Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0823 State: PUBLISHED Published: 2012-02-23T19:00:00 Last Updated: 2024-08-06T18:38:14.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51775 - http://code.google.com/p/webm/source/browse/CHANGELOG?repo=libvpx - http://blog.webmproject.org/2012/01/vp8-codec-sdk-duclai
://code.google.com/p/webm/source/browse/CHANGELOG?repo=libvpx - http://blog.webmproject.org/2012/01/vp8-codec-sdk-duclair-released.html - http://www.openwall.com/lists/oss-security/2012/01/30/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:023 - http://www.openwall.com/lists/oss-security/2012/01/28/4
CVE ID: CVE-2012-0824 State: PUBLISHED Published: 2019-11-19T15:47:26 Last Updated: 2024-08-06T18:38:14.756Z Vendors: gnusound Products: gnusound Problem Types: UNKNOWN_TYPE Description: gnusound 0.7.5 has format string issue Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-0824 - https://access.redhat.com/security/cve/cve-2012-0824 - http://www.openwall.com/lists/oss-security/2012/01/31/3 - https://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-0824.html
CVE ID: CVE-2012-0825 State: PUBLISHED Published: 2013-10-28T22:00:00 Last Updated: 2024-08-06T18:38:14.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 6.x before 6.23 and 7.x before 7.11 does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/1425084 - http://openid.net/2011/05/05/attribute-exchange-security-alert/ - http://www.debian.org/security/2013/dsa-2776
CVE ID: CVE-2012-0826 State: PUBLISHED Published: 2013-10-28T22:00:00 Last Updated: 2024-08-06T18:38:14.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service (loss of updates due to rate limit) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/1425084 - http://www.debian.org/security/2013/dsa-2776
CVE ID: CVE-2012-0827 State: PUBLISHED Published: 2013-10-28T22:00:00Z Last Updated: 2024-08-06T18:38:14.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File module in Drupal 7.x before 7.11, when using unspecified field access modules, allows remote authenticated users to read arbitrary private files that are associated with restricted fields via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/1425084
CVE ID: CVE-2012-0828 State: PUBLISHED Published: 2020-02-21T17:20:43 Last Updated: 2024-08-06T18:38:14.795Z Vendors: xchat Products: Xchat-WDK, xchat Problem Types: Heap-based buffer overflow by processing UTF-8 line from server containing characters outside BMP Description: Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane (BMP). Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-0
Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-0828 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0828 - https://access.redhat.com/security/cve/cve-2012-0828 - http://www.openwall.com/lists/oss-security/2012/02/01/9
CVE ID: CVE-2012-0829 State: PUBLISHED Published: 2012-02-14T00:00:00 Last Updated: 2024-08-06T18:38:14.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site scripting (XSS) sequences via the (1) address or (2) threadid parameters to operator/ban.php; or (3) geolinkparams, (4) title, or (5) chattitle parameters to operator/settings.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72822 - http://secunia.com/advisorie
ogram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72822 - http://secunia.com/advisories/47787 - http://www.securityfocus.com/bid/51723 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0178.html - http://www.openwall.com/lists/oss-security/2012/02/02/10 - http://www.codseq.it/advisories/mibew_messenger_multiple_xss
CVE ID: CVE-2012-0830 State: PUBLISHED Published: 2012-02-06T20:00:00 Last Updated: 2024-08-06T18:38:14.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=134012830914727&w=2 - http://svn.php.net/viewvc?view=revision&revision=323007 - http://h20000.www2.hp.com/bizsupport/TechSupport/Docume
&w=2 - http://svn.php.net/viewvc?view=revision&revision=323007 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://thexploit.com/sec/critical-php-remote-vulnerability-introduced-in-fix-for-php-hashtable-collision-dos/ - http://www.securityfocus.com/bid/51830 - http://rhn.redhat.com/errata/RHSA-2012-0092.html - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html - http://www.osvdb.org/78819 - http://secunia.com/advisories/47806 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html - http://www.debian.org/security/2012/dsa-2403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72911 - http://secunia.com/
