Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e/announcement/2012/suse-su-20121679-1.html - http://www.debian.org/security/2012/dsa-2469 - http://www.openwall.com/lists/oss-security/2012/03/30/1 - http://rhn.redhat.com/errata/RHSA-2012-0571.html - http://www.securitytracker.com/id?1026897 - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html - http://secunia.com/advisories/49928 - https://bugzilla.redhat.com/show_bug.cgi?id=808199 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.6 - http://rhn.redhat.com/errata/RHSA-2012-0676.html
CVE ID: CVE-2012-1602 State: PUBLISHED Published: 2012-10-01T23:00:00Z Last Updated: 2024-09-16T18:29:53.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/30/2 - http://www.osvdb.org/80626 - http://www.securityfocus.com/bid/52728 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0135.html - http://www.waraxe.us/advisory-80.html - http://packetstormsecurity.org/files/111250/NextBBS-0.6.0-Authentication-Bypass-SQL-Injectio
araxe.us/advisory-80.html - http://packetstormsecurity.org/files/111250/NextBBS-0.6.0-Authentication-Bypass-SQL-Injection-XSS.html - http://www.openwall.com/lists/oss-security/2012/03/29/8
CVE ID: CVE-2012-1603 State: PUBLISHED Published: 2012-10-01T23:00:00Z Last Updated: 2024-09-17T02:37:03.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to execute arbitrary SQL commands via the (1) curstr parameter in the findUsers function, (2) id parameter in the isIdAvailable function, or (3) username parameter in the getGreetings function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/30/2 - http://www.securityfocus.com/bid/52728 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0135.html - http://www.
http://www.securityfocus.com/bid/52728 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0135.html - http://www.waraxe.us/advisory-80.html - http://packetstormsecurity.org/files/111250/NextBBS-0.6.0-Authentication-Bypass-SQL-Injection-XSS.html - http://www.openwall.com/lists/oss-security/2012/03/29/8 - http://www.osvdb.org/80637
CVE ID: CVE-2012-1604 State: PUBLISHED Published: 2012-10-01T23:00:00Z Last Updated: 2024-09-16T22:50:58.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NextBBS 0.6 allows remote attackers to inject arbitrary web script or HTML via the do parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/30/2 - http://www.securityfocus.com/bid/52728 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0135.html - http://www.osvdb.org/80627 - http://www.waraxe.us/advisory-80.html - http://packetstormsecurity.org/files/111250/NextBBS-0.6.0-Authentication-Bypa
- http://www.waraxe.us/advisory-80.html - http://packetstormsecurity.org/files/111250/NextBBS-0.6.0-Authentication-Bypass-SQL-Injection-XSS.html - http://www.openwall.com/lists/oss-security/2012/03/29/8
CVE ID: CVE-2012-1605 State: PUBLISHED Published: 2012-09-04T20:00:00Z Last Updated: 2024-09-16T18:38:40.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request argument." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/30/4 - http://www.osvdb.org/80759 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/ - http://www.securityfoc
g/80759 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/ - http://www.securityfocus.com/bid/52771
CVE ID: CVE-2012-1606 State: PUBLISHED Published: 2012-09-04T20:00:00Z Last Updated: 2024-09-16T17:54:35.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48647 - http://secunia.com/advisories/48622 - http://www.openwall.com/lists/oss-security/2012/03/30/4 - http://typo3.org/teams/security/security-bulletins/typo3-core/t
ttp://www.openwall.com/lists/oss-security/2012/03/30/4 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/ - http://osvdb.org/80760 - http://www.debian.org/security/2012/dsa-2445 - http://www.securityfocus.com/bid/52771
CVE ID: CVE-2012-1607 State: PUBLISHED Published: 2012-09-04T20:00:00Z Last Updated: 2024-09-16T19:35:52.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48647 - http://secunia.com/advisories/48622 - http://www.openwall.com/lists/oss-security/2012/03/30/4 - http://osvdb.org/80761 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/ - http://www.debian.
b.org/80761 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/ - http://www.debian.org/security/2012/dsa-2445 - http://www.securityfocus.com/bid/52771
CVE ID: CVE-2012-1608 State: PUBLISHED Published: 2012-09-04T20:00:00Z Last Updated: 2024-09-17T00:15:45.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: The t3lib_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and inject arbitrary web script or HTML via non printable characters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48647 - http://www.openwall.com/lists/oss-security/2012/03/30/4 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/ - htt
/oss-security/2012/03/30/4 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/ - http://www.debian.org/security/2012/dsa-2445 - http://www.osvdb.org/80762 - http://www.securityfocus.com/bid/52771
CVE ID: CVE-2012-1609 State: REJECTED Published: 2021-07-09T12:05:27 Last Updated: 2021-07-09T12:05:27 Description: No description available.
