deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-0727
Published: 2012-09-10
Description: SQL injection vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/50551; http://www-01.ibm.com/support/docview.wss?uid=swg1IV17963; http://www-01.ibm.com/support/docview.wss?uid=swg21610081
CVE: CVE-2012-0728
Published: 2012-09-10
Description: SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/50551; http://www-01.ibm.com/support/docview.wss?uid=swg1IV17964; http://www-01.ibm.com/support/docview.wss?uid=swg21610081
CVE: CVE-2012-0746
Published: 2012-09-10
Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/50551; http://www-01.ibm.com/support/docview.wss?uid=swg1IV17961; http://www-01.ibm.com/support/docview.wss?uid=swg21610081
CVE: CVE-2012-0747
Published: 2012-09-10
Description: SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/85186; http://secunia.com/advisories/50551; http://www-01.ibm.com/support/docview.wss?uid=swg1IV16032
CVE: CVE-2012-2183
Published: 2012-09-10
Description: Session fixation vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack web sessions via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/85185; http://secunia.com/advisories/50551; http://www-01.ibm.com/support/docview.wss?uid=swg1IV09212
CVE: CVE-2012-2184
Published: 2012-09-10
Description: Session fixation vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack web sessions via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/50551; http://www-01.ibm.com/support/docview.wss?uid=swg1IV19887; http://www-01.ibm.com/support/docview.wss?uid=swg21610081
CVE: CVE-2012-2185
Published: 2012-09-10
Description: IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/85183; http://secunia.com/advisories/50551; http://www-01.ibm.com/support/docview.wss?uid=swg1IV17942
CVE: CVE-2012-3313
Published: 2012-09-10
Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/50551; http://www-01.ibm.com/support/docview.wss?uid=swg1IV15530; http://www-01.ibm.com/support/docview.wss?uid=swg21610081
CVE: CVE-2012-3326
Published: 2012-09-10
Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/50551; http://www-01.ibm.com/support/docview.wss?uid=swg1IV20344; http://www-01.ibm.com/support/docview.wss?uid=swg21610081
CVE: CVE-2012-2772
Published: 2012-09-10
Description: Unspecified vulnerability in the ff_rv34_decode_frame function in libavcodec/rv34.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing with frame threading."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=cb7190cd2c691fd93e4d3664f3fce6c19ee001dd; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2774
Published: 2012-09-10
Description: The ff_MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors, related to starting "a frame outside SETUP state."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=59a4b73531428d2f420b4dad545172c8483ced0f; http://secunia.com/advisories/50468
CVE: CVE-2012-2775
Published: 2012-09-10
Description: Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large order and an "out of array write in quant_cof."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9d3032b960ae03066c008d6e6774f68b17a1d69d; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2776
Published: 2012-09-10
Description: Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=ba775a54bc2136ec5da85385a923b05ee6fab159; http://libav.org/releases/libav-0.8.4.changelog
CVE: CVE-2012-2777
Published: 2012-09-10
Description: Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing in CAVS," a different vulnerability than CVE-2012-2784.
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=25715064c2ef4978672a91f8c856f3e8809a7c45; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2779
Published: 2012-09-10
Description: Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an invalid "gop header" and decoding in a "half initialized context."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=229e4c133287955d5f3f837520a3602709b21950; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2782
Published: 2012-09-10
Description: Unspecified vulnerability in the decode_slice_header function in libavcodec/h264.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to a "rejected resolution change."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9a57a37b7041581c10629c8241260a5d7bfbc1e7; http://secunia.com/advisories/50468
CVE: CVE-2012-2783
Published: 2012-09-10
Description: Unspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to "freeing the returned frame."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d85b3c4fff4c4b255232fcc01edbd57f19d60998; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2784
Published: 2012-09-10
Description: Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing in CAVS," a different vulnerability than CVE-2012-2777.
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=25715064c2ef4978672a91f8c856f3e8809a7c45; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2785
Published: 2012-09-10
Description: Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors, related to (1) "some subframes only encode some channels" or (2) a large order value.
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=326f7a68bbd429c63fd2f19f[PII_REDACTED]b5b081; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d[PII_REDACTED]68ffb013467d12dc4934b9106fe19
CVE: CVE-2012-2786
Published: 2012-09-10
Description: Unspecified vulnerability in the decode_wdlt function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array write."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d1c95d2ce39560e251fdb14f4af91b04fd7b845c; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2787
Published: 2012-09-10
Description: Unspecified vulnerability in the decode_frame function in libavcodec/indeo4.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the "setup width/height."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=01bf2ad7351fdaa2e21b6bdf963d22d6ffccb920; http://libav.org/releases/libav-0.8.4.changelog
CVE: CVE-2012-2788
Published: 2012-09-10
Description: Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c41ac870470c614185e1752c11f[PII_REDACTED]48a; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2789
Published: 2012-09-10
Description: Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large number of vector coded coefficients (num_vec_coeffs).
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=97a5addfcf0029d0f5538ed70cb38cae4108a618; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2790
Published: 2012-09-10
Description: Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to the "number of decoded samples in first sub-block in BGMC mode."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2837d8dc276760db1821b81df3f794a90bfa56e6; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2791
Published: 2012-09-10
Description: Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavcodec/ in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, have unknown impact and attack vectors, related to the "transform size."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=0846719dd11ab3f7a7caee13e7af71f71d913389; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2792
Published: 2012-09-10
Description: Unspecified vulnerability in the decode_init function in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the samples per frame.
