Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80189 - http://www.ubuntu.com/usn/USN-1638-3 - http://secunia.com/advisories/51370 - http://www.ubuntu.com/usn/USN-1638-2 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html - http://osvdb.org/87609 - http://www.ubuntu.com/usn/USN-1636-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html - http://rhn.redhat.com/errata/RHSA-2012-1483.html - http://www.securityfocus.com/bid/56634 - http://www.debian.org/security/2012/dsa-2584 - http://rhn.redhat.com/errata/RHSA-2012-1482.html - http://secunia.com/advisories/51434 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html - http://secunia.com
p://secunia.com/advisories/51434 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html - http://secunia.com/advisories/51439 - https://bugzilla.mozilla.org/show_bug.cgi?id=798853 - http://secunia.com/advisories/51440 - http://www.ubuntu.com/usn/USN-1638-1 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html - http://secunia.com/advisories/51359 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:173 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html - http://secunia.com/advisories/51381 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16902 - http://www.debian.org/security/2012/dsa-2583 - h
.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16902 - http://www.debian.org/security/2012/dsa-2583 - http://secunia.com/advisories/51369 - http://www.mozilla.org/security/announce/2012/mfsa2012-105.html - http://secunia.com/advisories/51360 - http://www.debian.org/security/2012/dsa-2588
CVE ID: CVE-2012-4217 State: PUBLISHED Published: 2012-11-21T11:00:00 Last Updated: 2024-08-06T20:28:07.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsViewManager::ProcessPendingUpdates function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56639 - http://www.ubuntu.com/usn/USN-1638-3 - http://secunia.com/advisories/51370 - http://www.ubuntu.com/usn/USN-1638-2 - http://lists.ope
buntu.com/usn/USN-1638-3 - http://secunia.com/advisories/51370 - http://www.ubuntu.com/usn/USN-1638-2 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html - http://www.ubuntu.com/usn/USN-1636-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16958 - http://secunia.com/advisories/51434 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html - http://secunia.com/advisories/51439 - http://secunia.com/advisories/51440 - http://www.ubuntu.com/usn/USN-1638-1 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html - http://lists.opensuse
.com/usn/USN-1638-1 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html - http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html - http://secunia.com/advisories/51381 - http://secunia.com/advisories/51369 - http://www.mozilla.org/security/announce/2012/mfsa2012-105.html - https://bugzilla.mozilla.org/show_bug.cgi?id=802902
CVE ID: CVE-2012-4218 State: PUBLISHED Published: 2012-11-21T11:00:00 Last Updated: 2024-08-06T20:28:07.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the BuildTextRunsScanner::BreakSink::SetBreaks function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1638-3 - http://secunia.com/advisories/51370 - http://www.securityfocus.com/bid/56640 - http://www.ubuntu.com/usn/USN-1638-2 - http://lis
ecunia.com/advisories/51370 - http://www.securityfocus.com/bid/56640 - http://www.ubuntu.com/usn/USN-1638-2 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html - http://www.ubuntu.com/usn/USN-1636-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html - https://bugzilla.mozilla.org/show_bug.cgi?id=767765 - http://secunia.com/advisories/51434 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html - http://secunia.com/advisories/51439 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16885 - http://secunia.com/advisories/51440 - http://www.ubuntu.com/usn/USN-1638-1 - http://lists.opensuse.org/opensuse-sec
85 - http://secunia.com/advisories/51440 - http://www.ubuntu.com/usn/USN-1638-1 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html - http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html - http://secunia.com/advisories/51381 - http://secunia.com/advisories/51369 - http://www.mozilla.org/security/announce/2012/mfsa2012-105.html
CVE ID: CVE-2012-4219 State: PUBLISHED Published: 2012-08-21T19:00:00 Last Updated: 2024-08-06T20:28:07.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/0f0c2f1e2b3ece41cc1bb99a9931c8fcc7c917bc - http://www.phpmyadmin.net/home_page/security/PMASA-2012-3.php - https://hermes.opensuse.org/messages/15513071