CVE ID: CVE-2012-1610 State: PUBLISHED Published: 2012-06-05T22:00:00 Last Updated: 2024-08-06T19:01:02.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service (out-of-bounds read) via a large component count for certain EXIF tags in a JPEG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0259. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55035 - http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html - http://www.openwall.com/lists/oss-securit
ies/55035 - http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html - http://www.openwall.com/lists/oss-security/2012/04/04/6 - http://secunia.com/advisories/49043 - http://www.debian.org/security/2012/dsa-2462 - http://www.osvdb.org/81024 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259 - http://www.securityfocus.com/bid/52898 - http://ubuntu.com/usn/usn-1435-1 - http://secunia.com/advisories/48974 - http://secunia.com/advisories/49317 - http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74660
CVE ID: CVE-2012-1611 State: PUBLISHED Published: 2012-09-06T21:00:00 Last Updated: 2024-08-06T19:01:02.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end" information via unknown attack vectors. NOTE: this might be a duplicate of CVE-2012-1599. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/03/5 - http://www.openwall.com/lists/oss-security/2012/04/03/3 - http://developer.joomla.org/security/news/398-20120307-core-information-disclosure.html - http://secunia.com/advisories/48683
CVE ID: CVE-2012-1612 State: PUBLISHED Published: 2012-09-06T21:00:00Z Last Updated: 2024-09-17T03:33:17.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/03/5 - http://www.securityfocus.com/bid/52859 - http://www.osvdb.org/80880 - http://developer.joomla.org/security/news/399-20120308-core-xss-vulnerability.html - http://www.openwall.com/lists/oss-security/2012/04/03/3 - http://secunia
news/399-20120308-core-xss-vulnerability.html - http://www.openwall.com/lists/oss-security/2012/04/03/3 - http://secunia.com/advisories/48683
CVE ID: CVE-2012-1613 State: PUBLISHED Published: 2012-09-04T20:00:00Z Last Updated: 2024-09-16T20:53:22.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html - http://www.waraxe.us/advisory-81.html - http://osvdb.org/80731 - http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html -
b.org/80731 - http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html - http://www.exploit-db.com/exploits/18680 - http://secunia.com/advisories/48643 - http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354 - http://www.securityfocus.com/bid/52818 - http://www.openwall.com/lists/oss-security/2012/03/30/6 - http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html - http://www.openwall.com/lists/oss-security/2012/04/03/6 - http://www.openwall.com/lists/oss-security/2012/03/30/5
CVE ID: CVE-2012-1614 State: PUBLISHED Published: 2012-09-04T20:00:00Z Last Updated: 2024-09-17T00:20:42.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page or (3) cat parameter to thumbnails.php, an invalid (4) page parameter to usermgr.php, or an invalid (5) newer_than or (6) older_than parameter to search.inc.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html -
nalyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html - http://www.waraxe.us/advisory-81.html - http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html - http://www.exploit-db.com/exploits/18680 - http://osvdb.org/80734 - http://osvdb.org/80735 - http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354 - http://osvdb.org/80732 - http://osvdb.org/80733 - http://www.securityfocus.com/bid/52818 - http://www.openwall.com/lists/oss-security/2012/03/30/6 - http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html - http://www.openwa
lists/oss-security/2012/03/30/6 - http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html - http://www.openwall.com/lists/oss-security/2012/04/03/6 - http://www.openwall.com/lists/oss-security/2012/03/30/5
