Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ies/74070 - http://www.securityfocus.com/bid/52513 - http://www.osvdb.org/80069 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://secunia.com/advisories/48412 - http://drupalcode.org/project/fancy_slide.git/commit/cd2a424 - http://drupal.org/node/1417688 - http://drupal.org/node/1482744
CVE ID: CVE-2012-2069 State: PUBLISHED Published: 2012-09-06T17:00:00 Last Updated: 2024-08-06T19:17:27.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Wishlist module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences via the (1) wl_reveal or (2) q parameters. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1492624 - http://secunia.com/advisories/48486 - http://drupalcode.org/project/wishlist.git/commit/6660c33 - http://www.madirish.net/con
//secunia.com/advisories/48486 - http://drupalcode.org/project/wishlist.git/commit/6660c33 - http://www.madirish.net/content/drupal-wishlist-6x-24-xss-vulnerability - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupalcode.org/project/wishlist.git/commit/73aaf98 - http://drupal.org/node/1483634 - http://drupal.org/node/1483636 - http://www.securityfocus.com/bid/52660
CVE ID: CVE-2012-2070 State: PUBLISHED Published: 2012-08-14T23:00:00 Last Updated: 2024-08-06T19:17:27.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MultiBlock module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the administer blocks permission to inject arbitrary web script or HTML via the block title. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1505414 - http://osvdb.org/80673 - http://www.securityfocus.com/bid/52800 - http://drupalcode.org/project/multiblock.git/commit/2c5177b - http://drupal.org/node/1506390 - http://drupal.
id/52800 - http://drupalcode.org/project/multiblock.git/commit/2c5177b - http://drupal.org/node/1506390 - http://drupal.org/node/1505410 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://secunia.com/advisories/48588 - http://drupalcode.org/project/multiblock.git/commit/aee07d3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74466 - http://www.madirish.net/content/drupal-multiblock-6x-13-xss-vulnerability
CVE ID: CVE-2012-2071 State: PUBLISHED Published: 2012-08-14T23:00:00 Last Updated: 2024-08-06T19:17:27.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Contact Forms module 6.x-1.x before 6.x-1.13 for Drupal when the core contact form is enabled, allows remote authenticated users with the administer site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80674 - http://drupal.org/node/1506330 - http://secunia.com/advisories/48583 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - https://exchange.x
330 - http://secunia.com/advisories/48583 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74467 - http://drupal.org/node/1506404 - http://www.securityfocus.com/bid/52801
CVE ID: CVE-2012-2072 State: PUBLISHED Published: 2012-08-14T23:00:00 Last Updated: 2024-08-06T19:17:27.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Share Buttons (AddToAny) module 6.x-3.x before 6.x-3.4 for Drupal allows remote authenticated users with the administer addtoany permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1083664 - http://secunia.com/advisories/48615 - http://www.securityfocus.com/bid/52777 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - https://exchange.xforce.ibmcloud.com/vulnerab
.com/bid/52777 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74469 - http://osvdb.org/80675 - http://drupal.org/node/1506412
CVE ID: CVE-2012-2073 State: PUBLISHED Published: 2012-08-14T23:00:00 Last Updated: 2024-08-06T19:17:27.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bundle copy module 7.x-1.x before 7.x-1.1 for Drupal does not check for the "use PHP for settings" permission while importing settings, which allows remote authenticated users with certain permissions to execute arbitrary PHP code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1506420 - http://osvdb.org/80676 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74439 - http://secunia.com/advisories/48626 - http://www.openwall.com/lists/oss-security/2012/04
oud.com/vulnerabilities/74439 - http://secunia.com/advisories/48626 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://www.securityfocus.com/bid/52811 - http://drupal.org/node/1506166 - http://drupalcode.org/project/bundle_copy.git/commit/299bdca
CVE ID: CVE-2012-2074 State: PUBLISHED Published: 2012-08-14T23:00:00 Last Updated: 2024-08-06T19:17:27.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in certain default views in the Ubercart Views module 6.x before 6.x-3.2 for Drupal allows remote attackers to obtain sensitive information via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1506428 - http://secunia.com/advisories/48631 - http://drupal.org/node/1505210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74485 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://osvdb.org/80677 - http://www.securityfocus.
