Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ss.php?d=194019 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=6e9989dbd3f261b2e1586ff77b0bf22fc7091485 - https://bugzilla.redhat.com/show_bug.cgi?id=783532
CVE ID: CVE-2012-0801 State: PUBLISHED Published: 2012-07-17T10:00:00 Last Updated: 2024-08-06T18:38:14.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle multiple instances of a form element, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=51070abc78b9e1db1db9a44855e8623b22bebd48 - http://moodle.org/mod/forum/discuss.php?d=194020 - https://bugzilla.redhat.com/show_bug.cgi?id=783532
CVE ID: CVE-2012-0802 State: PUBLISHED Published: 2012-06-19T20:00:00Z Last Updated: 2024-09-17T04:20:13.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Spamdyke before 4.3.0 might allow remote attackers to execute arbitrary code via vectors related to "serious errors in the usage of snprintf()/vsnprintf()" in which the return values may be larger than the size of the buffer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47548 - http://www.openwall.com/lists/oss-security/2012/01/23/5 - http://www.securityfocus.com/bid/51440 - http://www.osvdb.org/78351 - http://www.mail-archive.com/spamdyke-release%
/5 - http://www.securityfocus.com/bid/51440 - http://www.osvdb.org/78351 - http://www.mail-archive.com/spamdyke-release%40spamdyke.org/msg00014.html - http://secunia.com/advisories/48257 - http://www.spamdyke.org/documentation/Changelog.txt - http://security.gentoo.org/glsa/glsa-201203-01.xml
CVE ID: CVE-2012-0803 State: PUBLISHED Published: 2017-08-08T21:00:00 Last Updated: 2024-08-06T18:38:14.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=132861746008002 - http://svn.apache.org/viewvc?view=revision&revision=1233457 - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b
3dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache
- https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2012-0804 State: PUBLISHED Published: 2012-05-29T20:00:00 Last Updated: 2024-08-06T18:38:14.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-02/msg00064.html - http://www.securitytracker.com/id?1026719 - http://secunia.com/advisories/48150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73097 - http://rhn.redhat.com/errata
secunia.com/advisories/48150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73097 - http://rhn.redhat.com/errata/RHSA-2012-0321.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:044 - http://www.osvdb.org/78987 - http://secunia.com/advisories/48142 - http://ubuntu.com/usn/usn-1371-1 - http://secunia.com/advisories/47869 - https://security.gentoo.org/glsa/201701-44 - https://bugzilla.redhat.com/show_bug.cgi?id=784141 - http://www.debian.org/security/2012/dsa-2407 - http://www.securityfocus.com/bid/51943 - http://secunia.com/advisories/48063
CVE ID: CVE-2012-0805 State: PUBLISHED Published: 2012-06-05T22:00:00 Last Updated: 2024-08-06T18:38:14.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73756 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:059 - https://bugs.launchpad.net/keystone/+bug/918608 - h
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:059 - https://bugs.launchpad.net/keystone/+bug/918608 - http://www.sqlalchemy.org/trac/changeset/852b6a1a87e7/ - http://www.debian.org/security/2012/dsa-2449 - http://www.sqlalchemy.org/changelog/CHANGES_0_7_0 - http://secunia.com/advisories/48771 - http://secunia.com/advisories/48328 - http://secunia.com/advisories/48327 - http://rhn.redhat.com/errata/RHSA-2012-0369.html
CVE ID: CVE-2012-0806 State: PUBLISHED Published: 2012-01-27T00:00:00 Last Updated: 2024-08-06T18:38:14.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via vectors involving a series of TCP connections that triggers use of many open file descriptors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/01/24/10 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:063 - http://secunia.com/advisories/47679 - https://projects.duckcorp.org/projects/bip/repository/revisions/222a33cb84a2e52ad55a88900b7895bf9dd0262
