Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-5559 State: PUBLISHED Published: 2012-12-03T21:00:00 Last Updated: 2024-08-06T21:14:16.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the page manager node view task in the Chaos tool suite (ctools) module 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated users with permissions to submit or edit nodes to inject arbitrary web script or HTML via the page title. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1840992 - http://drupal.org/node/1841030 - http://secunia.com/advisories/51259 - http://www.openwall.com/lists/oss-security/2012/11/20/4
CVE ID: CVE-2012-5560 State: PUBLISHED Published: 2014-05-30T14:00:00 Last Updated: 2024-08-06T21:14:15.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration in mate-settings-daemon 1.5.3 allows local users to change the timezone for the system via a crafted D-Bus call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-March/099552.html - https://bugzilla.redhat.com/show_bug.cgi?id=878102 - http://lists.fedoraproject.org/pipermail/package-announce/2013-March/099545.html
CVE ID: CVE-2012-5561 State: PUBLISHED Published: 2013-03-01T02:00:00Z Last Updated: 2024-08-06T21:14:16.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Katello/katello/pull/1349 - http://rhn.redhat.com/errata/RHSA-2013-0547.html - https://bugzilla.redhat.com/show_bug.cgi?id=879094 - http://rhn.redhat.com/errata/RHSA-2013-0544.html
CVE ID: CVE-2012-5562 State: PUBLISHED Published: 2019-12-02T18:12:41 Last Updated: 2024-08-06T21:14:16.046Z Vendors: rhn-proxy Products: rhn-proxy Problem Types: may transmit credentials over clear-text Description: rhn-proxy: may transmit credentials over clear-text when accessing RHN Satellite Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5562 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5562 - https://access.redhat.com/security/cve/cve-2012-5562
CVE ID: CVE-2012-5563 State: PUBLISHED Published: 2012-12-18T01:00:00 Last Updated: 2024-08-06T21:14:15.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining. NOTE: this issue exists because of a CVE-2012-3426 regression. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1557.html - http://www.openwall.com/lists/oss-security/2012/11/28/5 - https://github.com/openstack/keystone/commit/38c7e46a640a94d
- http://www.openwall.com/lists/oss-security/2012/11/28/5 - https://github.com/openstack/keystone/commit/38c7e46a640a94da4da89a39a5a1ea9c081f1eb5 - http://www.securityfocus.com/bid/56727 - http://www.ubuntu.com/usn/USN-1641-1 - https://github.com/openstack/keystone/commit/f9d4766249a72d8f88d75dcf1575b28dd3496681 - http://www.openwall.com/lists/oss-security/2012/11/28/6 - https://bugs.launchpad.net/keystone/+bug/1079216 - http://secunia.com/advisories/51423 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80370 - http://secunia.com/advisories/51436
CVE ID: CVE-2012-5564 State: PUBLISHED Published: 2013-02-14T22:00:00Z Last Updated: 2024-08-06T21:14:15.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: android-tools 4.1.1 in Android Debug Bridge (ADB) allows local users to overwrite arbitrary files via a symlink attack on /tmp/adb.log. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/11/23/8 - https://bugzilla.redhat.com/show_bug.cgi?id=879582 - http://www.securityfocus.com/bid/56653 - http://www.openwall.com/lists/oss-security/2012/11/23/1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098532.html - http://lists.fedoraproject.org/pip
http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098532.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098527.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098529.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688280
CVE ID: CVE-2012-5565 State: PUBLISHED Published: 2014-04-05T21:00:00 Last Updated: 2024-08-06T21:14:15.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in js/compose-dimp.js in Horde Internet Mail Program (IMP) before 5.0.24, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted name for an attached file, related to the dynamic view. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-12/msg00020.html - http://lists.horde.org/archives/announce/2012/000833.html - https://github.com/horde/horde/comm
/2012-12/msg00020.html - http://lists.horde.org/archives/announce/2012/000833.html - https://github.com/horde/horde/commit/1550c6ecd7204f9579fcbb09ec7089e01b0771e2 - http://www.openwall.com/lists/oss-security/2012/11/23/6 - http://lists.horde.org/archives/announce/2012/000840.html
