Provide references for further information: Can you share references or external links related to CVE-2012-0874?

{'name': 'RHSA-2013:0192', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0192.html'}, {'name': 'RHSA-2013:0198', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0198.html'}, {'name': 'RHSA-2013:0195', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0195.html'}, {'name': 'RHSA-2013:0221', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0221.html'}, {'name': 'RHSA-2013:0196', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0196.html'}, {'name': '57552', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57552'}, {'name': 'RHSA-2013:0193', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0193.html'}, {'name': '51984', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51984'}, {'name': '1028042', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1028042'}, {'name': '52054', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52054'}, {'name': '20131219 ESA-2013-094: EMC Data Protection Advisor JBOSS Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-12/0134.html'}, {'name': 'RHSA-2013:0191', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0191.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=795645'}, {'name': 'RHSA-2013:0533', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0533.html'}, {'name': 'RHSA-2013:0197', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0197.html'}, {'name': '30211', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/30211'}, {'name': 'jboss-eap-jmxinvokerhaservlet-code-exec(81511)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/81511'}, {'name': 'RHSA-2013:0194', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0194.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0874?


Explain the CVE ID: What does the identifier CVE-2012-0875 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0875.

SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service (kernel panic and crash) via vectors related to crafted DWARF data, which triggers a read of an invalid pointer.


Provide references for further information: Can you share references or external links related to CVE-2012-0875?

{'name': 'RHSA-2012:0376', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0376.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceware.org/bugzilla/show_bug.cgi?id=13714'}, {'name': '1026777', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1026777'}, {'name': '[oss-security] 20120222 CVE-2012-0875: systemtap memory disclosure/kernel panic when processing malformed DWARF unwind data', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://permalink.gmane.org/gmane.comp.security.oss.general/6987'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceware.org/git/?p=systemtap.git%3Ba=commit%3Bh=64b0cff3b'}, {'name': 'openSUSE-SU-2013:0475', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00057.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0875?


Explain the CVE ID: What does the identifier CVE-2012-0876 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0876.

The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.


Provide references for further information: Can you share references or external links related to CVE-2012-0876?

{'name': '49504', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49504'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/tracker/?func=detail&atid=110127&aid=3496608&group_id=10127'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2016-20'}, {'name': 'USN-1527-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1527-1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.python.org/issue13703#msg151870'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205637'}, {'name': '51040', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51040'}, {'name': 'RHSA-2012:0731', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0731.html'}, {'name': '52379', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52379'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/projects/expat/files/expat/2.1.0/'}, {'name': 'RHSA-2016:0062', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0062.html'}, {'name': 'APPLE-SA-2013-10-22-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html'}, {'name': 'APPLE-SA-2015-12-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html'}, {'name': 'DSA-2525', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2525'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html'}, {'name': 'MDVSA-2012:041', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2012:041'}, {'name': 'RHSA-2016:2957', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2957.html'}, {'name': 'USN-1613-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1613-2'}, {'name': '[Expat-discuss] 20120304 Announcement: Expat 2.1.0 Beta can be tested', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail.libexpat.org/pipermail/expat-discuss/2012-March/002768.html'}, {'name': '51024', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51024'}, {'name': 'USN-1613-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1613-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10365'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0876?


Explain the CVE ID: What does the identifier CVE-2012-0877 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0877.

PyXML: Hash table collisions CPU usage Denial of Service


Provide references for further information: Can you share references or external links related to CVE-2012-0877?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2012-0877'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0877'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/cve-2012-0877'}, {'tags': ['x_refsource_MISC'], 'url': 'http://seclists.org/oss-sec/2014/q3/96'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/07/08/11'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0877?


Explain the CVE ID: What does the identifier CVE-2012-0878 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0878.

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem.


Provide references for further information: Can you share references or external links related to CVE-2012-0878?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=796790'}, {'name': '[oss-security] 20120223 CVE Request -- python-paste-script: Supplementary groups not dropped when started an application with "paster serve" as root', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/02/23/1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bitbucket.org/ianb/pastescript/pull-request/3/fix-group-permissions-for-pastescriptserve'}, {'name': '48812', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48812'}, {'name': '[oss-security] 20120223 Re: CVE Request -- python-paste-script: Supplementary groups not dropped when started an application with "paster serve" as root', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/02/23/4'}, {'name': 'RHSA-2012:1206', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-1206.html'}, {'name': '50410', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/50410'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://groups.google.com/group/paste-users/browse_thread/thread/2aa651ba331c2471'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bitbucket.org/ianb/pastescript/changeset/a19e462769b4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0878?


Explain the CVE ID: What does the identifier CVE-2012-0879 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0879.

