deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-4160
Published: 2012-08-15
Description: Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, and CVE-2012-4159.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://security.gentoo.org/glsa/glsa-201308-03.xml; http://www.adobe.com/support/security/bulletins/apsb12-16.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15968
CVE: CVE-2012-4161
Published: 2012-08-15
Description: Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4162.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb12-16.html; http://www.adobe.com/support/security/bulletins/apsb12-16.html
CVE: CVE-2012-4162
Published: 2012-08-15
Description: Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4161.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb12-16.html; http://www.adobe.com/support/security/bulletins/apsb12-16.html
CVE: CVE-2012-2570
Published: 2012-08-15
Description: Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary web script or HTML via the symb parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/84115; http://secunia.com/advisories/50006; http://www.exploit-db.com/exploits/20010
CVE: CVE-2012-3435
Published: 2012-08-15
Description: SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://git.zabbixzone.com/zabbix2.0/.git/commitdiff/333a3a5542ba8a2c901c24b7bf5440f41f1f4f54; http://osvdb.org/84127; http://secunia.com/advisories/49809
CVE: CVE-2012-4037
Published: 2012-08-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) created by, or (3) name field in a torrent file.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/fulldisclosure/2012-07/0349.html; http://secunia.com/advisories/50027; http://secunia.com/advisories/50769
CVE: CVE-2012-2768
Published: 2012-08-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html; http://secunia.com/advisories/50024; http://secunia.com/advisories/50440
CVE: CVE-2012-2769
Published: 2012-08-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the Extension::MobileUI extension before 1.02 for Best Practical Solutions RT 3.8.x and in Best Practical Solutions RT before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html; http://secunia.com/advisories/50010; http://www.securityfocus.com/bid/54684
CVE: CVE-2012-2770
Published: 2012-08-15
Description: The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html; http://secunia.com/advisories/50060; http://www.securityfocus.com/bid/54681
CVE: CVE-2012-3434
Published: 2012-08-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) datemin, or (3) datemax parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://plugins.trac.wordpress.org/changeset/571926/count-per-day; http://secunia.com/advisories/49692; http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt
CVE: CVE-2012-4340
Published: 2012-08-15
Description: Cross-site scripting (XSS) vulnerability in Sybase EAServer before 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN47662377/index.html; http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000047.html; http://jvn.jp/en/jp/JVN47662377/index.html
CVE: CVE-2012-4341
Published: 2012-08-15
Description: Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) long parameter value, (2) crafted string size field, or (3) long Parameter Name string in a package with opcode 0x43 and sub opcode 0x4 to TCP port 3900.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://scn.sap.com/docs/DOC-8218; http://secunia.com/advisories/49744; http://www.securitytracker.com/id?1027211
CVE: CVE-2012-4342
Published: 2012-08-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://gallery.menalto.com/gallery_3_0_4; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082954.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082995.html
CVE: CVE-2012-4343
Published: 2012-08-15
Description: Multiple unspecified vulnerabilities in Gallery 3 before 3.0.4 allow attackers to execute arbitrary PHP code via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://gallery.menalto.com/gallery_3_0_4; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082954.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082995.html
CVE: CVE-2012-2601
Published: 2012-08-15
Description: SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/20035; http://www.kb.cert.org/vuls/id/777007; http://www.securityfocus.com/bid/54626
CVE: CVE-2012-4344
Published: 2012-08-15
Description: Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the SNMP system name of the attacking host.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.exploit-db.com/exploits/20035; http://www.kb.cert.org/vuls/id/777007; https://exchange.xforce.ibmcloud.com/vulnerabilities/77150
CVE: CVE-2012-2283
Published: 2012-08-16
Description: The Iomega Home Media Network Hard Drive with EMC Lifeline firmware before 2.104, Home Media Network Hard Drive Cloud Edition with EMC Lifeline firmware before 3.2.3.15290, iConnect with EMC Lifeline firmware before 2.5.26.18966, and StorCenter with EMC Lifeline firmware before 2.0.18.23122, 2.1.x before 2.1.42.18967, and 3.x before 3.2.3.15290 allow remote authenticated users to read or modify data on arbitrary remote shares via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2012-08/0056.html; http://archives.neohapsis.com/archives/bugtraq/2012-08/0056.html
CVE: CVE-2012-3009
Published: 2012-08-16
Description: Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls.
