Provide references for further information: Can you share references or external links related to CVE-2012-0949?

{'name': 'update-manager-archives-info-disclosure(75728)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/75728'}, {'name': 'USN-1443-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1443-1'}, {'name': '49230', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49230'}, {'name': '82020', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/82020'}, {'name': '53605', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53605'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0949?


Explain the CVE ID: What does the identifier CVE-2012-0950 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0950.

The Apport hook (DistUpgradeApport.py) in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uploads the /var/log/dist-upgrade directory when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0949.


Provide references for further information: Can you share references or external links related to CVE-2012-0950?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ubuntu/%2Bsource/update-manager/%2Bbug/1004503'}, {'name': 'USN-1443-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1443-2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0950?


Explain the CVE ID: What does the identifier CVE-2012-0951 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0951.

A Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown function in the file proc/driver/nvidia/registry.


Provide references for further information: Can you share references or external links related to CVE-2012-0951?

{'tags': ['x_refsource_MISC'], 'url': 'http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-0951.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.10060'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0951?


Explain the CVE ID: What does the identifier CVE-2012-0952 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0952.

A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which may allow an attacker to overflow 49 bytes. This issue was fixed in version 295.53.


Provide references for further information: Can you share references or external links related to CVE-2012-0952?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/979373'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0952?


Explain the CVE ID: What does the identifier CVE-2012-0953 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0953.

A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53.


Provide references for further information: Can you share references or external links related to CVE-2012-0953?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0953?


Explain the CVE ID: What does the identifier CVE-2012-0954 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0954.

APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install altered packages via a man-in-the-middle (MITM) attack.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3587.


Provide references for further information: Can you share references or external links related to CVE-2012-0954?

{'name': '20120614 Using second gpg keyring may be misleading?', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2012/Jun/271'}, {'name': '54046', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/54046'}, {'name': '20120612 Strange gpg key shadowing', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2012/Jun/267'}, {'name': 'USN-1477-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1477-1'}, {'name': 'USN-1475-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1475-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013128'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013639'}, {'name': '20120615 ubuntu apt-key (part 3)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2012/Jun/289'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013681'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0954?


Explain the CVE ID: What does the identifier CVE-2012-0955 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0955.

software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS certificates under python2 and only checked certificates under python3 if a valid certificate bundle was provided. Fixed in software-properties version 0.92.


Provide references for further information: Can you share references or external links related to CVE-2012-0955?

{'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://launchpad.net/bugs/1036839'}, {'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://code.launchpad.net/~cyphermox/software-properties/lp1036839/+merge/119753'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0955?


Explain the CVE ID: What does the identifier CVE-2012-0956 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0956.

ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the <a> tag of a Twitter feed.


Provide references for further information: Can you share references or external links related to CVE-2012-0956?

{'name': 'USN-1561-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1561-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ubuntu/%2Bsource/ubiquity-slideshow-ubuntu/%2Bbug/991982'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0956?


Explain the CVE ID: What does the identifier CVE-2012-0957 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0957.

The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.


Provide references for further information: Can you share references or external links related to CVE-2012-0957?

{'name': 'USN-1644-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1644-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.16'}, {'name': 'USN-1645-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1645-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2702b1526c7278c4d65d78de209a465d4de2885e'}, {'name': 'USN-1647-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1647-1'}, {'name': 'USN-1652-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1652-1'}, {'name': 'USN-1646-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1646-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=862877'}, {'name': 'FEDORA-2012-17479', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091110.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/2702b1526c7278c4d65d78de209a465d4de2885e'}, {'name': 'USN-1648-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1648-1'}, {'name': 'USN-1649-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1649-1'}, {'name': '51409', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51409'}, {'name': '[oss-security] 20121009 Linux kernel stack memory content leak via UNAME26', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/10/09/4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0957?


Explain the CVE ID: What does the identifier CVE-2012-0958 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0958.

content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage.


Provide references for further information: Can you share references or external links related to CVE-2012-0958?

{'name': 'USN-1665-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1665-1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.launchpad.net/ubuntu/%2Bsource/unity-firefox-extension/%2Bbug/1069817'}, {'name': '56930', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/56930'}, {'name': '88438', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/88438'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bazaar.launchpad.net/~webapps/unity-firefox-extension/trunk/revision/331'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0958?


Explain the CVE ID: What does the identifier CVE-2012-0959 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0959.

Remote Login Service (RLS) 1.0.0 does not properly clear account information when switching users, which might allow physically proximate users to obtain login credentials.


Provide references for further information: Can you share references or external links related to CVE-2012-0959?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/remote-login-service/%2Bbug/1070896'}, {'name': 'USN-1624-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1624-1'}, {'name': 'remote-login-info-disc(80278)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/80278'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0959?


Explain the CVE ID: What does the identifier CVE-2012-0960 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0960.

Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and possibly execute arbitrary code via a crafted request.


Provide references for further information: Can you share references or external links related to CVE-2012-0960?

