Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2602 State: PUBLISHED Published: 2012-08-12T16:00:00Z Last Updated: 2024-09-16T22:41:19.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts via CreateUserStepContainer actions to Admin/Accounts/Add/OrionAccount.aspx or (2) modify account privileges via a ynAdminRights action to Admin/Accounts/EditAccount.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/174119 - http://www.sol
Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/174119 - http://www.solarwinds.com/documentation/Orion/docs/ReleaseNotes/releaseNotes.htm - http://secunia.com/advisories/50004 - http://www.securityfocus.com/bid/54624 - http://www.exploit-db.com/exploits/20011 - http://osvdb.org/84116
CVE ID: CVE-2012-2603 State: PUBLISHED Published: 2012-06-08T16:00:00Z Last Updated: 2024-09-16T20:12:20.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain privileges and obtain sensitive information via a modified desktop client. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/442595 - http://www.kb.cert.org/vuls/id/MAPG-8RJPJX
CVE ID: CVE-2012-2604 State: PUBLISHED Published: 2012-06-13T15:00:00Z Last Updated: 2024-09-16T18:24:16.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields. Additional Analyst Notes: - CVE Program Container: References: - https://na3.salesforce.com/sfc/#version?selectedDocumentId=06950000000IyBX - http://www.kb.cert.org/vuls/id/MAPG-8TJKAF - http://www.kb.cert.org/vuls/id/709939
CVE ID: CVE-2012-2605 State: PUBLISHED Published: 2012-06-13T15:00:00Z Last Updated: 2024-09-16T21:57:51.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that (1) insert XSS sequences or (2) send messages to clients. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MAPG-8TJKAF - http://www.kb.cert.org/vuls/id/709939 - https://na3.salesforce.com/sfc/#version?selectedDocumentId=06950000000IySO
CVE ID: CVE-2012-2606 State: PUBLISHED Published: 2012-06-13T15:00:00Z Last Updated: 2024-09-16T22:19:53.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 4567, as demonstrated by a replay attack. Additional Analyst Notes: - CVE Program Container: References: - https://na3.salesforce.com/sfc/#version?id=06850000000JDx3 - http://www.kb.cert.org/vuls/id/MAPG-8TJKAF - http://www.kb.cert.org/vuls/id/709939
CVE ID: CVE-2012-2607 State: PUBLISHED Published: 2012-07-16T17:00:00 Last Updated: 2024-08-06T19:42:30.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 (aka the download port). Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MORO-8UYN8P - http://www.kb.cert.org/vuls/id/977312
CVE ID: CVE-2012-2611 State: PUBLISHED Published: 2012-05-15T01:00:00 Last Updated: 2024-08-06T19:42:30.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configuration is enabled, allows remote attackers to execute arbitrary code via a crafted SAP Diag packet. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1687910 - http://scn.sap.com/docs/DOC-8218 - http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabil
10 - http://scn.sap.com/docs/DOC-8218 - http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities - http://www.securitytracker.com/id?1027052
CVE ID: CVE-2012-2612 State: PUBLISHED Published: 2012-05-15T01:00:00 Last Updated: 2024-08-06T19:42:30.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1687910 - http://scn.sap.com/docs/DOC-8218 - http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities - http://www.securitytracker.com/id?1027052 - https://exchang
/content/sap-netweaver-dispatcher-multiple-vulnerabilities - http://www.securitytracker.com/id?1027052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75452
CVE ID: CVE-2012-2614 State: PUBLISHED Published: 2012-07-12T21:00:00 Last Updated: 2024-08-06T19:42:30.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long string in a version attribute of an ispXCF element in an .xcf file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/19340 - http://archives.neohapsis.com/archives/bugtraq/2012-06/0136.html - http://secunia.com/advisories/48431 - http://www.coresecurity.com/content/lattice-diamond-prog
gtraq/2012-06/0136.html - http://secunia.com/advisories/48431 - http://www.coresecurity.com/content/lattice-diamond-programmer-buffer-overflow
CVE ID: CVE-2012-2615 State: REJECTED Published: 2012-11-20T02:00:00Z Last Updated: 2024-09-16T16:48:32.512Z Description: No description available.