CVE ID: CVE-2012-1615 State: PUBLISHED Published: 2019-12-06T15:46:09 Last Updated: 2024-08-06T19:01:02.776Z Vendors: sectool Products: sectool Problem Types: UNKNOWN_TYPE Description: A Privilege Escalation vulnerability exits in Fedoraproject Sectool due to an incorrect DBus file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1615 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/076873.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081113.html - http://www.openwall.com/lists/oss-security/2012/04/04/2 - http://www.securityfocus.com/bid/52884 - https://exchange.xforce.ibmc
www.openwall.com/lists/oss-security/2012/04/04/2 - http://www.securityfocus.com/bid/52884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74655
CVE ID: CVE-2012-1616 State: PUBLISHED Published: 2012-06-21T15:00:00 Last Updated: 2024-08-06T19:01:02.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75162 - http://secunia.com/advisories/48921 - https://bugzilla.redhat.com/show_bug.cgi?id=809697 - http://www.osvdb.org/81617 - http://www.argyllcms.com/icc_readme.html - http://www
a.redhat.com/show_bug.cgi?id=809697 - http://www.osvdb.org/81617 - http://www.argyllcms.com/icc_readme.html - http://www.securityfocus.com/bid/53240 - http://security.gentoo.org/glsa/glsa-201206-04.xml - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079762.html - http://secunia.com/advisories/49602
CVE ID: CVE-2012-1617 State: PUBLISHED Published: 2012-09-26T00:00:00 Last Updated: 2024-08-06T19:01:02.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbitrary files via a .. (dot dot) in the type parameter. NOTE: this vulnerability can be leveraged to upload arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-03/0024.html - http://secunia.com/advisories/48284 - http://www.openwall.com/lists/oss-security/2012/04/03/1 - https://github.com/osclass/OSClass/commit/a40b76695994442644e4
http://www.openwall.com/lists/oss-security/2012/04/03/1 - https://github.com/osclass/OSClass/commit/a40b76695994442644e46e1b776d79660500566a - http://www.openwall.com/lists/oss-security/2012/04/04/7 - https://github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f#diff-1 - http://www.codseq.it/advisories/osclass_directory_traversal_vulnerability - http://osclass.org/2012/03/05/osclass-2-3-6/ - http://www.securityfocus.com/bid/52336 - http://www.openwall.com/lists/oss-security/2012/04/02/6 - https://github.com/osclass/OSClass/commit/1e7626f4e1a26371480989c0b937f107ea9a6d4b - http://www.openwall.com/lists/oss-security/2012/04/02/1 - https://exchange.xforce.ibmcloud.com/vulne
0b937f107ea9a6d4b - http://www.openwall.com/lists/oss-security/2012/04/02/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73754 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73755
CVE ID: CVE-2012-1618 State: PUBLISHED Published: 2012-10-06T22:00:00Z Last Updated: 2024-08-06T19:01:02.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard_conforming_strings" option enabled, such as the default configuration of PostgreSQL 9.1, does not properly escape unspecified JDBC statement parameters, which allows remote attackers to perform SQL injection attacks. NOTE: as of 20120330, it was claimed that the upstream developer planned to dispute this issue, but an official dispute has not been posted as of 20121005. Additional Analyst Notes: - CVE Program Cont
ute this issue, but an official dispute has not been posted as of 20121005. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/30/9 - http://www.openwall.com/lists/oss-security/2012/04/02/4 - https://bugzilla.novell.com/show_bug.cgi?id=754273 - http://www.openwall.com/lists/oss-security/2012/04/04/9 - http://www.osvdb.org/80641 - http://lists.opensuse.org/opensuse-security/2012-03/msg00024.html - http://www.openwall.com/lists/oss-security/2012/04/04/5 - http://www.openwall.com/lists/oss-security/2012/04/04/4 - http://www.openwall.com/lists/oss-security/2012/03/30/8 - http://www.openwall.com/lists/oss-security/2012/04/04/11 - ht
http://www.openwall.com/lists/oss-security/2012/03/30/8 - http://www.openwall.com/lists/oss-security/2012/04/04/11 - http://www.openwall.com/lists/oss-security/2012/03/31/1 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0126.html
CVE ID: CVE-2012-1619 State: REJECTED Published: 2017-05-16T20:00:00 Last Updated: 2017-05-16T19:57:01 Description: No description available.
