Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2912 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:05.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the LeagueManager plugin 3.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter in the show-league page or (2) season parameter in the team page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112698/WordPress-LeagueManager-3.7-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/53525 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/53525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75629
CVE ID: CVE-2012-2913 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:05.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) leaflet_layer.php or (2) leaflet_marker.php, as reachable through wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112699/WordPress-Leaflet-0.0.1-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75628 - http://www.securityfocus.com/bid/53526
CVE ID: CVE-2012-2914 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:04.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in captchademo.php in Unijimpe Captcha allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53585 - http://packetstormsecurity.org/files/112785/Unijimpe-Captcha-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75708
CVE ID: CVE-2012-2915 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:04.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag in PAC Design (.pac) file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75698 - http://secunia.com/advisories/48741 - http://osvdb.org/82001 - http://www.securityfocus.com/bid/53566
CVE ID: CVE-2012-2916 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:05.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sabre_class_admin.php in the SABRE plugin before 2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the active_option parameter to wp-admin/tools.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53528 - http://packetstormsecurity.org/files/112692/WordPress-SABRE-1.2.0-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75615 - http://wordpress.org/extend/plugins/sabre/
Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75615 - http://wordpress.org/extend/plugins/sabre/changelog/ - http://plugins.trac.wordpress.org/changeset?old_path=%2Fsabre&old=534490&new_path=%2Fsabre&new=534490
CVE ID: CVE-2012-2917 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:04.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Share and Follow plugin 1.80.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the CDN API Key (cnd-key) in a share-and-follow-menu page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53533 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75616 - http://packetstormsecurity.org/files/112691/WordPress-Share-And-Follow-1.80.3-Cross-Site-Scripting.html
CVE ID: CVE-2012-2918 State: PUBLISHED Published: 2012-05-21T22:00:00 Last Updated: 2024-08-06T19:50:05.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbitrary web script or HTML via the v parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75476 - http://packetstormsecurity.org/files/112585/Chevreto-Upload-Script-Cross-Site-Scripting-User-Enumeration.html
CVE ID: CVE-2012-2919 State: PUBLISHED Published: 2012-05-21T22:00:00 Last Updated: 2024-08-06T19:50:05.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in the v parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53448 - http://packetstormsecurity.org/files/112585/Chevreto-Upload-Script-Cross-Site-Scripting-User-Enumeration.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75477
CVE ID: CVE-2012-2920 State: PUBLISHED Published: 2012-05-21T22:00:00 Last Updated: 2024-08-06T19:50:04.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the userphoto_options_page function in user-photo.php in the User Photo plugin before 0.9.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to wp-admin/options-general.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset?old_path=%2Fuser-photo&old=541880&new_path=%2Fuser-photo&new=541880 - https://exchange
gins.trac.wordpress.org/changeset?old_path=%2Fuser-photo&old=541880&new_path=%2Fuser-photo&new=541880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75496 - http://osvdb.org/81806 - http://www.securityfocus.com/bid/53449 - http://secunia.com/advisories/49100 - http://wordpress.org/extend/plugins/user-photo/changelog/
CVE ID: CVE-2012-2921 State: PUBLISHED Published: 2012-05-21T22:00:00 Last Updated: 2024-08-06T19:50:04.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81701 - https://code.google.com/p/feedparser/source/browse/trunk/NEWS?spec=svn706&r=706 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0157 - https://code.google.com/p/feedparser/source/detail?r=703&path=/trunk/feedparser
/en/Support/Advisories/MGASA-2012-0157 - https://code.google.com/p/feedparser/source/detail?r=703&path=/trunk/feedparser/feedparser.py - http://www.securityfocus.com/bid/53654 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:118 - http://freecode.com/projects/feedparser/releases/344371 - http://secunia.com/advisories/49256
CVE ID: CVE-2012-2922 State: PUBLISHED Published: 2012-05-21T22:00:00 Last Updated: 2024-08-06T19:50:05.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q[] parameter to index.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75531 - http://archives.neohapsis.com/archives/bugtraq/2012-05/0053.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 - http://secunia.com/a