CVE ID: CVE-2012-2619 State: PUBLISHED Published: 2012-11-14T11:00:00 Last Updated: 2024-08-06T19:42:30.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech, Samsung, and Sony products, allow remote attackers to cause a denial of service (out-of-bounds read and Wi-Fi outage) via an RSN 802.11i information element. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Jan/msg00001.html - http://support.apple.com/kb/HT5642 - http://www.coresecurity.com/content/broadcom-input-vali
ce/2013/Jan/msg00001.html - http://support.apple.com/kb/HT5642 - http://www.coresecurity.com/content/broadcom-input-validation-BCM4325-BCM4329 - http://www.kb.cert.org/vuls/id/160027 - http://support.apple.com/kb/HT5643 - http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html
CVE ID: CVE-2012-2624 State: PUBLISHED Published: 2013-09-23T20:00:00Z Last Updated: 2024-09-16T17:14:14.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Logica HotScan allows remote attackers to cause a denial of service (crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2012/Oct/50
CVE ID: CVE-2012-2625 State: PUBLISHED Published: 2012-10-31T16:00:00 Last Updated: 2024-08-06T19:42:30.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service (memory consumption) via a large (1) bzip2 or (2) lzma compressed kernel image. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/26/3 - http://rhn.redhat.com/errata/RHSA-2012-1130.html - http://secunia.com/advisories/51413 - http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=1817 - http://lists.o
tml - http://secunia.com/advisories/51413 - http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=1817 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.html - http://www.securityfocus.com/bid/53650 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://www.securitytracker.com/id?1027090 - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html - http://xenbits.xensource.com/hg/xen-unstable.hg/rev/60f09d1ab1fe - http://lists.opensuse.org/opensuse-security-announce/2012
://xenbits.xensource.com/hg/xen-unstable.hg/rev/60f09d1ab1fe - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html - http://secunia.com/advisories/49184 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
CVE ID: CVE-2012-2626 State: PUBLISHED Published: 2012-07-31T10:00:00Z Last Updated: 2024-09-16T16:28:35.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt - http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html
CVE ID: CVE-2012-2627 State: PUBLISHED Published: 2012-07-31T10:00:00Z Last Updated: 2024-09-16T17:29:08.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt - http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html
CVE ID: CVE-2012-2629 State: PUBLISHED Published: 2020-02-20T03:46:25 Last Updated: 2024-08-06T19:42:30.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) and cross-site scripting (XSS) vulnerabilities in Axous 1.1.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add an administrator account via an addnew action to admin/administrators_add.php; or (2) conduct cross-site scripting (XSS) attacks via the page_title parameter to admin/content_pages_edit.php; the (3) category_name[] parameter to admin/products_category.php; the (4) site_name, (5) seo_title, or (6) meta_keywords paramet
category_name[] parameter to admin/products_category.php; the (4) site_name, (5) seo_title, or (6) meta_keywords parameter to admin/settings_siteinfo.php; the (7) company_name, (8) address1, (9) address2, (10) city, (11) state, (12) country, (13) author_first_name, (14) author_last_name, (15) author_email, (16) contact_first_name, (17) contact_last_name, (18) contact_email, (19) general_email, (20) general_phone, (21) general_fax, (22) sales_email, (23) sales_phone, (24) support_email, or (25) support_phone parameter to admin/settings_company.php; or the (26) system_email, (27) sender_name, (28) smtp_server, (29) smtp_username, (30) smtp_password, or (31) order_notice_email parameter to admi
(27) sender_name, (28) smtp_server, (29) smtp_username, (30) smtp_password, or (31) order_notice_email parameter to admin/settings_email.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/112748/Axous-1.1.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - http://www.exploit-db.com/exploits/18886
CVE ID: CVE-2012-2630 State: PUBLISHED Published: 2012-06-04T15:00:00Z Last Updated: 2024-09-17T02:06:25.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Puella Magi Madoka Magica iP application 1.05 and earlier for Android places cleartext Twitter credentials in a log file, which allows remote attackers to obtain sensitive information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN23328321/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000054
CVE ID: CVE-2012-2631 State: PUBLISHED Published: 2012-06-15T14:00:00Z Last Updated: 2024-09-16T20:26:47.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WEBLOGIC @WEB ShoppingCart before 1.5.2.0, and @WEB ShoppingCart T 1.5.0.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000055 - http://jvn.jp/en/jp/JVN78305073/index.html - http://www.atmarkweb.jp/atcart/
CVE ID: CVE-2012-2632 State: PUBLISHED Published: 2012-06-15T19:00:00Z Last Updated: 2024-09-16T17:34:25.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intended URL restrictions via a TCP session. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000059 - http://jvn.jp/en/jp/JVN24646833/index.html - http://www.seil.jp/support/security/a012
b.jvn.jp/jvndb/JVNDB-2012-000059 - http://jvn.jp/en/jp/JVN24646833/index.html - http://www.seil.jp/support/security/a01232.html
CVE ID: CVE-2012-2633 State: PUBLISHED Published: 2012-06-15T19:00:00 Last Updated: 2024-08-06T19:42:30.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000058 - http://osvdb.org/82017 - http://www.wpwp.org/archives/wassup-1-8-3-1/ - http://wordpress.org/extend/plugins/wassup/changelog/ - http://jvn.jp/en/jp/JVN15646988/index.html - http://plugins.trac.wordpress.org/changeset?old_
lugins/wassup/changelog/ - http://jvn.jp/en/jp/JVN15646988/index.html - http://plugins.trac.wordpress.org/changeset?old_path=%2Fwassup&old=545369&new_path=%2Fwassup&new=545369
CVE ID: CVE-2012-2634 State: PUBLISHED Published: 2012-06-15T19:00:00Z Last Updated: 2024-09-16T23:51:20.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FeedDemon before 4.0, when the feed preview option is enabled, allows remote attackers to inject arbitrary web script or HTML via a feed. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN18397171/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000056
CVE ID: CVE-2012-2635 State: PUBLISHED Published: 2012-06-15T19:00:00Z Last Updated: 2024-09-16T22:10:26.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dolphin Browser HD application before 7.6 and Dolphin for Pad application before 1.0.1 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN90751882/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000057
CVE ID: CVE-2012-2636 State: PUBLISHED Published: 2012-06-19T16:00:00Z Last Updated: 2024-09-16T20:58:22.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000061 - http://www.kent-web.com/bbs/patio.html - http://jvn.jp/en/jp/JVN33171616/index.html
CVE ID: CVE-2012-2637 State: PUBLISHED Published: 2012-06-19T16:00:00Z Last Updated: 2024-09-17T00:10:58.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.kent-web.com/bbs/patio.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000062 - http://jvn.jp/en/jp/JVN58102473/index.html
CVE ID: CVE-2012-2638 State: PUBLISHED Published: 2012-06-19T16:00:00Z Last Updated: 2024-09-16T21:03:35.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN36993373/index.html - http://wap2.jp/download/spict/ - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000060
CVE ID: CVE-2012-2639 State: REJECTED Published: 2012-06-26T10:00:00 Last Updated: 2012-06-28T09:00:00 Description: No description available.
