Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2112 State: PUBLISHED Published: 2012-08-27T21:00:00 Last Updated: 2024-08-06T19:26:07.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages. Additional Analyst Notes: - CVE Program Container: References: - http://lists.typo3.org/pipermail/typo3-announce/2012/000241.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74920 - http://www.securityfocus.com/bid/53047 - http://lists.typo3.org/pipermail/typo3-announce/2012/000242.html -
ties/74920 - http://www.securityfocus.com/bid/53047 - http://lists.typo3.org/pipermail/typo3-announce/2012/000242.html - http://www.openwall.com/lists/oss-security/2012/04/17/5 - http://www.openwall.com/lists/oss-security/2012/04/18/1 - http://www.debian.org/security/2012/dsa-2455 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-002/
CVE ID: CVE-2012-2113 State: PUBLISHED Published: 2012-07-22T17:00:00 Last Updated: 2024-08-06T19:26:07.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/54076 - http://secunia.com/advisories/49493 - http://www.remotesensing.org/libtiff/v4.0.2.html - https://hermes.opensuse.org/messages/15083566 - http://lists.opensuse.org/opensuse-security-anno
g/libtiff/v4.0.2.html - https://hermes.opensuse.org/messages/15083566 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00010.html - http://www.debian.org/security/2012/dsa-2552 - http://rhn.redhat.com/errata/RHSA-2012-1054.html - http://security.gentoo.org/glsa/glsa-201209-02.xml - https://bugzilla.redhat.com/show_bug.cgi?id=810551 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:101 - http://secunia.com/advisories/49686 - http://secunia.com/advisories/50726
CVE ID: CVE-2012-2114 State: PUBLISHED Published: 2012-08-31T22:00:00 Last Updated: 2024-08-06T19:26:08.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in fprintf in musl before 0.8.8 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string to an unbuffered stream such as stderr. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/musl/2012/04/17/1 - http://www.openwall.com/lists/oss-security/2012/04/18/6 - http://www.openwall.com/lists/oss-security/2012/04/18/5 - http://www.etalabs.net/musl/download.html - http://www.securityf
tp://www.openwall.com/lists/oss-security/2012/04/18/5 - http://www.etalabs.net/musl/download.html - http://www.securityfocus.com/bid/53144
CVE ID: CVE-2012-2115 State: PUBLISHED Published: 2012-09-09T21:00:00 Last Updated: 2024-08-06T19:26:08.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in interface/login/validateUser.php in OpenEMR 4.1.0 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the u parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/17/1 - http://www.openwall.com/lists/oss-security/2012/04/18/7 - http://www.mavitunasecurity.com/sql-injection-vulnerability-in-openemr/ - http://www.osvdb.org/78132 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71983 - http:/
erability-in-openemr/ - http://www.osvdb.org/78132 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71983 - http://www.exploit-db.com/exploits/18274 - http://www.securityfocus.com/bid/51247 - http://seclists.org/fulldisclosure/2012/Jan/27 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0013.html - http://www.open-emr.org/wiki/index.php/OpenEMR_Patches
CVE ID: CVE-2012-2116 State: PUBLISHED Published: 2012-08-31T22:00:00Z Last Updated: 2024-09-16T22:21:02.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1538198 - http://drupalcode.org/project/commerce_reorder.git/commit/bf060ab - http://secunia.com/advisories/48912 - http://www.openwall.com/lists/oss-security/2012/04/18/11 - http://www.openwall.com/lists/oss-securit
/advisories/48912 - http://www.openwall.com/lists/oss-security/2012/04/18/11 - http://www.openwall.com/lists/oss-security/2012/04/19/1
CVE ID: CVE-2012-2117 State: PUBLISHED Published: 2012-08-31T22:00:00 Last Updated: 2024-08-06T19:26:07.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Gigya - Social optimization module 6.x before 6.x-3.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1538704 - http://drupal.org/node/1515084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75025 - http://www.openwall.com/lists/oss-security/2012/04/18/11 - http://www.openwall.com/lists/oss-security/2012/04/19/1 - http://secunia.com/adv
