Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ient. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55131 - http://httpd.apache.org/security/vulnerabilities_24.html - http://mail-archives.apache.org/mod_mbox/www-announce/201208.mbox/%3C0BFFEA9B-801B-4BAA-9534-56F640268E30%40apache.org%3E - http://www.apache.org/dist/httpd/CHANGES_2.4.3 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.ht
ache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa8
7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https:
s.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2012-3503 State: PUBLISHED Published: 2012-08-25T10:00:00 Last Updated: 2024-08-06T20:05:12.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System Engine web interface as an arbitrary user by creating a cookie using the default secret_token. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50344 - http://rhn.redhat.com/errata/RHSA-2012-1187.html - http://www.securityfocu
nces: - http://secunia.com/advisories/50344 - http://rhn.redhat.com/errata/RHSA-2012-1187.html - http://www.securityfocus.com/bid/55140 - https://github.com/Katello/katello/pull/499 - https://github.com/Katello/katello/commit/7c256fef9d75029d0ffff58ff1dcda915056d3a3 - http://rhn.redhat.com/errata/RHSA-2012-1186.html
CVE ID: CVE-2012-3504 State: PUBLISHED Published: 2012-10-10T18:00:00 Last Updated: 2024-08-06T20:05:12.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/02/3 - http://www.securityfocus.com/bid/55756 - https://bugzilla.redhat.com/show_bug.cgi?id=849256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79016
CVE ID: CVE-2012-3505 State: PUBLISHED Published: 2012-10-09T23:00:00 Last Updated: 2024-08-06T20:05:12.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of headers or (2) a large number of forged headers that trigger hash collisions predictably. bucket. Additional Analyst Notes: - CVE Program Container: References: - https://banu.com/bugzilla/show_bug.cgi?id=110 - http://www.openwall.com/lists/oss-security/2012/08/17/3 - https://banu.com/bugzilla/show_bug.cgi?id=110#c2 - http://www.securitytracker.com/id?1027412 - https://bugs.launchpad.net/ubunt
/banu.com/bugzilla/show_bug.cgi?id=110#c2 - http://www.securitytracker.com/id?1027412 - https://bugs.launchpad.net/ubuntu/+source/tinyproxy/+bug/1036985 - http://www.openwall.com/lists/oss-security/2012/08/18/1 - http://secunia.com/advisories/51074 - http://www.debian.org/security/2012/dsa-2564 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=685281 - http://secunia.com/advisories/50278
CVE ID: CVE-2012-3506 State: PUBLISHED Published: 2012-10-25T10:00:00 Last Updated: 2024-08-06T20:05:12.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.03 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ofbiz.apache.org/download.html#vulnerabilities - http://seclists.org/fulldisclosure/2012/Oct/156 - http://www.securityfocus.com/bid/56171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79540 - http://osvdb.org/86556
CVE ID: CVE-2012-3507 State: PUBLISHED Published: 2012-08-25T10:00:00Z Last Updated: 2024-08-06T20:05:12.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in program/steps/mail/func.inc in RoundCube Webmail before 0.8.0, when using the Larry skin, allows remote attackers to inject arbitrary web script or HTML via the email message subject. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/20/3 - http://www.securelist.com/en/advisories/50212 - http://sourceforge.net/projects/roundcubemail/files/roundcubemail/0.8.0/ - http://www.openwall.com/lists/oss-security/2012/08/20/9 -
eforge.net/projects/roundcubemail/files/roundcubemail/0.8.0/ - http://www.openwall.com/lists/oss-security/2012/08/20/9 - http://www.openwall.com/lists/oss-security/2012/08/20/2 - http://trac.roundcube.net/ticket/1488519 - http://secunia.com/advisories/50212
CVE ID: CVE-2012-3508 State: PUBLISHED Published: 2012-08-25T10:00:00Z Last Updated: 2024-08-06T20:05:12.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers to inject arbitrary web script or HTML by using "javascript:" in an href attribute in the body of an HTML-formatted email. Additional Analyst Notes: - CVE Program Container: References: - http://trac.roundcube.net/ticket/1488613 - http://secunia.com/advisories/50279 - https://github.com/roundcube/roundcubemail/commit/5ef8e4ad9d3ee8689d2b83750aa65395b7cd59ee - http://www.openwall.com/lists/oss-security/2012/08
dcube/roundcubemail/commit/5ef8e4ad9d3ee8689d2b83750aa65395b7cd59ee - http://www.openwall.com/lists/oss-security/2012/08/20/9 - http://www.openwall.com/lists/oss-security/2012/08/20/2 - http://www.securelist.com/en/advisories/50279 - http://sourceforge.net/news/?group_id=139281&id=309011
CVE ID: CVE-2012-3509 State: PUBLISHED Published: 2012-09-05T23:00:00 Last Updated: 2024-08-06T20:05:12.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors related to the "addition of CHUNK_HEADER_SIZE to the length," which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 - http://gcc.gnu.org/ml/gcc-patches/2012-08/msg01986
: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 - http://gcc.gnu.org/ml/gcc-patches/2012-08/msg01986.html - http://www.openwall.com/lists/oss-security/2012/08/29/3 - http://www.ubuntu.com/usn/USN-2496-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78135 - http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54411 - http://www.securityfocus.com/bid/55281 - http://security-tracker.debian.org/tracker/CVE-2012-3509