visories/47679 - https://projects.duckcorp.org/projects/bip/repository/revisions/222a33cb84a2e52ad55a88900b7895bf9dd0262c - http://lists.fedoraproject.org/pipermail/package-announce/2012-February/072752.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-February/072767.html - https://projects.duckcorp.org/issues/269 - http://openwall.com/lists/oss-security/2012/01/24/4 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657217
CVE ID: CVE-2012-0807 State: PUBLISHED Published: 2012-01-27T00:00:00 Last Updated: 2024-08-06T18:38:14.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and suhosin.multiheader are enabled, might allow remote attackers to execute arbitrary code via a long string that is used in a Set-Cookie HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=783350 - http://www.openwall.com/lists/oss-security/2012/01/24/11 - http://l
https://bugzilla.redhat.com/show_bug.cgi?id=783350 - http://www.openwall.com/lists/oss-security/2012/01/24/11 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html - http://www.openwall.com/lists/oss-security/2012/01/24/7 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00001.html - http://secunia.com/advisories/48668 - http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0296.html - https://github.com/stefanesser/suhosin/commit/73b1968ee30f6d9d2dae497544b910e68e114bfa
CVE ID: CVE-2012-0808 State: PUBLISHED Published: 2012-03-19T19:00:00 Last Updated: 2024-08-06T18:38:14.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/07/05/1 - http://www.openwall.com/lists/oss-security/2012/01/24/11 - http://www.openwall.com/lists/oss-security/2012/01/24/7 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655496 - http://www.openwall.com/lists/oss-security/
ity/2012/01/24/7 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655496 - http://www.openwall.com/lists/oss-security/2012/08/31/9 - http://www.openwall.com/lists/oss-security/2012/07/06/3
CVE ID: CVE-2012-0809 State: PUBLISHED Published: 2012-02-01T00:00:00 Last Updated: 2024-08-06T18:38:14.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201203-06.xml - http://archives.neohapsis.com/archives/fulldisclosure/2012-01/att-0591/advisory_sudo.txt - http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0591.html - http://www.sudo.ws/sudo/alerts/sudo_debug.html
CVE ID: CVE-2012-0810 State: PUBLISHED Published: 2020-02-12T13:14:32 Last Updated: 2024-08-06T18:38:14.519Z Vendors: Linux Foundation Products: Linux kernel Problem Types: Other Description: The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service (stack corruption and panic) via a crafted application that triggers certain lock contention. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=794557 - https://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git/commit/?id=e5d4e1c3ccee18c68f23d62ba77bda26e893d4f0 - https://git.kernel.org/pub/scm/linux
el/git/rt/linux-stable-rt.git/commit/?id=e5d4e1c3ccee18c68f23d62ba77bda26e893d4f0 - https://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git/commit/?id=bcf6b1d78c0bde228929c388978ed3af9a623463
CVE ID: CVE-2012-0811 State: PUBLISHED Published: 2014-10-01T14:00:00 Last Updated: 2024-08-06T18:38:14.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the pw parameter to the pacrypt function, when mysql_encrypt is configured, or (2) unspecified vectors that are used in backup files generated by backup.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51680 - http://www.openwall.com/lists/oss-security/2012/01/26/5 - http://www.codseq.it/advisories/multiple_vulner
om/bid/51680 - http://www.openwall.com/lists/oss-security/2012/01/26/5 - http://www.codseq.it/advisories/multiple_vulnerabilities_in_postfixadmin - https://svn.code.sf.net/p/postfixadmin/code/branches/postfixadmin-2.3/CHANGELOG.TXT - http://www.openwall.com/lists/oss-security/2012/01/27/5
CVE ID: CVE-2012-0812 State: PUBLISHED Published: 2019-11-22T16:07:23 Last Updated: 2024-08-06T18:38:14.912Z Vendors: postfixadmin Products: postfixadmin Problem Types: 2.3.4 multiple XSS vulnerabilities Description: PostfixAdmin 2.3.4 has multiple XSS vulnerabilities Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-0812 - https://access.redhat.com/security/cve/cve-2012-0812 - https://bugs.gentoo.org/show_bug.cgi?id=CVE-2012-0812 - http://security.gentoo.org/glsa/glsa-201209-18.xml - http://www.openwall.com/lists/oss-security/2012/01/26/12 - http://www.openwall.com/lists/oss-security/2012/01/27/5 - http://www.securityfocus.