.com/lists/oss-security/2012/04/18/11 - http://www.openwall.com/lists/oss-security/2012/04/19/1 - http://secunia.com/advisories/48832
CVE ID: CVE-2012-2118 State: PUBLISHED Published: 2012-05-18T22:00:00 Last Updated: 2024-08-06T19:26:08.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74930 - http://patchwork.freedesktop.org/patch/10001/ - http://www.openwall.com/lists/oss-security/2012/04/19/2 - http://www.openwall.com/lists/o
freedesktop.org/patch/10001/ - http://www.openwall.com/lists/oss-security/2012/04/19/2 - http://www.openwall.com/lists/oss-security/2012/04/18/8
CVE ID: CVE-2012-2119 State: PUBLISHED Published: 2013-01-22T23:00:00 Last Updated: 2024-08-06T19:26:07.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the macvtap device driver in the Linux kernel before 3.4.5, when running in certain configurations, allows privileged KVM guest users to cause a denial of service (crash) via a long descriptor with a long vector length. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5 - http://rhn.redhat.com/errata/RHSA-2012-0743.html - https://github.com/torvalds/linux/commit/b92946e2919134ebe2a4083e4302236295ea2a73 - http://git.kernel.org/?p=linux/
ml - https://github.com/torvalds/linux/commit/b92946e2919134ebe2a4083e4302236295ea2a73 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b92946e2919134ebe2a4083e4302236295ea2a73 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=814278 - http://marc.info/?l=linux-netdev&m=133455718001608&w=2 - http://ubuntu.com/usn/usn-1529-1 - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html - https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=4aae94d1c7b32316911c86176c0ed4f8ed62da73 - http://www.openwall.com/lists/oss-security/2012/04/19/14
CVE ID: CVE-2012-2120 State: PUBLISHED Published: 2012-05-18T22:00:00Z Last Updated: 2024-09-16T16:28:56.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T option, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/19/12 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668779 - http://www.openwall.com/lists/oss-security/2012/04/19/15
CVE ID: CVE-2012-2121 State: PUBLISHED Published: 2012-05-17T10:00:00 Last Updated: 2024-08-06T19:26:08.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50732 - http://rhn.redhat.com/errata/RHSA-2012-0743.html - http://www.securitytracker.com/id?1027083 - ht
com/advisories/50732 - http://rhn.redhat.com/errata/RHSA-2012-0743.html - http://www.securitytracker.com/id?1027083 - http://www.openwall.com/lists/oss-security/2012/04/19/16 - https://bugzilla.redhat.com/show_bug.cgi?id=814149 - https://github.com/torvalds/linux/commit/09ca8e1173bcb12e2a449698c9ae3b86a8a10195 - http://www.ubuntu.com/usn/USN-1577-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.4 - http://www.ubuntu.com/usn/USN-2036-1 - http://www.ubuntu.com/usn/USN-2037-1 - http://rhn.redhat.com/errata/RHSA-2012-0676.html
CVE ID: CVE-2012-2122 State: PUBLISHED Published: 2012-06-26T18:00:00 Last Updated: 2024-08-06T19:26:07.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value. Additional Analyst Notes: - CVE Progr
ly causes a token comparison to succeed due to an improperly-checked return value. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.mysql.com/bug.php?id=64884 - http://www.securityfocus.com/bid/53911 - http://www.exploit-db.com/exploits/19092 - http://secunia.com/advisories/53372 - http://security.gentoo.org/glsa/glsa-201308-06.xml - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html - https://community.rapid7.com/community/metasploit/blog/2012/06/11/cve-2012-2122-a-tragically-comedic-security-flaw-in-mysql - http://securitytracker.com/id?1027143 - http://secunia.com/advisories/49417 - http://seclists.org/oss-sec/2012/q2/493 - http://kb.ask
tytracker.com/id?1027143 - http://secunia.com/advisories/49417 - http://seclists.org/oss-sec/2012/q2/493 - http://kb.askmonty.org/en/mariadb-5162-release-notes/
CVE ID: CVE-2012-2123 State: PUBLISHED Published: 2012-05-17T10:00:00 Last Updated: 2024-08-06T19:26:08.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0743.html - http://www.kernel.org/pub/linux/kernel
