Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
el/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=90481622d75715bfcb68501280a917dbfe516029 - http://www.debian.org/security/2012/dsa-2469 - https://bugzilla.redhat.com/show_bug.cgi?id=817430 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html - http://www.openwall.com/lists/oss-security/2012/04/24/12 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.6 - http://www.securityfocus.com/bid/53233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75168 - https://github.com/torvalds/linux/commit/90481622d75715bfcb68501280a917dbfe516029
CVE ID: CVE-2012-2134 State: PUBLISHED Published: 2014-02-26T15:00:00 Last Updated: 2024-08-06T19:26:08.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: The handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not properly handle LDAP query errors, which allows remote attackers to cause a denial of service (infinite loop and named server hang) via a non-alphabet character in the base DN in an LDAP search DNS query. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48901 - https://www.redhat.com/archives/freeipa-users/2012-April/msg00144.html - https://bugzilla.redhat.com/show_bug.cgi?id=815846 -
//www.redhat.com/archives/freeipa-users/2012-April/msg00144.html - https://bugzilla.redhat.com/show_bug.cgi?id=815846 - https://git.fedorahosted.org/cgit/bind-dyndb-ldap.git/tree/NEWS - http://rhn.redhat.com/errata/RHSA-2012-0683.html - http://www.osvdb.org/81619 - http://www.openwall.com/lists/oss-security/2012/04/24/15
CVE ID: CVE-2012-2135 State: PUBLISHED Published: 2012-08-14T22:00:00 Last Updated: 2024-08-06T19:26:09.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive information (process memory) or cause a denial of service (memory corruption and crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1615-1 - http://secunia.com/advisories/51087 - http://www.ubuntu.com/usn/USN-1616-1 - http://bugs.python.org/issue14579 - http:
- http://secunia.com/advisories/51087 - http://www.ubuntu.com/usn/USN-1616-1 - http://bugs.python.org/issue14579 - http://secunia.com/advisories/51089 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=670389 - http://www.openwall.com/lists/oss-security/2012/04/25/4 - http://www.openwall.com/lists/oss-security/2012/04/25/2
CVE ID: CVE-2012-2136 State: PUBLISHED Published: 2012-08-09T10:00:00 Last Updated: 2024-08-06T19:26:08.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5 - http://rhn.redhat.com/errata/RHSA-2012-0743.html - http://git.kernel.org/?p=linux/kernel/git/torva
3.x/ChangeLog-3.4.5 - http://rhn.redhat.com/errata/RHSA-2012-0743.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cc9b17ad29ecaa20bfe426a8d4dbfb94b13ff1cc - http://www.securityfocus.com/bid/53721 - https://github.com/torvalds/linux/commit/cc9b17ad29ecaa20bfe426a8d4dbfb94b13ff1cc - http://www.ubuntu.com/usn/USN-1535-1 - http://ubuntu.com/usn/usn-1529-1 - https://bugzilla.redhat.com/show_bug.cgi?id=816289 - http://rhn.redhat.com/errata/RHSA-2012-1087.html - http://secunia.com/advisories/50807
CVE ID: CVE-2012-2137 State: PUBLISHED Published: 2013-01-22T23:00:00 Last Updated: 2024-08-06T19:26:08.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in virt/kvm/irq_comm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to Message Signaled Interrupts (MSI), irq routing entries, and an incorrect check by the setup_routing_entry function before invoking the kvm_set_irq function. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=816151 - http://rhn.redhat.com/errata/RHSA-2012-0743.html
ner: References: - https://bugzilla.redhat.com/show_bug.cgi?id=816151 - http://rhn.redhat.com/errata/RHSA-2012-0743.html - http://www.ubuntu.com/usn/USN-1606-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.24 - http://www.ubuntu.com/usn/USN-1594-1 - http://secunia.com/advisories/50961 - http://ubuntu.com/usn/usn-1607-1 - http://www.ubuntu.com/usn/USN-1609-1 - http://ubuntu.com/usn/usn-1529-1 - http://ubuntu.5.n6.nabble.com/PATCH-Oneiric-CVE-2012-2137-KVM-Fix-buffer-overflow-in-kvm-set-irq-td4990566.html - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=f2ebd422f71cda
13-06/msg00005.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=f2ebd422f71cda9c791f76f85d2ca102ae34a1ed - http://secunia.com/advisories/50952 - http://marc.info/?l=bugtraq&m=139447903326211&w=2 - http://www.securityfocus.com/bid/54063