The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service (I/O instability) by starting multiple processes that share an I/O context.


Provide references for further information: Can you share references or external links related to CVE-2012-0879?

{'name': 'RHSA-2012:0531', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0531.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=61cc74fbb87af6aa551a06a370590c9bc07e29d9'}, {'name': 'USN-1408-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1408-1'}, {'name': '[oss-security] 20120223 Re: CVE request -- kernel: block: CLONE_IO io_context refcounting issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/02/23/5'}, {'name': '1027086', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1027086'}, {'name': 'DSA-2469', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2469'}, {'name': 'RHSA-2012:0481', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0481.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=796829'}, {'name': 'SUSE-SU-2012:0616', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html'}, {'name': '48545', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48545'}, {'name': 'USN-1411-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1411-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/b69f2292063d2caf37ca9aec7d63ded203701bf3'}, {'name': '48842', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48842'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/61cc74fbb87af6aa551a06a370590c9bc07e29d9'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33'}, {'name': 'USN-1410-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1410-1'}, {'name': 'HPSBGN02970', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=139447903326211&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b69f2292063d2caf37ca9aec7d63ded203701bf3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0879?


Explain the CVE ID: What does the identifier CVE-2012-0880 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0880.

Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions.


Provide references for further information: Can you share references or external links related to CVE-2012-0880?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=787103'}, {'name': '[oss-security] 20140708 Summer bug cleaning - some Hash DoS stuff', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q3/96'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0880?


Explain the CVE ID: What does the identifier CVE-2012-0881 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0881.

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an XML service, which triggers hash table collisions.


Provide references for further information: Can you share references or external links related to CVE-2012-0881?

{'name': '[j-users] 20180503 [ANNOUNCEMENT]: Apache Xerces-J 2.12.0 now available', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/49dc6702104a86ecbb40292dcd329ce9ae4c32b74733199ecab14a73%40%3Cj-users.xerces.apache.org%3E'}, {'name': '[oss-security] 20140708 Summer bug cleaning - some Hash DoS stuff', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2014/07/08/11'}, {'name': '[lucene-solr-user] 20190104 Re: SOLR v7 Security Issues Caused Denial of Use - Sonatype Application Composition Report', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E'}, {'name': '[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E'}, {'name': '[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E'}, {'name': '[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E'}, {'name': '[lucene-solr-user] 20200320 CVEs (vulnerabilities) that apply to Solr 8.4.1', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.apache.org/jira/browse/XERCESJ-1685'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=787104'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com//security-alerts/cpujul2021.html'}, {'name': '[hadoop-common-issues] 20210928 [GitHub] [hadoop] warrenzhu25 opened a new pull request #3496: HADOOP-17941. Update xerces to 2.12', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rea7b831dceeb2a2fa817be6f63b08722042e3647fb2d47c144370a56%40%3Ccommon-issues.hadoop.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0881?


Explain the CVE ID: What does the identifier CVE-2012-0882 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0882.

Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17.  NOTE: as of 20120224, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.  NOTE: due to lack of details, it is not clear whether this issue is a duplicate of CVE-2012-0492 or another CVE.


Provide references for further information: Can you share references or external links related to CVE-2012-0882?

{'name': '[Canvas] 20120223 VulnDisco MySQL 0day', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.immunityinc.com/pipermail/canvas/2012-February/000014.html'}, {'name': '[Canvas] 20120207 VulnDisco Pack Professional 9.17', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.immunityinc.com/pipermail/canvas/2012-February/000011.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=789141'}, {'name': '[oss-security] 20120224 Re: MySQL 0-day - does it need a CVE?', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/02/24/2'}, {'tags': ['x_refsource_MISC'], 'url': 'https://blogs.oracle.com/sunsecurity/entry/cve_2012_0882buffer_overflow_vulnerability'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0882?


Explain the CVE ID: What does the identifier CVE-2012-0883 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0883.

envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl.


Provide references for further information: Can you share references or external links related to CVE-2012-0883?

{'name': 'SSRT100856', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=134012830914727&w=2'}, {'name': '53046', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53046'}, {'name': '48849', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48849'}, {'name': 'SSRT101209', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862'}, {'name': 'APPLE-SA-2013-09-12-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apache.org/dist/httpd/Announcement2.4.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apachelounge.com/Changelog-2.4.html'}, {'name': '1026932', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026932'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://httpd.apache.org/security/vulnerabilities_24.html'}, {'name': '[dev] 20120417 [ANNOUNCEMENT] Apache HTTP Server 2.4.2 Released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://article.gmane.org/gmane.comp.apache.devel/48158'}, {'name': 'openSUSE-SU-2013:0248', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00012.html'}, {'name': 'apache-ldlibrarypath-code-execution(74901)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74901'}, {'name': 'HPSBUX02791', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=134012830914727&w=2'}, {'name': 'openSUSE-SU-2013:0243', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5880'}, {'name': 'HPSBMU02900', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1296428'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058586 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [8/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1888194 [8/13] - /httpd/site/trunk/content/security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [8/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073146 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0883?


