Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
input_userauth_passwd_changereq call in sshconnect2.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/23082/ - http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0065.html - http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0013.html - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ssh/tectia_passwd_changereq.rb
CVE ID: CVE-2012-5976 State: PUBLISHED Published: 2013-01-04T11:00:00 Last Updated: 2024-08-06T21:21:28.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones allow remote attackers to cause a denial of service (daemon crash) via TCP data using the (1) SIP, (2) HTTP, or (3) XMPP protocol. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2012-014 - http://www.debian.org/s
- CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2012-014 - http://www.debian.org/security/2013/dsa-2605
CVE ID: CVE-2012-5977 State: PUBLISHED Published: 2013-01-04T15:00:00 Last Updated: 2024-08-06T21:21:28.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones, when anonymous calls are enabled, allow remote attackers to cause a denial of service (resource consumption) by making anonymous calls from multiple sources and consequently adding many entries to the device state cache. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/
evice state cache. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2605 - https://issues.asterisk.org/jira/browse/ASTERISK-20175 - http://downloads.asterisk.org/pub/security/AST-2012-015
CVE ID: CVE-2012-5978 State: PUBLISHED Published: 2012-12-19T11:00:00 Last Updated: 2024-08-06T21:21:28.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View Security Server in VMware View 4.x before 4.6.2 and 5.x before 5.1.2 allow remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2012-0017.html - http://www.securitytracker.com/id?1027875 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17049
CVE ID: CVE-2012-5979 State: REJECTED Published: 2012-10-31T00:00:00Z Last Updated: 2024-09-16T23:56:30.104Z Description: No description available.
CVE ID: CVE-2012-5990 State: PUBLISHED Published: 2013-09-06T10:00:00Z Last Updated: 2024-09-17T01:42:03.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud18375. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/830316
CVE ID: CVE-2012-5991 State: PUBLISHED Published: 2012-12-19T11:00:00Z Last Updated: 2024-09-16T17:22:51.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain buttonClicked value in an internal webauth_type request, aka Bug ID CSCud50209. Additional Analyst Notes: - CVE Program Container: References: - http://infosec42.blogspot.dk/2012/12/cisco-wlc-csrf-dos-and-persistent-xss.html
CVE ID: CVE-2012-5992 State: PUBLISHED Published: 2012-12-19T11:00:00Z Last Updated: 2024-09-16T18:03:47.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrative accounts via screens/aaa/mgmtuser_create.html or (2) insert XSS sequences via the headline parameter to screens/base/web_auth_custom.html, aka Bug ID CSCud50283. Additional Analyst Notes: - CVE Program Container: References: - http://infosec42.blogspot.dk/2012/12/cisco-wlc-csrf-dos-and-per
al Analyst Notes: - CVE Program Container: References: - http://infosec42.blogspot.dk/2012/12/cisco-wlc-csrf-dos-and-persistent-xss.html
CVE ID: CVE-2012-6007 State: PUBLISHED Published: 2012-12-19T11:00:00Z Last Updated: 2024-09-17T03:08:23.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject arbitrary web script or HTML via the headline parameter, aka Bug ID CSCud65187, a different vulnerability than CVE-2012-5992. Additional Analyst Notes: - CVE Program Container: References: - http://infosec42.blogspot.dk/2012/12/cisco-wlc-csrf-dos-and-persistent-xss.html
CVE ID: CVE-2012-6026 State: PUBLISHED Published: 2013-03-03T00:00:00 Last Updated: 2024-08-06T21:21:28.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP Profiler on the Cisco Aironet Access Point with software 15.2 and earlier does not properly manage buffers, which allows remote attackers to cause a denial of service (device reload) via crafted HTTP requests, aka Bug ID CSCuc62460. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=28436 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-6026
CVE ID: CVE-2012-6029 State: PUBLISHED Published: 2013-01-31T11:00:00 Last Updated: 2024-08-06T21:21:28.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web-authentication function on the Cisco NAC Appliance 4.9.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cm or (2) uri parameters to (a) perfigo_weblogin.jsp, or the (3) cm, (4) provider, (5) session, (6) uri, (7) userip, or (8) username parameters to (b) perfigo_cm_validate.jsp, aka Bug ID CSCud15109. Additional Analyst Notes: - CVE Program Container: References: - http://www.secureworks.com/cyber-threat-intelligence/advisorie
nal Analyst Notes: - CVE Program Container: References: - http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2013-001/ - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-6029
CVE ID: CVE-2012-6030 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T21:21:28.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_tmem_op function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (host crash) and possibly have other unspecified impacts via unspecified vectors related to "broken locking checks" in an "error path." NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://ww
others. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.securitytracker.com/id?1027482 - http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.securityfocus.com/bid/55410 - http://www.openwall.com/lists/oss-security/2012/09/05/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78268 - http://osvdb.org/85199 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html - http://secunia.com/advisories/50472 - https://security.gentoo.org/glsa/201604-03
CVE ID: CVE-2012-6031 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T21:21:28.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (CPU hang and host crash) via unspecified vectors related to a spinlock being held in the "bad_copy error path." NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.securitytracker.com/
lyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.securitytracker.com/id?1027482 - http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.securityfocus.com/bid/55410 - http://www.openwall.com/lists/oss-security/2012/09/05/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78268 - http://osvdb.org/85199 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html - http://secunia.com/advisories/50472 - https://security.gentoo.org/glsa/201604-03
CVE ID: CVE-2012-6032 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T21:21:28.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) tmh_copy_from_client and (2) tmh_copy_to_client functions in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (memory corruption and host crash) via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.se
rs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.securitytracker.com/id?1027482 - http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.securityfocus.com/bid/55410 - http://www.openwall.com/lists/oss-security/2012/09/05/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78268 - http://osvdb.org/85199 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html - http://secunia.com/advisories/50472 - https://security.gentoo.org/glsa/201604-03
CVE ID: CVE-2012-6033 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T21:21:28.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly check privileges, which allows local guest OS users to access control stack operations via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.securitytracker.com/id?1027482 - http://wiki.xen.org/wi
: References: - http://secunia.com/advisories/55082 - http://www.securitytracker.com/id?1027482 - http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.securityfocus.com/bid/55410 - http://www.openwall.com/lists/oss-security/2012/09/05/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78268 - http://osvdb.org/85199 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html - http://secunia.com/advisories/50472 - https://security.gentoo.org/glsa/201604-03
CVE ID: CVE-2012-6034 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T21:21:28.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) tmemc_save_get_next_page and (2) tmemc_save_get_next_inv functions and the (3) TMEMC_SAVE_GET_POOL_UUID sub-operation in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 "do not check incoming guest output buffer pointers," which allows local guest OS users to cause a denial of service (memory corruption and host crash) or execute arbitrary code via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
ginally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.securitytracker.com/id?1027482 - http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.securityfocus.com/bid/55410 - http://www.openwall.com/lists/oss-security/2012/09/05/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78268 - http://osvdb.org/85199 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html - http://secunia.com/adviso
tp://osvdb.org/85199 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html - http://secunia.com/advisories/50472 - https://security.gentoo.org/glsa/201604-03
CVE ID: CVE-2012-6035 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T21:21:28.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_tmem_destroy_pool function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly validate pool ids, which allows local guest OS users to cause a denial of service (memory corruption and host crash) or execute arbitrary code via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http:
and others. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.securitytracker.com/id?1027482 - http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.securityfocus.com/bid/55410 - http://www.openwall.com/lists/oss-security/2012/09/05/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78268 - http://osvdb.org/85199 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html - http://secunia.com/advisories/50472 - https://security.gentoo.org/glsa/201604-03
CVE ID: CVE-2012-6036 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T21:21:28.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) memc_save_get_next_page, (2) tmemc_restore_put_page and (3) tmemc_restore_flush_page functions in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 do not check for negative id pools, which allows local guest OS users to cause a denial of service (memory corruption and host crash) or possibly execute arbitrary code via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others. Additional Analyst Notes: - CVE
