Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-1899 State: PUBLISHED Published: 2012-09-17T20:00:00 Last Updated: 2024-08-06T19:17:27.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in webfolio/admin/users/edit in Webfolio CMS 1.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) First name, (2) Last name or (3) Email (required) fields. Additional Analyst Notes: - CVE Program Container: References: - http://ivanobinetti.blogspot.com/2012/03/webfolio-114-multiple-xss.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/73738 - http://packetstormsecurity.org/files/110524/Webfolio-CMS-1.1.4-Cross-Site-Scripting.h
mcloud.com/vulnerabilities/73738 - http://packetstormsecurity.org/files/110524/Webfolio-CMS-1.1.4-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/52335
CVE ID: CVE-2012-1900 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T19:17:26.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary web pages via a showcats action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/110593/RazorCMS-1.2.1-STABLE-Cross-Site-Request-Forgery.html - http://www.exploit-db.com/exploits/18575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73902
CVE ID: CVE-2012-1901 State: PUBLISHED Published: 2012-09-18T18:00:00Z Last Updated: 2024-09-17T01:06:22.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to (1) hijack the authentication of users for requests that change account settings via a request to index.php/profile-edit-save or (2) hijack the authentication of administrators for requests that add a new page via a request to admin/pages-new-save. Additional Analyst Notes: - CVE Program Container: References: - http://ivanobinetti.blogspot.com/2012/03/flexcms-multiple-csrf-vulnerabilities.html - http://www.exploi
r: References: - http://ivanobinetti.blogspot.com/2012/03/flexcms-multiple-csrf-vulnerabilities.html - http://www.exploit-db.com/exploits/18609 - http://secunia.com/advisories/48451
CVE ID: CVE-2012-1902 State: PUBLISHED Published: 2012-04-06T19:00:00 Last Updated: 2024-08-06T19:17:27.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: show_config_errors.php in phpMyAdmin 3.4.x before 3.4.10.2, when a configuration file does not exist, allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message about this missing file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079566.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079435.html - http://www.securityfocus.com/bid/52858 - htt
//lists.fedoraproject.org/pipermail/package-announce/2012-May/079435.html - http://www.securityfocus.com/bid/52858 - https://github.com/phpmyadmin/phpmyadmin/commit/c51817d3b8cb05ff54dca9373c0667e29b8498d4 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:050 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079475.html - http://www.phpmyadmin.net/home_page/security/PMASA-2012-2.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/74608
CVE ID: CVE-2012-1903 State: PUBLISHED Published: 2020-02-13T16:10:30 Last Updated: 2024-08-06T19:17:26.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess parameter. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160317182930/http://www.cloudscan.me/2013/03/cve-2012-1903-stored-xss-javascript.html
CVE ID: CVE-2012-1904 State: PUBLISHED Published: 2012-03-28T10:00:00 Last Updated: 2024-08-06T19:17:26.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted MP4 file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49193 - http://www.securitytracker.com/id?1027076 - http://packetstormsecurity.org/files/111162/RealPlayer-1.1.4-Memory-Corruption.html
CVE ID: CVE-2012-1906 State: PUBLISHED Published: 2012-05-29T20:00:00 Last Updated: 2024-08-06T19:17:27.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbitrary files or install arbitrary packages via a symlink attack on a temporary file in /tmp. Additional Analyst Notes: - CVE Program Container: References: - http://projects.puppetlabs.com/issues/13260 - http://ubuntu.com/usn/usn-1419-1 - http://secunia.com/advisories/48743
- http://projects.puppetlabs.com/issues/13260 - http://ubuntu.com/usn/usn-1419-1 - http://secunia.com/advisories/48743 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74793 - http://puppetlabs.com/security/cve/cve-2012-1906/ - http://www.securityfocus.com/bid/52975 - http://secunia.com/advisories/48748 - http://www.debian.org/security/2012/dsa-2451 - http://secunia.com/advisories/48789
CVE ID: CVE-2012-1907 State: PUBLISHED Published: 2012-03-28T10:00:00Z Last Updated: 2024-09-16T17:14:40.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scanner engine in PrivaWall Antivirus 5.6 and earlier does not recognize the Office XML (aka Open Document XML) file format, which allows remote attackers to bypass malware detection via a crafted file embedded in a WordML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/521948/30/0/threaded
CVE ID: CVE-2012-1908 State: PUBLISHED Published: 2012-08-17T00:00:00Z Last Updated: 2024-09-16T19:51:31.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAGTK#38585
CVE ID: CVE-2012-1909 State: PUBLISHED Published: 2012-08-06T16:00:00Z Last Updated: 2024-09-17T00:31:19.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bitcoin protocol, as used in bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt, and other programs, does not properly handle multiple transactions with the same identifier, which allows remote attackers to cause a denial of service (unspendable transaction) by leveraging the ability to create a duplicate coinbase transaction. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/BIP_0030 - https://github.com/sipa/bitcoin/commit/a206b0ea12eb4606b93323268fc81a4f1f952531 - http://sourceforge.
