Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s: - http://rhn.redhat.com/errata/RHSA-2012-0722.html - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html - http://www.adobe.com/support/security/bulletins/apsb12-14.html - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html
CVE ID: CVE-2012-2037 State: PUBLISHED Published: 2012-06-09T00:00:00 Last Updated: 2024-08-06T19:17:27.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2034. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0
CVE-2012-2034. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0722.html - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html - http://www.adobe.com/support/security/bulletins/apsb12-14.html - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html
CVE ID: CVE-2012-2038 State: PUBLISHED Published: 2012-06-09T00:00:00 Last Updated: 2024-08-06T19:17:27.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0722.html - http://lists.opensuse.org/opensuse-sec
ogram Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0722.html - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html - http://www.adobe.com/support/security/bulletins/apsb12-14.html - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html
CVE ID: CVE-2012-2039 State: PUBLISHED Published: 2012-06-09T00:00:00 Last Updated: 2024-08-06T19:17:27.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0722.html - http://lists.opensuse.org/op
: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0722.html - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html - http://www.adobe.com/support/security/bulletins/apsb12-14.html - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html
CVE ID: CVE-2012-2040 State: PUBLISHED Published: 2012-06-09T00:00:00 Last Updated: 2024-08-06T19:17:27.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows local users to gain privileges via a Trojan horse executable file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-a
irectory. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html - http://www.adobe.com/support/security/bulletins/apsb12-14.html - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html
CVE ID: CVE-2012-2041 State: PUBLISHED Published: 2012-06-13T01:00:00Z Last Updated: 2024-09-16T22:40:25.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-15.html
CVE ID: CVE-2012-2042 State: PUBLISHED Published: 2012-05-24T15:00:00 Last Updated: 2024-08-06T19:17:27.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-10.html - http://www.securitytracker.com/id?1027047
CVE ID: CVE-2012-2043 State: PUBLISHED Published: 2012-08-15T10:00:00Z Last Updated: 2024-09-17T01:06:03.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2044, CVE-2012-2045, CVE-2012-2046, and CVE-2012-2047. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-17.html
CVE ID: CVE-2012-2044 State: PUBLISHED Published: 2012-08-15T10:00:00Z Last Updated: 2024-09-16T22:34:51.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2045, CVE-2012-2046, and CVE-2012-2047. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-17.html
CVE ID: CVE-2012-2045 State: PUBLISHED Published: 2012-08-15T10:00:00Z Last Updated: 2024-09-17T01:16:22.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2046, and CVE-2012-2047. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-17.html
CVE ID: CVE-2012-2046 State: PUBLISHED Published: 2012-08-15T10:00:00Z Last Updated: 2024-09-16T17:49:06.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2045, and CVE-2012-2047. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-17.html
CVE ID: CVE-2012-2047 State: PUBLISHED Published: 2012-08-15T10:00:00Z Last Updated: 2024-09-17T02:20:48.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2045, and CVE-2012-2046. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-17.html
CVE ID: CVE-2012-2048 State: PUBLISHED Published: 2012-09-12T10:00:00 Last Updated: 2024-08-06T19:17:27.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe ColdFusion 10 and earlier allows attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50523 - http://osvdb.org/85317 - http://www.securitytracker.com/id?1027516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78410 - http://www.adobe.com/support/security/bulletins/apsb12-21.html
CVE ID: CVE-2012-2049 State: PUBLISHED Published: 2012-08-15T10:00:00 Last Updated: 2024-08-06T19:17:27.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15463 - http://www.adobe.com/support/security/bulletins/apsb12-16.html - http://security.gentoo.org/glsa/glsa-201308-03.xml
CVE ID: CVE-2012-2050 State: PUBLISHED Published: 2012-08-15T10:00:00 Last Updated: 2024-08-06T19:17:27.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-16.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15469 - http://security.gentoo.org/glsa/glsa-201308-03.xml
CVE ID: CVE-2012-2051 State: PUBLISHED Published: 2012-08-15T10:00:00 Last Updated: 2024-08-06T19:17:27.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, CVE-2012-4159, and CVE-2012-4160. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cise