CVSS Score: 8.5 (HIGH)
CWE: CWE-264
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-312568.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-227-01.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-312568.pdf
CVE: CVE-2012-3024
Published: 2012-08-16
Description: Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://www.tridium.com/cs/tridium_news/security_patch_36; http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01.pdf; http://www.tridium.com/cs/tridium_news/security_patch_36
CVE: CVE-2012-3025
Published: 2012-08-16
Description: The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-522
References: http://www.tridium.com/cs/tridium_news/security_patch_36; http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01.pdf; http://www.tridium.com/cs/tridium_news/security_patch_36
CVE: CVE-2012-3247
Published: 2012-08-16
Description: Unspecified vulnerability on the HP Integrity Server BL860c i2, BL870c i2, and BL890c i2 with firmware before 26.31 and the HP Integrity Server rx2800 i2 with firmware before 26.30 allows local users to cause a denial of service via unknown vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://www.securitytracker.com/id?1027376; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03450553; http://www.securitytracker.com/id?1027376
CVE: CVE-2012-3248
Published: 2012-08-16
Description: HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id?1027398; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03447824; http://www.securitytracker.com/id?1027398
CVE: CVE-2012-3249
Published: 2012-08-16
Description: HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03447895; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03447895
CVE: CVE-2012-3250
Published: 2012-08-16
Description: Unspecified vulnerability in HP Service Manager Server 7.11, 9.21, and 9.30, and HP Service Center Server 6.28, allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03447828; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03447828
CVE: CVE-2012-3251
Published: 2012-08-16
Description: Cross-site scripting (XSS) vulnerability in HP Service Manager Web Tier 7.11, 9.21, and 9.30, and HP Service Center Web Tier 6.28, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03450382; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03450382
CVE: CVE-2012-4285
Published: 2012-08-16
Description: The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a zero-length message.
CVSS Score: 3.3 (LOW)
CWE: CWE-189
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=44247&r2=44246&pathrev=44247; http://anonsvn.wireshark.org/viewvc?view=revision&revision=44247; http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html
CVE: CVE-2012-4286
Published: 2012-08-16
Description: The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted pcap-ng file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://anonsvn.wireshark.org/viewvc/trunk/wiretap/pcapng.c?r1=44074&r2=44073&pathrev=44074; http://anonsvn.wireshark.org/viewvc?revision=44074&view=revision; http://secunia.com/advisories/50276
CVE: CVE-2012-4287
Published: 2012-08-16
Description: epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mongo.c?r1=44288&r2=44287&pathrev=44288; http://anonsvn.wireshark.org/viewvc?view=revision&revision=44288; http://secunia.com/advisories/50276
CVE: CVE-2012-4288
Published: 2012-08-16
Description: Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop or application crash) via a large value for a span length.
CVSS Score: 3.3 (LOW)
CWE: CWE-189
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-xtp.c?r1=44289&r2=44288&pathrev=44289; http://anonsvn.wireshark.org/viewvc?view=revision&revision=44289; http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html
CVE: CVE-2012-4289
Published: 2012-08-16
Description: epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a large number of ACL entries.
CVSS Score: 3.3 (LOW)
CWE: CWE-399
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-afp.c?r1=44317&r2=44316&pathrev=44317; http://anonsvn.wireshark.org/viewvc?view=revision&revision=44317; http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html
CVE: CVE-2012-4290
Published: 2012-08-16
Description: The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.
CVSS Score: 3.3 (LOW)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html; http://rhn.redhat.com/errata/RHSA-2013-0125.html; http://secunia.com/advisories/50276
CVE: CVE-2012-4291
Published: 2012-08-16
Description: The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
CVSS Score: 3.3 (LOW)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html; http://rhn.redhat.com/errata/RHSA-2013-0125.html; http://secunia.com/advisories/50276
CVE: CVE-2012-4292
Published: 2012-08-16
Description: The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-stun.c?r1=44366&r2=44365&pathrev=44366; http://anonsvn.wireshark.org/viewvc/trunk/epan/emem.c?r1=44380&r2=44379&pathrev=44380; http://anonsvn.wireshark.org/viewvc?view=revision&revision=44366
CVE: CVE-2012-4293
Published: 2012-08-16
Description: plugins/ethercat/packet-ecatmb.c in the EtherCAT Mailbox dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly handle certain integer fields, which allows remote attackers to cause a denial of service (application exit) via a malformed packet.
