deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-5095
Published: 2012-10-17
Description: Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to inetd.
CVSS Score: 4.4 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-0306
Published: 2012-10-18
Description: Symantec Ghost Solution Suite 2.x through 2.5.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted backup file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/55748; http://www.securitytracker.com/id?1027648; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121010_00
CVE: CVE-2012-2284
Published: 2012-10-18
Description: The (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html; http://osvdb.org/86157; http://secunia.com/advisories/50957
CVE: CVE-2012-2290
Published: 2012-10-18
Description: The client in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html; http://osvdb.org/86158; http://secunia.com/advisories/50957
CVE: CVE-2012-2971
Published: 2012-10-20
Description: The server in CA ARCserve Backup r12.5, r15, and r16 on Windows does not properly process RPC requests, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/86416; http://packetstormsecurity.com/files/119543/Security-Notice-For-CA-ARCserve-Backup.html; http://seclists.org/fulldisclosure/2013/Jan/86
CVE: CVE-2012-2972
Published: 2012-10-20
Description: The (1) server and (2) agent components in CA ARCserve Backup r12.5, r15, and r16 on Windows do not properly validate RPC requests, which allows remote attackers to cause a denial of service (service crash) via a crafted request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/86415; http://packetstormsecurity.com/files/119543/Security-Notice-For-CA-ARCserve-Backup.html; http://seclists.org/fulldisclosure/2013/Jan/86
CVE: CVE-2012-4826
Published: 2012-10-20
Description: Stack-based buffer overflow in the SQL/PSM (aka SQL Persistent Stored Module) Stored Procedure (SP) infrastructure in IBM DB2 9.1, 9.5, 9.7 before FP7, 9.8, and 10.1 might allow remote authenticated users to execute arbitrary code by debugging a stored procedure.
CVSS Score: 8.5 (HIGH)
CWE: CWE-119
References: http://osvdb.org/86414; http://www-01.ibm.com/support/docview.wss?uid=swg1IC86765; http://www-01.ibm.com/support/docview.wss?uid=swg1IC86781
CVE: CVE-2012-4845
Published: 2012-10-20
Description: The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://aix.software.ibm.com/aix/efixes/security/ftp_advisory1.asc; http://www.ibm.com/support/docview.wss?uid=isg1IV23331; http://www.ibm.com/support/docview.wss?uid=isg1IV28715
CVE: CVE-2012-2167
Published: 2012-10-20
Description: The IBM XIV Storage System Gen3 before 11.1.0.a allows remote attackers to cause a denial of service (device outage) via TCP packets to unspecified ports.
CVSS Score: 7.8 (HIGH)
References: http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004217; http://www.securityfocus.com/bid/56142; https://exchange.xforce.ibmcloud.com/vulnerabilities/75047
CVE: CVE-2012-4933
Published: 2012-10-20
Description: The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard-coded password of Scott for the (1) GetFile_Password and (2) GetConfigInfo_Password operations, which allows remote attackers to obtain sensitive information via a crafted rtrlet/rtr request for the HandleMaintenanceCalls function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-255
References: http://www.kb.cert.org/vuls/id/332412; http://www.securitytracker.com/id?1027682; https://community.rapid7.com/community/metasploit/blog/2012/10/15/cve-2012-4933-novell-zenworks
CVE: CVE-2012-3001
Published: 2012-10-22
Description: Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability."