{'name': '56650', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/56650'}, {'name': 'unityfirefoxextension-callback-dos(80319)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/80319'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/unity-firefox-extension/%2Bbug/1076350'}, {'name': 'USN-1639-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1639-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0960?


Explain the CVE ID: What does the identifier CVE-2012-0961 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0961.

Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.9.7.5ubuntu5.2, as used in Ubuntu, uses world-readable permissions for /var/log/apt/term.log, which allows local users to obtain sensitive shell information by reading the log file.


Provide references for further information: Can you share references or external links related to CVE-2012-0961?

{'name': '56917', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/56917'}, {'name': '51568', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51568'}, {'name': 'USN-1662-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1662-1'}, {'name': '88380', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/88380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0961?


Explain the CVE ID: What does the identifier CVE-2012-0962 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0962.

Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle (MITM) attack.


Provide references for further information: Can you share references or external links related to CVE-2012-0962?

{'name': '51627', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51627'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/software-center-agent/%2Bbug/1052789'}, {'name': 'USN-1666-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1666-1'}, {'name': '1027891', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1027891'}, {'name': '56959', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/56959'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0962?


Explain the CVE ID: What does the identifier CVE-2012-0963 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0963.


Provide references for further information: Can you share references or external links related to CVE-2012-0963?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0963?


Explain the CVE ID: What does the identifier CVE-2012-0964 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0964.


Provide references for further information: Can you share references or external links related to CVE-2012-0964?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0964?


Explain the CVE ID: What does the identifier CVE-2012-0965 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0965.


Provide references for further information: Can you share references or external links related to CVE-2012-0965?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0965?


Explain the CVE ID: What does the identifier CVE-2012-0966 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0966.


Provide references for further information: Can you share references or external links related to CVE-2012-0966?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0966?


Explain the CVE ID: What does the identifier CVE-2012-0967 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0967.


Provide references for further information: Can you share references or external links related to CVE-2012-0967?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0967?


Explain the CVE ID: What does the identifier CVE-2012-0968 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0968.


Provide references for further information: Can you share references or external links related to CVE-2012-0968?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0968?


Explain the CVE ID: What does the identifier CVE-2012-0969 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0969.


Provide references for further information: Can you share references or external links related to CVE-2012-0969?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0969?


Explain the CVE ID: What does the identifier CVE-2012-0970 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0970.


Provide references for further information: Can you share references or external links related to CVE-2012-0970?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0970?


Explain the CVE ID: What does the identifier CVE-2012-0971 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0971.


Provide references for further information: Can you share references or external links related to CVE-2012-0971?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0971?


Explain the CVE ID: What does the identifier CVE-2012-0972 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0972.


Provide references for further information: Can you share references or external links related to CVE-2012-0972?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0972?


Explain the CVE ID: What does the identifier CVE-2012-0973 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0973.

Multiple SQL injection vulnerabilities in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the sCategory parameter to index.php, which is not properly handled by the (1) osc_search_category_id function in oc-includes/osclass/helpers/hSearch.php and (2) findBySlug function oc-includes/osclass/model/Category.php.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2012-0973?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f#diff-73'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://osclass.org/2012/01/16/osclass-2-3-5/'}, {'name': '51662', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51662'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_osclass.html'}, {'name': '47697', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47697'}, {'name': '20120125 Multiple vulnerabilities in OSclass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-01/0157.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0973?


Explain the CVE ID: What does the identifier CVE-2012-0974 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0974.

Multiple cross-site scripting (XSS) vulnerabilities in the getParam function in oc-includes/osclass/core/Params.php in OSClass before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) sCity, (2) sPattern, (3) sPriceMax, and (4) sPriceMin parameters in a search action to index.php.


Provide references for further information: Can you share references or external links related to CVE-2012-0974?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0974?


Explain the CVE ID: What does the identifier CVE-2012-0975 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0975.

Cross-site scripting (XSS) vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and earlier allows remote attackers to inject arbitrary web script or HTML via the showseries parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0975?

{'name': 'dpi-misc-xss(72823)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72823'}, {'name': '51734', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51734'}, {'name': '47786', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47786'}, {'name': '78660', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78660'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/view/109240/dpi10-xss.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0975?


Explain the CVE ID: What does the identifier CVE-2012-0976 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0976.

Cross-site scripting (XSS) vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with Content Authors privileges to inject arbitrary web script or HTML via the Title parameter.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2012-0976?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/silverstripe/sapphire/commit/475e077'}, {'name': '78677', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78677'}, {'name': '51761', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51761'}, {'name': '47812', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47812'}, {'name': '[oss-security] 20120430 Re: CVE-request: SilverStripe before 2.4.4', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/30/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/silverstripe/sapphire/commit/5fe7091'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.13'}, {'name': 'silverstripe-editform-xss(72820)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72820'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/view/109210/silverstripecmspage-xss.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/silverstripe/sapphire/commit/252e187'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0976?


Explain the CVE ID: What does the identifier CVE-2012-0977 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0977.