58, CVE-2012-4159, and CVE-2012-4160. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16394 - http://www.adobe.com/support/security/bulletins/apsb12-16.html - http://security.gentoo.org/glsa/glsa-201308-03.xml
CVE ID: CVE-2012-2052 State: PUBLISHED Published: 2014-06-19T20:00:00 Last Updated: 2024-08-06T19:17:27.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a long Collada asset element in a DAE file, as demonstrated by the cameraYFov value in the contributor comments element. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/9sg_photoshock_adv.htm - http://secunia.com/advisories/49160 - http://retrogod.altervista.org/9sg_photoshock_u3d.htm - http://osvd
hock_adv.htm - http://secunia.com/advisories/49160 - http://retrogod.altervista.org/9sg_photoshock_u3d.htm - http://osvdb.org/show/osvdb/81832 - http://www.securityfocus.com/bid/53464 - http://www.adobe.com/support/security/bulletins/apsb12-11.html - http://seclists.org/bugtraq/2012/May/58
CVE ID: CVE-2012-2053 State: PUBLISHED Published: 2012-04-04T10:00:00 Last Updated: 2024-08-06T19:17:27.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sudoers file in the Linux system configuration in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 does not require a password for executing commands as root, which allows local users to gain privileges via the sudo program, as demonstrated by the user account that executes PHP scripts, a different vulnerability than CVE-2012-1777. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/files/20120328-0_F5_FirePass_SSL_VPN_unauthenticated_remote_root_v1.0.txt - https://exchange.xforce.ibmcloud
consult.com/files/20120328-0_F5_FirePass_SSL_VPN_unauthenticated_remote_root_v1.0.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/74813
CVE ID: CVE-2012-2054 State: PUBLISHED Published: 2012-04-04T10:00:00Z Last Updated: 2024-09-16T20:17:00.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes in the (1) Comment, (2) Document, (3) IssueCategory, (4) MembersController, (5) Message, (6) News, (7) TimeEntry, (8) Version, (9) Wiki, (10) UserPreference, or (11) Board model via a modified URL, related to a "mass assignment" vulnerability, a different vulnerability than CVE-2012-0327. Additional Analyst Notes: - CVE Program Container: References: - http://www.redmine
nt vulnerability than CVE-2012-0327. Additional Analyst Notes: - CVE Program Container: References: - http://www.redmine.org/versions/42 - http://www.redmine.org/issues/10390 - http://www.redmine.org/boards/2/topics/29343
CVE ID: CVE-2012-2055 State: PUBLISHED Published: 2012-04-04T10:00:00 Last Updated: 2024-08-06T19:17:27.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the public_key[user_id] value via a modified URL for the public-key update form, related to a "mass assignment" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://homakov.blogspot.com/2012/03/how-to.html - http://lwn.net/Articles/488702/ - https://github.com/blog/1068-public-key-security-vulnerability-and-mitigation - https://exchange
.net/Articles/488702/ - https://github.com/blog/1068-public-key-security-vulnerability-and-mitigation - https://exchange.xforce.ibmcloud.com/vulnerabilities/74812
CVE ID: CVE-2012-2056 State: PUBLISHED Published: 2012-09-17T20:00:00Z Last Updated: 2024-09-16T19:45:54.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Content Lock module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1482126 - http://www.securityfocus.com/bid/52502 - http://www.openwall.com/lists/oss-security/2012/04/07/1
CVE ID: CVE-2012-2057 State: PUBLISHED Published: 2012-09-17T20:00:00 Last Updated: 2024-08-06T19:17:27.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1482126 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74054 - http://www.securityfocus.com/bid/52502 - http://www.openwall.com/lists/oss-security/2012/04/07/1
CVE ID: CVE-2012-2058 State: PUBLISHED Published: 2012-09-17T20:00:00 Last Updated: 2024-08-06T19:17:27.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1482126 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74055 - http://www.securityfocus.com/bid/52502 - http://www.openwall.com/lists/oss-security/2012/04/07/1
CVE ID: CVE-2012-2059 State: PUBLISHED Published: 2012-09-17T20:00:00 Last Updated: 2024-08-06T19:17:27.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ticketyboo News Ticker module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1482126 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74056 - http://www.securityfocus.com/bid/52502 - http://www.openwall.com/lists/oss-security/2012/04/07/1
CVE ID: CVE-2012-2060 State: PUBLISHED Published: 2012-09-17T20:00:00 Last Updated: 2024-08-06T19:17:27.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Admin tools module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1482126 - http://www.securityfocus.com/bid/52502 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74057
