Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0929 State: PUBLISHED Published: 2012-01-28T01:00:00 Last Updated: 2024-08-06T18:38:15.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the (1) FTP server or (2) HTTP server. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf - http://www.securityfocus.com/bid/51605 - http://secunia.com/advisories/47723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72589 - https://us-c
ge.xforce.ibmcloud.com/vulnerabilities/72588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72589 - https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03
CVE ID: CVE-2012-0930 State: PUBLISHED Published: 2012-01-28T01:00:00 Last Updated: 2024-08-06T18:38:15.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf - http://www.securityfocus.com/bid/51605 - http://secunia.com/advisories/47723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72590 - https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03
CVE ID: CVE-2012-0931 State: PUBLISHED Published: 2012-01-28T01:00:00 Last Updated: 2024-08-06T18:38:15.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf - http://www.securityfocus.com/bid/51605 - http://secunia.com/advisories/47723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72586 - https://us-cert.cisa.gov/ics/ale
nia.com/advisories/47723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72586 - https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03
CVE ID: CVE-2012-0932 State: PUBLISHED Published: 2012-01-29T02:00:00 Last Updated: 2024-08-06T18:38:15.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/108887/leadcapturepagesystem-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/72623 - http://secunia.com/advisories/47702 - http://osvdb.org/78455
CVE ID: CVE-2012-0933 State: PUBLISHED Published: 2012-01-29T02:00:00 Last Updated: 2024-08-06T18:38:15.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin_colors.asp, (2) admin_config.asp, and (3) admin_cat_add.asp in admin/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47705 - http://osvdb.org/78458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72624 - http://packetstormsecurity.org/files/108869/acidcat-xss.txt - http://w
hange.xforce.ibmcloud.com/vulnerabilities/72624 - http://packetstormsecurity.org/files/108869/acidcat-xss.txt - http://www.securityfocus.com/bid/51608
CVE ID: CVE-2012-0934 State: PUBLISHED Published: 2012-01-29T02:00:00 Last Updated: 2024-08-06T18:38:15.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://spareclockcycles.org/2011/09/18/exploitring-the-wordpress-extension-repos/ - http://plugins.trac.wordpress.org/changeset/492167/theme-tuner#file2 - http://secunia.com/advisories/47722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72626 - http://wo
ner#file2 - http://secunia.com/advisories/47722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72626 - http://wordpress.org/extend/plugins/theme-tuner/changelog/ - http://www.securityfocus.com/bid/51636
CVE ID: CVE-2012-0935 State: PUBLISHED Published: 2012-01-29T02:00:00 Last Updated: 2024-08-06T18:38:15.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands via the PageID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72639 - http://www.securityfocus.com/bid/51627 - http://www.exploit-db.com/exploits/18405
CVE ID: CVE-2012-0936 State: PUBLISHED Published: 2012-01-29T02:00:00 Last Updated: 2024-08-06T18:45:25.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to login. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78454 - http://issues.opennms.org/browse/NMS-5128?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel#issue-tabs - http://www.securi
nms.org/browse/NMS-5128?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel#issue-tabs - http://www.securityfocus.com/bid/51632 - http://issues.opennms.org/browse/NMS/fixforversion/10824#atl_token=BCL8-RCDX-MB62-2EZT%7C38eaf469042162355c28f5393587690a8388d556%7Clout&selectedTab=com.atlassian.jira.plugin.system.project%3Aversion-summary-panel - http://fisheye.opennms.org/browse/opennms/features/springframework-security/src/main/java/org/opennms/web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java?r2=d2ce15470cb6c87c115c918eb86ef147486a9166&r1=80b80e110e4bce568fc2c6c0a15a - http://secunia.com/advisories/47646 - http://issues.opennms.org/browse/NMS/fixforv
166&r1=80b80e110e4bce568fc2c6c0a15a - http://secunia.com/advisories/47646 - http://issues.opennms.org/browse/NMS/fixforversion/10825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72625
CVE ID: CVE-2012-0937 State: PUBLISHED Published: 2012-01-30T17:00:00Z Last Updated: 2024-09-16T18:39:54.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which allows remote attackers to use WordPress as a proxy for brute-force attacks or denial of service attacks via the dbhost parameter, a different vulnerability than CVE-2011-4898. NOTE: the vendor disputes the significance of this issue because an incomplete WordPress installation might be present on the network for only a short time Additional Analyst No
because an incomplete WordPress installation might be present on the network for only a short time Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18417 - https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt - http://archives.neohapsis.com/archives/bugtraq/2012-01/0150.html
