/releases/20121106 - http://rhn.redhat.com/errata/RHSA-2014-1194.html
CVE ID: CVE-2012-5487 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/03 - https:/
penwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/03 - https://plone.org/products/plone-hotfix/releases/20121106
CVE ID: CVE-2012-5488 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to createObject. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/04 - https://plone.org/products/plone-hotfix/releases/20121106 - http://rhn.redhat.com/errata/RHSA-2014-1194.html
CVE ID: CVE-2012-5489 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/05 - https://b
nwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/05 - https://bugs.launchpad.net/zope2/+bug/1079238 - https://plone.org/products/plone-hotfix/releases/20121106
CVE ID: CVE-2012-5490 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in kssdevel.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - https://plone.org/products/plone/security/advisories/20121106/06 - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone-hotfix/releases/20121106
CVE ID: CVE-2012-5491 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: z3c.form, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain the default form field values by leveraging knowledge of the form location and the element id. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/07 - https://plone.org/products/plone-hotfix/releases/20121106
CVE ID: CVE-2012-5492 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: uid_catalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to obtain metadata about hidden objects via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/08 - https://plone.org/products/plone-hotfix/releases/20121106
CVE ID: CVE-2012-5493 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: gtbn.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions to bypass the Python sandbox and execute arbitrary Python code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/09 - https://plone.org/products/plone-hotfix/releases/20121106
CVE ID: CVE-2012-5494 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "{u,}translate." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/10 - https://plone.org/products/plone-hotfix/release
0/1 - https://plone.org/products/plone/security/advisories/20121106/10 - https://plone.org/products/plone-hotfix/releases/20121106
CVE ID: CVE-2012-5495 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to "go_back." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/11 - https://plone.org/products/plone-hotfix/releases/20121106
CVE ID: CVE-2012-5496 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: kupu_spellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service (ZServer thread lock) via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone-hotfix/releases/20121106 - https://plone.org/products/plone/security/advisories/20121106/12
CVE ID: CVE-2012-5497 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: membership_tool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone-hotfix/releases/20121106 - https://plone.org/products/plone/security/advisories/20121106/13 - http://rhn.redhat.com/errata/RHSA-2014-1194.html
CVE ID: CVE-2012-5498 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/14 - https://plone.org/products/plone-hotfix/releases/20121106 - http://www.openwall.com/lists/oss-secu
isories/20121106/14 - https://plone.org/products/plone-hotfix/releases/20121106 - http://www.openwall.com/lists/oss-security/2012/11/09/7 - http://rhn.redhat.com/errata/RHSA-2014-1194.html
CVE ID: CVE-2012-5499 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (memory consumption) via a large value, related to formatColumns. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/15 - https://plone.org/products/plone-hotfix/releases/20121106 - http://rhn.redhat.com/errata
curity/advisories/20121106/15 - https://plone.org/products/plone-hotfix/releases/20121106 - http://rhn.redhat.com/errata/RHSA-2014-1194.html
CVE ID: CVE-2012-5500 State: PUBLISHED Published: 2014-11-03T22:00:00 Last Updated: 2024-08-06T21:05:47.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/16 - https://plone.org/products/plone-hotfix/releases/201211
tps://plone.org/products/plone/security/advisories/20121106/16 - https://plone.org/products/plone-hotfix/releases/20121106 - http://rhn.redhat.com/errata/RHSA-2014-1194.html
CVE ID: CVE-2012-5501 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: at_download.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read arbitrary BLOBs (Files and Images) stored on custom content types via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/17 - https://plone.org/products/plone-hotfix/releases/20121106
CVE ID: CVE-2012-5502 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in safe_html.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with permissions to edit content to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone-hotfix/releases/20121106 - https://plone.org/products/plone/security/ad
/2012/11/10/1 - https://plone.org/products/plone-hotfix/releases/20121106 - https://plone.org/products/plone/security/advisories/20121106/18
CVE ID: CVE-2012-5503 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftp.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read hidden folder contents via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/products/plone/security/advisories/20121106/19 - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone-hotfix/releases/20121106
CVE ID: CVE-2012-5504 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in widget_traversal.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone-hotfix/releases/20121106 - https://plone.org/products/plone/security/advisories/20121106/20
CVE ID: CVE-2012-5505 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read private data structures via a request for a view without a name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone/security/advisories/20121106/21 - https://plone.org/products/plone-hotfix/releases/20121106