ies/74485 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://osvdb.org/80677 - http://www.securityfocus.com/bid/52814
CVE ID: CVE-2012-2075 State: PUBLISHED Published: 2012-08-14T23:00:00 Last Updated: 2024-08-06T19:17:27.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Contact Save module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the access site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1506438 - http://secunia.com/advisories/48619 - http://osvdb.org/80669 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/953788 - http://www.securityfocus.com/bi
ttp://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/953788 - http://www.securityfocus.com/bid/52787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74515 - http://drupalcode.org/project/contact_save.git/commit/0654894
CVE ID: CVE-2012-2076 State: PUBLISHED Published: 2012-08-14T23:00:00 Last Updated: 2024-08-06T19:17:27.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/sharethis.git/commit/11f247a - http://secunia.com/advisories/48598 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://www.securityfocus.com/bid/52778 - https:
sories/48598 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://www.securityfocus.com/bid/52778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74516 - http://drupal.org/node/1506448 - http://drupal.org/node/1504746 - http://osvdb.org/80670
CVE ID: CVE-2012-2077 State: PUBLISHED Published: 2012-08-14T23:00:00 Last Updated: 2024-08-06T19:17:27.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of users with administer sharethis permissions via unknown vectors "outside of the Form API." Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/sharethis.git/commit/11f247a - http://secunia.com/advisories/48598 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://www.osvdb.org/80681 - http://www.securityfocus.com
98 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://www.osvdb.org/80681 - http://www.securityfocus.com/bid/52778 - http://drupal.org/node/1506448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74518 - http://drupal.org/node/1504746
CVE ID: CVE-2012-2078 State: PUBLISHED Published: 2019-11-21T22:58:01 Last Updated: 2024-08-06T19:17:27.862Z Vendors: Activity Products: Activity Problem Types: Cross-Site Scripting Description: Cross-site scripting (XSS) vulnerability in the Activity module 6.x-1.x for Drupal. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/07/1 - https://www.drupal.org/node/1506562
CVE ID: CVE-2012-2079 State: PUBLISHED Published: 2019-11-21T23:02:39 Last Updated: 2024-08-06T19:17:27.774Z Vendors: Activity Products: Activity Problem Types: Cross-Site Request Forgery Description: A cross-site request forgery (CSRF) vulnerability in the Activity module 6.x-1.x for Drupal. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/07/1 - https://www.drupal.org/node/1506562
CVE ID: CVE-2012-2080 State: PUBLISHED Published: 2012-08-14T23:00:00 Last Updated: 2024-08-06T19:17:27.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Node Limit Number module before 6.x-1.2 for Drupal allows remote attackers to hijack the authentication of users with the administer node limitnumber permission for requests that delete limits. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1506594 - http://osvdb.org/80684 - http://drupal.org/node/1506728 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://secunia.com/advisories/48597 - https://exchange.xforce.ibmclou
www.openwall.com/lists/oss-security/2012/04/07/1 - http://secunia.com/advisories/48597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74525 - http://drupalcode.org/project/node_limitnumber.git/commit/90f0d3a - http://www.securityfocus.com/bid/52816
CVE ID: CVE-2012-2081 State: PUBLISHED Published: 2012-08-14T23:00:00 Last Updated: 2024-08-06T19:17:27.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Organic Groups (OG) module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access, which allows remote attackers to obtain sensitive information such as private group titles via a request through the Views module. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48620 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://osvdb.org/80678 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74526 - http://drupal.org/node/1507446 - http://drupal.org/nod
78 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74526 - http://drupal.org/node/1507446 - http://drupal.org/node/1507328 - http://www.securityfocus.com/bid/52799
