Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
unk/epan/dissectors/packet-erf.c?r1=44419&r2=44418&pathrev=44419 - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=44419 - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://secunia.com/advisories/51363 - http://www.wireshark.org/security/wnpa-sec-2012-16.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15718 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7563 - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562
CVE ID: CVE-2012-4296 State: PUBLISHED Published: 2012-08-16T10:00:00 Last Updated: 2024-08-06T20:35:08.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55035 - http://www.wireshark.org/security/wnpa-sec-2012-18.html - http://www.debian.org/security/2012/dsa-2590 - http://secunia.com/advisories/54425 - https://blogs.oracle.com/sunsecurity/
tp://www.debian.org/security/2012/dsa-2590 - http://secunia.com/advisories/54425 - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://secunia.com/advisories/51363 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-rtps2.c?r1=44320&r2=44319&pathrev=44320 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15583 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7568 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=44320 - http://secunia.com/advisories/50276 - ht
00033.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=44320 - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562
CVE ID: CVE-2012-4297 State: PUBLISHED Published: 2012-08-16T10:00:00 Last Updated: 2024-08-06T20:35:09.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55035 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7561 - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=44307 - http
?id=7561 - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=44307 - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 - http://www.wireshark.org/security/wnpa-sec-2012-19.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://secunia.com/advisories/51363 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_rlcmac.h?r1=44307&r2=44306&pathrev=44307 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15741 - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562
CVE ID: CVE-2012-4298 State: PUBLISHED Published: 2012-08-16T10:00:00 Last Updated: 2024-08-06T20:35:08.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55035 - http://anonsvn.wireshark.org/viewvc/trunk/wiretap/vwr.c?r1=44075&r2=44074&pathrev=44075 - http://secunia.com/advisories/54425 - http://www.wiresh
org/viewvc/trunk/wiretap/vwr.c?r1=44075&r2=44074&pathrev=44075 - http://secunia.com/advisories/54425 - http://www.wireshark.org/security/wnpa-sec-2012-25.html - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7533 - http://secunia.com/advisories/51363 - http://anonsvn.wireshark.org/viewvc?revision=44075&view=revision - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15777 - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562
CVE ID: CVE-2012-4301 State: PUBLISHED Published: 2013-02-02T00:00:00 Last Updated: 2024-08-06T20:35:08.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that this issue allows remote attackers to execute arbitrary code via an "invalid type case" in the init method of the D3DShader class in the com.su
e attackers to execute arbitrary code via an "invalid type case" in the init method of the D3DShader class in the com.sun.prism.d3d package. CPU. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA13-032A.html - http://www.kb.cert.org/vuls/id/858729 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16180 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerabil
=2 - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1027
CVE ID: CVE-2012-4303 State: PUBLISHED Published: 2013-04-17T05:04:00 Last Updated: 2024-08-06T20:35:08.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Content Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-4305 State: PUBLISHED Published: 2013-02-02T00:00:00 Last Updated: 2024-08-06T20:35:08.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue allows remote attackers to execute arbitrary code via vectors related to an "invalid type cast" and exposed native methods in the T2K
attackers to execute arbitrary code via vectors related to an "invalid type cast" and exposed native methods in the T2KGlyph class. Additional Analyst Notes: - CVE Program Container: References: - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1030 - http://www.us-cert.gov/cas/techalerts/TA13-032A.html - http://www.kb.cert.org/vuls/id/858729 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16392 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - http://marc.info/?l=bu
33161405818&w=2 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - http://marc.info/?l=bugtraq&m=136733161405818&w=2
CVE ID: CVE-2012-4324 State: PUBLISHED Published: 2012-08-14T21:00:00 Last Updated: 2024-08-06T20:35:08.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in PHPJabbers Vacation Rental Script allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a create action in the AdminUsers module to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74683 - http://packetstormsecurity.org/files/111564/Vacation-Rental-Listing-Cross-Site-Request-Forgery.html - http://osvdb.org/80948