CVE ID: CVE-2012-2061 State: PUBLISHED Published: 2012-09-17T20:00:00 Last Updated: 2024-08-06T19:17:27.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors involving "not checking tokens." Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1482126 - http://www.securityfocus.com/bid/52502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74058 - http://www.openwall.com/lists/oss-security/2012/04/07/1
CVE ID: CVE-2012-2062 State: PUBLISHED Published: 2012-09-17T20:00:00 Last Updated: 2024-08-06T19:17:27.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Redirecting click bouncer module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1482126 - http://www.securityfocus.com/bid/52502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74059 - http://www.openwall.com/lists/oss-security/2012/04/07/1
CVE ID: CVE-2012-2063 State: PUBLISHED Published: 2012-09-05T00:00:00 Last Updated: 2024-08-06T19:17:27.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Slidebox module before 7.x-1.4 for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48360 - http://www.securityfocus.com/bid/52500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74067 - http://drupal.org/node/1482166 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupalcode.org/project/slidebox.git/commit/3dae144 - http:/
://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupalcode.org/project/slidebox.git/commit/3dae144 - http://drupal.org/node/1482342
CVE ID: CVE-2012-2064 State: PUBLISHED Published: 2012-09-05T00:00:00Z Last Updated: 2024-09-16T23:06:42.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in theme/views_lang_switch.theme.inc in the Views Language Switcher module before 7.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52497 - http://www.osvdb.org/80071 - http://secunia.com/advisories/48355 - http://drupal.org/node/1482420 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupalcode.org/project/views_lang_
l.org/node/1482420 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupalcode.org/project/views_lang_switch.git/commit/c27c318
CVE ID: CVE-2012-2065 State: PUBLISHED Published: 2012-09-05T00:00:00Z Last Updated: 2024-09-17T03:43:12.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Language Icons module 6.x-2.x before 6.x-2.1 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with administer languages permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1482144 - http://drupal.org/node/1482428 - http://secunia.com/advisories/48405 - http://drupal.org/node/1482136 - http://drupalcode.org/project/languageicons.git/commit/e3f3f1f
a.com/advisories/48405 - http://drupal.org/node/1482136 - http://drupalcode.org/project/languageicons.git/commit/e3f3f1f - http://www.osvdb.org/80070 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupalcode.org/project/languageicons.git/commit/be620bb - http://www.securityfocus.com/bid/52499
CVE ID: CVE-2012-2066 State: PUBLISHED Published: 2012-09-05T00:00:00 Last Updated: 2024-08-06T19:17:27.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the FCKeditor module 6.x-2.x before 6.x-2.3 and the CKEditor module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.7 for Drupal allows remote authenticated users or remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1482442 - http://drupal.org/node/1482480 - http://www.osvdb.org/80079 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/
1482480 - http://www.osvdb.org/80079 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1482466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74036 - http://secunia.com/advisories/48435 - http://drupal.org/node/1482528
CVE ID: CVE-2012-2067 State: PUBLISHED Published: 2012-09-05T00:00:00 Last Updated: 2024-08-06T19:17:27.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the CKeditor module 6.x-2.x before 6.x-2.3 and the CKEditor module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.7 for Drupal, when the core PHP module is enabled, allows remote authenticated users or remote attackers to execute arbitrary PHP code via the text parameter to a text filter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1482442 - http://www.osvdb.org/80080 - https://exchan
tes: - CVE Program Container: References: - http://drupal.org/node/1482442 - http://www.osvdb.org/80080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74037 - http://drupal.org/node/1482480 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1482466 - http://secunia.com/advisories/48435 - http://drupal.org/node/1482528
CVE ID: CVE-2012-2068 State: PUBLISHED Published: 2012-09-05T00:00:00 Last Updated: 2024-08-06T19:17:27.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in fancy_slide.module in the Fancy Slide module before 6.x-2.7 for Drupal allow remote authenticated users with the administer fancy_slide permission to inject arbitrary web script or HTML via the (1) node_title or (2) nodequeue_title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74070 - http://www.securityfocus.com/bid/52513 - http://www.osvdb.org/80069 - http://www.openwall.com/lists/oss-secu