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d442c4462a2692e27a24e1a9d0eb6f18725c7bd8; http://secunia.com/advisories/50468
CVE: CVE-2012-2793
Published: 2012-09-10
Description: Unspecified vulnerability in the lag_decode_zero_run_line function in libavcodec/lagarith.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors related to "too many zeros."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=83c7803f55b3231faeb93c1a634399a70fae9480; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2794
Published: 2012-09-10
Description: Unspecified vulnerability in the decode_mb_info function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors in which the "allocated tile size ... mismatches parameters."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=5ad7335ebac2b38bb2a1c8df51a500b78461c05a; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2795
Published: 2012-09-10
Description: Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors related to (1) size of "mclms arrays," (2) "a get_bits(0) in decode_ac_filter," and (3) "too many bits in decode_channel_residues()."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2a7063de547b1d8fb1cef523469390fb59fb2c50; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=a0abefb0af64a311b15141062c77dd577ba590a3
CVE: CVE-2012-2796
Published: 2012-09-10
Description: Unspecified vulnerability in the vc1_decode_frame function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to inconsistencies in "coded slice positions and interlacing" that trigger "out of array writes."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=5e59a77cec804a9b44c60ea22c17beba6453ef23; http://libav.org/releases/libav-0.8.4.changelog
CVE: CVE-2012-2797
Published: 2012-09-10
Description: Unspecified vulnerability in the decode_frame_mp3on4 function in libavcodec/mpegaudiodec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors related to a calculation that prevents a frame from being "large enough."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=cca9528524c7a4b91451f4322bd50849af5d057e; http://libav.org/releases/libav-0.8.5.changelog
CVE: CVE-2012-2798
Published: 2012-09-10
Description: Unspecified vulnerability in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array write."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=72b9537d8886f679494651df517dfed9b420cf1f; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2799
Published: 2012-09-10
Description: Unspecified vulnerability in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the "put bit buffer when num_saved_bits is reset."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=64bd7f8e4db1742e86c5ed02bd530688b74063e3; http://secunia.com/advisories/50468
CVE: CVE-2012-2800
Published: 2012-09-10
Description: Unspecified vulnerability in the ff_ivi_process_empty_tile function in libavcodec/ivi_common.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors in which the "tile size ... mismatches parameters" and triggers "writing into a too small array."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=f0bf9e9c2a65e9a2b9d9e4e94f99acb191dc7ae7; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2801
Published: 2012-09-10
Description: Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to dimensions and "out of array writes."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=1df49142bab1b7bccd11392aa9e819e297d21a6e; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2802
Published: 2012-09-10
Description: Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the "number of output channels" and "out of array writes."
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2c22701c371c2f3dea21fcdbb97c981939fb77af; http://libav.org/releases/libav-0.8.4.changelog
CVE: CVE-2012-2803
Published: 2012-09-10
Description: Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to resetting the data size value.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=951cbea56fdc03ef96d07fbd7e5bed755d42ac8a; http://libav.org/releases/libav-0.7.7.changelog
CVE: CVE-2012-2804
Published: 2012-09-10
Description: Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors, related to "reallocation code" and the luma height and width.
CVSS Score: 10.0 (HIGH)
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=4a80ebe491609e04110a1dd540a0ca79d3be3d04; http://libav.org/releases/libav-0.8.5.changelog
CVE: CVE-2012-4404
Published: 2012-09-10
Description: security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users with virtual group membership to be treated as a member of the group.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-264
References: http://hg.moinmo.in/moin/1.9/rev/7b9f39289e16; http://moinmo.in/SecurityFixes; http://secunia.com/advisories/50474
CVE: CVE-2012-4889
Published: 2012-09-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) subTab or (2) tab parameter to createAnomaly.do; (3) url, (4) subTab, or (5) tab parameter to mindex.do; (6) tab parameter to index2.do; or (7) port parameter to syslogViewer.do.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/80872; http://osvdb.org/80873; http://osvdb.org/80874
CVE: CVE-2012-4890
Published: 2012-09-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a (1) comment to the news, (2) title to the news, or (3) the folder names in a gallery.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html; http://secunia.com/advisories/48656; http://secunia.com/advisories/48676
CVE: CVE-2012-4891
Published: 2012-09-10
Description: Cross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter, a different vector than CVE-2012-4889.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/80874; http://packetstormsecurity.com/files/130169/ManageEngine-Firewall-Analyzer-8.0-Directory-Traversal-XSS.html; http://secunia.com/advisories/48657
CVE: CVE-2012-4892
Published: 2012-09-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title_en, (2) summary_en, or (3) body_en parameter in a submitnews action to the news module, a different vulnerability than CVE-2012-4890.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/48656; http://www.osvdb.org/80877; https://exchange.xforce.ibmcloud.com/vulnerabilities/74566
CVE: CVE-2012-1892
Published: 2012-09-11
Description: Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/50463; http://www.securityfocus.com/bid/55409; http://www.securitytracker.com/id?1027511
CVE: CVE-2012-2536
Published: 2012-09-11
Description: Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/55430; http://www.us-cert.gov/cas/techalerts/TA12-255A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-062
CVE: CVE-2012-2975
Published: 2012-09-11
Description: Cross-site scripting (XSS) vulnerability in the traffic overview page on the F5 ASM appliance 10.0.0 through 11.2.0 HF2 allows remote attackers to inject arbitrary web script or HTML via crafted requests that are later listed on a summary page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.kb.cert.org/vuls/id/143395; https://support.f5.com/kb/en-us/solutions/public/13000/800/sol13838.html; http://www.kb.cert.org/vuls/id/143395