CVE ID: CVE-2012-2082 State: PUBLISHED Published: 2012-08-14T23:00:00 Last Updated: 2024-08-06T19:17:27.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Chaos tool suite (aka CTools) module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments permission to inject arbitrary web script or HTML via a user signature. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48616 - http://drupalcode.org/project/ctools.git/commit/755b3c4 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://www.securityfocus.com/bid/52794 - http://osvdb.org/80679 -
p://www.openwall.com/lists/oss-security/2012/04/07/1 - http://www.securityfocus.com/bid/52794 - http://osvdb.org/80679 - http://drupal.org/node/1507466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74481 - http://drupal.org/node/1507412
CVE ID: CVE-2012-2083 State: PUBLISHED Published: 2012-08-31T22:00:00Z Last Updated: 2024-09-17T03:19:12.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the fusion_core_preprocess_page function in fusion_core/template.php in the Fusion module before 6.x-1.13 for Drupal allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1506600 - http://drupalcode.org/project/fusion.git/commit/f7cee3d - http://osvdb.org/80680 - http://secunia.com/advisories/48606 - http://www.securityfocus.com/bid/52798 - http://www.openwall.com/li
db.org/80680 - http://secunia.com/advisories/48606 - http://www.securityfocus.com/bid/52798 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1507510
CVE ID: CVE-2012-2084 State: PUBLISHED Published: 2012-11-22T11:00:00 Last Updated: 2024-08-06T19:17:27.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Printer, email and PDF versions module 6.x-1.x before 6.x-1.15 and 7.x-1.x before 7.x-1.0 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/print.git/commit/30480e0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74611 - http://drupalcode.org/project/print.git/commit/6771c3f - http://drupal.org/node/1515722
oud.com/vulnerabilities/74611 - http://drupalcode.org/project/print.git/commit/6771c3f - http://drupal.org/node/1515722 - http://drupal.org/node/1515060 - http://www.securityfocus.com/bid/52896 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1515076 - http://secunia.com/advisories/48625
CVE ID: CVE-2012-2085 State: PUBLISHED Published: 2012-08-28T16:00:00 Last Updated: 2024-08-06T19:17:27.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48794 - http://secunia.com/advisories/48708 - http://www.openwall.com/lists/oss-security/2012/04/08/1 - http://security.gentoo.org/glsa/glsa-201208-04.xml - https://trac.gajim.org/ticket/7031 - http://www.openwall.com/lists/oss-security/2012/04/08/2 - ht
a/glsa-201208-04.xml - https://trac.gajim.org/ticket/7031 - http://www.openwall.com/lists/oss-security/2012/04/08/2 - https://trac.gajim.org/changeset/bc296e96ac10 - http://www.securityfocus.com/bid/52943
CVE ID: CVE-2012-2086 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T19:17:27.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows remote attackers to execute arbitrary SQL commands via the jig parameter. Additional Analyst Notes: - CVE Program Container: References: - https://trac.gajim.org/changeset/988e38ce0e0c - https://trac.gajim.org/ticket/7034 - http://secunia.com/advisories/48794 - http://secunia.com/advisories/48708 - http://www.openwall.com/lists/oss-security/2012/04/08/1 - http://security.gentoo.org/glsa/glsa-201208-04.xml - h
48708 - http://www.openwall.com/lists/oss-security/2012/04/08/1 - http://security.gentoo.org/glsa/glsa-201208-04.xml - http://www.openwall.com/lists/oss-security/2012/04/08/2 - http://www.securityfocus.com/bid/52943
CVE ID: CVE-2012-2087 State: PUBLISHED Published: 2020-01-23T13:57:47 Last Updated: 2024-08-06T19:17:27.791Z Vendors: ISPConfig Products: ISPConfig Problem Types: authentication error Description: ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/08/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74739 - http://www.openwall.com/lists/oss-security/2012/04/09/4 - https://www.securityfocus.com/bid/52936
CVE ID: CVE-2012-2088 State: PUBLISHED Published: 2012-07-22T17:00:00 Last Updated: 2024-08-06T19:26:07.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion between signed and unsigned types, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - https://hermes.opensuse.org/messages/15083566 - http://list