Explain the CVE ID: What does the identifier CVE-2012-0884 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0884.

The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.


Provide references for further information: Can you share references or external links related to CVE-2012-0884?

{'name': 'FEDORA-2012-4630', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077666.html'}, {'name': 'RHSA-2012:0531', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0531.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564'}, {'name': 'FEDORA-2012-18035', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://downloads.avaya.com/css/P8/documents/100162507'}, {'name': 'RHSA-2012:1308', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-1308.html'}, {'name': 'openSUSE-SU-2012:0547', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/14330767'}, {'name': 'RHSA-2012:1307', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-1307.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openssl.org/news/secadv_20120312.txt'}, {'name': '48916', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48916'}, {'name': 'RHSA-2012:0488', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0488.html'}, {'name': 'DSA-2454', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2454'}, {'name': '48895', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48895'}, {'name': '48580', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48580'}, {'name': 'VU#737740', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/737740'}, {'name': 'RHSA-2012:1306', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-1306.html'}, {'name': 'FEDORA-2012-4665', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html'}, {'name': 'HPSBOV02793', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=134039053214295&w=2'}, {'name': '57353', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57353'}, {'name': 'RHSA-2012:0426', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0426.html'}, {'name': 'HPSBUX02782', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=133728068926468&w=2'}, {'name': 'SSRT100891', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=134039053214295&w=2'}, {'name': 'SSRT100852', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=133951357207000&w=2'}, {'name': 'FEDORA-2012-4659', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077221.html'}, {'name': 'HPSBMU02776', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=133951357207000&w=2'}, {'name': 'SSRT100844', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=133728068926468&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0884?


Explain the CVE ID: What does the identifier CVE-2012-0885 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0885.

chan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the res_srtp module is used and media support is improperly configured, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted SDP message with a crypto attribute and a (1) video or (2) text media type, as demonstrated by CSipSimple.


Provide references for further information: Can you share references or external links related to CVE-2012-0885?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.asterisk.org/pub/security/AST-2012-001-10.diff'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.asterisk.org/jira/browse/ASTERISK-19202'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.asterisk.org/pub/security/AST-2012-001-1.8.diff'}, {'name': '[oss-security] 20120120 CVE Request -- Asterisk AST-2012-001 / Remote DoS while processing crypto line for media stream with non-existing RTP', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/01/20/16'}, {'name': '[oss-security] 20120120 Re: CVE Request -- Asterisk AST-2012-001 / Remote DoS while processing crypto line for media stream with non-existing RTP', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/01/20/18'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.asterisk.org/jira/secure/attachment/42202/issueA19202_crypto_if_uninited_text_or_video.patch'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=783487'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.asterisk.org/pub/security/AST-2012-001.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0885?


Explain the CVE ID: What does the identifier CVE-2012-0891 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0891.

Multiple cross-site scripting (XSS) vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and Enterprise 1.0 before 1.2.5 and 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields.


Provide references for further information: Can you share references or external links related to CVE-2012-0891?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://puppetlabs.com/security/cve/cve-2012-0891'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0891?


Explain the CVE ID: What does the identifier CVE-2012-0895 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0895.

Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0895?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/extend/plugins/count-per-day/changelog/'}, {'name': '18355', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18355'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://plugins.trac.wordpress.org/changeset/488883/count-per-day'}, {'name': '47529', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47529'}, {'name': '78271', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78271'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/108631/countperday-downloadxss.txt'}, {'name': '51402', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51402'}, {'name': 'countperday-map-xss(72384)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72384'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0895?


Explain the CVE ID: What does the identifier CVE-2012-0896 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0896.

Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0896?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/extend/plugins/count-per-day/changelog/'}, {'name': '18355', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18355'}, {'name': '78270', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78270'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://plugins.trac.wordpress.org/changeset/488883/count-per-day'}, {'name': '47529', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47529'}, {'name': 'countperday-download-file-download(72385)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72385'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/108631/countperday-downloadxss.txt'}, {'name': '51402', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51402'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0896?


Explain the CVE ID: What does the identifier CVE-2012-0897 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0897.

Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.


Provide references for further information: Can you share references or external links related to CVE-2012-0897?

