Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://www.securitytracker.com/id?1027833 - http://www.ubuntu.com/usn/USN-1685-1 - http://www.securityfocus.com/bid/56812 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html - http://svn.apache.org/viewvc?view=revision&revision=1377892 - http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/realm/RealmBase.java?r1=1377892&r2=1377891&pathrev=1377892 - http://rhn.redhat.com/errata/RHSA-2013-0640.html - http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?r1=1377892&r2=1377891&pathrev=1377892 - http://rhn.redhat.com/errata/RHSA-2013-0163.html - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878 -
/errata/RHSA-2013-0163.html - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878 - http://rhn.redhat.com/errata/RHSA-2013-0164.html - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-2013-0198.html - http://rhn.redhat.com/errata/RHSA-2013-0641.html - http://archives.neohapsis.com/archives/bugtraq/2012-12/0044.html - http://tomcat.apache.org/security-7.html - http://rhn.redhat.com/errata/RHSA-2013-0004.html - http://rhn.redhat.com/errata/RHSA-2013-0195.html - http://rhn.redhat.com/errata/RHSA-2013-0221.html - http://rhn.redhat.com/errata/RHSA-2013-0196.html - http://rhn.redhat.com/errata/RHSA-2013-0147.html - https://ova
html - http://rhn.redhat.com/errata/RHSA-2013-0196.html - http://rhn.redhat.com/errata/RHSA-2013-0147.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19305 - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878 - http://rhn.redhat.com/errata/RHSA-2013-0158.html - http://rhn.redhat.com/errata/RHSA-2013-0193.html - http://rhn.redhat.com/errata/RHSA-2013-0157.html - http://secunia.com/advisories/51984 - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/52054 - http://secunia.com/advisories/57126 - http://rhn.redhat.com/errata/RHSA-2013-0146.html - http://lists.opensuse.org/opensuse-updates/20
.com/advisories/57126 - http://rhn.redhat.com/errata/RHSA-2013-0146.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html - http://rhn.redhat.com/errata/RHSA-2013-0191.html - http://rhn.redhat.com/errata/RHSA-2013-0623.html - http://rhn.redhat.com/errata/RHSA-2013-0197.html - http://rhn.redhat.com/errata/RHSA-2013-0235.html - http://rhn.redhat.com/errata/RHSA-2013-0642.html - http://rhn.redhat.com/errata/RHSA-2013-0194.html - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://rhn.redhat.com/errata/RHSA-2013-0005.html - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html - http://rhn.redhat.com/errata/R
=139344343412337&w=2 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html - http://rhn.redhat.com/errata/RHSA-2013-0162.html - http://rhn.redhat.com/errata/RHSA-2013-0151.html
CVE ID: CVE-2012-3547 State: PUBLISHED Published: 2012-09-18T17:00:00 Last Updated: 2024-08-06T20:13:49.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via a long "not after" timestamp in a client certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50584 - http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html - http://secunia.com/advisories/50637 - http://www.ubuntu.com/usn/
com/archives/security-announce/2013/Oct/msg00006.html - http://secunia.com/advisories/50637 - http://www.ubuntu.com/usn/USN-1585-1 - http://rhn.redhat.com/errata/RHSA-2012-1327.html - http://secunia.com/advisories/50484 - http://www.debian.org/security/2012/dsa-2546 - http://www.securityfocus.com/bid/55483 - http://www.securitytracker.com/id?1027509 - http://www.pre-cert.de/advisories/PRE-SA-2012-06.txt - http://archives.neohapsis.com/archives/bugtraq/2012-09/0043.html - http://www.openwall.com/lists/oss-security/2012/09/10/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:159 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00023.html - https://exchange.xforce
me=MDVSA-2012:159 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00023.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78408 - http://rhn.redhat.com/errata/RHSA-2012-1326.html - http://osvdb.org/85325 - http://secunia.com/advisories/50770 - http://freeradius.org/security.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090171.html
CVE ID: CVE-2012-3548 State: PUBLISHED Published: 2012-08-30T22:00:00 Last Updated: 2024-08-06T20:13:50.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a small value for a certain length field in a capture file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15646 - http://openwall.com/lists/oss-security/2012/08/29/4 - http://secunia.com/advisories/54425 - https://bu
l%3Adef%3A15646 - http://openwall.com/lists/oss-security/2012/08/29/4 - http://secunia.com/advisories/54425 - https://bugzilla.redhat.com/show_bug.cgi?id=849926 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7666 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://www.securitytracker.com/id?1027464
CVE ID: CVE-2012-3549 State: PUBLISHED Published: 2012-10-09T23:00:00Z Last Updated: 2024-09-16T17:38:02.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted ASCONF chunk. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/54797 - http://www.openwall.com/lists/oss-security/2012/08/28/9 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686962 - http://www.openwall.com/lists/oss-security/2012/08/29/6 - http://www.exploit-db.com/exploits/20226
CVE ID: CVE-2012-3550 State: REJECTED Published: 2017-07-21T19:00:00 Last Updated: 2017-07-21T18:57:01 Description: No description available.