-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.securitytracker.com/id?1027482 - http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.securityfocus.com/bid/55410 - http://www.openwall.com/lists/oss-security/2012/09/05/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78268 - http://osvdb.org/85199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80326 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.htm
xchange.xforce.ibmcloud.com/vulnerabilities/80326 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html - http://secunia.com/advisories/50472 - https://security.gentoo.org/glsa/201604-03
CVE ID: CVE-2012-6037 State: PUBLISHED Published: 2012-11-24T20:00:00 Last Updated: 2024-08-06T21:21:28.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4, and other versions including 1.2, allow remote attackers to inject arbitrary web script or HTML via a CSV header with "unknown fields," which are not properly handled in error messages in the (1) bulk user, (2) group, and (3) group member upload capabilities. NOTE: this issue was originally part of CVE-2012-2243, but that ID was SPLIT due to different issues by different researchers. Additional Analyst Notes: - CVE Program
2-2243, but that ID was SPLIT due to different issues by different researchers. Additional Analyst Notes: - CVE Program Container: References: - https://mahara.org/interaction/forum/topic.php?id=4937 - http://www.debian.org/security/2012/dsa-2591 - https://bugs.launchpad.net/mahara/+bug/1063480
CVE ID: CVE-2012-6038 State: PUBLISHED Published: 2012-11-26T22:00:00 Last Updated: 2024-08-06T21:21:28.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, move, copy and delete files via the (1) dir parameter in a fileman or (2) filemanview action. NOTE: this issue has been referred to as a "path traversal." Additional Analyst Notes: - CVE Program Container: References: - http://www.razorcms.co.uk/archive/core/old/razorCMS_core_v1_2_1_STABLE.zip - http://secunia.com/advisories/47461 - h
: - http://www.razorcms.co.uk/archive/core/old/razorCMS_core_v1_2_1_STABLE.zip - http://secunia.com/advisories/47461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72268 - http://www.exploit-db.com/exploits/18344 - http://www.securityfocus.com/bid/51344 - http://osvdb.org/78230
CVE ID: CVE-2012-6039 State: PUBLISHED Published: 2012-11-26T22:00:00Z Last Updated: 2024-09-17T02:27:05.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18352 - http://www.osvdb.org/82543 - http://www.securityfocus.com/bid/51394
CVE ID: CVE-2012-6040 State: PUBLISHED Published: 2012-11-26T22:00:00 Last Updated: 2024-08-06T21:21:28.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/108466/afm134-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/72275 - http://www.securityfocus.com/bid/51339
CVE ID: CVE-2012-6041 State: PUBLISHED Published: 2012-11-26T22:00:00 Last Updated: 2024-08-06T21:21:28.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar (F6) is activated, allows remote attackers to execute arbitrary code via a crafted iframe. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72351 - http://www.securityfocus.com/bid/51393 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0079.html
CVE ID: CVE-2012-6042 State: PUBLISHED Published: 2012-11-26T22:00:00Z Last Updated: 2024-09-16T23:01:59.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPSMapEdit 1.1.73.2 allows user-assisted remote attackers to cause a denial of service (crash) via a long string in a lst file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18339 - http://www.securityfocus.com/bid/51327
CVE ID: CVE-2012-6043 State: PUBLISHED Published: 2012-11-26T22:00:00 Last Updated: 2024-08-06T21:21:28.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72311 - http://www.securityfocus.com/bid/51365 - http://packetstormsecurity.org/files/view/108542/phpfusion70204-xss.txt
CVE ID: CVE-2012-6044 State: PUBLISHED Published: 2012-11-26T22:00:00 Last Updated: 2024-08-06T21:21:28.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: M-Player 0.4 allows remote attackers to cause a denial of service (crash) via a crafted MP3 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51318 - http://www.exploit-db.com/exploits/18337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72242
CVE ID: CVE-2012-6045 State: PUBLISHED Published: 2012-11-27T02:00:00 Last Updated: 2024-08-06T21:21:28.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in gb/user/index.php in Ramui Forum, possibly 1.0 Beta, allows remote attackers to inject arbitrary web script or HTML via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112495/Ramui-Forum-Script-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/53411 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75440
CVE ID: CVE-2012-6046 State: PUBLISHED Published: 2012-11-27T02:00:00 Last Updated: 2024-08-06T21:21:28.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP code into horad.php via the code parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75464 - http://www.securityfocus.com/bid/53426 - http://packetstormsecurity.org/files/112536/PHP-Enter-Code-Injection.html
CVE ID: CVE-2012-6047 State: PUBLISHED Published: 2012-11-27T02:00:00Z Last Updated: 2024-09-16T18:12:47.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18850
CVE ID: CVE-2012-6048 State: PUBLISHED Published: 2012-11-27T02:00:00Z Last Updated: 2024-09-16T19:09:22.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service (crash) via a long string in a gpx file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18851 - http://www.osvdb.org/81828