m/lists/oss-security/2012/01/26/12 - http://www.openwall.com/lists/oss-security/2012/01/27/5 - http://www.securityfocus.com/bid/51680
CVE ID: CVE-2012-0813 State: PUBLISHED Published: 2012-06-29T19:00:00Z Last Updated: 2024-08-06T18:38:14.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/wicd/+announcement/9570 - http://www.openwall.com/lists/oss-security/2012/01/26/14 - http://www.securityfocus.com/bid/51703 - http://secunia.com/advisories/49657 - http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/682 - http://www.openwall.com/lists/oss-se
es/49657 - http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/682 - http://www.openwall.com/lists/oss-security/2012/01/26/13 - http://security.gentoo.org/glsa/glsa-201206-08.xml - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652417
CVE ID: CVE-2012-0814 State: PUBLISHED Published: 2012-01-27T19:00:00 Last Updated: 2024-08-06T18:38:14.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user account required by Gitolite. NOTE: this can cross privilege boundaries because a user account may intentionally have no shell or filesystem access, and therefore may have no supported way to read an authorized_keys file in its own home d
no shell or filesystem access, and therefore may have no supported way to read an authorized_keys file in its own home directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51702 - http://openwall.com/lists/oss-security/2012/01/27/4 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673 - http://openwall.com/lists/oss-security/2012/01/26/15 - http://osvdb.org/78706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72756 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657445 - http://openwall.com/lists/oss-security/2012/01/26/16 - http://openwall.com/lists/oss-security/2012/01/27/1 - http://www.openbsd.org/cgi-bin/cvswe
/oss-security/2012/01/26/16 - http://openwall.com/lists/oss-security/2012/01/27/1 - http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth-options.c - http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth-options.c.diff?r1=1.53%3Br2=1.54
CVE ID: CVE-2012-0815 State: PUBLISHED Published: 2012-06-04T20:00:00 Last Updated: 2024-08-06T18:38:14.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://www.mandriva.com/security/advisories?n
njul2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:056 - http://www.securitytracker.com/id?1026882 - https://bugzilla.redhat.com/show_bug.cgi?id=744104 - http://rpm.org/wiki/Releases/4.9.1.3 - http://secunia.com/advisories/48716 - http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=472e569562d4c90d7a298080e0052856aa7fa86b - http://secunia.com/advisories/48651 - http://rhn.redhat.com/errata/RHSA-2012-0451.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html - http://www.securityfocus.com/bid/52865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74581 - http://www.ubuntu
http://www.securityfocus.com/bid/52865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74581 - http://www.ubuntu.com/usn/USN-1695-1 - https://hermes.opensuse.org/messages/14440932 - http://secunia.com/advisories/49110 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html - https://hermes.opensuse.org/messages/14441362 - http://www.osvdb.org/81009 - http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=858a328cd0f7d4bcd8500c78faaf00e4f8033df6
CVE ID: CVE-2012-0816 State: REJECTED Published: 2021-07-09T12:20:33 Last Updated: 2021-07-09T12:20:33 Description: No description available.