CVE ID: CVE-2012-3510 State: PUBLISHED Published: 2012-10-03T10:00:00 Last Updated: 2024-08-06T20:05:12.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive information from kernel memory or cause a denial of service (system crash) via a taskstats TASKSTATS_CMD_ATTR_PID command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/f0ec1aaf54caddd21c259aea8b2ecfbde4ee4fb9 - http://secunia.com/advisories/50811 - https://bugzilla.redhat.com/show_bug.cgi?id=849722 - http:/
9aea8b2ecfbde4ee4fb9 - http://secunia.com/advisories/50811 - https://bugzilla.redhat.com/show_bug.cgi?id=849722 - http://rhn.redhat.com/errata/RHSA-2012-1323.html - http://www.securityfocus.com/bid/55144 - http://www.openwall.com/lists/oss-security/2012/08/20/12 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f0ec1aaf54caddd21c259aea8b2ecfbde4ee4fb9 - http://www.securitytracker.com/id?1027602 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19
CVE ID: CVE-2012-3511 State: PUBLISHED Published: 2012-10-03T10:00:00 Last Updated: 2024-08-06T20:05:12.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in the madvise_remove function in mm/madvise.c in the Linux kernel before 3.4.5 allow local users to cause a denial of service (use-after-free and system crash) via vectors involving a (1) munmap or (2) close system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1572-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5 - http://secunia.com/advisories/50732 - http://www.ubuntu.com/usn/USN-1567-1 - http://www.ubuntu.com/usn/USN-1577-1 - htt
http://secunia.com/advisories/50732 - http://www.ubuntu.com/usn/USN-1567-1 - http://www.ubuntu.com/usn/USN-1577-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9ab4233dd08036fe34a89c7dc6f47a8bf2eb29eb - https://bugzilla.redhat.com/show_bug.cgi?id=849734 - https://github.com/torvalds/linux/commit/9ab4233dd08036fe34a89c7dc6f47a8bf2eb29eb - http://ubuntu.com/usn/usn-1529-1 - http://www.openwall.com/lists/oss-security/2012/08/20/13 - http://www.securityfocus.com/bid/55151 - http://secunia.com/advisories/50633 - http://secunia.com/advisories/55055
CVE ID: CVE-2012-3512 State: PUBLISHED Published: 2012-11-21T23:00:00 Last Updated: 2024-08-06T20:05:12.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088260.html - http://www.ubuntu.com/usn/USN-1622-1 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088239.html - http://www.open
/usn/USN-1622-1 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088239.html - http://www.openwall.com/lists/oss-security/2012/08/21/1 - http://www.munin-monitoring.org/ticket/1234 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086375.html - http://www.securityfocus.com/bid/55698 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684075
CVE ID: CVE-2012-3513 State: PUBLISHED Published: 2012-11-21T23:00:00Z Last Updated: 2024-09-16T17:48:02.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1622-1 - http://www.openwall.com/lists/oss-security/2012/08/21/1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684076 - http://www.munin-monitoring.org/ticket/1238
CVE ID: CVE-2012-3514 State: PUBLISHED Published: 2012-08-25T10:00:00 Last Updated: 2024-08-06T20:05:12.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55114 - http://www.openwall.com/lists/oss-security/2012/08/21/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:107 - http://secunia.com/advisories/50311 - https://wiki.mageia.or
/www.mandriva.com/security/advisories?name=MDVSA-2013:107 - http://secunia.com/advisories/50311 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0266
CVE ID: CVE-2012-3515 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T20:05:12.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://secunia.com/advisories/50528 - http://rhn.redhat.com/errata/RHSA-2012-1234.html - http://secunia.com/advisories/50530 - http://git.qemu.org/?p=qemu-stab
ttp://rhn.redhat.com/errata/RHSA-2012-1234.html - http://secunia.com/advisories/50530 - http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log - http://secunia.com/advisories/51413 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://secunia.com/advisories/50689 - http://www.debian.org/security/2012/dsa-2543 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html - http://secunia.com/advisories/50632 - http://rhn.redhat.com/errata/RHSA-2012-1325.html - http://rhn.redhat.com/errata/RHSA-2012-1236.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html - http://secu
nnounce/2012-09/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html - http://secunia.com/advisories/50913 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://secunia.com/advisories/50472 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html - http://www.ubuntu.com/usn/USN-1590-1 - http://rhn.redhat.com/errata/RHSA-2012-1262.html - http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html - http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html - http://www.securityfocus.com/bid/55
ility - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html - http://www.securityfocus.com/bid/55413 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html - https://security.gentoo.org/glsa/201604-03 - http://rhn.redhat.com/errata/RHSA-2012-1233.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html - http://support.citrix.com/article/CTX134708 - http://www.debian.org/security/2012/dsa-2545 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html -
