Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-6581 State: PUBLISHED Published: 2013-07-24T10:00:00Z Last Updated: 2024-09-17T00:35:53.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to bypass intended restrictions on reading keys in the product's keyring, and trigger outbound e-mail messages signed by an arbitrary stored secret key, by leveraging a UI e-mail signing privilege. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html
CVE ID: CVE-2012-6582 State: PUBLISHED Published: 2013-08-20T18:00:00 Last Updated: 2024-08-06T21:36:01.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Spambot module 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 for Drupal allows certain remote attackers to inject arbitrary web script or HTML via a stopforumspam.com API response, which is logged by the watchdog. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55613 - https://drupal.org/node/1789084 - https://drupal.org/node/1789086 - https://drupal.org/node/1789242 - http://secunia.com/advisories/50670 - http://osvdb.org/856
//drupal.org/node/1789086 - https://drupal.org/node/1789242 - http://secunia.com/advisories/50670 - http://osvdb.org/85680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78701
CVE ID: CVE-2012-6583 State: PUBLISHED Published: 2013-08-23T15:00:00 Last Updated: 2024-08-06T21:36:01.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Imagemenu module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the "administer imagemenu" permission to inject arbitrary web script or HTML via an image file name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50683 - http://osvdb.org/85679 - https://drupal.org/node/1789260 - http://www.securityfocus.com/bid/55610 - https://drupal.org/node/1788726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/786
securityfocus.com/bid/55610 - https://drupal.org/node/1788726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78697
CVE ID: CVE-2012-6584 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-09-16T17:58:18.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MYRE Realty Manager allow remote attackers to execute arbitrary SQL commands via the bathrooms1 parameter to (1) demo2/search.php or (2) search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/22713/
CVE ID: CVE-2012-6585 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-09-17T00:36:32.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in MYRE Realty Manager allows remote attackers to inject arbitrary web script or HTML via the cat_id1 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/22713/
CVE ID: CVE-2012-6586 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-09-17T01:55:34.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to execute arbitrary SQL commands via the (1) garage1 or (2) bathrooms1 parameter to vacation/1_mobile/search.php, or (3) unspecified input to vacation/widgate/request_more_information.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/22712/
CVE ID: CVE-2012-6587 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-09-16T23:35:30.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vacation/1_mobile/alert_members.php in MYRE Vacation Rental Software allows remote attackers to inject arbitrary web script or HTML via the link_idd parameter in a login action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/22712/
CVE ID: CVE-2012-6588 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-09-17T02:31:06.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in links.php in MYRE Business Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/22711/
CVE ID: CVE-2012-6589 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-09-16T21:07:18.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in MYRE Business Directory allows remote attackers to inject arbitrary web script or HTML via the look parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/22711/
CVE ID: CVE-2012-6590 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:02.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based management UI in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote attackers to obtain verbose error information via crafted input, aka Ref ID 33139. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6590
CVE ID: CVE-2012-6591 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 31116. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6591
CVE ID: CVE-2012-6592 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 31091. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6592
CVE ID: CVE-2012-6593 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:02.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 30088. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6593
CVE ID: CVE-2012-6594 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6594
CVE ID: CVE-2012-6595 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34595. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6595
CVE ID: CVE-2012-6596 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind passwords in authd.log, which allows context-dependent attackers to obtain sensitive information by reading this file, aka Ref ID 35493. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6596
CVE ID: CVE-2012-6597 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to cause a denial of service (management-server crash) by using the command-line interface for a crafted command, aka Ref ID 35254. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6597
CVE ID: CVE-2012-6598 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33080. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6598
CVE ID: CVE-2012-6599 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33476. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6599
CVE ID: CVE-2012-6600 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 34502. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6600
CVE ID: CVE-2012-6601 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6601
CVE ID: CVE-2012-6602 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 30122. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6602
CVE ID: CVE-2012-6603 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to bypass authentication and obtain administrator privileges via unspecified vectors, aka Ref ID 37034. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6603
CVE ID: CVE-2012-6604 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 35249. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6604
CVE ID: CVE-2012-6605 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 34896. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2012-6605
CVE ID: CVE-2012-6606 State: PUBLISHED Published: 2013-08-31T17:00:00 Last Updated: 2024-08-06T21:36:01.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof portal servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-10/0100.html - https://security.paloaltonetworks.com/CVE-2012-6606
CVE ID: CVE-2012-6607 State: PUBLISHED Published: 2013-11-23T18:00:00 Last Updated: 2024-08-06T21:36:01.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action, a different vector than CVE-2012-0786. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hercules-team/augeas/commit/16387744 - http://secunia.com/advisories/55811 - http://augeas.net/news.html - https://bugzilla.redhat.com/show_bug.cgi?id=772257 - http://rhn.redhat.com/errata/RHSA-201
