Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-1021 State: PUBLISHED Published: 2012-02-08T00:00:00 Last Updated: 2024-08-06T18:45:26.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the cat_parent_id parameter in an addcat action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72924 - http://packetstormsecurity.org/files/109290/4images-xss.txt - http://secunia.com/advisories/47811 - http://osvdb.org/78711
CVE ID: CVE-2012-1022 State: PUBLISHED Published: 2012-02-08T00:00:00 Last Updated: 2024-08-06T18:45:26.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL commands via the cat_parent_id parameter in an addcat action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72932 - http://www.securityfocus.com/bid/51774 - http://packetstormsecurity.org/files/109290/4images-xss.txt
CVE ID: CVE-2012-1023 State: PUBLISHED Published: 2012-02-08T00:00:00 Last Updated: 2024-08-06T18:45:26.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51774 - http://packetstormsecurity.org/files/109290/4images-xss.txt - http://osvdb.org/78779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72925
CVE ID: CVE-2012-1024 State: PUBLISHED Published: 2012-02-08T00:00:00 Last Updated: 2024-08-06T18:45:26.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73109
CVE ID: CVE-2012-1025 State: PUBLISHED Published: 2012-02-08T00:00:00Z Last Updated: 2024-09-17T00:46:58.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18343
CVE ID: CVE-2012-1026 State: PUBLISHED Published: 2012-02-08T00:00:00 Last Updated: 2024-08-06T18:45:27.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51870 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0068.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/73000 - http://www.exploit-db.com/exploits/18467 - http://sourceforge.net/tracker/?func=detail&aid=3488241&group_id=298778&atid=1
ttp://www.exploit-db.com/exploits/18467 - http://sourceforge.net/tracker/?func=detail&aid=3488241&group_id=298778&atid=1260461
CVE ID: CVE-2012-1027 State: PUBLISHED Published: 2012-02-08T00:00:00 Last Updated: 2024-08-06T18:45:26.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x, 3.5.0.1-2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the message parameter to register/account-closed. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78823 - http://www.securityfocus.com/bid/51842 - http://secunia.com/advisories/47854 - http://dl.packetstormsecurity.net/1202-exploits/projectopen-xss.txt - http://www.kb.cert.org/vuls/id/732115
ies/47854 - http://dl.packetstormsecurity.net/1202-exploits/projectopen-xss.txt - http://www.kb.cert.org/vuls/id/732115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72952
CVE ID: CVE-2012-1028 State: PUBLISHED Published: 2012-02-08T00:00:00 Last Updated: 2024-08-06T18:45:26.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allows remote attackers to inject arbitrary web script or HTML via the export parameter. Additional Analyst Notes: - CVE Program Container: References: - http://voxel.dl.sourceforge.net/project/simplgroup/README.md - http://www.securityfocus.com/bid/51882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73042 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0028.html
CVE ID: CVE-2012-1029 State: PUBLISHED Published: 2012-02-08T00:00:00 Last Updated: 2024-08-06T18:45:26.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47874 - http://osvdb.org/78900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72999 - http://www.exploit-db.com/exploits/18466 - http://www.securityfocus.com/bid/52046 - http://packets
lnerabilities/72999 - http://www.exploit-db.com/exploits/18466 - http://www.securityfocus.com/bid/52046 - http://packetstormsecurity.org/files/109485/Tube-Ace-SQL-Injection.html - http://www.securityfocus.com/bid/51873
CVE ID: CVE-2012-1030 State: PUBLISHED Published: 2012-04-11T10:00:00Z Last Updated: 2024-09-16T20:47:55.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DotNetNuke 6.x through 6.0.2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted URL containing text that is used within a modal popup. Additional Analyst Notes: - CVE Program Container: References: - http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.62.aspx - http://technet.microsoft.com/en-us/security/msvr/msvr12-003
CVE ID: CVE-2012-1031 State: PUBLISHED Published: 2012-02-08T02:00:00 Last Updated: 2024-08-06T18:45:26.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authenticated users to obtain WebAdmins access by leveraging Edit Mode privileges, a different vulnerability than CVE-2011-3416 and CVE-2011-3417. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51877 - http://secunia.com/advisories/47910 - http://world.episerver.com/Blogs/Jens-N/Dates/2012/1/Security-vulnerability---Elevation-of-privilege/ - http:
es/47910 - http://world.episerver.com/Blogs/Jens-N/Dates/2012/1/Security-vulnerability---Elevation-of-privilege/ - http://world.episerver.com/Blogs/Shahid-Nawaz/Dates/2012/1/General-Hotfix-CMS-6-R2/
CVE ID: CVE-2012-1032 State: PUBLISHED Published: 2014-09-17T14:00:00 Last Updated: 2024-08-06T18:45:27.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before 3.4.5 for EPiServer allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52874 - http://secunia.com/advisories/48696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74799 - http://osvdb.org/s
- http://secunia.com/advisories/48696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74799 - http://osvdb.org/show/osvdb/81013
CVE ID: CVE-2012-1033 State: PUBLISHED Published: 2012-02-08T20:00:00 Last Updated: 2024-08-06T18:45:27.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=135638082529878&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73053 - https://www.isc.org/software/bind/advisories/cve-2012-1033 - http://