CVE ID: CVE-2012-3551 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-09-17T00:41:24.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in crowbar_framework/app/views/support/index.html.haml in the Crowbar barclamp in Crowbar, possibly 1.4 and earlier, allows remote attackers to inject arbitrary web script or HTML via the file parameter to /utils. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/31/1 - https://bugzilla.novell.com/show_bug.cgi?id=771840 - https://github.com/SUSE-Cloud/barclamp-crowbar/commit/a82ed926c6e3ba2b0cada213c35e4b00f34ea629 - htt
bug.cgi?id=771840 - https://github.com/SUSE-Cloud/barclamp-crowbar/commit/a82ed926c6e3ba2b0cada213c35e4b00f34ea629 - https://github.com/SUSE-Cloud/barclamp-crowbar/commit/90e905b7668a1cc884fb70040f96c7a0a287de48 - http://www.securityfocus.com/bid/55315
CVE ID: CVE-2012-3552 State: PUBLISHED Published: 2012-10-03T10:00:00 Last Updated: 2024-08-06T20:13:50.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service (slab corruption and system crash) by sending packets to an application that sets socket options during the handling of network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1540.html - https://github.com/torvalds/linux/commit/f6d8bd051c391c1c0458a30b2a7abcd939329259 - http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0 - http:/
nux/commit/f6d8bd051c391c1c0458a30b2a7abcd939329259 - http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f6d8bd051c391c1c0458a30b2a7abcd939329259 - http://www.openwall.com/lists/oss-security/2012/08/31/11 - https://bugzilla.redhat.com/show_bug.cgi?id=853465
CVE ID: CVE-2012-3553 State: PUBLISHED Published: 2012-06-19T20:00:00Z Last Updated: 2024-09-17T04:25:46.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: chan_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related issue to CVE-2012-2948. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2012-009.html
CVE ID: CVE-2012-3554 State: PUBLISHED Published: 2012-08-10T10:00:00Z Last Updated: 2024-09-16T16:22:51.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html - http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142 - http://joomlacode.org/gf/project/rsgallery2/news/
CVE ID: CVE-2012-3555 State: PUBLISHED Published: 2012-06-14T19:00:00Z Last Updated: 2024-09-16T22:03:02.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site, related to a "hidden keyboard navigation" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/unix/1200/ - http://www.opera.com/docs/changelogs/mac/1165/ - http://www.opera.com/docs/changelogs/mac/1200/ - http://www.opera.co
- http://www.opera.com/docs/changelogs/mac/1165/ - http://www.opera.com/docs/changelogs/mac/1200/ - http://www.opera.com/support/kb/view/1021/ - http://www.opera.com/docs/changelogs/windows/1200/
CVE ID: CVE-2012-3556 State: PUBLISHED Published: 2012-06-14T19:00:00Z Last Updated: 2024-09-17T00:42:05.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/unix/1200/ - http://www.opera.com/support/kb/view/1020/ - http://www.opera.com/docs/changelogs/mac/1165/ - http://www.opera.com/docs/changelog
w.opera.com/support/kb/view/1020/ - http://www.opera.com/docs/changelogs/mac/1165/ - http://www.opera.com/docs/changelogs/mac/1200/ - http://www.opera.com/docs/changelogs/windows/1200/
CVE ID: CVE-2012-3557 State: PUBLISHED Published: 2012-06-14T19:00:00Z Last Updated: 2024-09-16T20:12:47.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/unix/1200/ - http://www.opera.com/support/kb/view/1019/ - http://www.opera.com/docs/changelogs/mac/1165/ - http://www.opera.com/docs/changelogs/mac/1200/ - http://www.opera.com/docs/changelogs/windows/120
changelogs/mac/1165/ - http://www.opera.com/docs/changelogs/mac/1200/ - http://www.opera.com/docs/changelogs/windows/1200/
CVE ID: CVE-2012-3558 State: PUBLISHED Published: 2012-06-14T19:00:00Z Last Updated: 2024-09-16T19:10:24.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/unix/1200/ - http://www.opera.com/docs/changelogs/mac/1165/ - http://www.opera.com/docs/changelogs/mac/1200/ - http://www.opera.com/support/kb/v
opera.com/docs/changelogs/mac/1165/ - http://www.opera.com/docs/changelogs/mac/1200/ - http://www.opera.com/support/kb/view/1018/ - http://www.opera.com/docs/changelogs/windows/1200/
