Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-5879 State: PUBLISHED Published: 2013-03-28T23:00:00Z Last Updated: 2024-09-17T00:51:34.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10040 - http://www.securitytracker.com/id/1028357 - http://archives.neohapsis.com/archives/bugtraq/2013-03/0143.html - http://osvdb.org/91700 - http://www.securityfocus.com/bid/58750 - https:
hapsis.com/archives/bugtraq/2013-03/0143.html - http://osvdb.org/91700 - http://www.securityfocus.com/bid/58750 - https://www.htbridge.com/advisory/HTB23128
CVE ID: CVE-2012-5881 State: PUBLISHED Published: 2012-11-16T11:00:00 Last Updated: 2024-08-06T21:21:27.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207. Additional Analyst Notes: - CVE Program Container: References: - http://www.yuiblog.com/blog/2012/11/05/post-mortem-swf-vulnerability-in-yui-2/ - http://www.yuiblog.com/blog/2012/10/30/security-announcement-swf-vulnerability-in-yui-2/ - http://www.securityfocus.com/bid/56385 - https://exchange
2012/10/30/security-announcement-swf-vulnerability-in-yui-2/ - http://www.securityfocus.com/bid/56385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80118 - http://yuilibrary.com/support/20121030-vulnerability/
CVE ID: CVE-2012-5882 State: PUBLISHED Published: 2012-11-16T11:00:00 Last Updated: 2024-08-06T21:21:28.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader.swf, a similar issue to CVE-2010-4208. Additional Analyst Notes: - CVE Program Container: References: - http://www.yuiblog.com/blog/2012/11/05/post-mortem-swf-vulnerability-in-yui-2/ - http://www.yuiblog.com/blog/2012/10/30/security-announcement-swf-vulnerability-in-yui-2/ - http://www.securityfocus.com/bid/56385 - http://yuilibr
g/2012/10/30/security-announcement-swf-vulnerability-in-yui-2/ - http://www.securityfocus.com/bid/56385 - http://yuilibrary.com/support/20121030-vulnerability/
CVE ID: CVE-2012-5883 State: PUBLISHED Published: 2012-11-16T11:00:00 Last Updated: 2024-08-06T21:21:27.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.9.0, as used in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore.swf, a similar issue to CVE-2010-4209. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=808845 - http://www.mandriva.com/security/advisories?name=MDVSA-20
ences: - https://bugzilla.mozilla.org/show_bug.cgi?id=808845 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:066 - http://www.yuiblog.com/blog/2012/11/05/post-mortem-swf-vulnerability-in-yui-2/ - http://www.yuiblog.com/blog/2012/10/30/security-announcement-swf-vulnerability-in-yui-2/ - http://www.bugzilla.org/security/3.6.11/ - http://www.securityfocus.com/bid/56385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80116 - http://yuilibrary.com/support/20121030-vulnerability/
CVE ID: CVE-2012-5884 State: PUBLISHED Published: 2012-11-16T11:00:00 Last Updated: 2024-08-06T21:21:27.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The User.get method in Bugzilla/WebService/User.pm in Bugzilla 4.3.2 allows remote attackers to obtain sensitive information about the saved searches of arbitrary users via an XMLRPC request or a JSONRPC request, a different vulnerability than CVE-2012-4198. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=781850 - https://bugzilla.mozilla.org/show_bug.cgi?id=697224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80115
CVE ID: CVE-2012-5885 State: PUBLISHED Published: 2012-11-17T19:00:00 Last Updated: 2024-08-06T21:21:27.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184. Additional Analyst Notes: - CVE Program Container: References: - http://www-
different vulnerability than CVE-2011-1184. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21626891 - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://secunia.com/advisories/51371 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19432 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html - http://svn.apache.org/viewvc?view=revision&revision=1392248 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://rhn.redhat.com/errata/RHSA-2013-0631.html - http://rhn.redhat.com/errata/RHSA-2013-0640.html - http://www.ubuntu.com/usn/USN-1637-1 - http://www.securityfocus
tml - http://rhn.redhat.com/errata/RHSA-2013-0640.html - http://www.ubuntu.com/usn/USN-1637-1 - http://www.securityfocus.com/bid/56403 - http://tomcat.apache.org/security-7.html - http://rhn.redhat.com/errata/RHSA-2013-0648.html - http://rhn.redhat.com/errata/RHSA-2013-0633.html - http://rhn.redhat.com/errata/RHSA-2013-0629.html - http://rhn.redhat.com/errata/RHSA-2013-0647.html - http://rhn.redhat.com/errata/RHSA-2013-0632.html - http://tomcat.apache.org/security-6.html - http://svn.apache.org/viewvc?view=revision&revision=1380829 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html - http://rhn.redhat.com/errata/RHSA-2013-0623.html - http://tomcat.apache.org/security-5.html -
es/2013-01/msg00037.html - http://rhn.redhat.com/errata/RHSA-2013-0623.html - http://tomcat.apache.org/security-5.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80408 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://svn.apache.org/viewvc?view=revision&revision=1377807 - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html - http://rhn.redhat.com/errata/RHSA-2013-0726.html
CVE ID: CVE-2012-5886 State: PUBLISHED Published: 2012-11-17T19:00:00 Last Updated: 2024-08-06T21:21:27.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21626891 - http://secunia.com/advisories/51371 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00