CVE ID: CVE-2012-4220 State: PUBLISHED Published: 2012-11-30T11:00:00 Last Updated: 2024-08-06T20:28:07.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 through 4.2 allows attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference) via an application that uses crafted arguments in a local diagchar_ioctl call. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/multiple-issues-diagkgsl-system-call-handling-cve-2012-4220-cve-2012 - http://www.kb.cert.org/vuls/id
ecurity-advisories/multiple-issues-diagkgsl-system-call-handling-cve-2012-4220-cve-2012 - http://www.kb.cert.org/vuls/id/702452
CVE ID: CVE-2012-4221 State: PUBLISHED Published: 2012-11-30T11:00:00 Last Updated: 2024-08-06T20:28:07.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 through 4.2 allows attackers to execute arbitrary code or cause a denial of service via an application that uses crafted arguments in a local diagchar_ioctl call. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/multiple-issues-diagkgsl-system-call-handling-cve-2012-4220-cve-2012 - http://www.kb.cert.org/vuls/id/702452
CVE ID: CVE-2012-4222 State: PUBLISHED Published: 2012-11-30T11:00:00 Last Updated: 2024-08-06T20:28:07.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/gpu/msm/kgsl.c in the Qualcomm Innovation Center (QuIC) Graphics KGSL kernel-mode driver for Android 2.3 through 4.2 allows attackers to cause a denial of service (NULL pointer dereference) via an application that uses crafted arguments in a local kgsl_ioctl call. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/multiple-issues-diagkgsl-system-call-handling-cve-2012-4220-cve-2012 - http://www.kb.cert.org/vuls/id/702452
CVE ID: CVE-2012-4223 State: REJECTED Published: 2013-03-19T18:00:00Z Last Updated: 2024-09-17T03:03:07.526Z Description: No description available.
CVE ID: CVE-2012-4224 State: REJECTED Published: 2013-03-19T18:00:00Z Last Updated: 2024-09-16T18:48:41.280Z Description: No description available.
CVE ID: CVE-2012-4225 State: PUBLISHED Published: 2012-11-19T11:00:00 Last Updated: 2024-08-06T20:28:07.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: NVIDIA UNIX graphics driver before 295.71 and before 304.32 allows local users to write to arbitrary physical memory locations and gain privileges by modifying the VGA window using /dev/nvidia0. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/01/1 - http://www.openwall.com/lists/oss-security/2012/08/08/4 - http://nvidia.custhelp.com/app/answers/detail/a_id/3140 - http://seclists.org/fulldisclosure/2012/Aug/76 - http://security.gentoo.org/glsa/glsa-201304-01.xm
rs/detail/a_id/3140 - http://seclists.org/fulldisclosure/2012/Aug/76 - http://security.gentoo.org/glsa/glsa-201304-01.xml - http://seclists.org/fulldisclosure/2012/Aug/4
CVE ID: CVE-2012-4226 State: PUBLISHED Published: 2014-09-03T14:00:00 Last Updated: 2024-08-06T20:28:07.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) Title, (2) Content, or (3) New category field to wordpress/ or (4) query string to wordpress/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/115463/WordPress-Quick-Post-Widget-1.9.1-Cross-Site-Scripting.html - http://www.darksecurity.de/advisories/2012/SSCHADV2012-016.txt - https://exchange.xforce.ibm
Cross-Site-Scripting.html - http://www.darksecurity.de/advisories/2012/SSCHADV2012-016.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/77731 - http://www.securityfocus.com/bid/54311 - http://archives.neohapsis.com/archives/bugtraq/2012-08/0067.html
CVE ID: CVE-2012-4230 State: PUBLISHED Published: 2014-04-25T10:00:00 Last Updated: 2024-08-06T20:28:07.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the (1) encoding directive and (2) valid_elements attribute, which allows attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors, as demonstrated using a textarea element. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82744 - http://www.madirish.net/554 - http://seclists.org/fulldisclosure/2013/Mar/114 - http://osvdb.org/91130 - ht
ties/82744 - http://www.madirish.net/554 - http://seclists.org/fulldisclosure/2013/Mar/114 - http://osvdb.org/91130 - http://www.securityfocus.com/bid/58424 - http://packetstormsecurity.com/files/120750/TinyMCE-3.5.8-Cross-Site-Scripting.html
CVE ID: CVE-2012-4231 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T20:28:07.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to inject arbitrary web script or HTML via the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://jcore.net/news/jcore-ver-10pre2-available-for-testing - https://www.htbridge.com/advisory/HTB23107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79441 - http://www.securityfocus.com/bid/56102 - http://osvdb.org/86495 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0097.h