Stack-based buffer overflow in jp2_x.dll in LuraWave JP2 ActiveX Control 2.1.5.5 and other versions before 2.1.5.11 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.


Provide references for further information: Can you share references or external links related to CVE-2012-0977?

{'name': '51744', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51744'}, {'name': 'lurawave-jp2-qcd-bo(72807)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72807'}, {'name': '78661', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78661'}, {'name': '47350', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47350'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0977?


Explain the CVE ID: What does the identifier CVE-2012-0978 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0978.

Stack-based buffer overflow in npjp2.dll in LuraWave JP2 Browser Plug-In 1.1.1.11 and other versions before 2.1.1.11 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.


Provide references for further information: Can you share references or external links related to CVE-2012-0978?

{'name': '51732', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51732'}, {'name': 'lurawave-qcd-bo(72806)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72806'}, {'name': '78662', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78662'}, {'name': '47831', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47831'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0978?


Explain the CVE ID: What does the identifier CVE-2012-0979 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0979.

Cross-site scripting (XSS) vulnerability in TWiki allows remote attackers to inject arbitrary web script or HTML via the organization field in a profile, involving (1) registration or (2) editing of the user.


Provide references for further information: Can you share references or external links related to CVE-2012-0979?

{'name': '47784', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47784'}, {'tags': ['x_refsource_MISC'], 'url': 'http://st2tea.blogspot.com/2012/01/cross-site-scripting-twiki.html'}, {'name': '1026604', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026604'}, {'name': '51731', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51731'}, {'name': 'twiki-organization-xss(72821)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72821'}, {'name': '78664', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78664'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109246/twiki-xss.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0979?


Explain the CVE ID: What does the identifier CVE-2012-0980 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0980.

SQL injection vulnerability in download.php in phux Download Manager allows remote attackers to execute arbitrary SQL commands via the file parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0980?

{'name': '51725', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51725'}, {'name': '18432', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18432'}, {'name': 'phux-download-sql-injection(72826)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72826'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0980?


Explain the CVE ID: What does the identifier CVE-2012-0981 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0981.

Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image files via a .. (dot dot) in the r parameter to index.php.  NOTE: Some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2012-0981?

{'name': '47802', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47802'}, {'name': '18435', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18435'}, {'name': 'phpshowtime-index-directory-traversal(72824)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72824'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0981?


Explain the CVE ID: What does the identifier CVE-2012-0982 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0982.

SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the price_from parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0982?

{'name': '18441', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18441'}, {'name': '51773', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51773'}, {'name': 'agentzone-search-sql-injection(72879)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72879'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0982?


Explain the CVE ID: What does the identifier CVE-2012-0983 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0983.

SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.


Provide references for further information: Can you share references or external links related to CVE-2012-0983?

{'name': 'ezalbum-index-sql-injection(72809)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72809'}, {'name': '18438', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18438'}, {'name': '51781', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51781'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0983?


Explain the CVE ID: What does the identifier CVE-2012-0984 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0984.

Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via the (1) to_userid parameter to modules/pm/pmlite.php or the (2) current_file, (3) imgcat_id, or (4) target parameter to class/xoopseditor/tinymce/tinymce/jscripts/tiny_mce/plugins/xoopsimagemanager/xoopsimagebrowser.php.


Provide references for further information: Can you share references or external links related to CVE-2012-0984?

{'name': '81212', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/81212'}, {'name': '18753', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18753'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.com/advisory/multiple_vulnerabilities_in_xoops.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/111958/XOOPS-2.5.4-Cross-Site-Scripting.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xoops.org/modules/news/article.php?storyid=6284'}, {'name': '20120418 Multiple XSS vulnerabilities in XOOPS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-04/0128.html'}, {'name': '48887', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48887'}, {'name': 'xoops-pmlite-xoopsimagebrowser-xss(75024)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/75024'}, {'name': '81213', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/81213'}, {'name': '53143', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53143'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0984?


Explain the CVE ID: What does the identifier CVE-2012-0985 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0985.

Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.00_64, 1.0.1, 2.0, and 3.0; SmartWi Connection Utility 4.7, 4.7.4, 4.8, 4.9, 4.10, and 4.11; and VAIO Easy Connect software 1.0.0 and 1.1.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the second argument of the (1) SetTmpProfileOption or (2) ConnectToNetwork method.


Provide references for further information: Can you share references or external links related to CVE-2012-0985?

{'name': '20120530 2 Buffer Overflows in Wireless Manager Sony VAIO', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-05/0147.html'}, {'name': '18958', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18958'}, {'name': '49340', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49340'}, {'name': '82401', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/82401'}, {'name': '53735', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53735'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://esupport.sony.com/US/perl/support-info.pl?template_id=1&info_id=946'}, {'name': 'vaio-activex-bo(75978)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/75978'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0985?


Explain the CVE ID: What does the identifier CVE-2012-0986 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0986.

Multiple cross-site scripting (XSS) vulnerabilities in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) notifications.php, (2) modules/system/admin/images/browser.php, and (3) modules/content/admin/content.php.