CVE ID: CVE-2012-2138 State: PUBLISHED Published: 2012-07-09T22:00:00Z Last Updated: 2024-09-16T20:42:21.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/SLING-2517 - http://svn.apache.org/viewvc?view=revision&revision=1352865 - http://mail-archives.apache.org/mod_mbox/www-announce/20120
ttp://svn.apache.org/viewvc?view=revision&revision=1352865 - http://mail-archives.apache.org/mod_mbox/www-announce/201207.mbox/%3CCAEWfVJ=PwoQmwJg0KmbrC17Gw51kgfKRsqgy=4RpMQsdGh0bVg%40mail.gmail.com%3E
CVE ID: CVE-2012-2139 State: PUBLISHED Published: 2012-07-18T18:00:00 Last Updated: 2024-08-06T19:26:08.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=816352 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080648.html - http://www.openwall.com/lists/oss-security/2012/04/25/8 - http://lists.fedoraproject.org/pipermail/package-announce/201
http://www.openwall.com/lists/oss-security/2012/04/25/8 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080645.html - https://bugzilla.novell.com/show_bug.cgi?id=759092 - http://secunia.com/advisories/48970 - https://github.com/mikel/mail/commit/29aca25218e4c82991400eb9b0c933626aefc98f - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080747.html - http://www.openwall.com/lists/oss-security/2012/04/26/1
CVE ID: CVE-2012-2140 State: PUBLISHED Published: 2012-07-18T18:00:00 Last Updated: 2024-08-06T19:26:08.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=816352 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080648.html - https://github.com/mikel/mail/commit/ac56f03bdfc30b379aeecd4ff317d08fdaa328c2 - http://www.openwall.com/lists/oss-security/2012/04/25/8 - http://lists.fedoraproject.org/pipermail/
4ff317d08fdaa328c2 - http://www.openwall.com/lists/oss-security/2012/04/25/8 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080645.html - https://bugzilla.novell.com/show_bug.cgi?id=759092 - http://secunia.com/advisories/48970 - https://github.com/mikel/mail/commit/39b590ddb08f90ddbe445837359a2c8843e533d0 - https://github.com/mikel/mail/blob/9beb079c70d236a5ad2e1ba95b2c977e55deb7af/CHANGELOG.rdoc - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080747.html - http://www.openwall.com/lists/oss-security/2012/04/26/1
CVE ID: CVE-2012-2141 State: PUBLISHED Published: 2012-08-14T22:00:00 Last Updated: 2024-08-06T19:26:08.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/26/3 - http://rhn.redhat.com/errata/RHSA-2013-0124.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75169 - http://www.security
redhat.com/errata/RHSA-2013-0124.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75169 - http://www.securitytracker.com/id?1026984 - http://secunia.com/advisories/59974 - http://support.citrix.com/article/CTX139049 - http://www.openwall.com/lists/oss-security/2012/04/26/2 - http://www.gentoo.org/security/en/glsa/glsa-201409-02.xml - http://www.securityfocus.com/bid/53258 - https://bugzilla.redhat.com/show_bug.cgi?id=815813 - http://www.securityfocus.com/bid/53255 - http://secunia.com/advisories/48938
CVE ID: CVE-2012-2142 State: PUBLISHED Published: 2020-01-09T20:42:47 Last Updated: 2024-08-06T19:26:08.483Z Vendors: poppler Products: poppler Problem Types: Other Description: The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/09/6 - http://www.openwall.com/lists/oss-security/2013/08/09/5 - http://cgit.freedesktop.org/poppler/poppler/commit/?id=71bad47ed6a36d825b0d08992c8db56845c71e40 - http://cgit.freedesktop.org/poppler/poppler/commit/NEWS?id=2bc48d536
mmit/?id=71bad47ed6a36d825b0d08992c8db56845c71e40 - http://cgit.freedesktop.org/poppler/poppler/commit/NEWS?id=2bc48d5369f1dbecfc4db2878f33bdeb80d8d90f - https://bugzilla.redhat.com/show_bug.cgi?id=789936 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00049.html
CVE ID: CVE-2012-2143 State: PUBLISHED Published: 2012-07-05T14:00:00 Last Updated: 2024-08-06T19:26:08.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password. Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/docs/9.1/static/release-9-1-4
Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/docs/9.1/static/release-9-1-4.html - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html - http://security.freebsd.org/advisories/FreeBSD-SA-12:02.crypt.asc - http://secunia.com/advisories/50718 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082292.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082258.html - https://bugzilla.redhat.com/show_bug.cgi?id=816956 - http://www.postgresql.org/support/security/ - http://www.debian.org/security/2012/dsa-2491 - http://www.securitytracker.com/id?1026995 - http://git.php.net/?p=php-src.git%3