://www.debian.org/security/2012/dsa-2545 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html - http://rhn.redhat.com/errata/RHSA-2012-1235.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html - http://www.openwall.com/lists/oss-security/2012/09/05/10 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html - http://secunia.com/advisories/50860
CVE ID: CVE-2012-3516 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T20:05:12.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GNTTABOP_swap_grant_ref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of service (host crash) and possibly gain privileges via a crafted grant reference that triggers a write to an arbitrary hypervisor memory location. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55411 - http://secunia.com/advisories/50530 - http://www.openwall.com/lists/oss-security/2012/09/05/11 - http://s
om/bid/55411 - http://secunia.com/advisories/50530 - http://www.openwall.com/lists/oss-security/2012/09/05/11 - http://secunia.com/advisories/50472 - http://support.citrix.com/article/CTX134708 - http://wiki.xen.org/wiki/Security_Announcements#XSA-18_grant_table_entry_swaps_have_inadequate_bounds_checking - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html
CVE ID: CVE-2012-3517 State: PUBLISHED Published: 2012-08-26T01:00:00 Last Updated: 2024-08-06T20:05:12.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (daemon crash) via vectors related to failed DNS requests. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201301-03.xml - https://bugzilla.redhat.com/show_bug.cgi?id=849949 - https://lists.torproject.org/pipermail/tor-announce/2012-August/000086.html - https://gitweb.torproject.org/tor.git/commit/62637fa22405278758febb1743da9af562524d4c - http://openwall.c
/000086.html - https://gitweb.torproject.org/tor.git/commit/62637fa22405278758febb1743da9af562524d4c - http://openwall.com/lists/oss-security/2012/08/21/6 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00048.html - https://trac.torproject.org/projects/tor/ticket/6480 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088006.html
CVE ID: CVE-2012-3518 State: PUBLISHED Published: 2012-08-26T01:00:00 Last Updated: 2024-08-06T20:05:12.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service (out-of-bounds read and daemon crash) via a crafted (1) vote document or (2) consensus document. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201301-03.xml - https://lists.torproject.org/pipermail/tor-announce/2012-August/000086.html - http://secunia.com/advisories/50583 - htt
https://lists.torproject.org/pipermail/tor-announce/2012-August/000086.html - http://secunia.com/advisories/50583 - http://openwall.com/lists/oss-security/2012/08/21/6 - https://gitweb.torproject.org/tor.git/commit/55f635745afacefffdaafc72cc176ca7ab817546 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00048.html - https://trac.torproject.org/projects/tor/ticket/6530 - https://gitweb.torproject.org/tor.git/commit/57e35ad3d91724882c345ac709666a551a977f0f
CVE ID: CVE-2012-3519 State: PUBLISHED Published: 2012-08-26T01:00:00 Last Updated: 2024-08-06T20:05:12.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might allow remote attackers to obtain sensitive information about relay selection via a timing side-channel attack. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201301-03.xml - https://gitweb.torproject.org/tor.git/commit/308f6dad20675c42b29862f4269ad1fbfb00dc9a - https://lists.torproject.org/pipermail/tor-announce/2012-August/000086.htm
it/308f6dad20675c42b29862f4269ad1fbfb00dc9a - https://lists.torproject.org/pipermail/tor-announce/2012-August/000086.html - http://secunia.com/advisories/50583 - http://openwall.com/lists/oss-security/2012/08/21/6 - https://trac.torproject.org/projects/tor/ticket/6537 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00048.html - https://gitweb.torproject.org/tor.git/commit/d48cebc5e498b0ae673635f40fc57cdddab45d5b
CVE ID: CVE-2012-3520 State: PUBLISHED Published: 2012-10-03T10:00:00 Last Updated: 2024-08-06T20:05:12.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCM_CREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to (1) Avahi or (2) NetworkManager. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/22/1 - http://www.securityfocus.com/bid/55152 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html - https://github.
curityfocus.com/bid/55152 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html - https://github.com/torvalds/linux/commit/e0e3cea46d31d23dc40df0a49a7a2c04fe8edfea - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e0e3cea46d31d23dc40df0a49a7a2c04fe8edfea - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.ubuntu.com/usn/USN-1599-1 - http://www.ubuntu.com/usn/USN-1610-1 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00018.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.30 - http://secunia.com/advisories/50848 - https://bugzilla.redhat.com/show_bug.cgi?id=850449
CVE ID: CVE-2012-3521 State: PUBLISHED Published: 2014-06-13T14:00:00 Last Updated: 2024-08-06T20:05:12.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/p/geshi/code/2507/ - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105317.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105273.html - https://bugs.debian.org/cgi-bin/bugrepor
ttp://lists.fedoraproject.org/pipermail/package-announce/2013-May/105273.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=685324 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105247.html - http://www.openwall.com/lists/oss-security/2012/08/21/11