CVSS Score: 8.5 (HIGH)
CWE: CWE-78
References: http://osvdb.org/86570; http://secunia.com/advisories/51094; http://www.kb.cert.org/vuls/id/841851
CVE: CVE-2012-4751
Published: 2012-10-22
Description: Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x before 3.0.17, and 3.1.x before 3.1.11 allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with whitespace before a javascript: URL in the SRC attribute of an element, as demonstrated by an IFRAME element.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-updates/2013-01/msg00036.html; http://packetstormsecurity.org/files/117504/OTRS-3.1-Cross-Site-Scripting.html; http://www.kb.cert.org/vuls/id/603276
CVE: CVE-2010-4821
Published: 2012-10-22
Description: Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://dl.packetstormsecurity.net/1009-exploits/phpmyfaq268-xss.txt; http://seclists.org/bugtraq/2010/Sep/207; http://secunia.com/advisories/41625
CVE: CVE-2011-4129
Published: 2012-10-22
Description: (1) services/twitter/twitter-contact-view.c and (2) services/twitter/twitter-item-view.c in libsocialweb before 0.25.20 automatically connect to Twitter when no Twitter account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle (MITM) attack.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-200
References: http://git.gnome.org/browse/libsocialweb/commit/?id=0086bfbfc[PII_REDACTED]3a87957e0bc12226e2b94; http://git.gnome.org/browse/libsocialweb/commit/?id=8982cf504cf3767761fe85d9558beab3d9da5bec; http://www.openwall.com/lists/oss-security/2011/11/09/3
CVE: CVE-2011-5211
Published: 2012-10-22
Description: Cross-site scripting (XSS) vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the title field.  NOTE: some of these details are obtained from third party information.  NOTE: this might overlap CVE-2012-5452.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://epsilonlambda.wordpress.com/2011/06/11/subrion-cms-multiple-vulnerabilities/; http://secunia.com/advisories/44917; http://www.exploit-db.com/exploits/17390
CVE: CVE-2011-5212
Published: 2012-10-22
Description: SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL commands via the (1) user name or (2) password field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://epsilonlambda.wordpress.com/2011/06/11/subrion-cms-multiple-vulnerabilities/; http://secunia.com/advisories/44917; http://www.exploit-db.com/exploits/17390
CVE: CVE-2012-1154
Published: 2012-10-22
Description: mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server, which allows remote attackers to bypass access restrictions and gain access to applications deployed on the root context via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2012-1010.html; http://rhn.redhat.com/errata/RHSA-2012-1011.html; http://rhn.redhat.com/errata/RHSA-2012-1012.html
CVE: CVE-2012-1900
Published: 2012-10-22
Description: Cross-site request forgery (CSRF) vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary web pages via a showcats action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.org/files/110593/RazorCMS-1.2.1-STABLE-Cross-Site-Request-Forgery.html; http://www.exploit-db.com/exploits/18575; https://exchange.xforce.ibmcloud.com/vulnerabilities/73902
CVE: CVE-2012-2679
Published: 2012-10-22
Description: Red Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak permissions (world-readable) for /var/log/rhncfg-actions, which allows local users to obtain sensitive information about the rhncfg-client actions by reading the file.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2012-1369.html; http://secunia.com/advisories/50978; http://www.securityfocus.com/bid/55934
CVE: CVE-2012-3466
Published: 2012-10-22
Description: GNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit the amount of time a passphrase is cached, which allows attackers to have an unspecified impact via unknown attack vectors.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683655; http://git.gnome.org/browse/gnome-keyring/commit/?id=51606f299e5ee9d48096db0a5957efe26cbf7cc3; http://git.gnome.org/browse/gnome-keyring/commit/?id=5dff623470b859e332dbe12afb0dc57b292832d2
CVE: CVE-2012-4231
Published: 2012-10-22
Description: Cross-site scripting (XSS) vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to inject arbitrary web script or HTML via the path parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-10/0097.html; http://jcore.net/news/jcore-ver-10pre2-available-for-testing; http://osvdb.org/86495
CVE: CVE-2012-4232
Published: 2012-10-22
Description: SQL injection vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to execute arbitrary SQL commands via the memberloginid cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-10/0097.html; http://jcore.net/news/jcore-ver-10pre2-available-for-testing; http://www.securityfocus.com/bid/56102
CVE: CVE-2012-4406
Published: 2012-10-22
Description: OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089472.html; http://rhn.redhat.com/errata/RHSA-2012-1379.html; http://rhn.redhat.com/errata/RHSA-2013-0691.html
CVE: CVE-2012-4435
Published: 2012-10-22