/www.debian.org/security/2012/dsa-2491 - http://www.securitytracker.com/id?1026995 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=aab49e934de1fff046e659cbec46e3d053b41c34 - http://www.postgresql.org/docs/8.3/static/release-8-3-19.html - http://www.postgresql.org/docs/8.4/static/release-8-4-12.html - http://git.postgresql.org/gitweb/?p=postgresql.git&a=commit&h=932ded2ed51e8333852e370c7a6dad75d9f236f9 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://support.apple.com/kb/HT5501 - http://rhn.redhat.com/errata/RHSA-2012-1037.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082294.html - http://www.mandriva.com/security/advisories?n
lists.fedoraproject.org/pipermail/package-announce/2012-June/082294.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:092 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.postgresql.org/docs/9.0/static/release-9-0-8.html - http://lists.opensuse.org/opensuse-updates/2012-09/msg00102.html - http://lists.opensuse.org/opensuse-updates/2012-10/msg00013.html - http://secunia.com/advisories/49304 - http://lists.opensuse.org/opensuse-updates/2012-10/msg00024.html
CVE ID: CVE-2012-2144 State: PUBLISHED Published: 2012-06-05T22:00:00 Last Updated: 2024-08-06T19:26:08.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49024 - http://www.openwall.com/lists/oss-security/2012/05/05/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75423 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081173.html - https://bugs.launchpad.net/horizon/+bug/978896 - http://ubuntu.com/usn/u
permail/package-announce/2012-May/081173.html - https://bugs.launchpad.net/horizon/+bug/978896 - http://ubuntu.com/usn/usn-1439-1 - https://github.com/openstack/horizon/commit/041b1c44c7d6cf5429505067c32f8f35166a8bab - http://secunia.com/advisories/49071 - http://www.securityfocus.com/bid/53399 - http://www.osvdb.org/81741
CVE ID: CVE-2012-2145 State: PUBLISHED Published: 2012-09-28T15:00:00 Last Updated: 2024-08-06T19:26:08.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/QPID-4021 - http://rhn.redhat.com/errata/RHSA-2012-1277.html - http://rhn.redhat.com/errata/RHSA-2012-1269.html - http://secunia.com/advisories/50699 - http://secunia.com/advisories/50698 - https://exchange.xf
ta/RHSA-2012-1269.html - http://secunia.com/advisories/50699 - http://secunia.com/advisories/50698 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78730 - http://www.securityfocus.com/bid/55608 - http://secunia.com/advisories/50573 - https://bugzilla.redhat.com/show_bug.cgi?id=817175 - https://issues.apache.org/jira/browse/QPID-2616
CVE ID: CVE-2012-2146 State: PUBLISHED Published: 2012-08-26T21:00:00Z Last Updated: 2024-08-06T19:26:08.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for context-dependent users to obtain sensitive information and decrypt the database. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/sqlelixir/browse_thread/thread/efc16227514cffa?pli=1 - http://www.openwall.com/lists/oss-security/2012/04/28/2 - http://www.openwall.com/lists/oss-security/2012/04/27/8 - https://bugzilla.redhat.com/show_bug.cgi?id=810013 - http:/
- http://www.openwall.com/lists/oss-security/2012/04/27/8 - https://bugzilla.redhat.com/show_bug.cgi?id=810013 - http://elixir.ematia.de/trac/ticket/119 - http://www.openwall.com/lists/oss-security/2012/04/29/1
CVE ID: CVE-2012-2147 State: PUBLISHED Published: 2012-08-26T21:00:00 Last Updated: 2024-08-06T19:26:08.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/19/5 - http://www.openwall.com/lists/oss-security/2012/04/17/2 - http://www.openwall.com/lists/oss-security/2012/04/27/7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78924 - http://www.openwall.com/lists/o
oss-security/2012/04/27/7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78924 - http://www.openwall.com/lists/oss-security/2012/04/19/4 - http://www.openwall.com/lists/oss-security/2012/04/19/3 - http://www.openwall.com/lists/oss-security/2012/04/29/2 - http://www.openwall.com/lists/oss-security/2012/04/18/2