hives/bugtraq/2012-05/0053.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 - http://secunia.com/advisories/49131 - http://www.securityfocus.com/bid/53454 - http://archives.neohapsis.com/archives/bugtraq/2012-05/0052.html - http://archives.neohapsis.com/archives/bugtraq/2012-05/0055.html - http://www.openwall.com/lists/oss-security/2012/08/02/8
CVE ID: CVE-2012-2923 State: PUBLISHED Published: 2012-05-21T22:00:00 Last Updated: 2024-08-06T19:50:05.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75513 - http://osvdb.org/81830 - http://secunia.com/advisories/49126 - http://www.securityfocus.com/bid/53472
CVE ID: CVE-2012-2924 State: PUBLISHED Published: 2012-05-21T22:00:00 Last Updated: 2024-08-06T19:50:05.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75514 - http://www.osvdb.org/81831 - http://www.securityfocus.com/bid/53472
CVE ID: CVE-2012-2925 State: PUBLISHED Published: 2012-05-21T22:00:00 Last Updated: 2024-08-06T19:50:05.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75501
CVE ID: CVE-2012-2926 State: PUBLISHED Published: 2012-05-22T15:00:00 Last Updated: 2024-08-06T19:50:05.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo before 3.3.4 and 3.4.x before 3.4.5; and Crowd before 2.0.9, 2.1 before 2.1.2, 2.2 before 2.2.9, 2.3 before 2.3.7, and 2.4 before 2.4.1 do not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors. Additional Analy
rs to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75682 - http://secunia.com/advisories/49146 - http://confluence.atlassian.com/display/FISHEYE/FishEye+and+Crucible+Security+Advisory+2012-05-17 - http://confluence.atlassian.com/display/DOC/Confluence+Security+Advisory+2012-05-17 - http://osvdb.org/81993 - http://confluence.atlassian.com/display/CROWD/Crowd+Security+Advisory+2012-05-17 - http://www.securityfocus.com/bid/53595 - http://confluence.atlassian.com/display/BAMBOO/Bamboo+Security+Advisory+2012-05-17 - http://confl
yfocus.com/bid/53595 - http://confluence.atlassian.com/display/BAMBOO/Bamboo+Security+Advisory+2012-05-17 - http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75697
CVE ID: CVE-2012-2927 State: PUBLISHED Published: 2012-05-22T15:00:00 Last Updated: 2024-08-06T19:50:05.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49166 - http://osvdb.org/81993 - http://www.securityfocus.com/bid/53595 - http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory
org/81993 - http://www.securityfocus.com/bid/53595 - http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75697
CVE ID: CVE-2012-2928 State: PUBLISHED Published: 2012-05-22T15:00:00 Last Updated: 2024-08-06T19:50:05.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49166 - http://confluence.atlassian.com/display/DOC/Confluence+Security+Advisory+2012-05-17 - http://osvdb.org/81993 - http://www.securityfocu
nce.atlassian.com/display/DOC/Confluence+Security+Advisory+2012-05-17 - http://osvdb.org/81993 - http://www.securityfocus.com/bid/53595 - http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75697
CVE ID: CVE-2012-2930 State: PUBLISHED Published: 2015-04-24T14:00:00 Last Updated: 2024-08-06T19:50:05.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests that (1) add a user via an adduser action to admin/index.php or (2) conduct static PHP code injection attacks in .htusers.php via the user parameter to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.tinywebgallery.com/forum/web-photo-gallery-news-f14/twg-1-8-8-is-available-t3274.html - https://www.htbridge
http://www.tinywebgallery.com/forum/web-photo-gallery-news-f14/twg-1-8-8-is-available-t3274.html - https://www.htbridge.com/advisory/HTB23093 - http://osvdb.org/show/osvdb/82961
CVE ID: CVE-2012-2931 State: PUBLISHED Published: 2020-01-09T20:56:12 Last Updated: 2024-08-06T19:50:05.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23093
CVE ID: CVE-2012-2932 State: PUBLISHED Published: 2015-04-24T14:00:00 Last Updated: 2024-08-06T19:50:04.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to inject arbitrary web script or HTML via the selitems[] parameter in a (1) copy, (2) chmod, or (3) arch action to admin/index.php or (4) searchitem parameter in a search action to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.tinywebgallery.com/forum/web-photo-gallery-news-f14/twg-1-8-8-is-available-t3274.html - https://www.htbridge.com/advisory/HTB23093 - http://www.s
web-photo-gallery-news-f14/twg-1-8-8-is-available-t3274.html - https://www.htbridge.com/advisory/HTB23093 - http://www.securityfocus.com/bid/54019 - http://osvdb.org/82962
CVE ID: CVE-2012-2934 State: PUBLISHED Published: 2012-12-03T21:00:00 Last Updated: 2024-08-06T19:50:05.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.0, and 4.1, when running a 64-bit PV guest on "older" AMD CPUs, does not properly protect against a certain AMD processor bug, which allows local guest OS users to cause a denial of service (host hang) via sequential execution of instructions across a non-canonical boundary, a different vulnerability than CVE-2012-0217. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://support.amd.com/us/Processor_TechDocs/25759.pdf - http://www.securityfocus.com/bid/53961 - htt
advisories/55082 - http://support.amd.com/us/Processor_TechDocs/25759.pdf - http://www.securityfocus.com/bid/53961 - http://secunia.com/advisories/51413 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.debian.org/security/2012/dsa-2501 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://lists.xen.org/archives/html/xen-announce/2012-06/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