Description: fwknop before 2.0.3 does not properly validate IP addresses, which allows remote authenticated users to cause a denial of service (server crash) via a long IP address.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://www.cipherdyne.org/blog/2012/09/software-release-fwknop-2.0.3.html; http://www.cipherdyne.org/cgi-bin/gitweb.cgi?p=fwknop.git%3Ba=commitdiff%3Bh=263fa01f2af1d336961df320f1c7a9ea84ddac9a; http://www.cipherdyne.org/cgi-bin/gitweb.cgi?p=fwknop.git%3Ba=commitdiff%3Bh=f4c16bc47fc24a96b63105556b62d61c1ba7d799
CVE: CVE-2012-4436
Published: 2012-10-22
Description: Buffer overflow in the run_last_args function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might allow local users to cause a denial of service (client crash) and possibly execute arbitrary code via many .fwknop.run arguments.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-119
References: http://www.cipherdyne.org/blog/2012/09/software-release-fwknop-2.0.3.html; http://www.cipherdyne.org/cgi-bin/gitweb.cgi?p=fwknop.git%3Ba=commitdiff%3Bh=a60f05ad44e824f6230b22f[PII_REDACTED]cb535dc; http://www.openwall.com/lists/oss-security/2012/09/19/2
CVE: CVE-2012-4506
Published: 2012-10-22
Description: Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows remote authenticated users to create arbitrary repositories and possibly perform other actions via a .. (dot dot) in a repository name.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/50896; http://www.openwall.com/lists/oss-security/2012/10/10/1; http://www.openwall.com/lists/oss-security/2012/10/10/2
CVE: CVE-2012-4507
Published: 2012-10-22
Description: The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted email.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2012-10/msg00064.html; http://www.openwall.com/lists/oss-security/2012/10/09/1; http://www.openwall.com/lists/oss-security/2012/10/09/3
CVE: CVE-2012-4511
Published: 2012-10-22
Description: services/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr when no Flickr account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle (MITM) attack.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-200
References: http://git.gnome.org/browse/libsocialweb/commit/?id=8c28ae1d5db[PII_REDACTED]cee3700c[PII_REDACTED]3; http://www.openwall.com/lists/oss-security/2012/10/10/10; http://www.openwall.com/lists/oss-security/2012/10/11/1
CVE: CVE-2012-4516
Published: 2012-10-22
Description: librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ib_acm service.
CVSS Score: 5.8 (MEDIUM)
References: http://git.openfabrics.org/git?p=~shefty/librdmacm.git%3Ba=commitdiff%3Bh=4b5c1aa734e0e734fc2ba3cd41d0ddf02170af6d; http://www.openwall.com/lists/oss-security/2012/10/11/6; http://www.openwall.com/lists/oss-security/2012/10/11/9
CVE: CVE-2012-4517
Published: 2012-10-22
Description: ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of service (ibacm service crash) via a crafted join response.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://comments.gmane.org/gmane.linux.drivers.rdma/11659; http://git.openfabrics.org/git?p=~shefty/ibacm.git%3Ba=commit%3Bh=c7d28b35d64333c262de3ec972c426423dadccf9; http://rhn.redhat.com/errata/RHSA-2013-0509.html
CVE: CVE-2012-4518
Published: 2012-10-22
Description: ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ib_acm daemon log or ibacm.port file.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://git.openfabrics.org/git?p=~shefty/ibacm.git%3Ba=commit%3Bh=d204fca2b6298d7799e918141ea8e11e7ad43cec; http://rhn.redhat.com/errata/RHSA-2013-0509.html; http://www.openwall.com/lists/oss-security/2012/10/11/6
CVE: CVE-2012-4771
Published: 2012-10-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) admin/accounts/, (2) admin/manage/, or (3) admin/manage/blocks/edit/; or (4) group parameter to admin/configuration/.  NOTE: The f[accounts][fullname] and f[accounts][username] vectors are covered in CVE-2012-5452.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-10/0096.html; http://packetstormsecurity.org/files/117460/Subrion-CMS-2.2.1-XSS-CSRF-SQL-Injection.html; http://secunia.com/advisories/51013
CVE: CVE-2012-4772
Published: 2012-10-22
Description: SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL commands via the plan_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-10/0096.html; http://packetstormsecurity.org/files/117460/Subrion-CMS-2.2.1-XSS-CSRF-SQL-Injection.html; http://secunia.com/advisories/51013
CVE: CVE-2012-4773
Published: 2012-10-22
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding an administrator account via an add action to admin/accounts/add/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://archives.neohapsis.com/archives/bugtraq/2012-10/0096.html; http://packetstormsecurity.org/files/116433; http://packetstormsecurity.org/files/117460/Subrion-CMS-2.2.1-XSS-CSRF-SQL-Injection.html
CVE: CVE-2012-4989
Published: 2012-10-22