www.debian.org/security/2012/dsa-2403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72911 - http://secunia.com/advisories/48668 - http://www.php.net/ChangeLog-5.php#5.3.10 - http://secunia.com/advisories/47801 - http://openwall.com/lists/oss-security/2012/02/02/12 - http://openwall.com/lists/oss-security/2012/02/03/1 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://securitytracker.com/id?1026631 - http://marc.info/?l=bugtraq&m=134012830914727&w=2 - http://www.h-online.com/security/news/item/Critical-PHP-vulnerability-being-fixed-1427316.html - http://support.apple.com/kb/HT5281 - https://gist.github.com/1725489 - http://lists.apple.com/arch
-fixed-1427316.html - http://support.apple.com/kb/HT5281 - https://gist.github.com/1725489 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - http://secunia.com/advisories/47813
CVE ID: CVE-2012-0831 State: PUBLISHED Published: 2012-02-10T20:00:00 Last Updated: 2024-08-06T18:38:14.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variables, which makes it easier for remote attackers to conduct SQL injection attacks via a crafted request, related to main/php_variables.c, sapi/cgi/cgi_main.c, and sapi/fpm/fpm/fpm_main.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1358-1 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html - http://secunia.com/adviso
/usn/USN-1358-1 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html - http://secunia.com/advisories/55078 - http://svn.php.net/viewvc?view=revision&revision=323016 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00001.html - http://secunia.com/advisories/48668 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://rhn.redhat.com/errata/RHSA-2013-1307.html - http://support.apple.com/kb/HT5501 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080041.html - https://launchpadlibrarian.net/92454212/php5_5.3.2-1ubuntu4.13.diff.gz -
ermail/package-announce/2012-May/080041.html - https://launchpadlibrarian.net/92454212/php5_5.3.2-1ubuntu4.13.diff.gz - https://exchange.xforce.ibmcloud.com/vulnerabilities/73125 - http://www.securityfocus.com/bid/51954 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080037.html
CVE ID: CVE-2012-0832 State: REJECTED Published: 2021-07-09T12:15:24 Last Updated: 2021-07-09T12:15:24 Description: No description available.
CVE ID: CVE-2012-0833 State: PUBLISHED Published: 2012-07-03T16:00:00Z Last Updated: 2024-08-06T18:38:14.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0813.html - https://fedorahosted.org/389/ticket/162 - http://secun
References: - http://rhn.redhat.com/errata/RHSA-2012-0813.html - https://fedorahosted.org/389/ticket/162 - http://secunia.com/advisories/49562 - http://secunia.com/advisories/48035 - https://fedorahosted.org/389/changeset/1bbbb3e5049c1aa0650546efab87ed2f1ea59637/389-ds-base
CVE ID: CVE-2012-0834 State: PUBLISHED Published: 2012-02-11T02:00:00 Last Updated: 2024-08-06T18:38:14.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the base parameter in a query_engine action to cmd.php. Additional Analyst Notes: - CVE Program Container: References: - http://phpldapadmin.git.sourceforge.net/git/gitweb.cgi?p=phpldapadmin/phpldapadmin%3Ba=commit%3Bh=7dc8d57d6952fe681cb9e8818df7f103220457bd - http://secunia.com/advisories/47852 - https://sourceforge.net/tracker/index.php?func=detail&aid=3477910&g
f103220457bd - http://secunia.com/advisories/47852 - https://sourceforge.net/tracker/index.php?func=detail&aid=3477910&group_id=61828&atid=498546 - http://openwall.com/lists/oss-security/2012/02/03/3 - http://openwall.com/lists/oss-security/2012/02/02/9 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:020
CVE ID: CVE-2012-0835 State: PUBLISHED Published: 2012-09-06T19:00:00Z Last Updated: 2024-09-17T00:36:01.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain sensitive information via unknown vectors related to "administrator." Additional Analyst Notes: - CVE Program Container: References: - http://www.joomla.org/announcements/release-news/5411-joomla-175-released.html - http://www.openwall.com/lists/oss-security/2012/02/03/9 - http://developer.joomla.org/security/news/387-20120201-core-information-disclosure - http://secunia.com/advisories/47847 - http://www.joomla.org/announ
