Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2276 State: PUBLISHED Published: 2012-05-14T22:00:00 Last Updated: 2024-08-06T19:26:08.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via input data that (1) lacks FIPS fields or (2) has an invalid version number. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/522682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75553 - http://secunia.com/advisories/48690 - http://www.exploit-db.com/exploits/1
e.xforce.ibmcloud.com/vulnerabilities/75553 - http://secunia.com/advisories/48690 - http://www.exploit-db.com/exploits/18734 - http://www.securityfocus.com/bid/53475 - http://aluigi.org/adv/irm_1-adv.txt - http://www.securitytracker.com/id?1027058
CVE ID: CVE-2012-2277 State: PUBLISHED Published: 2012-05-14T22:00:00 Last Updated: 2024-08-06T19:26:08.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (pvcontrol.exe process hang) via \n (line feed) characters in the Id fields of many "batch begin untethered" commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/522682 - http://secunia.com/advisories/48690 - http://www.exploit-db.com/exploits/18734 - http://www.securityfocus.com/bid/53475 - http://aluigi.org/
dvisories/48690 - http://www.exploit-db.com/exploits/18734 - http://www.securityfocus.com/bid/53475 - http://aluigi.org/adv/irm_1-adv.txt - http://www.securitytracker.com/id?1027058 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75554
CVE ID: CVE-2012-2278 State: PUBLISHED Published: 2012-07-13T21:00:00 Last Updated: 2024-08-06T19:26:08.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the (1) Self-Service Console and (2) Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-07/0064.html
CVE ID: CVE-2012-2279 State: PUBLISHED Published: 2012-07-13T21:00:00 Last Updated: 2024-08-06T19:26:08.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-07/0064.html
CVE ID: CVE-2012-2280 State: PUBLISHED Published: 2012-07-13T21:00:00 Last Updated: 2024-08-06T19:26:09.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 do not properly use frames, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "Cross frame scripting vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-07/0064.html
CVE ID: CVE-2012-2281 State: PUBLISHED Published: 2012-07-05T14:00:00 Last Updated: 2024-08-06T19:26:09.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote attackers to conduct replay attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-07/0037.html - http://www.securitytracker.com/id?1027220
CVE ID: CVE-2012-2282 State: PUBLISHED Published: 2012-07-16T19:00:00 Last Updated: 2024-08-06T19:26:09.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 (aka MR1 SP3.2) and 2.2 before 2.2.0.19078 (aka MR2 SP0.2) do not properly implement NFS access control, which allows remote authenticated users to read or modify files via a (1) NFSv2, (2) NFSv3, or (3) NFSv4 request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-07/0063.html - http://www.securitytracker.com/id?1027242
CVE ID: CVE-2012-2283 State: PUBLISHED Published: 2012-08-16T10:00:00Z Last Updated: 2024-09-17T01:00:50.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Iomega Home Media Network Hard Drive with EMC Lifeline firmware before 2.104, Home Media Network Hard Drive Cloud Edition with EMC Lifeline firmware before 3.2.3.15290, iConnect with EMC Lifeline firmware before 2.5.26.18966, and StorCenter with EMC Lifeline firmware before 2.0.18.23122, 2.1.x before 2.1.42.18967, and 3.x before 3.2.3.15290 allow remote authenticated users to read or modify data on arbitrary remote shares via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://arch
rary remote shares via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-08/0056.html
CVE ID: CVE-2012-2284 State: PUBLISHED Published: 2012-10-18T17:00:00 Last Updated: 2024-08-06T19:26:08.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86157 - http://secunia.com/advisories/50957 - http://www.securityfocus.com/bid/55883 - http://www.securitytracker.com/id?1027647 - http://archives.neohapsis.com/archives/bugtraq/2
curityfocus.com/bid/55883 - http://www.securitytracker.com/id?1027647 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html
CVE ID: CVE-2012-2285 State: PUBLISHED Published: 2012-08-29T22:00:00 Last Updated: 2024-08-06T19:26:09.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Cloud Tiering Appliance (aka CTA, formerly FMA) 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition (CTA/VE) 9.0 and earlier, allows remote attackers to obtain GUI administrative access by sending a crafted file during the authentication phase. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78110 - http://www.securitytracker.com/id?1027448 - http://archives.neohapsis.com/archives/bugtraq/2012-08/0184.html - http://osvdb.org/85050 - http://secun
om/id?1027448 - http://archives.neohapsis.com/archives/bugtraq/2012-08/0184.html - http://osvdb.org/85050 - http://secunia.com/advisories/50393
CVE ID: CVE-2012-2286 State: PUBLISHED Published: 2012-10-10T21:00:00 Last Updated: 2024-08-06T19:26:09.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55842 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0036.html
CVE ID: CVE-2012-2287 State: PUBLISHED Published: 2012-09-25T10:00:00 Last Updated: 2024-08-06T19:26:08.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authentication functionality in EMC RSA Authentication Agent 7.1 and RSA Authentication Client 3.5 on Windows XP and Windows Server 2003, when an unspecified configuration exists, allows remote authenticated users to bypass an intended token-authentication step, and establish a login session to a remote host, by leveraging Windows credentials for that host. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78802 - h
r: References: - http://www.securityfocus.com/bid/55662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78802 - http://archives.neohapsis.com/archives/bugtraq/2012-09/0102.html
CVE ID: CVE-2012-2288 State: PUBLISHED Published: 2012-09-04T10:00:00 Last Updated: 2024-08-06T19:26:09.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55330 - http://archives.neohapsis.com/archives/bugtraq/2012-08/0219.html - http://www.securitytracker.com/id?1027459
CVE ID: CVE-2012-2289 State: PUBLISHED Published: 2012-08-26T01:00:00 Last Updated: 2024-08-06T19:26:09.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC ApplicationXtender Desktop before 6.5 SP2 and ApplicationXtender Web Access .NET before 6.5 SP2 allow remote attackers to upload files to any location, and possibly execute arbitrary code, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-08/0168.html - http://www.securitytracker.com/id?1027442