CVE ID: CVE-2012-4325 State: PUBLISHED Published: 2012-08-14T21:00:00 Last Updated: 2024-08-06T20:35:08.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in upload/users.php in Utopia News Pro (UNP) 1.4.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18720 - http://osvdb.org/80986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74760
CVE ID: CVE-2012-4326 State: PUBLISHED Published: 2012-08-14T21:00:00 Last Updated: 2024-08-06T20:35:08.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in commonsettings.php in AlstraSoft Site Uptime Enterprise, possibly 5.4, allows remote attackers to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74682 - http://secunia.com/advisories/48707 - http://osvdb.org/80947 - http://packetstormsecurity.org/files/111563/AlstraSoft-Site-Uptime-Cross-Site-Request-Forgery.html
CVE ID: CVE-2012-4327 State: PUBLISHED Published: 2012-08-14T21:00:00 Last Updated: 2024-08-06T20:35:09.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Image News slider plugin before 3.3 for WordPress has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/wp-image-news-slider/other_notes/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/74788 - http://plugins.trac.wordpress.org/changeset?old_path=%2Fwp-image-news-slider&old=529740&new_path=%2Fwp-image-news-slider&new=529740 - http://www.securityfocus.com/bid/52977 - http://secunia.com/advisor
529740&new_path=%2Fwp-image-news-slider&new=529740 - http://www.securityfocus.com/bid/52977 - http://secunia.com/advisories/48747
CVE ID: CVE-2012-4328 State: PUBLISHED Published: 2012-08-14T22:00:00 Last Updated: 2024-08-06T20:35:09.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the MAPI in vBulletin Suite 4.1.2 through 4.1.12, Forum 4.1.2 through 4.1.12, and the MAPI plugin 1.4.3 for vBulletin 3.x has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.vbulletin.com/forum/showthread.php/400165-vBulletin-Security-Patch-for-vBulletin-4-1-12-for-Suite-amp-Forum-04-23-2012 - http://osvdb.org/81474 - https://www.vbulletin.com/forum/showthread.php/400164-vBulletin-Security-Patch-for-vBulletin-4-1-2-4-1-11-for-Suite-amp
https://www.vbulletin.com/forum/showthread.php/400164-vBulletin-Security-Patch-for-vBulletin-4-1-2-4-1-11-for-Suite-amp-Forum-04-23-2012 - http://secunia.com/advisories/48917 - http://www.securityfocus.com/bid/53226 - https://www.vbulletin.com/forum/showthread.php/400162-vBulletin-3-x-MAPI-Plugin-1-4-3-released-with-security-patch-04-23-2012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75160
CVE ID: CVE-2012-4329 State: PUBLISHED Published: 2012-08-14T22:00:00 Last Updated: 2024-08-06T20:35:08.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart) via a crafted controller name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74927 - http://www.securityfocus.com/bid/53161 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0142.html - http://www.osvdb.org/81221 - http://aluigi.org/adv/samsux_1-adv.txt - http://www.exploit-db.com/exploits/18751 - http://www.securitytracker.com/i
1 - http://aluigi.org/adv/samsux_1-adv.txt - http://www.exploit-db.com/exploits/18751 - http://www.securitytracker.com/id?1026976
CVE ID: CVE-2012-4330 State: PUBLISHED Published: 2012-08-14T22:00:00 Last Updated: 2024-08-06T20:35:09.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long string in certain fields, as demonstrated by the MAC address field, possibly a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53161 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0142.html - http://www.osvdb.org/81222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74928 - http://aluigi.org/adv/samsux_1-adv.txt - http://www.
1222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74928 - http://aluigi.org/adv/samsux_1-adv.txt - http://www.exploit-db.com/exploits/18751 - http://www.securitytracker.com/id?1026976
CVE ID: CVE-2012-4331 State: PUBLISHED Published: 2012-08-14T22:00:00Z Last Updated: 2024-09-16T16:33:40.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in SPIP before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 have unknown impact and attack vectors that are not related to cross-site scripting (XSS), different vulnerabilities than CVE-2012-2151. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026970 - http://archives.rezo.net/archives/spip-en.mbox/U5QUZ6WJRAJC7H5BR7W5SQG6WCD3PXL7/
CVE ID: CVE-2012-4332 State: PUBLISHED Published: 2012-08-14T22:00:00Z Last Updated: 2024-09-16T19:09:31.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ShareYourCart plugin 1.7.1 for WordPress allows remote attackers to obtain the installation path via unspecified vectors related to the SDK. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48960 - http://www.securityfocus.com/bid/53241 - http://wordpress.org/extend/plugins/shareyourcart/changelog/
CVE ID: CVE-2012-4333 State: PUBLISHED Published: 2012-08-14T22:00:00 Last Updated: 2024-08-06T20:35:09.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18765 - http://www.securityfocus.com/bid/53193 - http://secunia.com/advisories/48966 - https://e
exploit-db.com/exploits/18765 - http://www.securityfocus.com/bid/53193 - http://secunia.com/advisories/48966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75070