Provide references for further information: Can you share references or external links related to CVE-2012-0986?

{'name': '78140', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/78140'}, {'name': '51268', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51268'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.com/advisory/HTB23064'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://community.impresscms.org/modules/smartsection/item.php?itemid=579'}, {'name': '78142', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/78142'}, {'name': '47448', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47448'}, {'name': 'impresscms-multiple-xss(72145)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72145'}, {'name': '20120104 Multiple vulnerabilities in ImpressCMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-01/0022.html'}, {'name': '78141', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/78141'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0986?


Explain the CVE ID: What does the identifier CVE-2012-0987 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0987.

Directory traversal vulnerability in edituser.php in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the icmsConfigPlugins[sanitizer_plugins][] parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0987?

{'name': 'impresscms-edituser-file-include(72146)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72146'}, {'name': '51268', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51268'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.com/advisory/HTB23064'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://community.impresscms.org/modules/smartsection/item.php?itemid=579'}, {'name': '78143', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/78143'}, {'name': '47448', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47448'}, {'name': '20120104 Multiple vulnerabilities in ImpressCMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-01/0022.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0987?


Explain the CVE ID: What does the identifier CVE-2012-0988 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0988.

Multiple cross-site scripting (XSS) vulnerabilities in config/dmsDefaults.php in KnowledgeTree 3.7.0.2 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) login.php, (2) admin.php, or (3) preferences.php.


Provide references for further information: Can you share references or external links related to CVE-2012-0988?

{'name': '51373', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51373'}, {'name': '20120111 Multiple XSS in KnowledgeTree Community Edition', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-01/0070.html'}, {'name': 'knowledgetree-multiple-xss(72308)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72308'}, {'name': '47531', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47531'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.knowledgetree.org/Security_advisory:_URL_Manipulation'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_knowledgetree_community_edition.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0988?


Explain the CVE ID: What does the identifier CVE-2012-0989 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0989.

Cross-site scripting (XSS) vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.


Provide references for further information: Can you share references or external links related to CVE-2012-0989?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/xss_in_oneorzero_aims.html'}, {'name': 'oneorzeroaims-index-xss(72456)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72456'}, {'name': '51549', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51549'}, {'name': '20120118 XSS in OneOrZero AIMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-01/0117.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0989?


Explain the CVE ID: What does the identifier CVE-2012-0990 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0990.

Cross-site request forgery (CSRF) vulnerability in admin/settings/update in DClassifieds 0.1 final allows remote attackers to hijack the authentication of administrators for requests that modify account settings such as the administrator password or email via certain Settings[] parameters.


Provide references for further information: Can you share references or external links related to CVE-2012-0990?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/projects/dclassifieds/files/csrf_fix_120105.rar/download'}, {'name': '47691', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47691'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23067'}, {'name': '78557', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/78557'}, {'name': '51671', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51671'}, {'name': 'dclassifieds-settings-csrf(72733)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72733'}, {'name': '20120125 CSRF (Cross-Site Request Forgery) in DClassifieds', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-01/0158.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0990?


Explain the CVE ID: What does the identifier CVE-2012-0991 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0991.

Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname parameter to (1) contrib/acog/print_form.php; or (2) load_form.php, (3) view_form.php, or (4) trend_form.php in interface/patient_file/encounter.


Provide references for further information: Can you share references or external links related to CVE-2012-0991?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23069'}, {'name': '78727', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78727'}, {'name': '51788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51788'}, {'name': '20120201 Multiple vulnerabilities in OpenEMR', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0004.html'}, {'name': '47781', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47781'}, {'name': '78729', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78729'}, {'name': '78728', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78728'}, {'name': 'openemr-formname-file-include(72914)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72914'}, {'name': '78730', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78730'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.open-emr.org/wiki/index.php/OpenEMR_Patches'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0991?


Explain the CVE ID: What does the identifier CVE-2012-0992 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0992.

interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the file parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0992?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23069'}, {'name': '78731', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78731'}, {'name': '51788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51788'}, {'name': '20120201 Multiple vulnerabilities in OpenEMR', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0004.html'}, {'name': '47781', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47781'}, {'name': 'openemr-faxdispatch-command-execution(72915)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72915'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.open-emr.org/wiki/index.php/OpenEMR_Patches'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0992?


Explain the CVE ID: What does the identifier CVE-2012-0993 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0993.

Eval injection vulnerability in zp-core/zp-extensions/viewer_size_image.php in ZENphoto 1.4.2, when the viewer_size_image plugin is enabled, allows remote attackers to execute arbitrary PHP code via the viewer_size_image_saved cookie.


Provide references for further information: Can you share references or external links related to CVE-2012-0993?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/trac/changeset/8995'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/trac/changeset/8994'}, {'name': '51916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51916'}, {'name': '47875', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47875'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23070'}, {'name': 'zenphoto-viewersizeimage-code-execution(73081)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73081'}, {'name': '20120208 Multiple vulnerabilities in ZENphoto', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/news/zenphoto-1.4.2.1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0993?