CVE ID: CVE-2012-2148 State: PUBLISHED Published: 2019-12-06T17:35:12 Last Updated: 2024-08-06T19:26:07.739Z Vendors: jbossas4 Products: AS Problem Types: UNKNOWN_TYPE Description: An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-2148 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2148 - https://access.redhat.com/security/cve/cve-2012-2148
CVE ID: CVE-2012-2149 State: PUBLISHED Published: 2012-06-21T15:00:00 Last Updated: 2024-08-06T19:26:08.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://www.securitytracker.com/id?10
.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://www.securitytracker.com/id?1027069 - http://rhn.redhat.com/errata/RHSA-2012-1043.html - https://www.sec-consult.com/files/20120518-0_openoffice_memory_overwrite.txt - http://archives.neohapsis.com/archives/bugtraq/2012-05/0090.html - http://www.securityfocus.com/bid/53570 - http://www.openoffice.org/security/cves/CVE-2012-2149.html - http://packetstormsecurity.org/files/112862/libwpd-WPXContentListener-_closeTableRow-Memory-Overwrite.html - http://secunia.com/advisories/46992
CVE ID: CVE-2012-2150 State: PUBLISHED Published: 2015-08-25T17:00:00 Last Updated: 2024-08-06T19:26:08.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/07/30/3 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164189.html - http://lists.opensuse.org/opensuse-updates/2015-08/msg00027.html - http://oss.sgi.com/pipermail/xfs/2015-July/042726.html - https://bugzilla.redhat.com/show
pdates/2015-08/msg00027.html - http://oss.sgi.com/pipermail/xfs/2015-July/042726.html - https://bugzilla.redhat.com/show_bug.cgi?id=817696 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.openwall.com/lists/oss-security/2015/07/23/12 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164180.html - http://www.securityfocus.com/bid/76013 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163690.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00007.html
CVE ID: CVE-2012-2151 State: PUBLISHED Published: 2012-08-14T22:00:00 Last Updated: 2024-08-06T19:26:08.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SPIP 1.9.x before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75104 - http://www.openwall.com/lists/oss-security/2012/05/01/4 - http://www.securitytracker.com/id?1026970 - http://archives.rezo.net/archives/spip-en.mbox/U5QUZ6WJRAJC7H5BR7W5SQG6WCD3PXL7/ - http://
uritytracker.com/id?1026970 - http://archives.rezo.net/archives/spip-en.mbox/U5QUZ6WJRAJC7H5BR7W5SQG6WCD3PXL7/ - http://www.openwall.com/lists/oss-security/2012/04/30/4 - http://secunia.com/advisories/48939 - http://www.osvdb.org/81473 - http://www.securityfocus.com/bid/53216 - http://www.debian.org/security/2012/dsa-2461
CVE ID: CVE-2012-2152 State: PUBLISHED Published: 2012-07-25T21:00:00 Last Updated: 2024-08-06T19:26:08.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the get_packet method in socket.c in dhcpcd 3.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2498 - http://www.securityfocus.com/bid/53354 - https://bugzilla.novell.com/show_bug.cgi?id=760334 - http://www.openwall.com/lists/oss-security/2012/05/02/5 - http://www.openwall.com/lists/oss-security/2012/05/02/4
CVE ID: CVE-2012-2153 State: PUBLISHED Published: 2012-10-01T00:00:00 Last Updated: 2024-08-06T19:26:08.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 7.x before 7.14 does not properly restrict access to nodes in a list when using a "contributed node access module," which allows remote authenticated users with the "Access the content overview page" permission to read all published nodes by accessing the admin/content page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53362 - http://drupal.org/drupal-7.14 - http://drupalcode.org/project/drupal.git/commit/c6d2b8311b82fe78d18732f01a68ceca3dea50af - http://www.mandriva.
l-7.14 - http://drupalcode.org/project/drupal.git/commit/c6d2b8311b82fe78d18732f01a68ceca3dea50af - http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 - http://secunia.com/advisories/49012 - http://drupal.org/node/1557938 - http://drupal.org/node/1558478
CVE ID: CVE-2012-2154 State: PUBLISHED Published: 2012-08-14T23:00:00 Last Updated: 2024-08-06T19:26:08.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the CDN2 Video module 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74520 - http://www.openwall.com/lists/oss-security/2012/05/03/2 - http://www.securityfocus.com/bid/52812 - http://drupal.org/node/1506542 - http://www.openwall.com/lists/oss-security/2012/05/03/1