iew.wss?uid=swg21626891 - http://secunia.com/advisories/51371 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html - http://svn.apache.org/viewvc?view=revision&revision=1392248 - http://rhn.redhat.com/errata/RHSA-2013-0631.html - http://rhn.redhat.com/errata/RHSA-2013-0640.html - http://www.ubuntu.com/usn/USN-1637-1 - http://www.securityfocus.com/bid/56403 - http://tomcat.apache.org/security-7.html - http://rhn.redhat.com/errata/RHSA-2013-0648.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80407 - http://rhn.redhat.com/errata/RHSA-2013-0633.html - http://rhn.redhat.com/errata/RHSA-2013-0629.html - http://rhn.redhat.com/errata/RHSA-2013-0647.html - http://rhn.redhat
http://rhn.redhat.com/errata/RHSA-2013-0629.html - http://rhn.redhat.com/errata/RHSA-2013-0647.html - http://rhn.redhat.com/errata/RHSA-2013-0632.html - http://tomcat.apache.org/security-6.html - http://svn.apache.org/viewvc?view=revision&revision=1380829 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html - http://rhn.redhat.com/errata/RHSA-2013-0623.html - http://tomcat.apache.org/security-5.html - http://svn.apache.org/viewvc?view=revision&revision=1377807 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html - http://rhn.redhat.com/errata/RHSA-2013-0726.html
CVE ID: CVE-2012-5887 State: PUBLISHED Published: 2012-11-17T19:00:00 Last Updated: 2024-08-06T21:21:27.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21626891 - http://secunia.com/advisories/51371 - http://li
eferences: - http://www-01.ibm.com/support/docview.wss?uid=swg21626891 - http://secunia.com/advisories/51371 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html - http://svn.apache.org/viewvc?view=revision&revision=1392248 - http://rhn.redhat.com/errata/RHSA-2013-0631.html - http://rhn.redhat.com/errata/RHSA-2013-0640.html - http://www.ubuntu.com/usn/USN-1637-1 - http://www.securityfocus.com/bid/56403 - http://tomcat.apache.org/security-7.html - http://rhn.redhat.com/errata/RHSA-2013-0648.html - http://rhn.redhat.com/errata/RHSA-2013-0633.html - http://rhn.redhat.com/errata/RHSA-2013-0629.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79809 - http://rhn.redhat.com
dhat.com/errata/RHSA-2013-0629.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79809 - http://rhn.redhat.com/errata/RHSA-2013-0647.html - http://rhn.redhat.com/errata/RHSA-2013-0632.html - http://tomcat.apache.org/security-6.html - http://svn.apache.org/viewvc?view=revision&revision=1380829 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html - http://rhn.redhat.com/errata/RHSA-2013-0623.html - http://tomcat.apache.org/security-5.html - http://svn.apache.org/viewvc?view=revision&revision=1377807 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html - http://rhn.redhat.com/errata/RHSA-2013-0726.html
CVE ID: CVE-2012-5888 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:28.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Basic SEO Features (seo_basics) extension before 0.8.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://forge.typo3.org/issues/35532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74483 - http://www.securityfocus.com/bid/52772 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-006/
CVE ID: CVE-2012-5889 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-004/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/74461
CVE ID: CVE-2012-5890 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:28.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80145 - http://forge.typo3.org/projects/extension-sr_feuser_register/repository/revisions/58720 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-002/ - http://forge.typo3.org/
0 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-002/ - http://forge.typo3.org/projects/extension-sr_feuser_register/repository/entry/trunk/ChangeLog
CVE ID: CVE-2012-5891 State: PUBLISHED Published: 2012-11-17T21:00:00Z Last Updated: 2024-09-16T17:09:17.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add a user via an add action, (2) change user passwords via a change action, or (3) delete a user via a delete action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80745 - http://www.exploit-db.com/exploits/18685 - http://packetstormsecurity.org/files/111402/Dalbum-144-Build-174-Cross-Si
5 - http://www.exploit-db.com/exploits/18685 - http://packetstormsecurity.org/files/111402/Dalbum-144-Build-174-Cross-Site-Request-Forgery.html
CVE ID: CVE-2012-5892 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the configuration database via a direct request for data/havalite.db3. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111358/Havalite-CMS-Shell-Upload-SQL-Injection-Disclosure.html - http://osvdb.org/80770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74488
CVE ID: CVE-2012-5893 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading a file with a .php;.gif extension, then accessing it via a direct request to the file in tmp/files/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111358/Havalite-CMS-Shell-Upload-SQL-Injection-Disclosure.html - http://osvdb.org/80768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74486 - http://secunia.com/advi
ure.html - http://osvdb.org/80768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74486 - http://secunia.com/advisories/48646
CVE ID: CVE-2012-5894 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the postId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111358/Havalite-CMS-Shell-Upload-SQL-Injection-Disclosure.html - http://osvdb.org/80769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74487 - http://secunia.com/advisories/48646