CVE ID: CVE-2012-2640 State: PUBLISHED Published: 2012-07-05T17:00:00Z Last Updated: 2024-09-16T20:13:29.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI value from an SD card via a crafted application that lacks the READ_PHONE_STATE permission. Additional Analyst Notes: - CVE Program Container: References: - http://yomecolle.jp/info/android_oshirase/ - http://jvn.jp/en/jp/JVN05102851/index.html - http://jvn.jp/en/jp/JVN05102851/995355/index.html - http://www.nec.co.jp/security-info/secinfo/nv12-008.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000064
CVE ID: CVE-2012-2641 State: PUBLISHED Published: 2012-07-05T17:00:00Z Last Updated: 2024-09-16T19:25:21.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script or HTML by triggering improper interaction with an unspecified library. Additional Analyst Notes: - CVE Program Container: References: - http://www.zenphoto.org/news/zenphoto-1.4.3 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000065 - http://jvn.jp/en/jp/JVN59842447/index.html
CVE ID: CVE-2012-2642 State: PUBLISHED Published: 2012-07-07T10:00:00Z Last Updated: 2024-09-16T18:19:07.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MT4i plugin 3.1 beta 4 and earlier for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-2644. Additional Analyst Notes: - CVE Program Container: References: - http://www.hazama.nu/pukiwiki/index.php?MT4i%2F3.1 - http://jvn.jp/en/jp/JVN80835745/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000067
CVE ID: CVE-2012-2643 State: PUBLISHED Published: 2012-07-07T10:00:00Z Last Updated: 2024-09-17T01:17:04.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted form entry. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN03582364/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000068 - http://www.kent-web.com/bbs/yybbs.html
CVE ID: CVE-2012-2644 State: PUBLISHED Published: 2012-07-07T10:00:00Z Last Updated: 2024-09-16T20:12:48.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MT4i plugin 3.1 beta 4 and earlier for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-2642. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN79111101/index.html - http://www.hazama.nu/pukiwiki/index.php?MT4i%2F3.1 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000069
CVE ID: CVE-2012-2645 State: PUBLISHED Published: 2012-07-16T17:00:00 Last Updated: 2024-08-06T19:42:31.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Yahoo! Japan Yahoo! Browser application 1.2.0 and earlier for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49905 - http://www.securityfocus.com/bid/54488 - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000070 - https://play.google.com/store/apps/details?id=jp.co.yahoo.android.ybrowser - http://jvn.jp/en/jp/JVN46088915/index.html
CVE ID: CVE-2012-2646 State: PUBLISHED Published: 2012-07-25T10:00:00Z Last Updated: 2024-09-17T00:15:58.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black - https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir - http://jvn.jp/en/jp/JVN88643450/index.html - http://jv
.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir - http://jvn.jp/en/jp/JVN88643450/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000071
CVE ID: CVE-2012-2647 State: PUBLISHED Published: 2012-07-31T10:00:00Z Last Updated: 2024-09-16T23:00:33.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari allows remote attackers to modify the configured search URL, and intercept search terms, via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN51769987/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000072
CVE ID: CVE-2012-2648 State: PUBLISHED Published: 2012-08-07T19:00:00Z Last Updated: 2024-09-16T16:34:04.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the GoodReader app 3.16 and earlier for iOS on the iPad, and 3.15.1 and earlier for iOS on the iPhone and iPod touch, allows remote attackers to inject arbitrary web script or HTML via vectors involving use of this app in conjunction with a web browser. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN01598734/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000073