CVE ID: CVE-2012-2290 State: PUBLISHED Published: 2012-10-18T17:00:00 Last Updated: 2024-08-06T19:26:09.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50957 - http://osvdb.org/86158 - http://www.securityfocus.com/bid/55883 - http://www.securitytracker.com/id?1027647 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html
CVE ID: CVE-2012-2291 State: PUBLISHED Published: 2013-01-21T21:00:00Z Last Updated: 2024-09-17T01:06:37.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-01/0086.html
CVE ID: CVE-2012-2292 State: PUBLISHED Published: 2013-02-06T11:00:00Z Last Updated: 2024-09-17T00:35:57.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 does not restrict access to the Archer application, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html
CVE ID: CVE-2012-2293 State: PUBLISHED Published: 2013-02-06T11:00:00Z Last Updated: 2024-09-16T22:36:29.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allows remote authenticated users to upload files, and consequently execute arbitrary code, via a relative path. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html
CVE ID: CVE-2012-2294 State: PUBLISHED Published: 2013-02-06T11:00:00Z Last Updated: 2024-09-16T20:32:27.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allow remote attackers to conduct clickjacking attacks via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html
CVE ID: CVE-2012-2295 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2296 State: PUBLISHED Published: 2012-07-25T21:00:00 Last Updated: 2024-08-06T19:26:09.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Janrain Engage (formerly RPX) module for Drupal 6.x-1.x. 6.x-2.x before 6.x-2.2, and 7.x-2.x before 7.x-2.2 stores user profile data from Engage in session tables, which might allow remote attackers to obtain sensitive information by leveraging a separate vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1515282 - http://drupal.org/node/1515114 - http://www.openwall.com/lists/oss-security/2012/04/10/12 - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://dr
/www.openwall.com/lists/oss-security/2012/04/10/12 - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://drupal.org/node/1515120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74616 - http://www.openwall.com/lists/oss-security/2012/05/03/1
CVE ID: CVE-2012-2297 State: PUBLISHED Published: 2012-08-26T21:00:00 Last Updated: 2024-08-06T19:26:09.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Creative Commons module 6.x-1.x before 6.x-1.1 for Drupal allow remote authenticated users with the administer creative commons permission to inject arbitrary web script or HTML via the (1) creativecommons_user_message or (2) creativecommons_site_license_additional_text parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.madirish.net/content/drupal-creative-commons-6x-10-xss-vulnerability - http://www.securityfocus.com/bid/53248 - htt
/www.madirish.net/content/drupal-creative-commons-6x-10-xss-vulnerability - http://www.securityfocus.com/bid/53248 - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://secunia.com/advisories/48937 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75180 - http://www.openwall.com/lists/oss-security/2012/05/03/1 - http://drupal.org/node/1547520 - http://drupal.org/node/1547478
CVE ID: CVE-2012-2298 State: PUBLISHED Published: 2012-08-14T22:00:00 Last Updated: 2024-08-06T19:26:09.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) "user names in page titles" and (2) "autocomplete callbacks." Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/realname.git/commitdiff/b920794 - http://drupal.org/node/1547660 - http://secunia.com/advisories/48936 - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://www.sec
1547660 - http://secunia.com/advisories/48936 - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://www.securityfocus.com/bid/53250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75181 - http://drupal.org/node/1547352 - http://drupalcode.org/project/realname.git/commitdiff/41786d0 - http://www.openwall.com/lists/oss-security/2012/05/03/1
CVE ID: CVE-2012-2299 State: PUBLISHED Published: 2012-08-14T22:00:00Z Last Updated: 2024-09-17T02:01:08.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal stores passwords for new customers in plaintext during checkout, which allows local users to obtain sensitive information by reading from the database. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://secunia.com/advisories/48935 - http://drupal.org/node/1547674 - http://drupal.org/node/1547508 - http://drupalcode.org/project/ubercart.git/commitdiff/035d2cb - http://
/node/1547674 - http://drupal.org/node/1547508 - http://drupalcode.org/project/ubercart.git/commitdiff/035d2cb - http://drupalcode.org/project/ubercart.git/commitdiff/8c61e84 - http://www.openwall.com/lists/oss-security/2012/05/03/1 - http://www.securityfocus.com/bid/53251 - http://drupal.org/node/1547506
CVE ID: CVE-2012-2300 State: PUBLISHED Published: 2012-08-14T22:00:00Z Last Updated: 2024-09-16T17:03:37.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal allow remote authenticated users with the administer product classes permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://secunia.com/advisories/48935 - http://drupal.org/node/1547674 - http://drupal.org/node/1547508 - http://www.openwall.com/
ecunia.com/advisories/48935 - http://drupal.org/node/1547674 - http://drupal.org/node/1547508 - http://www.openwall.com/lists/oss-security/2012/05/03/1 - http://drupalcode.org/project/ubercart.git/commitdiff/dfd8658 - http://www.securityfocus.com/bid/53251 - http://drupalcode.org/project/ubercart.git/commitdiff/3e7c0b8 - http://drupal.org/node/1547506
CVE ID: CVE-2012-2301 State: PUBLISHED Published: 2014-11-16T02:00:00 Last Updated: 2024-08-06T19:26:09.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ubercart module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer product classes" permission to execute arbitrary PHP code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://drupal.org/node/1547506 - http://secunia.com/advisories/48935 - http://drupal.org/node/1547674 - http://www.openwall.com/lists/oss-security/2012/05/03/1 - http://www.securityfocus.com/bid/53251 - http://drupal.