{'name': '1032529', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032529'}, {'name': '47360', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47360'}, {'name': '51426', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51426'}, {'name': '78333', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78333'}, {'name': '1032530', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032530'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.irfanview.com/history_old.htm'}, {'name': 'irfanview-qcd-bo(72398)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72398'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0897?


Explain the CVE ID: What does the identifier CVE-2012-0898 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0898.

Directory traversal vulnerability in meb_download.php in the myEASYbackup plugin 1.0.8.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the dwn_file parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0898?

{'name': 'myeasy-mebdownload-directory-traversal(72404)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72404'}, {'name': '47594', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47594'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/view/108711/wpmyeasybackup-traversal.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0898?


Explain the CVE ID: What does the identifier CVE-2012-0899 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0899.

Cross-site scripting (XSS) vulnerability in referencement/sites_inscription.php in Annuaire PHP allows remote attackers to inject arbitrary web script or HTML via the url parameter and possibly the nom parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0899?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/view/108719/annuaire-xss.txt'}, {'name': 'annuaire-sitesinscription-xss(72407)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72407'}, {'name': '51434', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51434'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0899?


Explain the CVE ID: What does the identifier CVE-2012-0900 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0900.

Multiple cross-site scripting (XSS) vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) forum/register.php or (2) forum/logon.php.


Provide references for further information: Can you share references or external links related to CVE-2012-0900?

{'name': 'beehiveforum101-multiple-xss(72411)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72411'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.darksecurity.de/advisories/SSCHADV2011-042.txt'}, {'name': '47595', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47595'}, {'name': '51424', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51424'}, {'name': '20120115 Beehive Forum 101 Multiple XSS vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-01/0103.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0900?


Explain the CVE ID: What does the identifier CVE-2012-0901 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0901.

Cross-site scripting (XSS) vulnerability in yousaytoo.php in YouSayToo auto-publishing plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0901?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/view/108470/wpystap-xss.txt'}, {'name': 'yousaytooautopublishing-yousaytoo-xss(72271)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72271'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0901?


Explain the CVE ID: What does the identifier CVE-2012-0902 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0902.

AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin/loader.


Provide references for further information: Can you share references or external links related to CVE-2012-0902?

{'name': '51320', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51320'}, {'name': '18336', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18336'}, {'name': 'airties-4450-cgibin-dos(72200)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72200'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0902?


Explain the CVE ID: What does the identifier CVE-2012-0903 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0903.

Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Desktop 7.1.2 b10978 allow remote attackers to inject arbitrary web script or HTML via the (1) Username or (2) MailBox Name.


Provide references for further information: Can you share references or external links related to CVE-2012-0903?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/view/108715/VL-378.txt'}, {'name': '51436', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51436'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.vulnerability-lab.com/get_content.php?id=378'}, {'name': '20120116 Zimbra Desktop v7.1.2 - Persistent Software Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2012/Jan/244'}, {'name': 'zimbra-labelname-xss(72405)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72405'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0903?


Explain the CVE ID: What does the identifier CVE-2012-0904 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0904.

VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file.


Provide references for further information: Can you share references or external links related to CVE-2012-0904?

{'name': 'vlcmediaplayer-amr-dos(72085)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72085'}, {'name': '20120104 VLC media player v1.1.11 (.amr) Local Crash PoC', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-01/0033.html'}, {'name': '18309', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18309'}, {'name': 'oval:org.mitre.oval:def:14327', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14327'}, {'name': '51255', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51255'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0904?


Explain the CVE ID: What does the identifier CVE-2012-0905 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0905.

SQL injection vulnerability in deV!L'z Clanportal (DZCP) Gamebase addon allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a detail action to index.php.


Provide references for further information: Can you share references or external links related to CVE-2012-0905?

{'name': '18385', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18385'}, {'name': 'clanportal-index-sql-injection(72452)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72452'}, {'name': '47563', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47563'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0905?


Explain the CVE ID: What does the identifier CVE-2012-0906 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0906.

SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal (DZCP) 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a showkat action to index.php.


Provide references for further information: Can you share references or external links related to CVE-2012-0906?

{'name': 'clanportal-id-sql-injection(72453)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72453'}, {'name': '18386', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18386'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0906?


Explain the CVE ID: What does the identifier CVE-2012-0907 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0907.

Directory traversal vulnerability in the web player in NeoAxis NeoAxis web player 1.4 and earlier allows user-assisted remote attackers to write arbitrary files via a .. (dot dot) in a filename in the neoaxis_web_application_win32.zip ZIP archive.


Provide references for further information: Can you share references or external links related to CVE-2012-0907?

{'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/neoaxis_1-adv.txt'}, {'name': '78311', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78311'}, {'name': 'neoaxis-neoaxis-directory-traversal(72427)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72427'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0907?