ogram Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0743.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.3 - http://rhn.redhat.com/errata/RHSA-2012-0670.html - http://www.openwall.com/lists/oss-security/2012/04/20/6 - http://www.debian.org/security/2012/dsa-2469 - http://www.securityfocus.com/bid/53166 - https://bugzilla.redhat.com/show_bug.cgi?id=806722 - https://github.com/torvalds/linux/commit/d52fc5dde171f030170a6cb78034d166b13c9445 - http://www.securitytracker.com/id?1027072 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75043 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d52fc5dde171f030170a6cb78034d166b13c9
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d52fc5dde171f030170a6cb78034d166b13c9445
CVE ID: CVE-2012-2124 State: PUBLISHED Published: 2013-01-18T11:00:00Z Last Updated: 2024-08-06T19:26:08.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service (disk consumption) by making many IMAP login attempts with different usernames, leading to the creation of many preference files. NOTE: this issue exists because of an incorrect fix for CVE-2010-2813. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51730 - https://bugzilla
Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51730 - https://bugzilla.redhat.com/show_bug.cgi?id=814671 - http://www.openwall.com/lists/oss-security/2012/04/20/22 - http://rhn.redhat.com/errata/RHSA-2013-0126.html
CVE ID: CVE-2012-2125 State: PUBLISHED Published: 2013-10-01T17:00:00 Last Updated: 2024-08-06T19:26:08.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote attackers to observe or modify a gem during installation via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55381 - http://www.ubuntu.com/usn/USN-1582-1/ - https://github.com/rubygems/rubygems/blob/1.8/History.txt - http://rhn.redhat.com/errata/RHSA-2013-1203.html - https://bugzilla.redhat.com/show_bug.cgi?id=814718 - http://www.openwall.com/lists/oss-securi
rata/RHSA-2013-1203.html - https://bugzilla.redhat.com/show_bug.cgi?id=814718 - http://www.openwall.com/lists/oss-security/2012/04/20/24 - http://rhn.redhat.com/errata/RHSA-2013-1852.html - http://rhn.redhat.com/errata/RHSA-2013-1441.html
CVE ID: CVE-2012-2126 State: PUBLISHED Published: 2013-10-01T17:00:00 Last Updated: 2024-08-06T19:26:08.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55381 - http://www.ubuntu.com/usn/USN-1582-1/ - https://github.com/rubygems/rubygems/blob/1.8/History.txt - http://rhn.redhat.com/errata/RHSA-2013-1203.html - https://bugzilla.redhat.com/show_bug.cgi?id=814718 - http://www.openwall.com/lists/oss-security/2012/04/20/24 - http://rh
ttps://bugzilla.redhat.com/show_bug.cgi?id=814718 - http://www.openwall.com/lists/oss-security/2012/04/20/24 - http://rhn.redhat.com/errata/RHSA-2013-1852.html - http://rhn.redhat.com/errata/RHSA-2013-1441.html
CVE ID: CVE-2012-2127 State: PUBLISHED Published: 2012-06-21T23:00:00 Last Updated: 2024-08-06T19:26:07.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/905ad269c55fc62bee3da29f7b1d1efeba8aa1e1 - http://www.ubuntu.com/usn/USN-159
- https://github.com/torvalds/linux/commit/905ad269c55fc62bee3da29f7b1d1efeba8aa1e1 - http://www.ubuntu.com/usn/USN-1594-1 - http://www.openwall.com/lists/oss-security/2012/04/22/1 - https://bugzilla.redhat.com/show_bug.cgi?id=815188 - http://ubuntu.com/usn/usn-1607-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ - http://www.securityfocus.com/bid/55774 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=905ad269c55fc62bee3da29f7b1d1efeba8aa1e1 - https://bugzilla.novell.com/show_bug.cgi?id=757783 - http://www.openwall.com/lists/oss-security/2012/04/20/25 - http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.2.bz2
CVE ID: CVE-2012-2128 State: PUBLISHED Published: 2012-08-27T00:00:00 Last Updated: 2024-08-06T19:26:08.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to hijack the authentication of administrators for requests that add arbitrary users. NOTE: this issue has been disputed by the vendor, who states that it is resultant from CVE-2012-2129: "the exploit code simply uses the XSS hole to extract a valid CSRF token." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/23/1 - http://www.securityfocus.com/bid/