CVE ID: CVE-2012-5895 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:28.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in iRODS before 3.1 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74493 - http://www.securityfocus.com/bid/52827 - https://www.irods.org/index.php/Release_Notes_3.1
CVE ID: CVE-2012-5896 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer." Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18674 - http://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/intrust_annotatex_add.rb - http:
sploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/intrust_annotatex_add.rb - http://osvdb.org/80662 - http://packetstormsecurity.org/files/111853/Quest-InTrust-Annotation-Objects-Uninitialized-Pointer.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74448 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0153.html - http://www.securityfocus.com/bid/52765 - http://secunia.com/advisories/48566 - http://packetstormsecurity.org/files/111312/Quest-InTrust-10.4.x-Annotation-Objects-Code-Execution.html
CVE ID: CVE-2012-5897 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) SimpleTree and (2) ReportTree classes in the ARDoc ActiveX control (ARDoc.dll) in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method, which allows remote attackers to write or overwrite arbitrary files via the bstrFileName argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52773 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0155.html - http://www.exploit-db.com/exploits/18672 - http://osvdb.org/80664 - https://exchange
rchives/bugtraq/2012-03/0155.html - http://www.exploit-db.com/exploits/18672 - http://osvdb.org/80664 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74442 - http://secunia.com/advisories/48566
CVE ID: CVE-2012-5898 State: PUBLISHED Published: 2012-11-17T21:00:00Z Last Updated: 2024-09-16T19:25:22.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in SAMEDIA LandShop 0.9.2 allows remote attackers to hijack the authentication of administrators for requests that change account settings. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48661 - http://vulnerability-lab.com/get_content.php?id=485 - http://osvdb.org/80800 - http://www.exploit-db.com/exploits/18687 - http://packetstormsecurity.org/files/111415/Landshop-0.9.2-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2012-5899 State: PUBLISHED Published: 2012-11-17T21:00:00Z Last Updated: 2024-09-17T02:07:09.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/action/objects.php in SAMEDIA LandShop 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the OTR_HEADS[] parameter in an edit action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/80799 - http://secunia.com/advisories/48661 - http://vulnerability-lab.com/get_content.php?id=485 - http://www.exploit-db.com/exploits/18687 - http://packetstormsecuri
ttp://vulnerability-lab.com/get_content.php?id=485 - http://www.exploit-db.com/exploits/18687 - http://packetstormsecurity.org/files/111415/Landshop-0.9.2-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2012-5900 State: PUBLISHED Published: 2012-11-17T21:00:00Z Last Updated: 2024-09-16T17:33:19.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL commands via the (1) OB_ID parameter in a single action to admin/action/objects.php, (2) AREA_ID parameter in a single action to admin/action/areas.php, or (3) start parameter in a show action to admin/action/pdf.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80798 - http://secunia.com/advisories/48661 - http://vulnerability-lab.com/get_content.php?id=485 - http://osvdb.org/8
g/80798 - http://secunia.com/advisories/48661 - http://vulnerability-lab.com/get_content.php?id=485 - http://osvdb.org/80796 - http://osvdb.org/80797 - http://www.exploit-db.com/exploits/18687 - http://packetstormsecurity.org/files/111415/Landshop-0.9.2-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2012-5901 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: DFLabs PTK 1.0.5 stores data files with predictable names under the web document root with insufficient access control, which allows remote attackers to read logs, images, or reports via a direct request to the file in the (1) log, (2) images, or (3) report directory. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111360/PTK-1.0.5-Cross-Site-Scripting-Unrestricted-Access.html - http://www.securityfocus.com/bid/52817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74
estricted-Access.html - http://www.securityfocus.com/bid/52817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74491 - http://secunia.com/advisories/48585 - http://osvdb.org/80773
CVE ID: CVE-2012-5902 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ptk/lib/modal_bookmark.php in DFLabs PTK 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the arg4 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111360/PTK-1.0.5-Cross-Site-Scripting-Unrestricted-Access.html - http://www.securityfocus.com/bid/52817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74492 - http://osvdb.org/80774
CVE ID: CVE-2012-5903 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the scheduled parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111356/SMF-2.0.2-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74521 - http://www.securityfocus.com/bid/52822 - http://osvdb.org/80766
CVE ID: CVE-2012-5904 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52806 - http://secunia.com/advisories/47333 - http://osvdb.org/80716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74452 - http://www.irfanview.com/history_old.htm