it/wiki/BIP_0030 - https://github.com/sipa/bitcoin/commit/a206b0ea12eb4606b93323268fc81a4f1f952531 - http://sourceforge.net/mailarchive/forum.php?thread_name=CAPg%2BsBhmGHnMResVxPDZdfpmWTb9uqD0RrQD7oSXBQq7oHpm8g%40mail.gmail.com&forum_name=bitcoin-development - https://en.bitcoin.it/wiki/CVEs - https://bugs.gentoo.org/show_bug.cgi?id=407793 - https://bitcointalk.org/index.php?topic=67738.0 - http://r6.ca/blog/20120206T005236Z.html
CVE ID: CVE-2012-1910 State: PUBLISHED Published: 2012-08-06T16:00:00Z Last Updated: 2024-09-16T23:16:22.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitcoin-Qt 0.5.0.x before 0.5.0.5; 0.5.1.x, 0.5.2.x, and 0.5.3.x before 0.5.3.1; and 0.6.x before 0.6.0rc4 on Windows does not use MinGW multithread-safe exception handling, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted Bitcoin protocol messages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitcoin/bitcoin/commit/8864019f6d88b13d3442843d9e6ebeb8dd938831 - https://bitcointalk.org/index.php?topic=69120.0 - http
bitcoin/bitcoin/commit/8864019f6d88b13d3442843d9e6ebeb8dd938831 - https://bitcointalk.org/index.php?topic=69120.0 - http://gavintech.blogspot.com/2012/03/full-disclosure-bitcoin-qt-on-windows.html - https://en.bitcoin.it/wiki/CVEs
CVE ID: CVE-2012-1911 State: PUBLISHED Published: 2012-09-09T21:00:00 Last Updated: 2024-08-06T19:17:27.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_group parameter to group.php or (2) id parameter to vcard.php. NOTE: the edit.php vector is already covered by CVE-2008-2565. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73943 - http://www.securityfocus.com/bid/52396 - http://sourceforge.net/tracker/?func=detail&ai
loud.com/vulnerabilities/73943 - http://www.securityfocus.com/bid/52396 - http://sourceforge.net/tracker/?func=detail&aid=3501716&group_id=157964&atid=805929 - http://sourceforge.net/tracker/?func=detail&aid=3496653&group_id=157964&atid=805929 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txt
CVE ID: CVE-2012-1912 State: PUBLISHED Published: 2012-09-09T21:00:00 Last Updated: 2024-08-06T19:17:26.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. NOTE: the index.php vector is already covered by CVE-2008-2566. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42781 - http://www.exploit-db.com/exploits/18578 - http://www.securityfocus.com/bid/53598 - http://secunia.com/advisories/49212 - http://www.securityfocus.com/bid/52396 - http://sourceforge.
focus.com/bid/53598 - http://secunia.com/advisories/49212 - http://www.securityfocus.com/bid/52396 - http://sourceforge.net/tracker/?func=detail&aid=3501716&group_id=157964&atid=805929 - http://sourceforge.net/tracker/?func=detail&aid=3496653&group_id=157964&atid=805929 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/73944 - http://sourceforge.net/tracker/?func=detail&aid=3527242&group_id=157964&atid=805929 - http://www.darksecurity.de/index.php?/215-SSCHADV2012-013-PHP-Address-Book-7.0.0-Multiple-security-vulnerabilities.html
CVE ID: CVE-2012-1913 State: REJECTED Published: 2012-03-28T10:00:00Z Last Updated: 2024-09-16T23:06:36.639Z Description: No description available.