Explain the CVE ID: What does the identifier CVE-2012-0908 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0908.

Cross-site scripting (XSS) vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the link_href parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0908?

{'name': 'simplesamlphp-nocookie-logout-xss(72313)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72313'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/simplesamlphp/issues/detail?id=468'}, {'name': '78255', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78255'}, {'name': '[oss-security] 20120120 Re: CVE request: simpleSAMLphp 1.8.2 cross site scripting', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/01/20/20'}, {'name': '51372', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51372'}, {'name': '47491', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47491'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0908?


Explain the CVE ID: What does the identifier CVE-2012-0909 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0909.

Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to email verification.  NOTE: Some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2012-0909?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.horde.org/apps/webmail/docs/CHANGES'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.horde.org/apps/webmail/docs/RELEASE_NOTES'}, {'name': '51586', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51586'}, {'name': '[oss-security] 20120121 Re: Re: CVE Request -- Horde IMP -- Multiple XSS flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/01/22/2'}, {'name': '47592', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47592'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0909?


Explain the CVE ID: What does the identifier CVE-2012-0911 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0911.

TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.php or (b) tiki-print_pages.php; or (4) sendpages, (5) sendstructures, or (6) sendarticles parameter to tiki-send_objects.php, which is not properly handled when processed by the unserialize function.


Provide references for further information: Can you share references or external links related to CVE-2012-0911?

{'name': '19630', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/19630'}, {'name': '19573', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/19573'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://info.tiki.org/article190-Tiki-Wiki-CMS-Groupware-Updates-Tiki-6-7-LTS'}, {'name': '54298', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/54298'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.tiki.org/item4109'}, {'name': '83534', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/83534'}, {'name': '20120704 [CVE-2012-0911] Tiki Wiki CMS Groupware <= 8.3 "unserialize()" PHP Code Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-07/0020.html'}, {'name': 'tikiwiki-unserialize-code-exec(76758)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/76758'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://info.tiki.org/article191-Tiki-Releases-8-4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0911?


Explain the CVE ID: What does the identifier CVE-2012-0912 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0912.

SQL injection vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-0912?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.stone-ware.com/swql.jsp?kb=d1960'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0912?


Explain the CVE ID: What does the identifier CVE-2012-0913 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0913.

SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL commands via the passw parameter.  NOTE: Some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2012-0913?

{'name': '78444', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78444'}, {'name': '18394', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18394'}, {'name': '47660', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47660'}, {'name': '51589', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51589'}, {'name': 'ictimeattendance-passw-sql-injection(72569)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72569'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0913?


Explain the CVE ID: What does the identifier CVE-2012-0914 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0914.

Cross-site scripting (XSS) vulnerability in display_renderers/panels_renderer_editor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 for Drupal allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the Region title.


Provide references for further information: Can you share references or external links related to CVE-2012-0914?

{'name': '47649', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47649'}, {'name': '51568', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51568'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1409436'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/panels.git/commit/d844942'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1409446'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/panels.git/commit/2066d59'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.madirish.net/content/drupal-panels-6x-39-xss-vulnerability'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1409448'}, {'name': 'drupal-panels-unspecified-xss(72549)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72549'}, {'name': '78367', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78367'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0914?


Explain the CVE ID: What does the identifier CVE-2012-0915 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0915.

Integer signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via crafted dimensions of a skin file, leading to a heap-based buffer overflow, as demonstrated using a BMP image.


Provide references for further information: Can you share references or external links related to CVE-2012-0915?

{'name': '51585', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51585'}, {'name': '47314', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47314'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0915?


Explain the CVE ID: What does the identifier CVE-2012-0916 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0916.

Heap-based buffer overflow in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via a crafted image in a chat message, as demonstrated using a PNG file.


Provide references for further information: Can you share references or external links related to CVE-2012-0916?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0916?


Explain the CVE ID: What does the identifier CVE-2012-0917 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0917.

Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Analyzer 02-01, 02-51 through 02-51-01, and 02-53 through 02-53-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-0917?

{'name': '47467', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47467'}, {'name': '78221', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78221'}, {'name': '51340', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51340'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-001/index.html'}, {'name': 'hitachi-it-unspecified-xss(72248)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72248'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0917?


Explain the CVE ID: What does the identifier CVE-2012-0918 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0918.

Unspecified vulnerability in Hitachi COBOL2002 Net Developer, Net Server Suite, and Net Client Suite 01-00, 01-01 through 01-01-/D, 01-02 through 01-02-/F, 01-03 through 01-03-/F, 02-00 through 02-00-/D, 02-01 through 02-01-/C, and possibly other versions before 02-01-/D allows remote attackers to execute arbitrary code via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-0918?