urity/news/387-20120201-core-information-disclosure - http://secunia.com/advisories/47847 - http://www.joomla.org/announcements/release-news/5410-joomla-251-released.html - http://www.openwall.com/lists/oss-security/2012/02/03/6 - http://www.osvdb.org/78824
CVE ID: CVE-2012-0836 State: PUBLISHED Published: 2012-09-06T19:00:00Z Last Updated: 2024-09-17T02:36:46.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 allows attackers to read the error log via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.joomla.org/announcements/release-news/5411-joomla-175-released.html - http://www.openwall.com/lists/oss-security/2012/02/03/9 - http://secunia.com/advisories/47847 - http://www.openwall.com/lists/oss-security/2012/02/03/6 - http://www.osvdb.org/78825 - http://developer.joomla.org/security/news/388-20120201-core-information-disclosure
CVE ID: CVE-2012-0837 State: PUBLISHED Published: 2012-09-06T19:00:00Z Last Updated: 2024-09-16T20:53:03.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain the installation path via unspecified vectors related to "administrator." Additional Analyst Notes: - CVE Program Container: References: - http://www.joomla.org/announcements/release-news/5411-joomla-175-released.html - http://www.openwall.com/lists/oss-security/2012/02/03/9 - http://secunia.com/advisories/47847 - http://www.joomla.org/announcements/release-news/5410-joomla-251-released.html - http://www.openwall.com/lists/oss-security/2012/02/03/6 -
org/announcements/release-news/5410-joomla-251-released.html - http://www.openwall.com/lists/oss-security/2012/02/03/6 - http://developer.joomla.org/security/news/389-20120201-core-information-disclosure - http://www.osvdb.org/78826
CVE ID: CVE-2012-0838 State: PUBLISHED Published: 2012-03-02T22:00:00Z Last Updated: 2024-08-06T18:38:14.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000012 - http://struts.apache.org/2.3.1.2/docs/s2-007.html - https://issues.apache.org/jira/browse/WW-3668 - http://jvn.jp/en/jp/JVN79099262/index.html
CVE ID: CVE-2012-0839 State: PUBLISHED Published: 2012-02-08T20:00:00 Last Updated: 2024-08-06T18:38:14.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. Additional Analyst Notes: - CVE Program Container: References: - http://www.nruns.com/_downloads/advisory28122011.pdf - http://www.mail-archive.com/caml-list%40inria.fr/msg01477.html - http://secunia.com/advisories/47853 - http://www.mail-archive.com/caml-list%
ve.com/caml-list%40inria.fr/msg01477.html - http://secunia.com/advisories/47853 - http://www.mail-archive.com/caml-list%40inria.fr/msg01478.html - http://openwall.com/lists/oss-security/2012/02/07/2 - http://openwall.com/lists/oss-security/2012/02/07/1 - http://www.ocert.org/advisories/ocert-2011-003.html
CVE ID: CVE-2012-0840 State: PUBLISHED Published: 2012-02-10T19:00:00 Last Updated: 2024-08-06T18:38:14.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/apr-commits/201201.mbox/%3C20120115003715.071D423888FD%40eris.apache.org%3E - https://exchange.xforce.i
che.org/mod_mbox/apr-commits/201201.mbox/%3C20120115003715.071D423888FD%40eris.apache.org%3E - https://exchange.xforce.ibmcloud.com/vulnerabilities/73096 - http://openwall.com/lists/oss-security/2012/02/08/3 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:019 - http://secunia.com/advisories/47862 - http://svn.apache.org/viewvc?rev=1231605&view=rev - http://www.mail-archive.com/dev%40apr.apache.org/msg24439.html - http://www.mail-archive.com/dev%40apr.apache.org/msg24472.html - http://openwall.com/lists/oss-security/2012/02/09/1 - http://www.mail-archive.com/dev%40apr.apache.org/msg24473.html
CVE ID: CVE-2012-0841 State: PUBLISHED Published: 2012-12-21T02:00:00 Last Updated: 2024-08-06T18:38:14.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html - http://rhn.redhat.com/errata/RHSA-2012-0324.html - http://www.openwall.com/lists/oss-securi
unce/2013-11/msg00002.html - http://rhn.redhat.com/errata/RHSA-2012-0324.html - http://www.openwall.com/lists/oss-security/2012/02/22/1 - http://rhn.redhat.com/errata/RHSA-2013-0217.html - http://support.apple.com/kb/HT6001 - http://xmlsoft.org/news.html - http://securitytracker.com/id?1026723 - http://secunia.com/advisories/54886 - http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html - http://support.apple.com/kb/HT5934 - http://www.debian.org/security/2012/dsa-2417 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=660846 - https://blogs.oracle.com/sunsecurity/entry/cve_2012_0841_denial_of - http://secunia.com/advisories/55568 - http://www.securityfocus.com/bid/52107 -