Explain the CVE ID: What does the identifier CVE-2012-0994 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0994.

SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0994?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/trac/changeset/8995'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/trac/changeset/8994'}, {'name': '51916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51916'}, {'name': '47875', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47875'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23070'}, {'name': 'zenphoto-albumsort-sql-injection(73082)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73082'}, {'name': '20120208 Multiple vulnerabilities in ZENphoto', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/news/zenphoto-1.4.2.1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0994?


Explain the CVE ID: What does the identifier CVE-2012-0995 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0995.

Multiple cross-site scripting (XSS) vulnerabilities in ZENphoto 1.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter in an external action to zp-core/admin.php, (2) PATH_INTO to an unspecified URL, as demonstrated using /1/, (3) PATH_INFO to zp-core/admin.php, or (4) album parameter to zp-core/admin-edit.php.


Provide references for further information: Can you share references or external links related to CVE-2012-0995?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/trac/changeset/8995'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/trac/changeset/8994'}, {'name': 'zenphoto-multiple-xss(73083)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73083'}, {'name': '51916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51916'}, {'name': '47875', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47875'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23070'}, {'name': '20120208 Multiple vulnerabilities in ZENphoto', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/news/zenphoto-1.4.2.1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0995?


Explain the CVE ID: What does the identifier CVE-2012-0996 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0996.

Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. (dot dot) in the class parameter to (1) index.php or (2) admin/index.php.


Provide references for further information: Can you share references or external links related to CVE-2012-0996?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23071'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0996?


Explain the CVE ID: What does the identifier CVE-2012-0997 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0997.

Cross-site request forgery (CSRF) vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attackers to hijack the authentication of administrators for requests that add new topics via an addTopic action.


Provide references for further information: Can you share references or external links related to CVE-2012-0997?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0997?


Explain the CVE ID: What does the identifier CVE-2012-0998 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0998.

Directory traversal vulnerability in account/preferences.php in LEPTON before 1.1.4 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the language parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0998?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23072'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0998?


Explain the CVE ID: What does the identifier CVE-2012-0999 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0999.

SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary SQL commands via the group_id parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-0999?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23072'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0999?


Explain the CVE ID: What does the identifier CVE-2012-1000 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1000.

Multiple cross-site scripting (XSS) vulnerabilities in LEPTON 1.1.3 and other versions before 1.1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to admins/login/forgot/index.php, or the (2) display_name or (3) email parameter to account/preferences.php.


Provide references for further information: Can you share references or external links related to CVE-2012-1000?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1000?


Explain the CVE ID: What does the identifier CVE-2012-1001 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1001.

Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) content parameter to includes/ajax.php or (2) body parameter to includes/error.php.


Provide references for further information: Can you share references or external links related to CVE-2012-1001?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23073'}, {'tags': ['x_refsource_MISC'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0121.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://chyrp.net/2012/02/02/heres-whats-been-going-on-recently/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/vito/chyrp/commit/f69bd791c37e0b154c0bda16f9759ba19cc77f6c'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/52115'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/52117'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1001?


Explain the CVE ID: What does the identifier CVE-2012-1002 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1002.

SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-1002?

{'name': 'openconf-edit-sql-injection(75399)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/75399'}, {'name': '51927', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51927'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openconf.com/news/#20120202'}, {'name': '18820', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18820'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1002?


Explain the CVE ID: What does the identifier CVE-2012-1003 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1003.

Multiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of service (application crash) via a large integer argument to the (1) Int32Array, (2) Float32Array, (3) Float64Array, (4) Uint32Array, (5) Int16Array, or (6) ArrayBuffer function.  NOTE: the vendor reportedly characterizes this as "a stability issue, not a security issue."


Provide references for further information: Can you share references or external links related to CVE-2012-1003?

{'tags': ['x_refsource_MISC'], 'url': 'http://blog.vulnhunt.com/index.php/2012/02/02/cal-2012-0004-opera-array-integer-overflow/'}, {'name': 'opera-integer-dos(73027)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73027'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1003?


Explain the CVE ID: What does the identifier CVE-2012-1004 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1004.

Multiple cross-site scripting (XSS) vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via the (1) text, (2) FirstName, (3) LastName, (4) OrganisationName, (5) OrganisationUrl, (6) Profession, (7) Country, (8) State, (9) Address, (10) Location, (11) Telephone, (12) VoIP, (13) InstantMessagingIM, (14) Email, (15) HomePage, or (16) Comment parameter.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2012-1004?

{'tags': ['x_refsource_MISC'], 'url': 'http://st2tea.blogspot.com/2012/02/foswiki-cross-site-scripting.html'}, {'name': '47849', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47849'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://foswiki.org/Support/SecurityAlert-CVE-2012-1004'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://foswiki.org/Tasks/Item11501'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://foswiki.org/Tasks/Item11498'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1004?