CVE ID: CVE-2012-0817 State: PUBLISHED Published: 2012-01-30T17:00:00 Last Updated: 2024-08-06T18:38:14.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service (memory and CPU consumption) by making many connection requests. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47763 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html - http://www.samba.org/samba/history/samba-3.6.3.html - http://www.samba.org/samba/security/CVE-2012-0817 - htt
008.html - http://www.samba.org/samba/history/samba-3.6.3.html - http://www.samba.org/samba/security/CVE-2012-0817 - http://lists.fedoraproject.org/pipermail/package-announce/2012-February/072930.html - http://secunia.com/advisories/48879
CVE ID: CVE-2012-0818 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T18:38:14.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=785631 - http://rhn.redhat.com/errata/RHSA-2012-1059.html - http://www.securityfocus.com/bid/51748 - https://issues.jboss.org/browse/RESTEASY-637 - http://rhn.redhat.com/errata/RHSA-2012-1056.html - http://rhn.redhat.com/errata/RHSA-2012-1058.html -
se/RESTEASY-637 - http://rhn.redhat.com/errata/RHSA-2012-1056.html - http://rhn.redhat.com/errata/RHSA-2012-1058.html - http://www.securityfocus.com/bid/51766 - http://www.osvdb.org/78679 - http://rhn.redhat.com/errata/RHSA-2012-0519.html - http://secunia.com/advisories/50084 - http://rhn.redhat.com/errata/RHSA-2014-0371.html - http://rhn.redhat.com/errata/RHSA-2012-1057.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72808 - http://secunia.com/advisories/48954 - http://rhn.redhat.com/errata/RHSA-2012-0441.html - http://secunia.com/advisories/47832 - http://secunia.com/advisories/57719 - http://secunia.com/advisories/57716 - http://secunia.com/advisories/47818 - http://rhn.redhat
nia.com/advisories/57719 - http://secunia.com/advisories/57716 - http://secunia.com/advisories/47818 - http://rhn.redhat.com/errata/RHSA-2014-0372.html - http://secunia.com/advisories/48697 - http://rhn.redhat.com/errata/RHSA-2012-1125.html
CVE ID: CVE-2012-0819 State: PUBLISHED Published: 2012-09-06T19:00:00Z Last Updated: 2024-09-16T19:19:38.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2012-0821. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/01/26/4 - http://www.openwall.com/lists/oss-security/2012/01/25/1 - http://www.openwall.com/lists/oss-security/2012/01/26/2 - http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html - http://www.openwall.co
y/2012/01/26/2 - http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html - http://www.openwall.com/lists/oss-security/2012/01/30/1 - http://secunia.com/advisories/47753 - http://www.joomla.org/announcements/release-news/5403-joomla-250-released.html - http://www.osvdb.org/78517 - http://developer.joomla.org/security/news/382-20120101-core-information-disclosure
CVE ID: CVE-2012-0820 State: PUBLISHED Published: 2012-09-06T19:00:00Z Last Updated: 2024-09-17T02:53:13.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0822. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/01/26/4 - http://www.osvdb.org/78515 - http://www.openwall.com/lists/oss-security/2012/01/25/1 - http://www.openwall.com/lists/oss-security/2012/01/26/2 - http://www.joomla.org/announcements/release-news
012/01/25/1 - http://www.openwall.com/lists/oss-security/2012/01/26/2 - http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html - http://www.openwall.com/lists/oss-security/2012/01/30/1 - http://secunia.com/advisories/47753 - http://developer.joomla.org/security/news/383-20120102-core-xss-vulnerability - http://www.joomla.org/announcements/release-news/5403-joomla-250-released.html
CVE ID: CVE-2012-0821 State: PUBLISHED Published: 2012-09-06T19:00:00Z Last Updated: 2024-09-17T01:46:33.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2012-0819. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/01/26/4 - http://www.openwall.com/lists/oss-security/2012/01/25/1 - http://www.openwall.com/lists/oss-security/2012/01/26/2 - http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html - http://developer.jooml
y/2012/01/26/2 - http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html - http://developer.joomla.org/security/news/384-20120103-core-information-disclosure - http://www.openwall.com/lists/oss-security/2012/01/30/1 - http://secunia.com/advisories/47753 - http://www.osvdb.org/78518 - http://www.joomla.org/announcements/release-news/5403-joomla-250-released.html
CVE ID: CVE-2012-0822 State: PUBLISHED Published: 2012-09-06T19:00:00Z Last Updated: 2024-09-16T20:07:37.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Joomla! 1.6 and 1.7.x before 1.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0820. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/01/26/4 - http://www.osvdb.org/78516 - http://www.openwall.com/lists/oss-security/2012/01/25/1 - http://developer.joomla.org/security/news/385-20120104-core-xss-vulnerability - http://www.openwall.com/list
2/01/25/1 - http://developer.joomla.org/security/news/385-20120104-core-xss-vulnerability - http://www.openwall.com/lists/oss-security/2012/01/26/2 - http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html - http://www.openwall.com/lists/oss-security/2012/01/30/1 - http://secunia.com/advisories/47753 - http://www.joomla.org/announcements/release-news/5403-joomla-250-released.html