CVE ID: CVE-2012-1915 State: PUBLISHED Published: 2020-01-09T20:15:56 Last Updated: 2024-08-06T19:17:27.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: EllisLab CodeIgniter 2.1.2 allows remote attackers to bypass the xss_clean() Filter and perform XSS attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/54620
CVE ID: CVE-2012-1916 State: PUBLISHED Published: 2012-03-27T19:00:00 Last Updated: 2024-08-06T19:17:27.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to execute arbitrary code via an e-mail attachment with an executable extension, leading to the creation of an executable file under tmp/. Additional Analyst Notes: - CVE Program Container: References: - http://en.securitylab.ru/lab/PT-2011-48 - http://atmail.org/download/atmailopen.tgz - http://www.kb.cert.org/vuls/id/743555 - http://secunia.com/advisories/47012
CVE ID: CVE-2012-1917 State: PUBLISHED Published: 2012-03-27T19:00:00 Last Updated: 2024-08-06T19:17:27.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ../ (dot dot slash) sequences in the unique parameter, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ..././ (dot dot dot slash dot slash) sequence. Additional Analyst Notes: - CVE Program Container: References: - http://en.securitylab.ru/lab/PT-2011-48 - http://atmail.org/download/atmailopen.tgz - http://www.kb.cert.org/vuls/id/743555 - http://secunia.com/advisories/47012
CVE ID: CVE-2012-1918 State: PUBLISHED Published: 2012-03-27T19:00:00 Last Updated: 2024-08-06T19:17:27.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allow remote attackers to read arbitrary files via a .. (dot dot) in the Attachment[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://en.securitylab.ru/lab/PT-2011-48 - http://atmail.org/download/atmailopen.tgz - https://exchange.xforce.ibmcloud.com/vulnerabilities/74504 - http://www.kb.cert.org/vuls/id/743555 - http://secunia.com/advisories
change.xforce.ibmcloud.com/vulnerabilities/74504 - http://www.kb.cert.org/vuls/id/743555 - http://secunia.com/advisories/47012
CVE ID: CVE-2012-1919 State: PUBLISHED Published: 2012-03-27T19:00:00 Last Updated: 2024-08-06T19:17:26.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to conduct directory traversal attacks and read arbitrary files via a %0A sequence followed by a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://en.securitylab.ru/lab/PT-2011-48 - http://atmail.org/download/atmailopen.tgz - http://www.kb.cert.org/vuls/id/743555 - http://secunia.com/advisories/47012
CVE ID: CVE-2012-1920 State: PUBLISHED Published: 2012-03-27T19:00:00 Last Updated: 2024-08-06T19:17:27.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: @Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://en.securitylab.ru/lab/PT-2011-48 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74282 - http://www.kb.cert.org/vuls/id/743555 - http://secunia.com/advisories/47012
CVE ID: CVE-2012-1921 State: PUBLISHED Published: 2012-08-26T20:00:00Z Last Updated: 2024-09-17T00:21:37.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attackers to hijack the authentication of administrators for requests that change the router passphrase via the pskValue parameter. Additional Analyst Notes: - CVE Program Container: References: - http://ivanobinetti.blogspot.com/2012/03/sitecom-wlm-2501-change-wireless.html - http://packetstormsecurity.org/files/110770/Sitecom-WLM-2501-Cross-Site-Request-Forgery.html
CVE ID: CVE-2012-1922 State: PUBLISHED Published: 2013-01-24T01:00:00Z Last Updated: 2024-09-16T18:14:33.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote attackers to hijack the authentication of administrators for requests that modify settings for (1) Mac Filtering via admin/formFilter, (2) IP/Port Filtering via formFilter, (3) Port Forwarding via formPortFw, (4) Wireless Access Control via admin/formWlAc, (5) Wi-Fi Protected Setup via formWsc, (6) URL Blocking Filter via formURL, (7) Domain Blocking Filter via formDOMAINBLK, and (8) IP Address ACL Filter via admin/formACL in goform/,
via formURL, (7) Domain Blocking Filter via formDOMAINBLK, and (8) IP Address ACL Filter via admin/formACL in goform/, different vectors than CVE-2012-1921. Additional Analyst Notes: - CVE Program Container: References: - http://www.webapp-security.com/wp-content/uploads/2012/03/Sitecom-WLM-2501-new-Multiple-CSRF-Vulnerabilities-1.txt - http://www.webapp-security.com/2012/03/sitecom-wlm-2501-multiple-csrf-vulnerabilities
CVE ID: CVE-2012-1923 State: PUBLISHED Published: 2012-04-17T01:00:00 Last Updated: 2024-08-06T19:17:27.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information by reading a database. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2012-8/ - http://www.securityfocus.com/bid/52929 - http://www.securitytracker.com/id?1026898 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0062.html - http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS
.neohapsis.com/archives/bugtraq/2012-04/0062.html - http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/74673