CVE ID: CVE-2012-5566 State: PUBLISHED Published: 2014-04-05T21:00:00 Last Updated: 2024-08-06T21:14:15.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4 before 3.0.17, as used in Horde Groupware Webmail Edition before 4.0.8, allow remote attackers to inject arbitrary web script or HTML via the (1) tasks view or (2) search view. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-12/msg00019.html - http://bugs.horde.org/ticket/11189 - http://www.osvdb.org/82382 - http://lists.horde.org/archives/announce/2012/000773.html - ht
ugs.horde.org/ticket/11189 - http://www.osvdb.org/82382 - http://lists.horde.org/archives/announce/2012/000773.html - http://www.openwall.com/lists/oss-security/2012/11/23/3 - http://www.openwall.com/lists/oss-security/2012/11/23/7 - http://www.osvdb.org/82371 - http://securitytracker.com/id?1027106 - https://github.com/horde/horde/blob/master/kronolith/docs/CHANGES - http://secunia.com/advisories/51469 - http://www.securityfocus.com/bid/56541 - http://git.horde.org/horde-git/-/commit/1228a6825a8dab3333d0a8c8986fc10d1f3d11b2
CVE ID: CVE-2012-5567 State: PUBLISHED Published: 2014-04-05T21:00:00 Last Updated: 2024-08-06T21:14:15.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4 before 3.0.18, as used in Horde Groupware Webmail Edition before 4.0.9, allow remote attackers to inject arbitrary web script or HTML via crafted event location parameters in the (1) month, (2) monthlist, or (3) prevmonthlist fields, related to portal blocks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/horde/horde/blob/d3dda2d47fad7eb128a0091e732cded0c2601009/kronolith/docs/CHANGES - http://lis
nces: - https://github.com/horde/horde/blob/d3dda2d47fad7eb128a0091e732cded0c2601009/kronolith/docs/CHANGES - http://lists.opensuse.org/opensuse-updates/2012-12/msg00019.html - http://www.openwall.com/lists/oss-security/2012/11/23/3 - http://www.openwall.com/lists/oss-security/2012/11/23/7 - http://secunia.com/advisories/51233 - http://lists.horde.org/archives/announce/2012/000836.html - http://secunia.com/advisories/51469 - https://bugzilla.redhat.com/show_bug.cgi?id=879684 - http://git.horde.org/horde-git/-/commit/d865c564beb6e98532880aa51a04a79f3311cd1e - http://www.securityfocus.com/bid/56541 - http://www.osvdb.org/87345
CVE ID: CVE-2012-5568 State: PUBLISHED Published: 2012-11-30T19:00:00 Last Updated: 2024-08-06T21:14:15.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/11/26/2 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html - http://www.securityfocus.com/bid/56686 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html - http://captainholly.wordpress.com/2009/06/19/slowloris-vs-tomcat/ - http://tomcat.10
use-updates/2013-01/msg00037.html - http://captainholly.wordpress.com/2009/06/19/slowloris-vs-tomcat/ - http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc2147779.html - http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc2147776.html - https://bugzilla.redhat.com/show_bug.cgi?id=880011 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80317
CVE ID: CVE-2012-5569 State: PUBLISHED Published: 2012-12-03T21:00:00Z Last Updated: 2024-09-16T23:20:31.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via a (1) page title or (2) crafted email message. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1808852 - http://www.openwall.com/lists/oss-security/2012/11/27/2 - http://www.openwall.com/lists/oss-security/2012/11/20/4 - https://drupal.org/node/1808616
CVE ID: CVE-2012-5570 State: PUBLISHED Published: 2020-02-08T18:14:49 Last Updated: 2024-08-06T21:14:16.206Z Vendors: n/a Products: Basic webmail module Problem Types: Other Description: The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basic_webmail" permission to read arbitrary users' email addresses. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/11/20/4 - http://www.openwall.com/lists/oss-security/2012/11/27/2 - https://drupal.org/node/1808616 - https://www.drupal.org/node/1808852
CVE ID: CVE-2012-5571 State: PUBLISHED Published: 2012-12-18T01:00:00 Last Updated: 2024-08-06T21:14:15.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Keystone Essex (2012.1) and Folsom (2012.2) does not properly handle EC2 tokens when the user role has been removed from a tenant, which allows remote authenticated users to bypass intended authorization restrictions by leveraging a token for the removed user role. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openstack/keystone/commit/8735009dc5b895db265a1cd573f39f4acfca2a19 - http://rhn.redhat.com/errata/RHSA-2012-1557.html - http://rhn.redhat.com/errata/RHSA-2012-1556.html - h