7674 - http://www.openwall.com/lists/oss-security/2012/05/03/1 - http://www.securityfocus.com/bid/53251 - http://drupal.org/node/1547508
CVE ID: CVE-2012-2302 State: PUBLISHED Published: 2012-07-25T21:00:00Z Last Updated: 2024-09-17T03:13:34.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Site Documentation (Sitedoc) module for Drupal 6.x-1.x before 6.x-1.4 does not properly check the save location when archiving, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://drupal.org/node/1547686 - http://www.osvdb.org/81555 - http://drupal.org/node/1546224 - http://drupalcode.org/project/sitedoc.git/commitdiff/521721c - http://www.openwall.com/lists/oss-s
al.org/node/1546224 - http://drupalcode.org/project/sitedoc.git/commitdiff/521721c - http://www.openwall.com/lists/oss-security/2012/05/03/1
CVE ID: CVE-2012-2303 State: PUBLISHED Published: 2012-07-18T18:00:00 Last Updated: 2024-08-06T19:26:09.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remote attackers to obtain sensitive information and possibly have other impacts via unspecified vectors to the (1) Spaces or (2) Spaces OG module. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1547736 - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://www.osvdb.org/81556 - http://drupalcode.org/project/spaces.git/commitdiff/cee919c - http://www.securityfoc
03/2 - http://www.osvdb.org/81556 - http://drupalcode.org/project/spaces.git/commitdiff/cee919c - http://www.securityfocus.com/bid/53252 - http://drupal.org/node/1547730 - http://www.openwall.com/lists/oss-security/2012/05/03/1 - http://secunia.com/advisories/48930
CVE ID: CVE-2012-2304 State: PUBLISHED Published: 2012-08-14T22:00:00 Last Updated: 2024-08-06T19:26:09.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linkit module 7.x-2.x before 7.x-2.3 for Drupal, when using an entity access module, does not check permissions when searching for entities, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75183 - http://www.osvdb.org/81557 - http://secunia.com/advisories/48900 - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://www.securityfocus.com/bid/53253 - http://d
ries/48900 - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://www.securityfocus.com/bid/53253 - http://drupal.org/node/1547716 - http://www.openwall.com/lists/oss-security/2012/05/03/1 - http://drupal.org/node/1547738
CVE ID: CVE-2012-2305 State: PUBLISHED Published: 2012-07-25T21:00:00Z Last Updated: 2024-09-16T18:29:40.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Node Gallery module for Drupal 6.x-3.1 and earlier allows remote attackers to hijack the authentication of certain users for requests that create node galleries. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1557852 - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://www.openwall.com/lists/oss-security/2012/05/03/1
CVE ID: CVE-2012-2306 State: PUBLISHED Published: 2012-07-25T21:00:00Z Last Updated: 2024-09-16T17:54:16.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://www.openwall.com/lists/oss-security/2012/05/03/1 - http://drupal.org/node/1557868
CVE ID: CVE-2012-2307 State: PUBLISHED Published: 2012-07-25T21:00:00Z Last Updated: 2024-09-16T23:22:14.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://www.openwall.com/lists/oss-security/2012/05/03/1 - http://drupal.org/node/1557868
CVE ID: CVE-2012-2308 State: PUBLISHED Published: 2012-07-25T21:00:00 Last Updated: 2024-08-06T19:26:09.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Taxonomy Grid : Catalog module for Drupal 6.x-1.6 and earlier allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/03/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75345 - http://www.openwall.com/lists/oss-security/2012/05/03/1 - http://www.securityfocus.com/bid/53345 - http://drupal.or
45 - http://www.openwall.com/lists/oss-security/2012/05/03/1 - http://www.securityfocus.com/bid/53345 - http://drupal.org/node/1557872