CVE ID: CVE-2012-3559 State: PUBLISHED Published: 2012-06-14T19:00:00Z Last Updated: 2024-09-16T17:54:26.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 12.00 on Mac OS X has unknown impact and attack vectors, related to a "moderate severity issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1200/
CVE ID: CVE-2012-3560 State: PUBLISHED Published: 2012-06-14T19:00:00Z Last Updated: 2024-09-17T02:36:39.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigation, which makes it easier for remote attackers to conduct spoofing attacks by detecting and preventing attempts to load a different web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/unix/1200/ - http://www.opera.com/docs/changelogs/mac/1165/ - http://www.opera.com/docs/changelogs/mac/1200/ - http://blog.vulnhunt.com/index.php/2012/06/14/cal-2012-00
s/mac/1165/ - http://www.opera.com/docs/changelogs/mac/1200/ - http://blog.vulnhunt.com/index.php/2012/06/14/cal-2012-0015-opera-website-spoof/ - http://www.opera.com/docs/changelogs/windows/1200/ - http://www.opera.com/support/kb/view/1022/
CVE ID: CVE-2012-3561 State: PUBLISHED Published: 2012-06-14T19:00:00 Last Updated: 2024-08-06T20:13:50.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/1164/ - http://www.opera.com/support/kb/view/1016/ - http://osvdb.org/81809 - http://www.opera.com/docs/changelogs/unix/1164/ - http://www.opera.com/docs/changelogs/mac/1164/
CVE ID: CVE-2012-3562 State: PUBLISHED Published: 2012-06-14T19:00:00 Last Updated: 2024-08-06T20:13:50.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web page that is not properly handled during a reload, as demonstrated by a "multiple origin camera test" page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76357 - http://www.opera.com/docs/changelogs/windows/1200b/
CVE ID: CVE-2012-3563 State: PUBLISHED Published: 2012-06-14T19:00:00 Last Updated: 2024-08-06T20:13:50.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via a web page that contains invalid character encodings. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76358 - http://www.opera.com/docs/changelogs/windows/1200b/
CVE ID: CVE-2012-3564 State: PUBLISHED Published: 2012-06-14T19:00:00 Last Updated: 2024-08-06T20:13:50.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 12.00 Beta allows remote attackers to cause a denial of service (application hang) via an absolutely positioned wrap=off TEXTAREA element located next to an "overflow: auto" block element. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/1200b/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/76359
CVE ID: CVE-2012-3565 State: PUBLISHED Published: 2012-06-14T19:00:00 Last Updated: 2024-08-06T20:13:50.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted characters in domain names, as demonstrated by "IDNA2008 tests." Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/1200b/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/76360
CVE ID: CVE-2012-3566 State: PUBLISHED Published: 2012-06-14T19:00:00 Last Updated: 2024-08-06T20:13:50.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application hang) via JavaScript code that changes a form before submission. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76361 - http://www.opera.com/docs/changelogs/windows/1200b/
CVE ID: CVE-2012-3567 State: PUBLISHED Published: 2012-06-14T19:00:00 Last Updated: 2024-08-06T20:13:50.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 12.00 Beta allows remote attackers to cause a denial of service (memory consumption or application hang) via an IFRAME element that uses the src="#" syntax to embed a parent document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76362 - http://www.opera.com/docs/changelogs/windows/1200b/
CVE ID: CVE-2012-3568 State: PUBLISHED Published: 2012-06-14T19:00:00 Last Updated: 2024-08-06T20:13:51.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted WebGL content, as demonstrated by a codeflow.org WebGL demo. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/1200b/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/76363
CVE ID: CVE-2012-3569 State: PUBLISHED Published: 2012-11-14T11:00:00 Last Updated: 2024-08-06T20:13:50.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79922 - http://technet.microsoft.com/en-us/security/msvr/msvr13-002 - http://packetstormsecurity.com/files/120101/VMWare-OVF-Tools-Format-String.html - http://www.
