Update Sun Mar 17 17:59:42 UTC 2024

trickest · Mar 17, 2024 · c0beb96 · c0beb96
1 parent 2f5d014
commit c0beb96
Show file tree

Hide file tree

Showing 7 changed files with 92 additions and 0 deletions.
diff --git a/2005/CVE-2005-3983.md b/2005/CVE-2005-3983.md
@@ -0,0 +1,17 @@
+### [CVE-2005-3983](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3983)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+Unknown vulnerability in the login page for HP Systems Insight Manager (SIM) 4.0 and 4.1, when accessed by Microsoft Internet Explorer with the MS04-025 patch, leads to a denial of service (browser hang). NOTE: although the advisory is vague, this issue does not appear to involve an attacker at all.  If not, then this issue is not a vulnerability.
+
+### POC
+
+#### Reference
+- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1582
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2011/CVE-2011-3250.md b/2011/CVE-2011-3250.md
@@ -0,0 +1,17 @@
+### [CVE-2011-3250](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3250)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with JPEG2000 encoding.
+
+### POC
+
+#### Reference
+- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15825
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2012/CVE-2012-0668.md b/2012/CVE-2012-0668.md
@@ -0,0 +1,17 @@
+### [CVE-2012-0668](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0668)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding.
+
+### POC
+
+#### Reference
+- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15821
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2012/CVE-2012-2889.md b/2012/CVE-2012-2889.md
@@ -0,0 +1,17 @@
+### [CVE-2012-2889](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2889)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka "Universal XSS (UXSS)."
+
+### POC
+
+#### Reference
+- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15829
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2012/CVE-2012-5082.md b/2012/CVE-2012-5082.md
@@ -11,6 +11,7 @@ Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 a
 
 #### Reference
 - http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html
+- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15827
 
 #### Github
 No PoCs found on GitHub currently.

diff --git a/2013/CVE-2013-0618.md b/2013/CVE-2013-0618.md
@@ -0,0 +1,17 @@
+### [CVE-2013-0618](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0618)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error," a different vulnerability than CVE-2013-0607, CVE-2013-0608, CVE-2013-0611, and CVE-2013-0614.
+
+### POC
+
+#### Reference
+- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15822
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/references.txt b/references.txt
@@ -2067,6 +2067,7 @@ CVE-2005-3949 - http://securityreason.com/securityalert/215
 CVE-2005-3952 - https://www.exploit-db.com/exploits/3456
 CVE-2005-3961 - http://securityreason.com/securityalert/215
 CVE-2005-3967 - http://pridels0.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html
+CVE-2005-3983 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1582
 CVE-2005-3991 - http://securityreason.com/securityalert/221
 CVE-2005-3992 - http://securityreason.com/securityalert/226
 CVE-2005-4005 - http://securityreason.com/securityalert/31
@@ -19017,6 +19018,7 @@ CVE-2011-3192 - https://help.ecostruxureit.com/display/public/UADCE725/Security+
 CVE-2011-3201 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
 CVE-2011-3202 - https://www.openwall.com/lists/oss-security/2011/08/30/5
 CVE-2011-3203 - https://www.openwall.com/lists/oss-security/2011/08/30/6
+CVE-2011-3250 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15825
 CVE-2011-3322 - http://securityreason.com/securityalert/8374
 CVE-2011-3322 - http://www.exploit-db.com/exploits/17827
 CVE-2011-3332 - http://www.kb.cert.org/vuls/id/225833
@@ -19756,6 +19758,7 @@ CVE-2012-0580 - http://www.oracle.com/technetwork/topics/security/cpuapr2012-366
 CVE-2012-0581 - http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
 CVE-2012-0582 - http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
 CVE-2012-0583 - http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
+CVE-2012-0668 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15821
 CVE-2012-0694 - https://seclists.org/bugtraq/2012/Jun/165
 CVE-2012-0694 - https://www.exploit-db.com/exploits/19381
 CVE-2012-0698 - http://packetstormsecurity.com/files/118281/TrouSerS-Denial-Of-Service.html
@@ -20352,6 +20355,7 @@ CVE-2012-2804 - http://ffmpeg.org/security.html
 CVE-2012-2808 - http://blog.watchfire.com/files/androiddnsweakprng.pdf
 CVE-2012-2814 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
 CVE-2012-2843 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15569
+CVE-2012-2889 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15829
 CVE-2012-2903 - http://www.darksecurity.de/index.php?/215-SSCHADV2012-013-PHP-Address-Book-7.0.0-Multiple-security-vulnerabilities.html
 CVE-2012-2905 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5091.php
 CVE-2012-2906 - http://packetstormsecurity.org/files/112804/Artiphp-CMS-5.5.0-Cross-Site-Scripting.html
@@ -20952,6 +20956,7 @@ CVE-2012-5080 - http://www.oracle.com/technetwork/topics/security/javacpuoct2012
 CVE-2012-5081 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
 CVE-2012-5081 - http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html
 CVE-2012-5082 - http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html
+CVE-2012-5082 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15827
 CVE-2012-5083 - http://www-01.ibm.com/support/docview.wss?uid=swg21616490
 CVE-2012-5083 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
 CVE-2012-5083 - http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html
@@ -21436,6 +21441,7 @@ CVE-2013-0577 - http://www-01.ibm.com/support/docview.wss?uid=swg21651990
 CVE-2013-0579 - http://www-01.ibm.com/support/docview.wss?uid=swg21651990
 CVE-2013-0580 - http://www-01.ibm.com/support/docview.wss?uid=swg21651990
 CVE-2013-0608 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16037
+CVE-2013-0618 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15822
 CVE-2013-0657 - https://www.exploit-db.com/exploits/45218/
 CVE-2013-0662 - https://www.exploit-db.com/exploits/45219/
 CVE-2013-0662 - https://www.exploit-db.com/exploits/45220/