http://augeas.net/news.html - https://bugzilla.redhat.com/show_bug.cgi?id=772257 - http://rhn.redhat.com/errata/RHSA-2013-1537.html
CVE ID: CVE-2012-6608 State: PUBLISHED Published: 2013-11-25T19:00:00Z Last Updated: 2024-09-17T00:41:31.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in xmlservices/E_book.php in Elastix 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the Page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55739 - http://packetstormsecurity.com/files/118454/Elastix-2.3.0-Cross-Site-Scripting.html
CVE ID: CVE-2012-6609 State: PUBLISHED Published: 2020-01-28T16:28:48 Last Updated: 2024-08-06T21:36:01.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in a_getlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2012/Mar/18 - https://web.archive.org/web/20130317232013/http://blog.tempest.com.br/joao-paulo-campello/polycom-web-management-interface-os-command-injection.html
CVE ID: CVE-2012-6610 State: PUBLISHED Published: 2020-01-28T16:28:44 Last Updated: 2024-08-06T21:36:01.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitrary commands as demonstrated by a ; (semicolon) to the ping command feature. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2012/Mar/18 - https://web.archive.org/web/20130317232013/http://blog.tempest.com.br/joao-paulo-campello/polycom-web-management-interface-os-command-injection.html
CVE ID: CVE-2012-6611 State: PUBLISHED Published: 2020-02-10T14:47:38 Last Updated: 2024-08-06T21:36:01.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Polycom Web Management Interface G3/HDX 8000 HD with Durango 2.6.0 4740 software and embedded Polycom Linux Development Platform 2.14.g3. It has a blank administrative password by default, and can be successfully used without setting this password. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20130320033016/http://blog.tempest.com.br/joao-paulo-campello/path-traversal-on-polycom-web-management-interface.html - https://www.exploit-db.com/exploits/43032
CVE ID: CVE-2012-6612 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T21:36:02.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, different vectors than CVE-2013-6407. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0029.html - https://issues.apache.org/jira/browse/SOLR-3895 - http://svn.apache.org/viewvc/lucene/dev
m/errata/RHSA-2014-0029.html - https://issues.apache.org/jira/browse/SOLR-3895 - http://svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/CHANGES.txt?view=markup - http://rhn.redhat.com/errata/RHSA-2013-1844.html
CVE ID: CVE-2012-6613 State: PUBLISHED Published: 2020-01-25T18:46:52 Last Updated: 2024-08-06T21:36:01.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSR-250N devices with firmware 1.05B73_WW allow Persistent Root Access because of the admin password for the admin account. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/22930/
CVE ID: CVE-2012-6614 State: PUBLISHED Published: 2020-02-19T14:17:39 Last Updated: 2024-08-06T21:36:01.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain "persistent root access" via the BusyBox CLI, as demonstrated by overwriting the super user password. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/22930/ - ftp://ftp2.dlink.com/PRODUCTS/DSR-250N/REVA/DSR-SERIES_RELEASE_NOTES_v3.14.pdf - https://packetstormsecurity.com/files/118355/D-Link-DSR-250N-Backdoor.html
CVE ID: CVE-2012-6615 State: PUBLISHED Published: 2013-12-24T20:00:00Z Last Updated: 2024-09-16T17:09:13.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_ass_split_override_codes function in libavcodec/ass_split.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a subtitle dialog without text. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=20c121c00747d6c3b0b0f98deeff021171b2ed74 - http://www.ffmpeg.org/security.html - https://trac.ffmpeg.org/ticket/2048 - http://www.osvdb.org/89592 - http://secunia.com/advisories/51964
CVE ID: CVE-2012-6616 State: PUBLISHED Published: 2013-12-24T20:00:00Z Last Updated: 2024-09-16T23:32:10.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mov_text_decode_frame function in libavcodec/movtextdec.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via crafted 3GPP TS 26.245 data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=68e48ed72e0597ae61bc3e9e6e6d9edcb1a00073 - https://trac.ffmpeg.org/ticket/2087 - http://www.ffmpeg.org/security.html - http://www.osvdb.org/93242 - http://secunia.com/advisories/51964
CVE ID: CVE-2012-6617 State: PUBLISHED Published: 2013-12-24T20:00:00Z Last Updated: 2024-09-17T03:59:30.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/93232 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9929991da7b843e7d80154fcacc4e80579b86a2d - https://trac.ffmpeg.org/ticket/1986 - http://www.ffmpeg.org/security.html - http://secunia.com/advisories/51964
CVE ID: CVE-2012-6618 State: PUBLISHED Published: 2013-12-24T20:00:00 Last Updated: 2024-08-06T21:36:01.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service (crash) via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate." Additional Analyst Notes: - CVE Program Container: References: - http://article.gmane.org/gmane.comp.video.ffmpeg.user/42233 - https://trac.ffmpeg.org/ticket/1991 - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git
2233 - https://trac.ffmpeg.org/ticket/1991 - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=e74cd2f4706f71da5e9205003c1d8263b54ed3fb - http://git.libav.org/?p=libav.git%3Ba=blob%3Bf=Changelog%3Bhb=refs/tags/v9.11 - http://secunia.com/advisories/51964
CVE ID: CVE-2012-6619 State: PUBLISHED Published: 2014-03-06T15:00:00 Last Updated: 2024-08-06T21:36:01.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read system memory via a crafted BSON object in the column name in an insert command, which triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/01/07/13 - http://www.openwall.com/lists/oss-security/2014/01/07/2 - http://rhn.redhat.com/errata/RHSA-2014-0230.html - https://jira.mongodb
w.openwall.com/lists/oss-security/2014/01/07/2 - http://rhn.redhat.com/errata/RHSA-2014-0230.html - https://jira.mongodb.org/browse/SERVER-7769 - http://blog.ptsecurity.com/2012/11/attacking-mongodb.html - http://rhn.redhat.com/errata/RHSA-2014-0440.html - https://bugzilla.redhat.com/show_bug.cgi?id=1049748 - http://www.openwall.com/lists/oss-security/2014/01/08/9
CVE ID: CVE-2012-6620 State: PUBLISHED Published: 2014-01-16T21:00:00 Last Updated: 2024-08-06T21:36:01.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the (1) tasks and (2) search views in Horde Kronolith H4 before 3.0.17 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49147 - http://bugs.horde.org/ticket/11189 - http://www.securityfocus.com/bid/53731 - https://github.com/horde/horde/commit/1228a6825a8dab3333d0a8c8986fc10d1f3d11b2 - http://lists.horde.org/archives/announce/2012/000766.html
/horde/horde/commit/1228a6825a8dab3333d0a8c8986fc10d1f3d11b2 - http://lists.horde.org/archives/announce/2012/000766.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75563