|
290831
|
- |
|
opera
|
opera_browser
|
Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-3558
|
2024-11-21 10:41 |
2012-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290832
|
- |
|
opera
|
opera_browser
|
Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive informatio…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-3557
|
2024-11-21 10:41 |
2012-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290833
|
- |
|
opera
|
opera_browser
|
Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which makes it easier for user-assisted remote attackers to condu…
|
CWE-20
Improper Input Validation
|
CVE-2012-3556
|
2024-11-21 10:41 |
2012-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290834
|
- |
|
opera
|
opera_browser
|
Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks…
|
NVD-CWE-noinfo
|
CVE-2012-3555
|
2024-11-21 10:41 |
2012-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290835
|
5.4 |
MEDIUM
Network
|
ibm
|
infosphere_guardium
|
IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a…
|
CWE-79
Cross-site Scripting
|
CVE-2012-3341
|
2024-11-21 10:40 |
2020-09-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290836
|
4.3 |
MEDIUM
Network
|
ibm
|
infosphere_guardium
|
IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vul…
|
CWE-776
XML Entity Expansion
|
CVE-2012-3340
|
2024-11-21 10:40 |
2020-09-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290837
|
5.3 |
MEDIUM
Network
|
ibm
|
infosphere_guardium
|
IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker cou…
|
CWE-20
Improper Input Validation
|
CVE-2012-3338
|
2024-11-21 10:40 |
2020-09-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290838
|
5.3 |
MEDIUM
Network
|
ibm
|
infosphere_guardium
|
IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" s…
|
CWE-22
Path Traversal
|
CVE-2012-3337
|
2024-11-21 10:40 |
2020-09-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290839
|
8.8 |
HIGH
Network
|
ibm
|
infosphere_guardium
|
IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attac…
|
CWE-89
SQL Injection
|
CVE-2012-3336
|
2024-11-21 10:40 |
2020-09-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290840
|
6.1 |
MEDIUM
Network
|
longtailvideo
|
jw_player
|
Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) logo.link, or (3)…
|
CWE-79
Cross-site Scripting
|
CVE-2012-3351
|
2024-11-21 10:40 |
2020-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|