CVE ID: CVE-2012-4334 State: PUBLISHED Published: 2012-08-14T22:00:00 Last Updated: 2024-08-06T20:35:08.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75069 - http://www.exploit-db.com/exploits/18765 - http://www.securityfocus.com/bid/53193 - http://secunia.com/advisories/48965
CVE ID: CVE-2012-4335 State: PUBLISHED Published: 2012-08-14T22:00:00 Last Updated: 2024-08-06T20:35:09.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service (infinite loop) via a negative size value in a TCP request to (1) NiwMasterService or (2) NiwStorageService. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75066 - http://www.exploit-db.com/exploits/18765 - http://www.securityfocus.com/bid/53193 - http://secunia.com/advisories/48825
CVE ID: CVE-2012-4336 State: PUBLISHED Published: 2012-09-15T17:00:00 Last Updated: 2024-08-06T20:35:08.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) an arbitrary parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78311 - http://www.securityfocus.com/bid/55418 - http://archives.neohapsis.com/archives/bugtraq/2012-09/0021.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78310 - https://www.htbridge.com/advis
/bugtraq/2012-09/0021.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78310 - https://www.htbridge.com/advisory/HTB23110
CVE ID: CVE-2012-4337 State: PUBLISHED Published: 2012-08-23T15:00:00Z Last Updated: 2024-09-16T19:56:39.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1027424 - http://www.osvdb.org/84808 - http://technet.microsoft.com/security/msvr/msvr12-013 - http://www.foxitsoftware.com/Secure_PDF_Reader/security_bulletins.php - http://secunia.com/advisories/50359
svr12-013 - http://www.foxitsoftware.com/Secure_PDF_Reader/security_bulletins.php - http://secunia.com/advisories/50359 - http://www.securityfocus.com/bid/55150
CVE ID: CVE-2012-4340 State: PUBLISHED Published: 2012-08-15T21:00:00Z Last Updated: 2024-09-17T02:11:26.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sybase EAServer before 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000047.html - http://jvn.jp/en/jp/JVN47662377/index.html
CVE ID: CVE-2012-4341 State: PUBLISHED Published: 2012-08-15T21:00:00Z Last Updated: 2024-09-17T00:10:48.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) long parameter value, (2) crafted string size field, or (3) long Parameter Name string in a package with opcode 0x43 and sub opcode 0x4 to TCP port 3900. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1649838 - http://www.zerodayinitiative.com/advisories/ZDI-12-112/ - http://secunia.com/advi
ce.sap.com/sap/support/notes/1649838 - http://www.zerodayinitiative.com/advisories/ZDI-12-112/ - http://secunia.com/advisories/49744 - http://www.zerodayinitiative.com/advisories/ZDI-12-104/ - http://scn.sap.com/docs/DOC-8218 - https://websmp230.sap-ag.de/sap%28bD1lbiZjPTAwMQ==%29/bc/bsp/spn/sapnotes/index2.htm?numm=1649840 - http://www.securitytracker.com/id?1027211 - http://www.zerodayinitiative.com/advisories/ZDI-12-111/
CVE ID: CVE-2012-4342 State: PUBLISHED Published: 2012-08-15T21:00:00Z Last Updated: 2024-09-17T03:43:30.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082954.html - http://gallery.menalto.com/gallery_3_0_4 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082995.html
CVE ID: CVE-2012-4343 State: PUBLISHED Published: 2012-08-15T21:00:00Z Last Updated: 2024-09-17T02:52:53.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Gallery 3 before 3.0.4 allow attackers to execute arbitrary PHP code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082954.html - http://gallery.menalto.com/gallery_3_0_4 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082995.html
CVE ID: CVE-2012-4344 State: PUBLISHED Published: 2012-08-15T22:00:00 Last Updated: 2024-08-06T20:35:08.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the SNMP system name of the attacking host. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77150 - http://www.exploit-db.com/exploits/20035 - http://www.kb.cert.org/vuls/id/777007
CVE ID: CVE-2012-4345 State: PUBLISHED Published: 2012-08-21T23:00:00 Last Updated: 2024-08-06T20:35:08.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Database Structure page in phpMyAdmin 3.4.x before 3.4.11.1 and 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) a crafted table name during table creation, or a (2) Empty link or (3) Drop link for a crafted table name. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php - http://www.mandriva.com/security/advisories?name=MDVSA-2012:136 - https:
admin.net/home_page/security/PMASA-2012-4.php - http://www.mandriva.com/security/advisories?name=MDVSA-2012:136 - https://hermes.opensuse.org/messages/15513071
CVE ID: CVE-2012-4347 State: PUBLISHED Published: 2012-12-05T11:00:00 Last Updated: 2024-08-06T20:35:09.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) logFile parameter in a logs action to brightmail/export or (2) localBackupFileSelection parameter in an APPLIANCE restoreSource action to brightmail/admin/restore/download.do. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56789 - http://www.symantec.com/security_response/security
ram Container: References: - http://www.securityfocus.com/bid/56789 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120827_00