Description: Cross-site scripting (XSS) vulnerability in admin/plugin-index.php in OpenX 2.8.10 before revision 81823 allows remote attackers to inject arbitrary web script or HTML via the parent parameter in an info action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-10/0065.html; http://osvdb.org/86092; http://secunia.com/advisories/50877
CVE: CVE-2012-4990
Published: 2012-10-22
Description: SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids[] parameter in a link action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-10/0065.html; http://osvdb.org/86093; http://secunia.com/advisories/50877
CVE: CVE-2012-5167
Published: 2012-10-22
Description: Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL commands via the (1) field parameter to course_category/index_inline_editor_submit.php or (2) user/index_inline_editor_submit.php; or (3) id parameter to user/user_password.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-10/0095.html; http://osvdb.org/86424; http://osvdb.org/86425
CVE: CVE-2012-5168
Published: 2012-10-22
Description: ATutor AContent before 1.2-1 allows remote attackers to modify arbitrary user passwords or category names via a direct request to (1) user/index_inline_editor_submit.php or (2) course_category/index_inline_editor_submit.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2012-10/0095.html; http://osvdb.org/86428; http://secunia.com/advisories/51014
CVE: CVE-2012-5169
Published: 2012-10-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in file_manager/preview_top.php in ATutor AContent before 1.2-2 allow remote attackers to inject arbitrary web script or HTML via the (1) pathext, (2) popup, (3) framed, or (4) file parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-10/0095.html; http://osvdb.org/86426; http://secunia.com/advisories/51034
CVE: CVE-2012-5452
Published: 2012-10-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) multi_title parameter to blocks/add/; (2) cost, (3) days, or (4) title[en] parameter to plans/add/; (5) name or (6) title[en] parameter to fields/group/add/ in admin/manage/; or (7) f[accounts][fullname] or (8) f[accounts][username] parameter to advsearch/.  NOTE: This might overlap CVE-2011-5211.  NOTE: it was later reported that the f[accounts][fullname] and f[accounts][username] vectors might also affect 2.2.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/116434/Subrion-CMS-2.2.1-Cross-Site-Scripting.html; http://packetstormsecurity.org/files/117460/Subrion-CMS-2.2.1-XSS-CSRF-SQL-Injection.html; http://secunia.com/advisories/44917
CVE: CVE-2012-5453
Published: 2012-10-22
Description: SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated users to execute arbitrary SQL commands via the field parameter.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-5167.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/86424; http://secunia.com/advisories/51034; http://www.securityfocus.com/bid/56237
CVE: CVE-2012-5454
Published: 2012-10-22
Description: user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allows remote authenticated users to modify arbitrary user passwords via a crafted request.  NOTE: this might be due to an incomplete fix for CVE-2012-5168.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/86428; http://secunia.com/advisories/51034; http://www.securityfocus.com/bid/56237
CVE: CVE-2012-5455
Published: 2012-10-22
Description: Cross-site scripting (XSS) vulnerability in the language search component in Joomla! before 3.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "typographical error."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://developer.joomla.org/security/news/[PII_REDACTED]1-core-xss-vulnerability; http://osvdb.org/86134; http://secunia.com/advisories/50879
CVE: CVE-2012-4172
Published: 2012-10-23
Description: Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4173, CVE-2012-4174, CVE-2012-4175, and CVE-2012-5273.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/86537; http://www.adobe.com/support/security/bulletins/apsb12-23.html; http://www.kb.cert.org/vuls/id/872545
CVE: CVE-2012-4173
Published: 2012-10-23
Description: Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4174, CVE-2012-4175, and CVE-2012-5273.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/86538; http://www.adobe.com/support/security/bulletins/apsb12-23.html; http://www.kb.cert.org/vuls/id/872545
CVE: CVE-2012-4174
Published: 2012-10-23
Description: Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4175, and CVE-2012-5273.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/86539; http://www.adobe.com/support/security/bulletins/apsb12-23.html; http://www.kb.cert.org/vuls/id/872545
CVE: CVE-2012-4175
Published: 2012-10-23
Description: Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, and CVE-2012-5273.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/86540; http://www.adobe.com/support/security/bulletins/apsb12-23.html; http://www.kb.cert.org/vuls/id/872545
CVE: CVE-2012-4176
Published: 2012-10-23
Description: Array index error in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://osvdb.org/86542; http://www.adobe.com/support/security/bulletins/apsb12-23.html; http://www.kb.cert.org/vuls/id/872545