xchange.xforce.ibmcloud.com/vulnerabilities/73053 - https://www.isc.org/software/bind/advisories/cve-2012-1033 - http://www.securitytracker.com/id?1026647 - http://secunia.com/advisories/47884 - http://marc.info/?l=bugtraq&m=135638082529878&w=2 - https://hermes.opensuse.org/messages/15136477 - http://osvdb.org/78916 - http://rhn.redhat.com/errata/RHSA-2012-0717.html - http://www.kb.cert.org/vuls/id/542123 - https://hermes.opensuse.org/messages/15136456 - http://www.securityfocus.com/bid/51898
CVE ID: CVE-2012-1034 State: PUBLISHED Published: 2012-02-08T11:00:00 Last Updated: 2024-08-06T18:45:26.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the admin interface in EPiServer CMS through 6R2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51877 - http://secunia.com/advisories/47910 - http://world.episerver.com/PageFiles/110367/BugList.txt - http://world.episerver.com/Blogs/Shahid-Nawaz/Dates/2012/1/General-Hotfix-CMS-6-R2/
CVE ID: CVE-2012-1035 State: PUBLISHED Published: 2012-02-08T21:00:00Z Last Updated: 2024-09-16T19:04:31.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.nruns.com/_downloads/advisory28122011.pdf - http://www.adacore.com/2012/01/27/security-advisory-sa-2012-l119-003-hash-collisions-in-aws/ - http://archives.neohapsis.com/archives/bugtra
om/2012/01/27/security-advisory-sa-2012-l119-003-hash-collisions-in-aws/ - http://archives.neohapsis.com/archives/bugtraq/2012-01/0169.html - http://www.ocert.org/advisories/ocert-2011-003.html
CVE ID: CVE-2012-1036 State: PUBLISHED Published: 2012-04-11T10:00:00Z Last Updated: 2024-09-16T17:34:31.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a message. Additional Analyst Notes: - CVE Program Container: References: - http://technet.microsoft.com/en-us/security/msvr/msvr12-002 - http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.59.aspx
CVE ID: CVE-2012-1037 State: PUBLISHED Published: 2012-07-12T20:00:00Z Last Updated: 2024-09-17T02:58:10.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated users to execute arbitrary PHP code via a URL in the sub_type parameter. Additional Analyst Notes: - CVE Program Container: References: - https://forge.indepnet.net/projects/glpi/versions/685 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:016 - http://seclists.org/fulldisclosure/2012/Feb/157 - https://forge.indepnet.net/issues/3338 - https://forge.indepnet.net/projects/glpi/repository/revisions/17
2012/Feb/157 - https://forge.indepnet.net/issues/3338 - https://forge.indepnet.net/projects/glpi/repository/revisions/17457/diff/branches/0.80-bugfixes/front/popup.php
CVE ID: CVE-2012-1038 State: PUBLISHED Published: 2013-04-03T00:00:00 Last Updated: 2024-08-06T18:45:27.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WebAAA login functionality (wba_login.html) in Juniper Networks Mobility System Software (MSS) 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter name. Additional Analyst Notes: - CVE Program Container: References: - http://www.secureworks.com/advisories/swrx-2012-004/SWRX-2012-004.pdf - http://www.secureworks.com/cyber-threat-intellige
ttp://www.secureworks.com/advisories/swrx-2012-004/SWRX-2012-004.pdf - http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2012-004/ - http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2012-06-611&viewMode=view
CVE ID: CVE-2012-1039 State: PUBLISHED Published: 2012-03-19T19:00:00 Last Updated: 2024-08-06T18:45:27.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) login_data parameter to admin/auth.php; (2) nb parameter to admin/blogs.php; (3) type, (4) sortby, (5) order, or (6) status parameters to admin/comments.php; or (7) page parameter to admin/plugin.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.ch/advisory/HTB23074 - http://dotclear.org/blog/post/2012/02/11/Dotclear-2.4.2 - https://excha
s: - https://www.htbridge.ch/advisory/HTB23074 - http://dotclear.org/blog/post/2012/02/11/Dotclear-2.4.2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73565 - http://www.securityfocus.com/bid/52221 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0183.html - http://secunia.com/advisories/48209
CVE ID: CVE-2012-1046 State: PUBLISHED Published: 2012-02-10T19:00:00Z Last Updated: 2024-09-17T01:45:35.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TM1 Web in IBM Cognos TM1 9.5.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0696. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1026648 - http://www-01.ibm.com/support/docview.wss?uid=swg27023584 - http://www.securityfocus.com/bid/51905 - http://www.osvdb.org/78917 - http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1PM49009 - http://secun
/51905 - http://www.osvdb.org/78917 - http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1PM49009 - http://secunia.com/advisories/47889 - http://www.ibm.com/support/docview.wss?uid=swg1PM49009
CVE ID: CVE-2012-1047 State: PUBLISHED Published: 2012-02-12T22:00:00 Last Updated: 2024-08-06T18:45:27.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter in an Online_help action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51901 - http://www.exploit-db.com/exploits/18473 - http://www.vulnerability-lab.com/get_content.php?id=405 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0036.html