CVE ID: CVE-2012-0938 State: PUBLISHED Published: 2014-08-14T14:00:00 Last Updated: 2024-08-06T18:45:25.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TestLink 1.9.3, 1.8.5b, and earlier allow remote authenticated users with certain permissions to execute arbitrary SQL commands via the root_node parameter in the display_children function to (1) getrequirementnodes.php or (2) gettprojectnodes.php in lib/ajax/; the (3) cfield_id parameter in an edit action to lib/cfields/cfieldsEdit.php; the (4) id parameter in an edit action or (5) plan_id parameter in a create action to lib/plan/planMilestonesEdit.php; or the req_spec_id parameter to
t action or (5) plan_id parameter in a create action to lib/plan/planMilestonesEdit.php; or the req_spec_id parameter to (6) reqImport.php or (7) in a create action to reqEdit.php in lib/requirements/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/79451 - http://osvdb.org/79453 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0104.html - http://secunia.com/advisories/48054 - http://osvdb.org/79454 - http://osvdb.org/79452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73327 - http://osvdb.org/79450 - http://www.securityfocus.com/bid/52086
CVE ID: CVE-2012-0939 State: PUBLISHED Published: 2014-08-14T14:00:00 Last Updated: 2024-08-06T18:45:25.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TestLink 1.8.5b and earlier allow remote authenticated users with the Requirement view permission to execute arbitrary SQL commands via the req_spec_id parameter to (1) reqSpecAnalyse.php, (2) reqSpecPrint.php, or (3) reqSpecView.php in requirements/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-02/0104.html - http://secunia.com/advisories/48054
er: References: - http://archives.neohapsis.com/archives/bugtraq/2012-02/0104.html - http://secunia.com/advisories/48054 - http://osvdb.org/79447 - http://osvdb.org/79448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73389 - http://www.securityfocus.com/bid/52086 - http://osvdb.org/79449
CVE ID: CVE-2012-0941 State: PUBLISHED Published: 2018-02-08T23:00:00 Last Updated: 2024-08-06T18:45:25.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) Endpoint Monitor, (2) Dialup List, or (3) Log&Report Display modules, or the fields_sorted_opt parameter to (4) user/auth/list or (5) endpointcompliance/app_detect/predefined_sig_list. Additional Analyst Notes: - CVE Program Container: References: - https://securitytracker.com/id/1026594 - https://exchange.xforce.
Analyst Notes: - CVE Program Container: References: - https://securitytracker.com/id/1026594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72761 - http://packetstormsecurity.org/files/109168/VL-144.txt - https://www.vulnerability-lab.com/get_content.php?id=144 - http://www.securityfocus.com/bid/51708 - https://fortiguard.com/psirt/FG-IR-012-001
CVE ID: CVE-2012-0942 State: PUBLISHED Published: 2012-04-17T01:00:00 Last Updated: 2024-08-06T18:45:25.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to execute arbitrary code via crafted authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52929 - http://www.securitytracker.com/id?1026898 - http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf
CVE ID: CVE-2012-0943 State: PUBLISHED Published: 2014-05-22T23:00:00 Last Updated: 2024-08-06T18:45:25.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT per ADT1/ADT2 due to different codebases and affected versions. CVE-2012-6648 has been assigned for the gdm-guest-session issue. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/%2Bsource/lightdm/%2Bbug/953044 - http://www.ubuntu.co
rogram Container: References: - https://bugs.launchpad.net/ubuntu/%2Bsource/lightdm/%2Bbug/953044 - http://www.ubuntu.com/usn/USN-1399-2 - https://launchpadlibrarian.net/96471251/lightdm.secure-cleanup.debdiff
CVE ID: CVE-2012-0944 State: PUBLISHED Published: 2012-06-04T20:00:00 Last Updated: 2024-08-06T18:45:25.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52855 - https://bugs.launchpad.net/ubuntu/%2Bsource/aptdaemon/%2Bbug/959131 - http://www.osvdb.org/80887 - http://ubuntu.com/usn/usn-1414-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74553 - http
w.osvdb.org/80887 - http://ubuntu.com/usn/usn-1414-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74553 - http://secunia.com/advisories/48688
CVE ID: CVE-2012-0945 State: PUBLISHED Published: 2020-01-15T12:26:04 Last Updated: 2024-08-06T18:45:25.936Z Vendors: whoopsie-daisy Products: whoopsie-daisy Problem Types: incorrect access control Description: whoopsie-daisy before 0.1.26: Root user can remove arbitrary files Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/whoopsie-daisy/+bug/973687
CVE ID: CVE-2012-0946 State: PUBLISHED Published: 2012-04-22T18:00:00 Last Updated: 2024-08-06T18:45:26.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/3109 - http://secunia.com/advisories/48793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74822 - http://secunia.com/advisories/48650 - http://www.ubuntu.com/usn/usn-1420-1/
CVE ID: CVE-2012-0947 State: PUBLISHED Published: 2012-08-20T18:00:00 Last Updated: 2024-08-06T18:45:25.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VQA media file in which the image size is not a multiple of the block size. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/libav/+bug/980963 - http://www.ubuntu.com/
VE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/libav/+bug/980963 - http://www.ubuntu.com/usn/USN-1479-1 - http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=58b2e0f0f2fc96c1158e04f8aba95cbe6157a1a3 - http://secunia.com/advisories/49089 - http://www.debian.org/security/2012/dsa-2471 - http://libav.org/ - http://www.securityfocus.com/bid/53389 - http://www.openwall.com/lists/oss-security/2012/05/03/4