{'name': 'hitachi-cobol2002-unspec-code-exec(72558)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72558'}, {'name': '47643', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47643'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-002/index.html'}, {'name': '47612', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47612'}, {'name': '51580', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51580'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0918?


Explain the CVE ID: What does the identifier CVE-2012-0919 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0919.

Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 through 03-00-04, and possibly other versions before 03-00-06, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-0919?

{'name': '47490', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47490'}, {'name': '51340', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51340'}, {'name': '78215', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78215'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-001/index.html'}, {'name': 'hitachi-it-unspecified-xss(72248)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72248'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0919?


Explain the CVE ID: What does the identifier CVE-2012-0920 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0920.

Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels concurrency."


Provide references for further information: Can you share references or external links related to CVE-2012-0920?

{'name': 'dropbear-code-execution(73444)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73444'}, {'name': '48147', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48147'}, {'name': 'DSA-2456', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2456'}, {'name': '79590', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79590'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://matt.ucc.asn.au/dropbear/CHANGES'}, {'name': '52159', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52159'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://secure.ucc.asn.au/hg/dropbear/rev/818108bf7749'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.mantor.org/~northox/misc/CVE-2012-0920.html'}, {'name': '48929', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48929'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0920?


Explain the CVE ID: What does the identifier CVE-2012-0922 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0922.

rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.


Provide references for further information: Can you share references or external links related to CVE-2012-0922?

{'name': '47896', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47896'}, {'name': 'realplayer-rmff-code-execution(73018)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73018'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/realplayer/security/02062012_player/en/'}, {'name': '78911', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78911'}, {'name': '51883', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51883'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0922?


Explain the CVE ID: What does the identifier CVE-2012-0923 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0923.

The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video stream.


Provide references for further information: Can you share references or external links related to CVE-2012-0923?

{'name': '47896', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47896'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/realplayer/security/02062012_player/en/'}, {'name': '78912', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78912'}, {'name': '51884', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51884'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0923?


Explain the CVE ID: What does the identifier CVE-2012-0924 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0924.

RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a VIDOBJ_START_CODE code in a header within a video stream.


Provide references for further information: Can you share references or external links related to CVE-2012-0924?

{'name': '47896', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47896'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/realplayer/security/02062012_player/en/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0924?


Explain the CVE ID: What does the identifier CVE-2012-0925 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0925.

Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream.


Provide references for further information: Can you share references or external links related to CVE-2012-0925?

{'name': '47896', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47896'}, {'name': 'realplayer-rv40-code-exec(73021)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73021'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/realplayer/security/02062012_player/en/'}, {'name': '51887', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51887'}, {'name': '78914', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78914'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0925?


Explain the CVE ID: What does the identifier CVE-2012-0926 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0926.

The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to execute arbitrary code via a crafted RV10 RealVideo video stream.


Provide references for further information: Can you share references or external links related to CVE-2012-0926?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0926?


Explain the CVE ID: What does the identifier CVE-2012-0927 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0927.

Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving the coded_frame_size value in a RealAudio audio stream.


Provide references for further information: Can you share references or external links related to CVE-2012-0927?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0927?


Explain the CVE ID: What does the identifier CVE-2012-0928 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0928.

The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode samples, which allows remote attackers to execute arbitrary code via a crafted ATRAC audio file.


Provide references for further information: Can you share references or external links related to CVE-2012-0928?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/realplayer/security/02062012_player/en/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0928?


Explain the CVE ID: What does the identifier CVE-2012-0929 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0929.

Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the (1) FTP server or (2) HTTP server.


Provide references for further information: Can you share references or external links related to CVE-2012-0929?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf'}, {'name': '51605', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51605'}, {'name': '47723', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47723'}, {'name': 'schneider-modicon-http-dos(72588)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72588'}, {'name': 'schneider-modicon-ftp-dos(72589)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72589'}, {'tags': ['x_refsource_MISC'], 'url': 'https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0929?


Explain the CVE ID: What does the identifier CVE-2012-0930 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0930.

Cross-site scripting (XSS) vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-0930?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf'}, {'name': '51605', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51605'}, {'name': '47723', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47723'}, {'name': 'schneider-modicon-unspec-xss(72590)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72590'}, {'tags': ['x_refsource_MISC'], 'url': 'https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0930?


Explain the CVE ID: What does the identifier CVE-2012-0931 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0931.

Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-0931?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf'}, {'name': '51605', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51605'}, {'name': '47723', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47723'}, {'name': 'schneider-modicon-unity-dos(72586)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72586'}, {'tags': ['x_refsource_MISC'], 'url': 'https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0931?