ontainer: References: - http://support.apple.com/kb/HT6163 - https://hermes.opensuse.org/messages/15083566 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00010.html - http://rhn.redhat.com/errata/RHSA-2012-1054.html - http://www.securityfocus.com/bid/54270 - http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://support.apple.com/kb/HT6162 - https://bugzilla.redhat.com/show_bug.cgi?id=832864 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:101 - http://secunia.com/advisories/49686 - http://secunia.com/advisories/50726
CVE ID: CVE-2012-2089 State: PUBLISHED Published: 2012-04-17T21:00:00 Last Updated: 2024-08-06T19:26:07.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74831 - http://www.securitytracker.com/id?1026924 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/0
74831 - http://www.securitytracker.com/id?1026924 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079474.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079467.html - http://nginx.org/en/security_advisories.html - http://www.securityfocus.com/bid/52999 - http://www.openwall.com/lists/oss-security/2012/04/12/9 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079388.html
CVE ID: CVE-2012-2090 State: PUBLISHED Published: 2012-06-17T01:00:00 Last Updated: 2024-08-06T19:26:07.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in certain data chunk values in an aircraft xml model to (1) fgfs/flightgear/src/Cockpit/panel.cxx or (2) fgfs/flightgear/src/Network/generic.cxx, or (3) a scene graph model to simgear/simgear/scene/model/SGText.cxx. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/adv
/simgear/scene/model/SGText.cxx. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74791 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082017.html - http://www.openwall.com/lists/oss-security/2012/04/10/13 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082002.html - https://bugzilla.redhat.com/show_bug.cgi?id=811617 - https://security.gentoo.org/glsa/201603-12 - http://sourceforge.net/mailarchive/message.php?msg_id=29012174 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081997.html - http://sourceforge.net/mailarchive/
- http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081997.html - http://sourceforge.net/mailarchive/message.php?msg_id=28957051
CVE ID: CVE-2012-2091 State: PUBLISHED Published: 2012-06-17T01:00:00 Last Updated: 2024-08-06T19:26:07.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in src/FDM/YASim/Rotor.cpp or (2) a crafted UDP packet to the SGSocketUDP::read function in simgear/simgear/simgear/io/sg_socket_udp.cxx. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/487
io/sg_socket_udp.cxx. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48780 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082017.html - http://www.openwall.com/lists/oss-security/2012/04/10/13 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082002.html - https://bugzilla.redhat.com/show_bug.cgi?id=811617 - https://security.gentoo.org/glsa/201603-12 - http://sourceforge.net/mailarchive/message.php?msg_id=29012174 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081997.html - http://sourceforge.net/mailarchive/message.php?msg_id=28957051
CVE ID: CVE-2012-2092 State: PUBLISHED Published: 2019-12-06T16:19:06 Last Updated: 2024-08-06T19:26:07.238Z Vendors: Ubuntu Products: Cobbler Problem Types: UNKNOWN_TYPE Description: A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu-import script due to an error when verifying the GPG signature. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-2092 - http://www.securityfocus.com/bid/52971 - http://www.openwall.com/lists/oss-security/2012/04/10/14 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74789
CVE ID: CVE-2012-2093 State: PUBLISHED Published: 2012-05-18T22:00:00 Last Updated: 2024-08-06T19:26:07.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the get_tmpfile_name function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/10/6 - http://hg.gajim.org/gajim/rev/f046e4aaf7d4 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079241.html - http://www.securityfocus.com/bid/53017 - http://secunia.com/advisories/48794 - https://trac.gajim.org/changes
241.html - http://www.securityfocus.com/bid/53017 - http://secunia.com/advisories/48794 - https://trac.gajim.org/changeset/13759/src/common/latex.py - http://security.gentoo.org/glsa/glsa-201208-04.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/74869 - http://secunia.com/advisories/48695 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079169.html - http://www.openwall.com/lists/oss-security/2012/04/10/15 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079237.html