CVSS Score: 3.3 (LOW)
CWE: CWE-189
References: http://anonsvn.wireshark.org/viewvc/trunk/plugins/ethercat/packet-ecatmb.c?r1=43149&r2=43148&pathrev=43149; http://anonsvn.wireshark.org/viewvc?view=revision&revision=43149; http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html
CVE: CVE-2012-4294
Published: 2012-08-16
Description: Buffer overflow in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a large speed (aka rate) value.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-erf.c?r1=44377&r2=44376&pathrev=44377; http://anonsvn.wireshark.org/viewvc?view=revision&revision=44377; http://secunia.com/advisories/50276
CVE: CVE-2012-4295
Published: 2012-08-16
Description: Array index error in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service (application crash) via a crafted speed (aka rate) value.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-erf.c?r1=44419&r2=44418&pathrev=44419; http://anonsvn.wireshark.org/viewvc?view=revision&revision=44419; http://secunia.com/advisories/50276
CVE: CVE-2012-4296
Published: 2012-08-16
Description: Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet.
CVSS Score: 3.3 (LOW)
CWE: CWE-399
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-rtps2.c?r1=44320&r2=44319&pathrev=44320; http://anonsvn.wireshark.org/viewvc?view=revision&revision=44320; http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html
CVE: CVE-2012-4297
Published: 2012-08-16
Description: Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a malformed packet.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_rlcmac.h?r1=44307&r2=44306&pathrev=44307; http://anonsvn.wireshark.org/viewvc?view=revision&revision=44307; http://secunia.com/advisories/50276
CVE: CVE-2012-4298
Published: 2012-08-16
Description: Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-189
References: http://anonsvn.wireshark.org/viewvc/trunk/wiretap/vwr.c?r1=44075&r2=44074&pathrev=44075; http://anonsvn.wireshark.org/viewvc?revision=44075&view=revision; http://secunia.com/advisories/50276
CVE: CVE-2009-5026
Published: 2012-08-17
Description: The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://bugs.mysql.com/bug.php?id=49124; http://dev.mysql.com/doc/refman/5.0/en/news-5-0-93.html; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-50.html
CVE: CVE-2012-1585
Published: 2012-08-17
Description: OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://lwn.net/Alerts/491298/; http://osdir.com/ml/openstack-cloud-computing/2012-03/msg01133.html; https://bugs.launchpad.net/nova/+bug/962515
CVE: CVE-2012-1597
Published: 2012-08-17
Description: Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://share.ez.no/community-project/security-advisories/ezsa-2012-006-xss-exploit-on-ezjscore-run-command-when-using-firefox; http://www.openwall.com/lists/oss-security/2012/05/11/6; https://github.com/ezsystems/ezjscore/commit/58854564c7b8672090c25c4b1677d08620d870f2
CVE: CVE-2012-1908
Published: 2012-08-17
Description: Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.splunk.com/view/SP-CAAAGTK#38585; http://www.splunk.com/view/SP-CAAAGTK#38585
CVE: CVE-2012-2102
Published: 2012-08-17
Description: MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and using HANDLER READ NEXT.
CVSS Score: 3.5 (LOW)
CWE: CWE-119
References: http://bazaar.launchpad.net/~mysql/mysql-server/5.5/revision/3097.15.15; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-62.html; http://dev.mysql.com/doc/refman/5.5/en/news-5-5-22.html
CVE: CVE-2012-2391
Published: 2012-08-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-2942.  Reason: This candidate is a duplicate of CVE-2012-2942.  Notes: All CVE users should reference CVE-2012-2942 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2012-2749
Published: 2012-08-17
Description: MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors related to incorrect calculation and a sort order index.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://dev.mysql.com/doc/refman/5.1/en/news-5-1-63.html; http://rhn.redhat.com/errata/RHSA-2012-1462.html; http://rhn.redhat.com/errata/RHSA-2013-0180.html
CVE: CVE-2012-2750
Published: 2012-08-17
Description: Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816, Oracle has not commented on this possibility.
CVSS Score: 10.0 (HIGH)
References: http://dev.mysql.com/doc/refman/5.5/en/news-5-5-23.html; http://www.debian.org/security/2013/dsa-2780; http://www.mandriva.com/security/advisories?name=MDVSA-2013:250