CVE ID: CVE-2012-0948 State: PUBLISHED Published: 2012-06-07T21:00:00 Last Updated: 2024-08-06T18:45:26.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone_system_state.tar.gz and (2) system_state.tar.gz, which allows local users to obtain repository credentials. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/82019 - http://www.ubuntu.com/usn/USN-1443-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75727 - http://www.securityfocus.com/bid/53604 - http://secunia.com/advisories/49230 - http://launchpadli
ulnerabilities/75727 - http://www.securityfocus.com/bid/53604 - http://secunia.com/advisories/49230 - http://launchpadlibrarian.net/105380733/update-manager_1%3A0.156.14.3_1%3A0.156.14.4.diff.gz
CVE ID: CVE-2012-0949 State: PUBLISHED Published: 2012-05-31T17:00:00 Last Updated: 2024-08-06T18:45:25.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain system state archive files when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75728 - http://www.ubuntu.com/usn/USN-1443-1 - http://secunia.com/advisories/49230 - http://osvdb.org/82020 - http://www.securityfocus.com/bid/53605
CVE ID: CVE-2012-0950 State: PUBLISHED Published: 2012-06-19T20:00:00Z Last Updated: 2024-09-16T23:56:39.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apport hook (DistUpgradeApport.py) in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uploads the /var/log/dist-upgrade directory when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0949. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/%2Bsource/update-manager/%2Bbug/1004503 - http://www.ubuntu.com/usn/USN-1443
rences: - https://bugs.launchpad.net/ubuntu/%2Bsource/update-manager/%2Bbug/1004503 - http://www.ubuntu.com/usn/USN-1443-2
CVE ID: CVE-2012-0951 State: PUBLISHED Published: 2020-02-12T16:56:08 Last Updated: 2024-08-06T18:45:25.891Z Vendors: NVIDIA Products: graphics drivers Problem Types: unknown Description: A Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown function in the file proc/driver/nvidia/registry. Additional Analyst Notes: - CVE Program Container: References: - http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-0951.html - https://vuldb.com/?id.10060
CVE ID: CVE-2012-0952 State: PUBLISHED Published: 2020-05-08T00:50:14.154780Z Last Updated: 2024-09-16T22:40:28.633Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: nvidia Products: graphics drivers Problem Types: CWE-119 Description: A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which may allow an attacker to overflow 49 bytes. This issue was fixed in version 295.53. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/979373
CVE ID: CVE-2012-0953 State: PUBLISHED Published: 2020-05-08T00:50:14.571846Z Last Updated: 2024-09-17T01:41:36.921Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: nvidia Products: graphics drivers Problem Types: CWE-362 Description: A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/979373
CVE ID: CVE-2012-0954 State: PUBLISHED Published: 2012-06-19T20:00:00Z Last Updated: 2024-09-16T20:13:26.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install altered packages via a man-in-the-middle (MITM) attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3587. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2012/Jun/271 - http://www.securityfocus.com/bid/54046 - http://seclists.org/fulldis
- http://seclists.org/fulldisclosure/2012/Jun/271 - http://www.securityfocus.com/bid/54046 - http://seclists.org/fulldisclosure/2012/Jun/267 - http://www.ubuntu.com/usn/USN-1477-1 - http://www.ubuntu.com/usn/USN-1475-1 - https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013128 - https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013639 - http://seclists.org/fulldisclosure/2012/Jun/289 - https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013681
CVE ID: CVE-2012-0955 State: PUBLISHED Published: 2020-12-02T00:50:15.305885Z Last Updated: 2024-09-16T17:14:04.258Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Canonical Products: software-properties Problem Types: CWE-295 Description: software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS certificates under python2 and only checked certificates under python3 if a valid certificate bundle was provided. Fixed in software-properties version 0.92. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/b
ftware-properties version 0.92. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1036839 - https://code.launchpad.net/~cyphermox/software-properties/lp1036839/+merge/119753
CVE ID: CVE-2012-0956 State: PUBLISHED Published: 2012-09-28T15:00:00Z Last Updated: 2024-09-16T19:35:28.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the <a> tag of a Twitter feed. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1561-1 - https://bugs.launchpad.net/ubuntu/%2Bsource/ubiquity-slideshow-ubuntu/%2Bbug/991982
CVE ID: CVE-2012-0957 State: PUBLISHED Published: 2012-12-21T11:00:00 Last Updated: 2024-08-06T18:45:25.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1644-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.16 - http://www.ubuntu.com/usn/USN-1645-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2702b1526c7278c4d65d78d
usn/USN-1645-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2702b1526c7278c4d65d78de209a465d4de2885e - http://www.ubuntu.com/usn/USN-1647-1 - http://www.ubuntu.com/usn/USN-1652-1 - http://www.ubuntu.com/usn/USN-1646-1 - https://bugzilla.redhat.com/show_bug.cgi?id=862877 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091110.html - https://github.com/torvalds/linux/commit/2702b1526c7278c4d65d78de209a465d4de2885e - http://www.ubuntu.com/usn/USN-1648-1 - http://www.ubuntu.com/usn/USN-1649-1 - http://secunia.com/advisories/51409 - http://www.openwall.com/lists/oss-security/2012/10/09/4