CVE ID: CVE-2012-2935 State: PUBLISHED Published: 2012-05-27T19:00:00 Last Updated: 2024-08-06T19:50:05.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Checkout/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the value_title parameter, a different vulnerability than CVE-2012-1059. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75900 - https://github.com/osCommerce/oscommerce/commit/a5aeb0448cc333cc4b801c0e01981b218fd9c7df
CVE ID: CVE-2012-2936 State: PUBLISHED Published: 2012-05-27T20:00:00 Last Updated: 2024-08-06T19:50:04.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) page parameter to (a) admin/admin_comments.php or (b) admin/admin_links.php; or list parameter in a (3) move or (4) minimize action to (c) admin/admin_index.php. Additional Analyst Notes: - CVE Program Container: References: - http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&revision=2461 - http://secunia.com/secunia_research/2012-18/ - https://exchange.x
ceforge.net/viewvc/pligg?view=revision&revision=2461 - http://secunia.com/secunia_research/2012-18/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/75764 - http://osvdb.org/82044 - http://osvdb.org/82045 - http://secunia.com/advisories/45431 - http://www.securityfocus.com/bid/53625 - http://forums.pligg.com/downloads.php?do=file&id=15
CVE ID: CVE-2012-2937 State: PUBLISHED Published: 2012-05-27T20:00:00 Last Updated: 2024-08-06T19:50:05.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list parameter in a move action to admin/admin_index.php, (2) display parameter in a minimize action to admin/admin_index.php, (3) enabled[] parameter to admin/admin_users.php, or (4) msg_id to the module.php in the simple_messaging module. Additional Analyst Notes: - CVE Program Container: References: - http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&revision=2461 - https://exchange
am Container: References: - http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&revision=2461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75765 - http://secunia.com/secunia_research/2012-19/ - http://secunia.com/advisories/45431 - http://www.securityfocus.com/bid/53625 - http://osvdb.org/82050 - http://osvdb.org/82048 - http://forums.pligg.com/downloads.php?do=file&id=15 - http://osvdb.org/82049
CVE ID: CVE-2012-2938 State: PUBLISHED Published: 2012-05-27T20:00:00 Last Updated: 2024-08-06T19:50:05.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the holiday name field to (1) holiday_add.php or (2) holiday_view.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75541 - http://www.vulnerability-lab.com/get_content.php?id=530 - http://osvdb.org/81888 - http://www.exploit-db.com/exploits/18871 - http://osvdb.org/81887
CVE ID: CVE-2012-2939 State: PUBLISHED Published: 2012-05-27T20:00:00 Last Updated: 2024-08-06T19:50:05.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using (1) airline-edit.php, (2) hotel-image-add.php, or (3) hotel-add.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75542 - http://www.osvdb.org/81889 - http://iel-sayed.blogspot.com/2012/05/travelon-express-cms-v622-multiple-web.
ities/75542 - http://www.osvdb.org/81889 - http://iel-sayed.blogspot.com/2012/05/travelon-express-cms-v622-multiple-web.html - http://www.vulnerability-lab.com/get_content.php?id=530 - http://www.exploit-db.com/exploits/18871
CVE ID: CVE-2012-2940 State: PUBLISHED Published: 2012-05-27T20:00:00 Last Updated: 2024-08-06T19:50:05.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted (1) PNG, (2) WMF, (3) PSD, (4) TGA, (5) TTF, (6) BMP, (7) TIFF, or (8) PCX file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53636 - http://www.exploit-db.com/exploits/18902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75733
CVE ID: CVE-2012-2941 State: PUBLISHED Published: 2012-05-27T20:00:00 Last Updated: 2024-08-06T19:50:05.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows remote attackers to inject arbitrary web script or HTML via the text parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112945/Yandex.Server-2010-9.0-Enterprise-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/53622 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75788
CVE ID: CVE-2012-2942 State: PUBLISHED Published: 2012-05-27T20:00:00 Last Updated: 2024-08-06T19:50:05.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the trash buffer in the header capture functionality in HAProxy before 1.4.21, when global.tune.bufsize is set to a value greater than the default and header rewriting is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/28/1 - http://security.gentoo.org/glsa/glsa-201301-02.xml - http://www.openwall.com/lists/oss-security/
security/2012/05/28/1 - http://security.gentoo.org/glsa/glsa-201301-02.xml - http://www.openwall.com/lists/oss-security/2012/05/23/15 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75777 - http://www.securityfocus.com/bid/53647 - http://haproxy.1wt.eu/#news - http://www.debian.org/security/2013/dsa-2711 - http://secunia.com/advisories/49261 - http://www.ubuntu.com/usn/USN-1800-1 - http://haproxy.1wt.eu/git?p=haproxy-1.4.git%3Ba=commit%3Bh=30297cb17147a8d339eb160226bcc08c91d9530b - http://www.openwall.com/lists/oss-security/2012/05/23/12 - http://haproxy.1wt.eu/download/1.4/src/CHANGELOG