CVE ID: CVE-2012-1620 State: PUBLISHED Published: 2012-07-12T19:00:00 Last Updated: 2024-08-06T19:01:02.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proximate attackers to obtain sensitive information by pressing a button, which reveals the desktop and active windows. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gentoo.org/show_bug.cgi?id=401645 - http://www.openwall.com/lists/oss-security/2012/04/06/2 - http://www.openwall.com/lists/oss-security/2012/04/06/1 - http://secunia.com/advisories/48700 - https://exchange.xforce.ibmclo
/www.openwall.com/lists/oss-security/2012/04/06/1 - http://secunia.com/advisories/48700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74666 - http://www.osvdb.org/81035 - http://www.securityfocus.com/bid/52922 - http://hg.suckless.org/slock/rev/891a4984aba6 - https://bugzilla.redhat.com/show_bug.cgi?id=786310
CVE ID: CVE-2012-1621 State: PUBLISHED Published: 2014-06-19T14:00:00 Last Updated: 2024-08-06T19:01:02.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.02 allow remote attackers to inject arbitrary web script or HTML via (1) a parameter array in freemarker templates, the (2) contentId or (3) mapKey parameter in a cms event request, which are not properly handled in an error message, or unspecified input in (4) an ajax request to the getServerError function in checkoutProcess.js or (5) a Webslinger component request. NOTE: some of these details are obtained
verError function in checkoutProcess.js or (5) a Webslinger component request. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2012/Apr/101 - http://mail-archives.apache.org/mod_mbox/www-announce/201204.mbox/%3C2B984C00-EC65-4455-98D3-55735ABE8AF9%40apache.org%3E - http://ofbiz.apache.org/download.html#vulnerabilities - http://secunia.com/advisories/48800 - http://osvdb.org/show/osvdb/81349 - http://osvdb.org/show/osvdb/81346 - http://osvdb.org/show/osvdb/81347 - http://seclists.org/fulldisclosure/2012/Apr/172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74870 - http:
7 - http://seclists.org/fulldisclosure/2012/Apr/172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74870 - http://www.securityfocus.com/bid/53023 - http://osvdb.org/show/osvdb/81348 - http://mail-archives.apache.org/mod_mbox/ofbiz-dev/201204.mbox/%3CA126EDA0-06A5-4B67-8CDD-FC5F5AABA147%40apache.org%3E - http://www.securitytracker.com/id?1026927
CVE ID: CVE-2012-1622 State: PUBLISHED Published: 2017-10-26T20:00:00 Last Updated: 2024-08-06T19:01:02.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache OFBiz 10.04.x before 10.04.02 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ofbiz.apache.org/download.html#security - http://mail-archives.apache.org/mod_mbox/ofbiz-user/201204.mbox/%3C4F378887-E697-44E7-976C-48B9B7475C4D%40apache.org%3E
CVE ID: CVE-2012-1623 State: PUBLISHED Published: 2012-10-06T21:00:00Z Last Updated: 2024-09-16T20:46:44.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which might allow remote attackers to bypass intended registration restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1394172 - http://secunia.com/advisories/47443 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://www.securityfocus.com/bid/51271 - http://www.osvdb.org/78184
CVE ID: CVE-2012-1624 State: PUBLISHED Published: 2012-10-06T21:00:00 Last Updated: 2024-08-06T19:01:02.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when (1) creating or (2) editing page content. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72151 - http://drupal.org/node/1394220 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://secunia.com/advisories/47453 - http://www.securityfocus.com/bid/51272 - http://
lists/oss-security/2012/04/07/1 - http://secunia.com/advisories/47453 - http://www.securityfocus.com/bid/51272 - http://drupal.org/node/1394412 - http://www.osvdb.org/78185
CVE ID: CVE-2012-1625 State: PUBLISHED Published: 2012-09-20T01:00:00Z Last Updated: 2024-09-17T02:21:17.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in the fillpdf_form_export_decode function in fillpdf.admin.inc in the Fill PDF module 6.x-1.x before 6.x-1.16 and 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with administer PDFs privileges to execute arbitrary PHP code via unspecified vectors. NOTE: Some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51288 - http://osvdb.org/78182 - http://drupal.org/node/1394428
ontainer: References: - http://www.securityfocus.com/bid/51288 - http://osvdb.org/78182 - http://drupal.org/node/1394428 - http://secunia.com/advisories/47418 - http://www.openwall.com/lists/oss-security/2012/04/07/1