CVE ID: CVE-2012-1048 State: PUBLISHED Published: 2012-02-12T22:00:00 Last Updated: 2024-08-06T18:45:27.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in communityplusplus/www/administrator.php in eFront Community++ edition 3.6.10, and possibly other editions, allows remote attackers to inject arbitrary web script or HTML via the filter parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73043 - http://www.securityfocus.com/bid/51894 - http://www.vulnerability-lab.com/get_content.php?id=423 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0033.html
CVE ID: CVE-2012-1049 State: PUBLISHED Published: 2012-02-13T19:00:00 Last Updated: 2024-08-06T18:45:26.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the (1) domainName parameter to jsp/AddDC.jsp or (2) operation parameter to DomainConfig.do. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/109528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73039 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5070.php - http://secunia.com/advisories/47887 -
bilities/73039 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5070.php - http://secunia.com/advisories/47887 - http://www.securityfocus.com/bid/51893
CVE ID: CVE-2012-1050 State: PUBLISHED Published: 2012-02-13T19:00:00 Last Updated: 2024-08-06T18:45:26.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Mathopd 1.4.x and 1.5.x before 1.5p7, when configured with the * construct for mass virtual hosting, allows remote attackers to read arbitrary files via a crafted Host header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47908 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0025.html - http://www.mail-archive.com/mathopd%40mathopd.org/msg00392.html - http://www.securitytracker.com/id?1026641 - https://exchange.xforce.ibmcloud.com/vu
athopd%40mathopd.org/msg00392.html - http://www.securitytracker.com/id?1026641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73049 - http://www.mathopd.org/security.html - http://osvdb.org/78896
CVE ID: CVE-2012-1051 State: PUBLISHED Published: 2012-02-13T19:00:00 Last Updated: 2024-08-06T18:45:27.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Xjp2.dll in the JPEG2000 plug-in in XnView 1.98.5 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73040 - http://osvdb.org/78904 - http://secunia.com/advisories/47352 - http://www.securityfocus.com/bid/51896
CVE ID: CVE-2012-1052 State: PUBLISHED Published: 2012-02-13T19:00:00 Last Updated: 2024-08-06T18:45:26.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IvanView 1.2.15 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78905 - http://www.securityfocus.com/bid/51895 - http://secunia.com/advisories/47362 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73041
CVE ID: CVE-2012-1053 State: PUBLISHED Published: 2012-05-29T20:00:00 Last Updated: 2024-08-06T18:45:26.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups. Additional Analyst N
ithout associated changes to the egid, or (3) the addition of the real gid to supplementary groups. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48157 - http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.14 - http://secunia.com/advisories/48166 - http://projects.puppetlabs.com/issues/12458 - http://puppetlabs.com/security/cve/cve-2012-1053/ - http://projects.puppetlabs.com/issues/12459 - http://ubuntu.com/usn/usn-1372-1 - http://secunia.com/advisories/48290 - http://www.osvdb.org/79495 - http://secunia.com/advisories/48161 - http://projects.puppetlabs.com/issues/12457 - http://lists.opensuse.org/opensuse-security-announce/2012-0
sories/48161 - http://projects.puppetlabs.com/issues/12457 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/73445 - http://www.securityfocus.com/bid/52158 - http://www.debian.org/security/2012/dsa-2419 - https://hermes.opensuse.org/messages/15087408
CVE ID: CVE-2012-1054 State: PUBLISHED Published: 2012-05-29T20:00:00 Last Updated: 2024-08-06T18:45:27.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3, when managing a user login file with the k5login resource type, allows local users to gain privileges via a symlink attack on .k5login. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48157 - http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.14 - http://secunia.com/advisories/48166 - http://projects.puppetlabs.com/issues/12460 - http://www.osvdb.
ase_Notes#2.6.14 - http://secunia.com/advisories/48166 - http://projects.puppetlabs.com/issues/12460 - http://www.osvdb.org/79496 - http://puppetlabs.com/security/cve/cve-2012-1054/ - http://ubuntu.com/usn/usn-1372-1 - http://secunia.com/advisories/48290 - http://secunia.com/advisories/48161 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html - http://www.securityfocus.com/bid/52158 - http://www.debian.org/security/2012/dsa-2419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73446 - https://hermes.opensuse.org/messages/15087408
CVE ID: CVE-2012-1055 State: PUBLISHED Published: 2012-02-14T00:00:00 Last Updated: 2024-08-06T18:45:27.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in PhotoLine 17.01 and possibly other versions before 17.02 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78985 - http://www.securityfocus.com/bid/51948 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73103 - http://secunia.com/advisories/47477
CVE ID: CVE-2012-1056 State: PUBLISHED Published: 2012-02-14T00:00:00 Last Updated: 2024-08-06T18:45:26.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows remote attackers to obtain node titles via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47851 - http://drupal.org/node/1425150 - http://www.securityfocus.com/bid/51826 - http://drupal.org/node/1423722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72920
ecurityfocus.com/bid/51826 - http://drupal.org/node/1423722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72920 - http://osvdb.org/78817