Explain the CVE ID: What does the identifier CVE-2012-0932 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0932.

Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0932?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/108887/leadcapturepagesystem-xss.txt'}, {'name': 'leadcapture-login-xss(72623)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72623'}, {'name': '47702', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47702'}, {'name': '78455', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78455'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0932?


Explain the CVE ID: What does the identifier CVE-2012-0933 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0933.

Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin_colors.asp, (2) admin_config.asp, and (3) admin_cat_add.asp in admin/.


Provide references for further information: Can you share references or external links related to CVE-2012-0933?

{'name': '47705', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47705'}, {'name': '78458', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78458'}, {'name': 'acidcatcms-multiple-xss(72624)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72624'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/108869/acidcat-xss.txt'}, {'name': '51608', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51608'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0933?


Explain the CVE ID: What does the identifier CVE-2012-0934 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0934.

PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0934?

{'tags': ['x_refsource_MISC'], 'url': 'http://spareclockcycles.org/2011/09/18/exploitring-the-wordpress-extension-repos/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://plugins.trac.wordpress.org/changeset/492167/theme-tuner#file2'}, {'name': '47722', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47722'}, {'name': 'themetuner-savetag-file-include(72626)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72626'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/extend/plugins/theme-tuner/changelog/'}, {'name': '51636', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51636'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0934?


Explain the CVE ID: What does the identifier CVE-2012-0935 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0935.

SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands via the PageID parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0935?

{'name': 'aryadad-default-sql-injection(72639)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72639'}, {'name': '51627', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51627'}, {'name': '18405', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18405'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0935?


Explain the CVE ID: What does the identifier CVE-2012-0936 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0936.

Cross-site scripting (XSS) vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to login.


Provide references for further information: Can you share references or external links related to CVE-2012-0936?

{'name': '78454', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78454'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://issues.opennms.org/browse/NMS-5128?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel#issue-tabs'}, {'name': '51632', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51632'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://issues.opennms.org/browse/NMS/fixforversion/10824#atl_token=BCL8-RCDX-MB62-2EZT%7C38eaf469042162355c28f5393587690a8388d556%7Clout&selectedTab=com.atlassian.jira.plugin.system.project%3Aversion-summary-panel'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://fisheye.opennms.org/browse/opennms/features/springframework-security/src/main/java/org/opennms/web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java?r2=d2ce15470cb6c87c115c918eb86ef147486a9166&r1=80b80e110e4bce568fc2c6c0a15a'}, {'name': '47646', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47646'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://issues.opennms.org/browse/NMS/fixforversion/10825'}, {'name': 'opennms-username-xss(72625)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72625'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0936?


Explain the CVE ID: What does the identifier CVE-2012-0937 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0937.

wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which allows remote attackers to use WordPress as a proxy for brute-force attacks or denial of service attacks via the dbhost parameter, a different vulnerability than CVE-2011-4898.  NOTE: the vendor disputes the significance of this issue because an incomplete WordPress installation might be present on the network for only a short time


Provide references for further information: Can you share references or external links related to CVE-2012-0937?

{'name': '18417', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18417'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt'}, {'name': '20120124 TWSL2012-002: Multiple Vulnerabilities in WordPress', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-01/0150.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0937?


Explain the CVE ID: What does the identifier CVE-2012-0938 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0938.

Multiple SQL injection vulnerabilities in TestLink 1.9.3, 1.8.5b, and earlier allow remote authenticated users with certain permissions to execute arbitrary SQL commands via the root_node parameter in the display_children function to (1) getrequirementnodes.php or (2) gettprojectnodes.php in lib/ajax/; the (3) cfield_id parameter in an edit action to lib/cfields/cfieldsEdit.php; the (4) id parameter in an edit action or (5) plan_id parameter in a create action to lib/plan/planMilestonesEdit.php; or the req_spec_id parameter to (6) reqImport.php or (7) in a create action to reqEdit.php in lib/requirements/.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2012-0938?

{'name': '79451', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/79451'}, {'name': '79453', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/79453'}, {'name': '20120220 SQL Injection Vulnerabilities in TestLink', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0104.html'}, {'name': '48054', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48054'}, {'name': '79454', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/79454'}, {'name': '79452', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/79452'}, {'name': 'testlink-multiple-scripts-sql-injection(73327)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73327'}, {'name': '79450', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/79450'}, {'name': '52086', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52086'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0938?


Explain the CVE ID: What does the identifier CVE-2012-0939 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0939.

Multiple SQL injection vulnerabilities in TestLink 1.8.5b and earlier allow remote authenticated users with the Requirement view permission to execute arbitrary SQL commands via the req_spec_id parameter to (1) reqSpecAnalyse.php, (2) reqSpecPrint.php, or (3) reqSpecView.php in requirements/.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2012-0939?