f39f4acfca2a19 - http://rhn.redhat.com/errata/RHSA-2012-1557.html - http://rhn.redhat.com/errata/RHSA-2012-1556.html - http://www.openwall.com/lists/oss-security/2012/11/28/5 - http://www.ubuntu.com/usn/USN-1641-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80333 - https://github.com/openstack/keystone/commit/37308dd4f3e33f7bd0f71d83fd51734d1870713b - https://bugs.launchpad.net/keystone/+bug/1064914 - http://www.openwall.com/lists/oss-security/2012/11/28/6 - https://github.com/openstack/keystone/commit/9d68b40cb9ea818c48152e6c712ff41586ad9653 - http://secunia.com/advisories/51423 - http://www.securityfocus.com/bid/56726 - http://secunia.com/advisories/51436 - http://lists.fedorapr
/advisories/51423 - http://www.securityfocus.com/bid/56726 - http://secunia.com/advisories/51436 - http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html
CVE ID: CVE-2012-5572 State: PUBLISHED Published: 2014-05-30T14:00:00 Last Updated: 2024-08-06T21:14:15.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the cookie method (lib/Dancer/Cookie.pm) in Dancer before 1.3114 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cookie name, a different vulnerability than CVE-2012-5526. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/pipermail/package-announce/2013-June/108749.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:184 - http://www.openwall.com/lists/oss-security/2012/11/26/1
ttp://www.mandriva.com/security/advisories?name=MDVSA-2013:184 - http://www.openwall.com/lists/oss-security/2012/11/26/10 - https://github.com/PerlDancer/Dancer/issues/859 - https://github.com/PerlDancer/Dancer/blob/devel/CHANGES - http://advisories.mageia.org/MGASA-2013-0183.html
CVE ID: CVE-2012-5573 State: PUBLISHED Published: 2013-01-01T11:00:00 Last Updated: 2024-08-06T21:14:16.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service (memory consumption or excessive cell reception rate) or bypass intended flow-control restrictions via a RELAY_COMMAND_SENDME command. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201301-03.xml - https://trac.torproject.org/projects/tor/ticket/6252 - https://bugs.
ttp://security.gentoo.org/glsa/glsa-201301-03.xml - https://trac.torproject.org/projects/tor/ticket/6252 - https://bugs.gentoo.org/show_bug.cgi?id=444804 - http://secunia.com/advisories/51329 - https://gitweb.torproject.org/arma/tor.git/commitdiff/b9b54568c0bb64c32bd0b362954bdbc8c1234b16 - http://openwall.com/lists/oss-security/2012/11/26/11 - https://gitweb.torproject.org/tor.git/blob/release-0.2.3:/ReleaseNotes - https://exchange.xforce.ibmcloud.com/vulnerabilities/80289 - https://bugzilla.redhat.com/show_bug.cgi?id=880310
CVE ID: CVE-2012-5574 State: PUBLISHED Published: 2012-12-18T01:00:00 Last Updated: 2024-08-06T21:14:16.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=880240 - http://lists.fedoraproject.org/pipermail/package-announce/2012-December/093920.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-December/093698.html - http://symfony.com/blog/security-release-symfony-1-4-20-released - http://www.securityfocus.com/bid/56685 - h
698.html - http://symfony.com/blog/security-release-symfony-1-4-20-released - http://www.securityfocus.com/bid/56685 - https://bugs.gentoo.org/show_bug.cgi?id=444696 - http://www.osvdb.org/87869 - http://lists.fedoraproject.org/pipermail/package-announce/2012-December/093922.html - http://secunia.com/advisories/51372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80309 - http://www.openwall.com/lists/oss-security/2012/11/26/12 - http://trac.symfony-project.org/changeset/33598
CVE ID: CVE-2012-5575 State: PUBLISHED Published: 2013-08-19T23:00:00 Last Updated: 2024-08-06T21:14:16.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force CXF to use weaker cryptographic algorithms than intended and makes it easier to decrypt communications, aka "XML Encryption backwards compatibility attack." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0943.html -
ck." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0943.html - https://bugzilla.redhat.com/show_bug.cgi?id=880443 - http://rhn.redhat.com/errata/RHSA-2013-0839.html - http://rhn.redhat.com/errata/RHSA-2013-0875.html - http://www.securityfocus.com/bid/60043 - http://www.nds.ruhr-uni-bochum.de/research/publications/backwards-compatibility/ - http://rhn.redhat.com/errata/RHSA-2013-0833.html - http://rhn.redhat.com/errata/RHSA-2013-1437.html - http://cxf.apache.org/cve-2012-5575.html - http://rhn.redhat.com/errata/RHSA-2013-1143.html - http://rhn.redhat.com/errata/RHSA-2013-0876.html - http://rhn.redhat.com/errata/RHSA-2013-1028.html - ht
013-1143.html - http://rhn.redhat.com/errata/RHSA-2013-0876.html - http://rhn.redhat.com/errata/RHSA-2013-1028.html - http://rhn.redhat.com/errata/RHSA-2013-0834.html - http://rhn.redhat.com/errata/RHSA-2013-0873.html - http://rhn.redhat.com/errata/RHSA-2013-0874.html - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd
c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2012-5576 State: PUBLISHED Published: 2012-12-18T01:00:00 Last Updated: 2024-08-06T21:14:15.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large (1) red, (2) green, or (3) blue color mask in an XWD file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51479 - http://secunia.com/advisories/51528 - http://git.gnome.org/browse/gimp/commit/?id=2873262fccba12af144ed96ed91be144d92ff2e1 - http://www.openwall.com/lists/oss-se
p://git.gnome.org/browse/gimp/commit/?id=2873262fccba12af144ed96ed91be144d92ff2e1 - http://www.openwall.com/lists/oss-security/2012/11/27/1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:082 - http://www.ubuntu.com/usn/USN-1659-1 - http://www.securityfocus.com/bid/56647 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00014.html - http://lists.opensuse.org/opensuse-updates/2012-12/msg00017.html - http://secunia.com/advisories/50296 - https://bugzilla.gnome.org/show_bug.cgi?id=687392
CVE ID: CVE-2012-5577 State: PUBLISHED Published: 2019-10-28T16:10:23 Last Updated: 2024-08-06T21:14:15.932Z Vendors: Python keyring lib Products: Python keyring lib Problem Types: Insecure Permissions Description: Python keyring lib before 0.10 created keyring files with world-readable permissions. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-5577 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5577 - http://www.openwall.com/lists/oss-security/2012/11/27/3 - https://bitbucket.org/kang/python-keyring-lib/commits/049cd181470f1ee6c540e1d64acf1def7b1de0c1 - https://bitbucket.org/kang/python-keyring-lib/issue/67/set-
yring-lib/commits/049cd181470f1ee6c540e1d64acf1def7b1de0c1 - https://bitbucket.org/kang/python-keyring-lib/issue/67/set-go-rwx-on-keyring_passcfg
CVE ID: CVE-2012-5578 State: PUBLISHED Published: 2019-11-25T13:01:51 Last Updated: 2024-08-06T21:14:16.321Z Vendors: Python Products: Python keyring Problem Types: keyring insecure permissions on new databases Description: Python keyring has insecure permissions on new databases allowing world-readable files to be created Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5578 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5578 - http://www.openwall.com/lists/oss-security/2012/11/27/4 - https://security-tracker.debian.org/tracker/CVE-2012-5578 - https://access.redhat.com/security/cve/cve-2012-5578 - https://bugs.launch
ty-tracker.debian.org/tracker/CVE-2012-5578 - https://access.redhat.com/security/cve/cve-2012-5578 - https://bugs.launchpad.net/ubuntu/+source/python-keyring/+bug/1031465
CVE ID: CVE-2012-5579 State: REJECTED Published: 2012-12-03T11:00:00Z Last Updated: 2024-09-17T03:27:41.700Z Description: No description available.
CVE ID: CVE-2012-5580 State: PUBLISHED Published: 2014-10-27T22:00:00 Last Updated: 2024-08-06T21:14:15.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56712 - https://code.google.com/p/libproxy/source/detail?r=475 - https://exchange.xforce.ibmcloud.com/vulnerabi
.com/bid/56712 - https://code.google.com/p/libproxy/source/detail?r=475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80340 - https://bugzilla.redhat.com/show_bug.cgi?id=883100 - https://bugzilla.novell.com/show_bug.cgi?id=791086
CVE ID: CVE-2012-5581 State: PUBLISHED Published: 2013-01-04T22:00:00 Last Updated: 2024-08-06T21:14:15.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in tif_dir.c in LibTIFF before 4.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DOTRANGE tag in a TIFF image. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80339 - http://www.debian.org/security/2012/dsa-2589 - http://www.securityfocus.com/bid/56715 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00076.html - http://secunia.com/advisories/51491 - http://
56715 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00076.html - http://secunia.com/advisories/51491 - http://www.ubuntu.com/usn/USN-1655-1 - https://bugzilla.redhat.com/show_bug.cgi?id=867235 - http://www.openwall.com/lists/oss-security/2012/11/28/1 - http://rhn.redhat.com/errata/RHSA-2012-1590.html
CVE ID: CVE-2012-5582 State: PUBLISHED Published: 2019-11-25T13:34:42 Last Updated: 2024-08-06T21:14:15.933Z Vendors: opendnssec Products: opendnssec Problem Types: curl usage Description: opendnssec misuses libcurl API Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-5582 - http://www.openwall.com/lists/oss-security/2012/11/29/6 - http://www.openwall.com/lists/oss-security/2012/11/28/12 - http://www.openwall.com/lists/oss-security/2012/11/29/3
CVE ID: CVE-2012-5583 State: PUBLISHED Published: 2014-06-06T14:00:00 Last Updated: 2024-08-06T21:14:16.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog - http://secunia.com/advisories/51818 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81208