Explain the CVE ID: What does the identifier CVE-2012-1005 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1005.

Multiple cross-site scripting (XSS) vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog, as demonstrated using (1) Blog/MyFirstBlog.txt or (2) Blog/AboutSomething.txt.


Provide references for further information: Can you share references or external links related to CVE-2012-1005?

{'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/blog/?p=453'}, {'name': 'sphinixsoftware-comment-xss(72913)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72913'}, {'name': '51820', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51820'}, {'name': '47876', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47876'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1005?


Explain the CVE ID: What does the identifier CVE-2012-1006 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1006.

Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to struts2-showcase/person/editPerson.action, or the (3) clientName parameter to struts2-rest-showcase/orders.


Provide references for further information: Can you share references or external links related to CVE-2012-1006?

{'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/blog/?p=450'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/advisories/SecPod_Apache_Struts_Multiple_Parsistant_XSS_Vulns.txt'}, {'name': 'apache-struts-multiple-xss(72888)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72888'}, {'name': '51902', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51902'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1006?


Explain the CVE ID: What does the identifier CVE-2012-1007 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1007.

Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter to struts-examples/upload/upload-submit.do, or the message parameter to (2) struts-cookbook/processSimple.do or (3) struts-cookbook/processDyna.do.


Provide references for further information: Can you share references or external links related to CVE-2012-1007?

{'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/blog/?p=450'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/advisories/SecPod_Apache_Struts_Multiple_Parsistant_XSS_Vulns.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html'}, {'name': 'apache-struts-name-xss(73052)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73052'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html'}, {'name': '51900', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51900'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1007?


Explain the CVE ID: What does the identifier CVE-2012-1008 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1008.

OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SIP INVITE message.


Provide references for further information: Can you share references or external links related to CVE-2012-1008?

{'name': '18453', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18453'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/exploits/SecPod_Exploit_OfficeSIP_Server_DOS.py'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/blog/?p=461'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/advisories/SecPod_Exploit_OfficeSIP_Server_DOS_Vuln.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1008?


Explain the CVE ID: What does the identifier CVE-2012-1009 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1009.

NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of service (daemon crash) via a malformed LPD request.


Provide references for further information: Can you share references or external links related to CVE-2012-1009?

{'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/advisories/SecPod_Exploit_NetSarang_Xlpd_Printer_Daemon_DoS_Vuln.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/blog/?p=457'}, {'name': '51821', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51821'}, {'name': '18454', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18454'}, {'name': 'netsarang-xlpd-dos(72933)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72933'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1009?


Explain the CVE ID: What does the identifier CVE-2012-1010 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1010.

Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.


Provide references for further information: Can you share references or external links related to CVE-2012-1010?

{'name': '18407', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18407'}, {'name': '51615', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51615'}, {'name': 'allwebmenus-actions-file-upload(72640)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72640'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/extend/plugins/allwebmenus-wordpress-menu-plugin/changelog/'}, {'name': '20120122 AllWebMenus < 1.1.9 WordPress Menu Plugin Arbitrary file upload', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-01/0137.html'}, {'name': '47659', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47659'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1010?


Explain the CVE ID: What does the identifier CVE-2012-1011 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1011.

actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a certain value, then uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.


Provide references for further information: Can you share references or external links related to CVE-2012-1011?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1011?


Explain the CVE ID: What does the identifier CVE-2012-1012 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1012.

server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global list privilege.


Provide references for further information: Can you share references or external links related to CVE-2012-1012?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://src.mit.edu/fisheye/changelog/krb5/?cs=25704'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=796438'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=7093'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/krb5-1.10/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1012?


Explain the CVE ID: What does the identifier CVE-2012-1013 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1013.

The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a denial of service (NULL pointer dereference and daemon crash) via a KRB5_KDB_DISALLOW_ALL_TIX create request that lacks a password.


Provide references for further information: Can you share references or external links related to CVE-2012-1013?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=7152'}, {'name': '53784', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53784'}, {'name': 'MDVSA-2012:102', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2012:102'}, {'name': 'RHSA-2012:1131', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-1131.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/krb5-1.10/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=827517'}, {'name': 'openSUSE-SU-2012:0834', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/15083635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/krb5/krb5/commit/c5be6209311d4a8f10fda37d0d3f876c1b33b77b'}, {'name': '[kerberos-announce] 20120531 krb5-1.10.2 is released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mailman.mit.edu/pipermail/kerberos-announce/2012q2/000136.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1013?


Explain the CVE ID: What does the identifier CVE-2012-1014 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1014.

The process_as_req function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x before 1.10.3 does not initialize a certain structure member, which allows remote attackers to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code via a malformed AS-REQ request.


Provide references for further information: Can you share references or external links related to CVE-2012-1014?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2012-001.txt'}, {'name': 'openSUSE-SU-2012:0967', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2012-08/msg00016.html'}, {'name': 'DSA-2518', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2518'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1014?


Explain the CVE ID: What does the identifier CVE-2012-1015 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1015.