ram Container: References: - http://www.openwall.com/lists/oss-security/2012/04/23/1 - http://www.securityfocus.com/bid/53041 - http://seclists.org/bugtraq/2012/Apr/121 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74907 - http://www.openwall.com/lists/oss-security/2012/04/22/4 - http://secunia.com/advisories/48848 - http://bugs.dokuwiki.org/index.php?do=details&task_id=2488 - http://ircrash.com/uploads/dokuwiki.txt - https://bugzilla.redhat.com/show_bug.cgi?id=815122
CVE ID: CVE-2012-2129 State: PUBLISHED Published: 2012-08-27T21:00:00 Last Updated: 2024-08-06T19:26:07.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/23/1 - http://www.securityfocus.com/bid/53041 - https://bugs.gentoo.org/show_bug.cgi?id=412891 - https://bugzilla.redhat.com/show_bug.cgi?id=815122 - http://seclists.org/bugtraq/2012/Apr/121 - https://github.com/splitbrain/doku
gzilla.redhat.com/show_bug.cgi?id=815122 - http://seclists.org/bugtraq/2012/Apr/121 - https://github.com/splitbrain/dokuwiki/commit/ff71173477e54774b5571015d49d944f51cb8a26 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74907 - http://www.openwall.com/lists/oss-security/2012/04/22/4 - http://ircrash.com/uploads/dokuwiki.txt - http://secunia.com/advisories/48848 - http://bugs.dokuwiki.org/index.php?do=details&task_id=2487
CVE ID: CVE-2012-2130 State: PUBLISHED Published: 2019-12-06T17:13:26 Last Updated: 2024-08-06T19:26:08.407Z Vendors: polarssl Products: polarssl Problem Types: weak key generation in 0.99pre4 throught to 1.1.1 Description: A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-2130 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2130 - https://bugs.gentoo.org/show_bug.cgi?id=CVE-2012-2130 - http://security.gentoo.org/glsa/glsa-201310-10.xml - http://www.securityfocus.
entoo.org/show_bug.cgi?id=CVE-2012-2130 - http://security.gentoo.org/glsa/glsa-201310-10.xml - http://www.securityfocus.com/bid/53610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75726
CVE ID: CVE-2012-2131 State: PUBLISHED Published: 2012-04-24T20:00:00 Last Updated: 2024-08-06T19:26:08.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00014.ht
t Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00007.html - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:064 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673 - http://www.ubuntu.com/usn/USN-1428-1 - http://cvs.openssl.org/chngview?cn=22479 - http://www.openssl.org/news/secadv_20120424.txt - http://www.debian.org/security/2012/dsa-2454 - http://support.apple.com/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - http://secunia
/support.apple.com/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - http://secunia.com/advisories/48895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75099 - http://secunia.com/advisories/48956 - http://www.openwall.com/lists/oss-security/2012/04/24/1 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00015.html - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://secunia.com/advisories/57353 - http://marc.info/?l=bugtraq&m=133728068926468&w=2 - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://www.securitytracker.com/id?1026957 - http://www.securityfocus.com/bid/53212 - http://marc.info/?l=bugtraq&m=1337280689264
ww.securitytracker.com/id?1026957 - http://www.securityfocus.com/bid/53212 - http://marc.info/?l=bugtraq&m=133728068926468&w=2
CVE ID: CVE-2012-2132 State: PUBLISHED Published: 2012-08-20T18:00:00 Last Updated: 2024-08-06T19:26:08.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/24/13 - http://www.securityfocus.com/bid/53232 - http://www.openwall.com/lists/oss-security/2012/04/24/3 - http://www.openwall.com/lists/oss-security/2012/04/30/7 - https://exchange.xforce.ibmcloud.com/vul
curity/2012/04/24/3 - http://www.openwall.com/lists/oss-security/2012/04/30/7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75167 - http://www.openwall.com/lists/oss-security/2012/05/02/8 - https://bugzilla.gnome.org/show_bug.cgi?id=666280
CVE ID: CVE-2012-2133 State: PUBLISHED Published: 2012-07-03T16:00:00 Last Updated: 2024-08-06T19:26:08.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Linux kernel before 3.3.6, when huge pages are enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges by interacting with a hugetlbfs filesystem, as demonstrated by a umount operation that triggers improper handling of quota data. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=90481622d75715bfcb68501280a917dbfe516029 - http://www.debian.org/security/2