www.securityfocus.com/bid/56102 - http://osvdb.org/86495 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0097.html
CVE ID: CVE-2012-4232 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T20:28:07.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to execute arbitrary SQL commands via the memberloginid cookie. Additional Analyst Notes: - CVE Program Container: References: - http://jcore.net/news/jcore-ver-10pre2-available-for-testing - https://www.htbridge.com/advisory/HTB23107 - http://www.securityfocus.com/bid/56102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79442 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0097.html
CVE ID: CVE-2012-4233 State: PUBLISHED Published: 2012-11-19T11:00:00 Last Updated: 2024-08-06T20:28:07.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll. Additional Analyst Notes: - CVE Program Container: References: - http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice
Analyst Notes: - CVE Program Container: References: - http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=44bc6b5cac723b52df40fbef026e99b7119d8a69 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79730 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00075.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79731 - http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=6789ec4c1a9c6af84bd62e650a03226a46365d97 - http://www.openwall.com/lists/oss-security/2012/11/02/2 - http://cgit.freedesktop.org/libreoffice/binfilter/commit/?h=libreoffice-3-5-7&id=7e22ee55ffc9743692f3ddb93e59dd4427029c5b - https://exchange.xforce.ibmcloud.com/
infilter/commit/?h=libreoffice-3-5-7&id=7e22ee55ffc9743692f3ddb93e59dd4427029c5b - https://exchange.xforce.ibmcloud.com/vulnerabilities/79728 - http://www.libreoffice.org/advisories/cve-2012-4233/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/79732 - http://www.securityfocus.com/bid/56352 - http://www.debian.org/security/2012/dsa-2570 - http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=8ca9fb05c9967f11670d045886438ddfa3ac02a7 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00039.html - https://www.htbridge.com/advisory/HTB23106
CVE ID: CVE-2012-4234 State: PUBLISHED Published: 2014-09-04T14:00:00 Last Updated: 2024-08-06T20:28:07.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center (control.php) in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via the group parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-08/0189.html - https://www.htbridge.com/advisory/HTB23109 - http://secunia.com/advisories/50445 - http://www.securityfocus.com/bid/55275 - https://exchange.xforce.ibmcloud.com/vulnerabilities/781
com/advisories/50445 - http://www.securityfocus.com/bid/55275 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78124 - http://packetstormsecurity.org/files/116057/Phorum-5.2.18-Cross-Site-Scripting.html - http://www.phorum.org/phorum5/read.php?64%2C151943
CVE ID: CVE-2012-4235 State: PUBLISHED Published: 2012-08-10T10:00:00Z Last Updated: 2024-09-17T02:10:45.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RSGallery2 (com_rsgallery2) component before 3.2.0 for Joomla! 2.5.x does not place index.html files in image directories, which allows remote attackers to list image filenames via a request for a directory URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html - http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142 - http://joomlacode.org/gf/project/rsgallery2/news/ - http://joomlacode.org/gf/downloa
photos-a-images/photo-gallery/142 - http://joomlacode.org/gf/project/rsgallery2/news/ - http://joomlacode.org/gf/download/frsrelease/17326/75428/com_rsgallery2_3.2.0.zip
CVE ID: CVE-2012-4236 State: PUBLISHED Published: 2012-08-20T19:00:00Z Last Updated: 2024-09-16T18:59:08.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the refresh_page function in application/modules/_main/views/_top.php in Total Shop UK eCommerce Open Source before 2.1.2_p1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.reactionpenetrationtesting.co.uk/totalshop-uk-generic-xss.html - http://www.openwall.com/lists/oss-security/2012/08/13/7 - http://www.securityfocus.com/bid/54985 - http://secunia.com/advisories/50238
CVE ID: CVE-2012-4237 State: PUBLISHED Published: 2012-08-20T20:00:00Z Last Updated: 2024-09-16T20:43:39.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the subject_module_id parameter to (1) tce_edit_answer.php or (2) tce_edit_question.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/54861 - http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam%3Bh=edf6e08622642f1b2421f4355d98250d9e1b0742 - http://archives.neohapsis.com/archives/bugtraq/2012-