The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free, heap memory corruption, and daemon crash) via a crafted AS-REQ request.


Provide references for further information: Can you share references or external links related to CVE-2012-1015?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2012-001.txt'}, {'name': 'RHSA-2012:1131', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-1131.html'}, {'name': 'openSUSE-SU-2012:0967', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2012-08/msg00016.html'}, {'name': 'DSA-2518', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2518'}, {'name': 'MDVSA-2012:120', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2012:120'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1015?


Explain the CVE ID: What does the identifier CVE-2012-1016 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1016.

The pkinit_server_return_padata function in plugins/preauth/pkinit/pkinit_srv.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 attempts to find an agility KDF identifier in inappropriate circumstances, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted Draft 9 request.


Provide references for further information: Can you share references or external links related to CVE-2012-1016?

{'name': '55040', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55040'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/krb5-1.10/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://krbdev.mit.edu/rt/Ticket/Display.html?id=7527'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/krb5/krb5/commit/db64ca25d661a47b996b4e2645998b5d7f0eb52c'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1016?


Explain the CVE ID: What does the identifier CVE-2012-1017 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1017.

Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbitrary SQL commands via the (1) ip_addr[0][1], (2) ip_addr[0][2], or (3) ip_addr[0][9] parameters.


Provide references for further information: Can you share references or external links related to CVE-2012-1017?

{'name': '18465', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18465'}, {'name': '47857', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47857'}, {'name': '51874', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51874'}, {'name': 'base-ipaddr-sql-injection(72998)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72998'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1017?


Explain the CVE ID: What does the identifier CVE-2012-1018 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1018.

Cross-site scripting (XSS) vulnerability in includes/convert.php in D-Mack Media Currency Converter (mod_currencyconverter) module 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the from parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-1018?

{'tags': ['x_refsource_MISC'], 'url': 'http://dl.packetstormsecurity.net/1202-exploits/joomlacurrencyconverter-xss.txt'}, {'name': 'currencyconverter-convert-xss(72917)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72917'}, {'name': '51804', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51804'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1018?


Explain the CVE ID: What does the identifier CVE-2012-1019 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1019.

Multiple cross-site scripting (XSS) vulnerabilities in XWiki Enterprise 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) XWiki.XWikiComments_comment parameter to xwiki/bin/commentadd/Main/WebHome, (2) XWiki.XWikiUsers_0_company parameter when editing a user profile, or (3) projectVersion parameter to xwiki/bin/view/DownloadCode/DownloadFeedback.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2012-1019?

{'name': '47885', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47885'}, {'name': '51867', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51867'}, {'tags': ['x_refsource_MISC'], 'url': 'http://st2tea.blogspot.com/2012/02/xwiki-cross-site-scripting.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109447/XWiki-Enterprise-3.4-Cross-Site-Scripting.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1019?


Explain the CVE ID: What does the identifier CVE-2012-1020 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1020.

Multiple cross-site scripting (XSS) vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to inject arbitrary web script or HTML via the (1) visitor_language parameter to register.php or (2) message parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-1020?

{'name': 'nexorone-login-xss(73001)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73001'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.vulnerability-lab.com/get_content.php?id=304'}, {'name': '51876', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51876'}, {'name': '47897', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47897'}, {'name': '20120205 NexorONE Online Banking - Multiple Cross Site Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=132852645911072&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1020?


Explain the CVE ID: What does the identifier CVE-2012-1021 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1021.

Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the cat_parent_id parameter in an addcat action.


Provide references for further information: Can you share references or external links related to CVE-2012-1021?

{'name': '51774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51774'}, {'name': '4images-categories-xss(72924)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72924'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109290/4images-xss.txt'}, {'name': '47811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47811'}, {'name': '78711', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78711'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1021?


Explain the CVE ID: What does the identifier CVE-2012-1022 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1022.

SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL commands via the cat_parent_id parameter in an addcat action.


Provide references for further information: Can you share references or external links related to CVE-2012-1022?

{'name': '4images-catparentid-sql-injection(72932)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72932'}, {'name': '51774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51774'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109290/4images-xss.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1022?


Explain the CVE ID: What does the identifier CVE-2012-1023 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1023.

Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-1023?

{'name': '51774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51774'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109290/4images-xss.txt'}, {'name': '78779', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78779'}, {'name': '4images-index-open-redirect(72925)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72925'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1023?


Explain the CVE ID: What does the identifier CVE-2012-1024 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1024.

Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-1024?

{'name': '18343', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18343'}, {'name': 'enigma2-webinterface-directory-traversal(73109)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73109'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1024?


Explain the CVE ID: What does the identifier CVE-2012-1025 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1025.

Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-1025?

{'name': '18343', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18343'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1025?


Explain the CVE ID: What does the identifier CVE-2012-1026 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1026.

Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.


Provide references for further information: Can you share references or external links related to CVE-2012-1026?