security/msvr/msvr13-002 - http://packetstormsecurity.com/files/120101/VMWare-OVF-Tools-Format-String.html - http://www.vmware.com/security/advisories/VMSA-2012-0015.html - http://osvdb.org/87117 - http://secunia.com/advisories/51240
CVE ID: CVE-2012-3570 State: PUBLISHED Published: 2012-07-25T10:00:00 Last Updated: 2024-08-06T20:13:50.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmentation fault and daemon exit) via a crafted client identifier parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:115 - http://security.gentoo.org/glsa/glsa-201301-06.xml - https://kb.isc.org/article/AA-00714 - http://www.securityfocus.com/b
ttp://security.gentoo.org/glsa/glsa-201301-06.xml - https://kb.isc.org/article/AA-00714 - http://www.securityfocus.com/bid/54665
CVE ID: CVE-2012-3571 State: PUBLISHED Published: 2012-07-25T10:00:00 Last Updated: 2024-08-06T20:13:51.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed client identifier. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - https://kb.isc.org/article/AA-00712 - http://www.debian.org/security/2012/dsa-2516 - http://rhn.redhat.com/errata/RHSA-2012-1141.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:116
16 - http://rhn.redhat.com/errata/RHSA-2012-1141.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:116 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:115 - http://www.debian.org/security/2012/dsa-2519 - http://www.ubuntu.com/usn/USN-1519-1 - http://security.gentoo.org/glsa/glsa-201301-06.xml - http://rhn.redhat.com/errata/RHSA-2012-1140.html - http://www.securityfocus.com/bid/54665
CVE ID: CVE-2012-3572 State: PUBLISHED Published: 2012-09-11T19:00:00Z Last Updated: 2024-09-16T19:35:04.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Source Competency Center (OSCC) MyMeeting 3.0.1 and earlier, and MyMesyuarat 09b-1, does not properly verify uploaded documents, which allows remote authenticated users to execute arbitrary PHP code via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/mymesyuarat/files/mymesyuarat/mymesyuarat%20ver0.9b-2.zip/download - http://www.mycert.org.my/en/services/advisories/mycert/2012/main/detail/904/index.html
CVE ID: CVE-2012-3573 State: REJECTED Published: 2013-06-27T21:00:00Z Last Updated: 2024-09-16T20:31:55.121Z Description: No description available.
CVE ID: CVE-2012-3574 State: PUBLISHED Published: 2012-06-16T00:00:00 Last Updated: 2024-08-06T20:13:51.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in includes/doajaxfileupload.php in the MM Forms Community plugin 2.2.5 and 2.2.6 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/temp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49411 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76133 - http://www.opensyscom.fr/Actualites/wordpress-plugins-mm-forms-com
/exchange.xforce.ibmcloud.com/vulnerabilities/76133 - http://www.opensyscom.fr/Actualites/wordpress-plugins-mm-forms-community-shell-upload-vulnerability.html - http://www.exploit-db.com/exploits/18997 - http://www.securityfocus.com/bid/53852