.cgi?p=tcexam/tcexam%3Bh=edf6e08622642f1b2421f4355d98250d9e1b0742 - http://archives.neohapsis.com/archives/bugtraq/2012-08/0079.html - http://secunia.com/advisories/50141 - http://freecode.com/projects/tcexam/releases/347125 - http://www.reactionpenetrationtesting.co.uk/tcexam-sql-injection.html - http://www.openwall.com/lists/oss-security/2012/08/13/8
CVE ID: CVE-2012-4238 State: PUBLISHED Published: 2012-08-20T20:00:00Z Last Updated: 2024-09-16T17:14:13.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/code/tce_edit_answer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the question_subject_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.reactionpenetrationtesting.co.uk/tcexam-cross-site-scripting.html - http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam%3Bh=edf6e08622642f1b2421f4355d98250d9e1b0742 - http://secunia.com/advisor
sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam%3Bh=edf6e08622642f1b2421f4355d98250d9e1b0742 - http://secunia.com/advisories/50141 - http://freecode.com/projects/tcexam/releases/347125 - http://archives.neohapsis.com/archives/bugtraq/2012-08/0090.html
CVE ID: CVE-2012-4240 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T20:28:07.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/21056 - http://www.reactionpenetrationtesting.co.uk/group-office-sqli.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78253 - http://www.securityfocus.com/bid/55383 - http://archives.neohapsis.com/archives/bugtraq/2012-09/0011.html
lities/78253 - http://www.securityfocus.com/bid/55383 - http://archives.neohapsis.com/archives/bugtraq/2012-09/0011.html - http://osvdb.org/85171
CVE ID: CVE-2012-4241 State: PUBLISHED Published: 2014-08-12T20:00:00 Last Updated: 2024-08-06T20:28:07.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Microcart 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO or (2) query string to _admin/index.php or (3) first_name, (4) last_name, (5) cc, (6) exp, (7) cvv, (8) address1, (9) address2, (10) city, (11) state, (12) zip, (13) phone, or (14) email parameter to checkout.php, which is not properly handled in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/116714/Micro
sage. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/116714/Microcart-1.0-Checkout-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78690 - http://packetstormsecurity.com/files/116721/Microcart-1.0-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78691 - http://www.reactionpenetrationtesting.co.uk/microcart-checkout-xss.html - http://www.securityfocus.com/bid/55620 - http://www.reactionpenetrationtesting.co.uk/microcart-_admin-xss.html
CVE ID: CVE-2012-4242 State: PUBLISHED Published: 2012-10-01T23:00:00 Last Updated: 2024-08-06T20:28:07.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the query string to the calendar page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55622 - http://www.reactionpenetrationtesting.co.uk/mf-gig-calendar-xss.html
CVE ID: CVE-2012-4244 State: PUBLISHED Published: 2012-09-14T00:00:00 Last Updated: 2024-08-06T20:28:07.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2547 - http://www.ubuntu.com/usn/USN-1566-1 - http://marc.info/?l=bugtraq&m=141879471518471&w=2 - http://marc.info/?l=bugtraq&m=141879471518471&w=2 - http://secunia.com/ad
//marc.info/?l=bugtraq&m=141879471518471&w=2 - http://marc.info/?l=bugtraq&m=141879471518471&w=2 - http://secunia.com/advisories/51096 - http://secunia.com/advisories/50582 - http://rhn.redhat.com/errata/RHSA-2012-1365.html - http://rhn.redhat.com/errata/RHSA-2012-1266.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00021.html - http://rhn.redhat.com/errata/RHSA-2012-1267.html - http://www.securityfocus.com/bid/55522 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/087703.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:152 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/087697.html - http://lists.o
e=MDVSA-2012:152 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/087697.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00022.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://secunia.com/advisories/50579 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 - http://secunia.com/advisories/50645 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00007.html - https://kb.isc.org/article/AA-00778 - http://support.apple.com/kb/HT5880 - http://rhn.redhat.com/errata/RHSA-2012-1268.html - http://secunia.com/advisories/50560 - http://lists.fedoraproject.org/pip
p://rhn.redhat.com/errata/RHSA-2012-1268.html - http://secunia.com/advisories/50560 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088381.html - http://secunia.com/advisories/50673 - https://security.netapp.com/advisory/ntap-20221209-0008/