CVE ID: CVE-2012-1924 State: PUBLISHED Published: 2012-03-28T01:00:00 Last Updated: 2024-08-06T19:17:27.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1162/ - http://osvdb.org/80620 - http://www.opera.com/docs/changelogs/windows/1162/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/74349 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html - http://www.opera.com/docs/changelogs/un
9 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html - http://www.opera.com/docs/changelogs/unix/1162/ - http://www.opera.com/support/kb/view/1010/ - http://secunia.com/advisories/48535
CVE ID: CVE-2012-1925 State: PUBLISHED Published: 2012-03-28T01:00:00 Last Updated: 2024-08-06T19:17:27.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for user-assisted remote attackers to trick users into downloading and executing arbitrary files via a download dialog located under other windows. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74503 - http://www.opera.com/docs/changelogs/mac/1162/ - http://www.opera.com/docs/changelogs/windows/1162/ - http://lists.opensuse.org/opensuse-securi
cs/changelogs/mac/1162/ - http://www.opera.com/docs/changelogs/windows/1162/ - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html - http://www.opera.com/docs/changelogs/unix/1162/ - http://osvdb.org/80621 - http://secunia.com/advisories/48535 - http://www.opera.com/support/kb/view/1011/
CVE ID: CVE-2012-1926 State: PUBLISHED Published: 2012-03-28T01:00:00 Last Updated: 2024-08-06T19:17:27.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/support/kb/view/1012/ - http://www.opera.com/docs/changelogs/mac/1162/ - http://osvdb.org/80622 - http://www.opera.com/docs/changelogs/windows/1162/ - http://lists.opensuse.org/opensuse-security-a
p://osvdb.org/80622 - http://www.opera.com/docs/changelogs/windows/1162/ - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html - http://www.opera.com/docs/changelogs/unix/1162/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/74351 - http://secunia.com/advisories/48535
CVE ID: CVE-2012-1927 State: PUBLISHED Published: 2012-03-28T01:00:00 Last Updated: 2024-08-06T19:17:26.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.62 allows remote attackers to spoof the address field by triggering the launch of a dialog window associated with a different domain. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1162/ - http://www.opera.com/support/kb/view/1013/ - http://www.opera.com/docs/changelogs/windows/1162/ - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html - http://www.opera.com/docs/changelogs/unix/1162/ - http://osvdb.org/80623 - http://secunia.com
ce/2012-05/msg00012.html - http://www.opera.com/docs/changelogs/unix/1162/ - http://osvdb.org/80623 - http://secunia.com/advisories/48535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74502
CVE ID: CVE-2012-1928 State: PUBLISHED Published: 2012-03-28T01:00:00 Last Updated: 2024-08-06T19:17:27.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.62 allows remote attackers to spoof the address field by triggering a page reload followed by a redirect to a different domain. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/support/kb/view/1014/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/74353 - http://www.opera.com/docs/changelogs/mac/1162/ - http://www.opera.com/docs/changelogs/windows/1162/ - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html - http://www.opera.com/docs/changelogs/u
2/ - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html - http://www.opera.com/docs/changelogs/unix/1162/ - http://secunia.com/advisories/48535 - http://osvdb.org/80624
CVE ID: CVE-2012-1929 State: PUBLISHED Published: 2012-03-28T01:00:00 Last Updated: 2024-08-06T19:17:27.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.62 on Mac OS X allows remote attackers to spoof the address field and security dialogs via crafted styling that causes page content to be displayed outside of the intended content area. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1162/ - http://www.opera.com/support/kb/view/1013/ - http://www.opera.com/docs/changelogs/windows/1162/ - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html - http://www.opera.com/support/kb/view/1009
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html - http://www.opera.com/support/kb/view/1009/ - http://secunia.com/advisories/48535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74352
CVE ID: CVE-2012-1930 State: PUBLISHED Published: 2012-03-28T01:00:00 Last Updated: 2024-08-06T19:17:27.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.62 on UNIX uses world-readable permissions for temporary files during printing, which allows local users to obtain sensitive information by reading these files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74501 - http://www.opera.com/support/kb/view/1015/ - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html - http://www.opera.com/docs/changelogs/unix/1162/ - http://secunia.com/advisories/48535