{'name': '51870', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51870'}, {'name': '20120212 sqlinjection bug in nova cms', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0068.html'}, {'name': 'xraycms-login2-sql-injection(73000)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73000'}, {'name': '18467', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18467'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/tracker/?func=detail&aid=3488241&group_id=298778&atid=1260461'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1026?


Explain the CVE ID: What does the identifier CVE-2012-1027 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1027.

Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x, 3.5.0.1-2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the message parameter to register/account-closed.


Provide references for further information: Can you share references or external links related to CVE-2012-1027?

{'name': '78823', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78823'}, {'name': '51842', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51842'}, {'name': '47854', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47854'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dl.packetstormsecurity.net/1202-exploits/projectopen-xss.txt'}, {'name': 'VU#732115', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/732115'}, {'name': 'projectopen-accountclosed-xss(72952)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72952'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1027?


Explain the CVE ID: What does the identifier CVE-2012-1028 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1028.

Cross-site scripting (XSS) vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allows remote attackers to inject arbitrary web script or HTML via the export parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-1028?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://voxel.dl.sourceforge.net/project/simplgroup/README.md'}, {'name': '51882', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51882'}, {'name': 'simple-groupware-index-xss(73042)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73042'}, {'name': '20120206 SimpleGroupware 0.742 Cross-Site-Scripting vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0028.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1028?


Explain the CVE ID: What does the identifier CVE-2012-1029 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1029.

SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2012-1029?

{'name': '47874', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47874'}, {'name': '78900', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78900'}, {'name': 'tubeace-q-sql-injection(72999)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72999'}, {'name': '18466', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18466'}, {'name': '52046', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52046'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109485/Tube-Ace-SQL-Injection.html'}, {'name': '51873', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51873'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1029?


Explain the CVE ID: What does the identifier CVE-2012-1030 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1030.

Cross-site scripting (XSS) vulnerability in DotNetNuke 6.x through 6.0.2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted URL containing text that is used within a modal popup.


Provide references for further information: Can you share references or external links related to CVE-2012-1030?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.62.aspx'}, {'tags': ['x_refsource_MISC'], 'url': 'http://technet.microsoft.com/en-us/security/msvr/msvr12-003'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1030?


Explain the CVE ID: What does the identifier CVE-2012-1031 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1031.

Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authenticated users to obtain WebAdmins access by leveraging Edit Mode privileges, a different vulnerability than CVE-2011-3416 and CVE-2011-3417.


Provide references for further information: Can you share references or external links related to CVE-2012-1031?

{'name': '51877', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51877'}, {'name': '47910', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47910'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://world.episerver.com/Blogs/Jens-N/Dates/2012/1/Security-vulnerability---Elevation-of-privilege/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://world.episerver.com/Blogs/Shahid-Nawaz/Dates/2012/1/General-Hotfix-CMS-6-R2/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1031?


Explain the CVE ID: What does the identifier CVE-2012-1032 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1032.

Cross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before 3.4.5 for EPiServer allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2012-1032?

{'name': '52874', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52874'}, {'name': '48696', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48696'}, {'name': 'siteseeker-episerver-xss(74799)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74799'}, {'name': '81013', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/81013'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1032?


Explain the CVE ID: What does the identifier CVE-2012-1033 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1033.

The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.


Provide references for further information: Can you share references or external links related to CVE-2012-1033?

{'name': 'HPSBUX02835', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=135638082529878&w=2'}, {'name': 'isc-bind-update-sec-bypass(73053)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73053'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.isc.org/software/bind/advisories/cve-2012-1033'}, {'name': '1026647', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026647'}, {'name': '47884', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47884'}, {'name': 'SSRT100763', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=135638082529878&w=2'}, {'name': 'openSUSE-SU-2012:0864', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/15136477'}, {'name': '78916', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78916'}, {'name': 'RHSA-2012:0717', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0717.html'}, {'name': 'VU#542123', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/542123'}, {'name': 'openSUSE-SU-2012:0863', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/15136456'}, {'name': '51898', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51898'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1033?


Explain the CVE ID: What does the identifier CVE-2012-1034 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1034.

Multiple cross-site scripting (XSS) vulnerabilities in the admin interface in EPiServer CMS through 6R2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1034?

{'name': '51877', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51877'}, {'name': '47910', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47910'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://world.episerver.com/PageFiles/110367/BugList.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://world.episerver.com/Blogs/Shahid-Nawaz/Dates/2012/1/General-Hotfix-CMS-6-R2/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1034?


Explain the CVE ID: What does the identifier CVE-2012-1035 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1035.

AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.


Provide references for further information: Can you share references or external links related to CVE-2012-1035?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.nruns.com/_downloads/advisory28122011.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adacore.com/2012/01/27/security-advisory-sa-2012-l119-003-hash-collisions-in-aws/'}, {'name': '20120127 AdaCore Security Advisory SA-2012-L119-003 Hash collisions in AWS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-01/0169.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ocert.org/advisories/ocert-2011-003.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1035?


Explain the CVE ID: What does the identifier CVE-2012-1036 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1036.

Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a message.