nsecurity/entry/cve_2012_0841_denial_of - http://secunia.com/advisories/55568 - http://www.securityfocus.com/bid/52107 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://git.gnome.org/browse/libxml2/commit/?id=8973d58b7498fa5100a876815476b81fd1a2412a - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2012-0842 State: PUBLISHED Published: 2019-11-19T14:53:56 Last Updated: 2024-08-06T18:38:14.951Z Vendors: surf Products: surf Problem Types: info leak Description: surf: cookie jar has read access from other local user Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-0842 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0842 - https://access.redhat.com/security/cve/cve-2012-0842 - http://www.openwall.com/lists/oss-security/2012/02/10/8 - http://www.openwall.com/lists/oss-security/2012/02/11/3 - http://www.openwall.com/lists/oss-security/2012/02/10/2 - http://www.openwall.com/lists/oss-security/2012/02/10/9
CVE ID: CVE-2012-0843 State: PUBLISHED Published: 2019-11-19T15:56:52 Last Updated: 2024-08-06T18:38:14.792Z Vendors: uzbl Products: uzbl Problem Types: world-readable cookie file Description: uzbl: Information disclosure via world-readable cookies storage file Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-0843 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0843 - https://access.redhat.com/security/cve/cve-2012-0843 - http://www.openwall.com/lists/oss-security/2012/02/11/3 - https://www.securityfocus.com/bid/52268
CVE ID: CVE-2012-0844 State: PUBLISHED Published: 2020-02-21T17:42:21 Last Updated: 2024-08-06T18:38:14.959Z Vendors: netsurf Products: netsurf Problem Types: UNKNOWN_TYPE Description: Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-0844 - https://access.redhat.com/security/cve/cve-2012-0844 - http://www.openwall.com/lists/oss-security/2012/02/11/3 - https://www.securityfocus.com/bid/51981
CVE ID: CVE-2012-0845 State: PUBLISHED Published: 2012-10-05T21:00:00 Last Updated: 2024-08-06T18:38:14.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/02/13/4 - http://www.ubuntu.com/usn/USN-1615-1 - http://python.org/download/releases/3.2.
ll.com/lists/oss-security/2012/02/13/4 - http://www.ubuntu.com/usn/USN-1615-1 - http://python.org/download/releases/3.2.3/ - http://bugs.python.org/issue14001 - http://secunia.com/advisories/51087 - http://www.ubuntu.com/usn/USN-1592-1 - http://www.securitytracker.com/id?1026689 - http://www.ubuntu.com/usn/USN-1616-1 - http://secunia.com/advisories/51040 - https://bugzilla.redhat.com/show_bug.cgi?id=789790 - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://secunia.com/advisories/50858 - http://secunia.com/advisories/51089 - http://python.org/download/releases/2.6.8/ - http://www.ubuntu.com/usn/USN-1596-1 - http://www.ubuntu.com/usn/USN-1613-2 - http://secunia
/download/releases/2.6.8/ - http://www.ubuntu.com/usn/USN-1596-1 - http://www.ubuntu.com/usn/USN-1613-2 - http://secunia.com/advisories/51024 - http://www.ubuntu.com/usn/USN-1613-1 - http://python.org/download/releases/3.1.5/ - http://python.org/download/releases/2.7.3/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
CVE ID: CVE-2012-0846 State: PUBLISHED Published: 2012-10-08T20:00:00 Last Updated: 2024-08-06T18:38:14.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/02/12/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72563 - http://www.openwall.com/lists/oss-security/2012/02/13/6 - http://www.openwall.com/lists/oss-security/2012/02/11/2 - http://www.openwall.com/lists/oss-security/2012/02/12/3 - http://a
://www.openwall.com/lists/oss-security/2012/02/11/2 - http://www.openwall.com/lists/oss-security/2012/02/12/3 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0129.html - http://sourceforge.net/tracker/?func=detail&aid=3488543&group_id=3870&atid=303870 - http://www.securityfocus.com/bid/51600 - http://sourceforge.net/tracker/?func=detail&aid=3472745&group_id=3870&atid=103870
CVE ID: CVE-2012-0847 State: PUBLISHED Published: 2012-08-20T19:00:00Z Last Updated: 2024-09-17T03:19:02.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/02/14/4 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=ae21776207e8a2bbe268e7c9e203f7599dd87ddb - http://ffmpeg.org/security.html - http://www.openwall.com/lists/oss-security/2012/02/01/11