{'name': '20120220 SQL Injection Vulnerabilities in TestLink', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0104.html'}, {'name': '48054', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48054'}, {'name': '79447', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/79447'}, {'name': '79448', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/79448'}, {'name': 'testlink-multiple-parameters-sql-injection(73389)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73389'}, {'name': '52086', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52086'}, {'name': '79449', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/79449'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0939?


Explain the CVE ID: What does the identifier CVE-2012-0941 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0941.

Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) Endpoint Monitor, (2) Dialup List, or (3) Log&Report Display modules, or the fields_sorted_opt parameter to (4) user/auth/list or (5) endpointcompliance/app_detect/predefined_sig_list.


Provide references for further information: Can you share references or external links related to CVE-2012-0941?

{'name': '1026594', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'https://securitytracker.com/id/1026594'}, {'name': 'fortigateutm-fieldssortedopt-xss(72761)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72761'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109168/VL-144.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.vulnerability-lab.com/get_content.php?id=144'}, {'name': '51708', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51708'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://fortiguard.com/psirt/FG-IR-012-001'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0941?


Explain the CVE ID: What does the identifier CVE-2012-0942 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0942.

Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to execute arbitrary code via crafted authentication credentials.


Provide references for further information: Can you share references or external links related to CVE-2012-0942?

{'name': '52929', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52929'}, {'name': '1026898', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026898'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0942?


Explain the CVE ID: What does the identifier CVE-2012-0943 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0943.

debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp.  NOTE: this identifier was SPLIT per ADT1/ADT2 due to different codebases and affected versions. CVE-2012-6648 has been assigned for the gdm-guest-session issue.


Provide references for further information: Can you share references or external links related to CVE-2012-0943?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ubuntu/%2Bsource/lightdm/%2Bbug/953044'}, {'name': 'USN-1399-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1399-2'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpadlibrarian.net/96471251/lightdm.secure-cleanup.debdiff'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0943?


Explain the CVE ID: What does the identifier CVE-2012-0944 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0944.

Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via a man-in-the-middle attack.


Provide references for further information: Can you share references or external links related to CVE-2012-0944?

{'name': '52855', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52855'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ubuntu/%2Bsource/aptdaemon/%2Bbug/959131'}, {'name': '80887', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80887'}, {'name': 'USN-1414-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://ubuntu.com/usn/usn-1414-1'}, {'name': 'aptdaemon-transaction-security-bypass(74553)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74553'}, {'name': '48688', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48688'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0944?


Explain the CVE ID: What does the identifier CVE-2012-0945 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0945.

whoopsie-daisy before 0.1.26: Root user can remove arbitrary files


Provide references for further information: Can you share references or external links related to CVE-2012-0945?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/whoopsie-daisy/+bug/973687'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0945?


Explain the CVE ID: What does the identifier CVE-2012-0946 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0946.

The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges.


Provide references for further information: Can you share references or external links related to CVE-2012-0946?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/3109'}, {'name': '48793', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48793'}, {'name': 'nvidia-graphics-gpu-priv-escalation(74822)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74822'}, {'name': '48650', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48650'}, {'name': 'USN-1420-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-1420-1/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0946?


Explain the CVE ID: What does the identifier CVE-2012-0947 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0947.

Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VQA media file in which the image size is not a multiple of the block size.


Provide references for further information: Can you share references or external links related to CVE-2012-0947?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/libav/+bug/980963'}, {'name': 'USN-1479-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1479-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=58b2e0f0f2fc96c1158e04f8aba95cbe6157a1a3'}, {'name': '49089', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49089'}, {'name': 'DSA-2471', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2471'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://libav.org/'}, {'name': '53389', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53389'}, {'name': '[oss-security] 20120503 Security issue in libav/ffmpeg', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/05/03/4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0947?


Explain the CVE ID: What does the identifier CVE-2012-0948 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0948.

DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone_system_state.tar.gz and (2) system_state.tar.gz, which allows local users to obtain repository credentials.


Provide references for further information: Can you share references or external links related to CVE-2012-0948?

{'name': '82019', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/82019'}, {'name': 'USN-1443-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1443-1'}, {'name': 'update-manager-info-disclosure(75727)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/75727'}, {'name': '53604', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53604'}, {'name': '49230', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49230'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://launchpadlibrarian.net/105380733/update-manager_1%3A0.156.14.3_1%3A0.156.14.4.diff.gz'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0948?


Explain the CVE ID: What does the identifier CVE-2012-0949 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0949.

The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain system state archive files when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report.