Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
-2012-1550.html - https://bugzilla.redhat.com/show_bug.cgi?id=869579 - http://secunia.com/advisories/51482 - http://www.securityfocus.com/bid/56843
CVE ID: CVE-2012-4557 State: PUBLISHED Published: 2012-11-30T19:00:00 Last Updated: 2024-08-06T20:42:54.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, which allows remote attackers to cause a denial of service (worker consumption) via an expensive request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://www.debian.org/security/2012/dsa-2579 - http://svn.apache.org/viewvc?view=revision&revision=1227298 - https://oval.cisecurity.org/reposito
urity/2012/dsa-2579 - http://svn.apache.org/viewvc?view=revision&revision=1227298 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18938 - http://httpd.apache.org/security/vulnerabilities_22.html#2.2.22 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19284 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00012.html - https://bugzilla.redhat.com/show_bug.cgi?id=871685 - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3
ttps://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5
bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.or
ad.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2012-4558 State: PUBLISHED Published: 2013-02-26T16:00:00 Last Updated: 2024-08-06T20:42:54.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the manager interface in mod_proxy_balancer.c in the mod_proxy_balancer module in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1897
traq&m=136612293908376&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18977 - http://www.securityfocus.com/bid/58165 - http://httpd.apache.org/security/vulnerabilities_24.html - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_balancer.c?r1=1404653&r2=1413732&diff_format=h - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101196.html - http://rhn.redhat.com/errata/RHSA-2013-1209.html - http://rhn.redhat.com/errata/RHSA-2013-0815.html - http://rhn.redhat.com/errata/RHSA-2013-1207.html - http://httpd.apache.org/security/vulnerabilities_22.html - http://www.debian.org/security/2013/dsa-2637 - http://lists.a
http://httpd.apache.org/security/vulnerabilities_22.html - http://www.debian.org/security/2013/dsa-2637 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://rhn.redhat.com/errata/RHSA-2013-1208.html - http://www.securityfocus.com/bid/64758 - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://support.apple.com/kb/HT5880 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://list
che.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d45
0%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05
60a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache
E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2012-4559 State: PUBLISHED Published: 2012-11-30T22:00:00 Last Updated: 2024-08-06T20:42:54.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in channels.c, (3) ssh_userauth_pubkey function in auth.c, (4) sftp_parse_attr_3 function in sftp.c, and (5) try_publickey_from_file function in keyfiles.c in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=871612 -
. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=871612 - http://www.debian.org/security/2012/dsa-2577 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:175 - http://www.ubuntu.com/usn/USN-1640-1 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00021.html - http://lists.opensuse.org/opensuse-updates/2012-12/msg00016.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80218 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093313.html - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00002.html - http://www.openwall.com/lists/oss-security/2012/11/20/3 - http://lists
pensuse-security-announce/2012-12/msg00002.html - http://www.openwall.com/lists/oss-security/2012/11/20/3 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093474.html - http://www.securityfocus.com/bid/56604 - http://www.libssh.org/2012/11/20/libssh-0-5-3-security-release/
CVE ID: CVE-2012-4560 State: PUBLISHED Published: 2012-11-30T22:00:00 Last Updated: 2024-08-06T20:42:54.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2012:175 - https://bugzilla.redhat.com/show_bug.cgi?id=871614 - http://www.ubuntu.com/usn/USN-1640-1 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00021.html - http://lists.opensuse.org/opensuse-updates/2012-12/msg00016.html - http:/
e.org/opensuse-updates/2013-01/msg00021.html - http://lists.opensuse.org/opensuse-updates/2012-12/msg00016.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093313.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80219 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00002.html - http://www.openwall.com/lists/oss-security/2012/11/20/3 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093474.html - http://www.securityfocus.com/bid/56604 - http://www.libssh.org/2012/11/20/libssh-0-5-3-security-release/
CVE ID: CVE-2012-4561 State: PUBLISHED Published: 2012-11-30T22:00:00 Last Updated: 2024-08-06T20:42:53.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_session_id functions in keys.c in libssh before 0.5.3 free "an invalid pointer on an error path," which might allow remote attackers to cause a denial of service (crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2577 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:175 - https://bugzilla.redhat.com/show_bug.cgi?id=87
-2577 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:175 - https://bugzilla.redhat.com/show_bug.cgi?id=871617 - http://www.ubuntu.com/usn/USN-1640-1 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00021.html - http://lists.opensuse.org/opensuse-updates/2012-12/msg00016.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093313.html - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00002.html - http://www.openwall.com/lists/oss-security/2012/11/20/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80220 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093474.html - http://www.securityfocus.com/bid
- http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093474.html - http://www.securityfocus.com/bid/56604 - http://www.libssh.org/2012/11/20/libssh-0-5-3-security-release/
CVE ID: CVE-2012-4562 State: PUBLISHED Published: 2012-11-30T22:00:00 Last Updated: 2024-08-06T20:42:54.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00015.html - http://www.debian.org/security/2012/dsa-2577 - http://www.mandriva.com/security/advisories?name=MDVSA
11/msg00015.html - http://www.debian.org/security/2012/dsa-2577 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:175 - http://www.ubuntu.com/usn/USN-1640-1 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00021.html - http://lists.opensuse.org/opensuse-updates/2012-12/msg00016.html - https://bugzilla.redhat.com/show_bug.cgi?id=871620 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093313.html - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00002.html - http://www.openwall.com/lists/oss-security/2012/11/20/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80221 - http://lists.fedoraproject.org/pipermail/package-announce/20
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/80221 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093474.html - http://www.securityfocus.com/bid/56604 - http://www.libssh.org/2012/11/20/libssh-0-5-3-security-release/
CVE ID: CVE-2012-4563 State: PUBLISHED Published: 2012-11-20T00:00:00 Last Updated: 2024-08-06T20:42:55.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 Beta and release candidates before 2.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56336 - https://developers.google.com/web-toolkit/release-notes#Release_Notes_2_4_0 - http://www.openwall.com/lists/oss-security/2012/10/31/1
CVE ID: CVE-2012-4564 State: PUBLISHED Published: 2012-11-11T11:00:00 Last Updated: 2024-08-06T20:42:54.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2575 - http://www.osvdb.org/86878 - https://bugzilla.redhat.com/show_bug.cgi?id=871700 - http://www.openwall.com/lists/oss-securit
p://www.osvdb.org/86878 - https://bugzilla.redhat.com/show_bug.cgi?id=871700 - http://www.openwall.com/lists/oss-security/2012/11/02/3 - http://www.securityfocus.com/bid/56372 - http://www.ubuntu.com/usn/USN-1631-1 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00076.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79750 - http://www.openwall.com/lists/oss-security/2012/11/02/7 - http://secunia.com/advisories/51133 - http://rhn.redhat.com/errata/RHSA-2012-1590.html
CVE ID: CVE-2012-4565 State: PUBLISHED Published: 2012-12-21T11:00:00 Last Updated: 2024-08-06T20:42:54.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tcp_illinois_info function in net/ipv4/tcp_illinois.c in the Linux kernel before 3.4.19, when the net.ipv4.tcp_congestion_control illinois setting is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) by reading TCP stats. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8f363b77ee4fbf7c3bbcf5ec2c5ca482d396d664 - http://www.ubuntu.com/usn/USN-1644-1 - http://www.ubuntu.com/usn/USN-1645-1 - h
363b77ee4fbf7c3bbcf5ec2c5ca482d396d664 - http://www.ubuntu.com/usn/USN-1644-1 - http://www.ubuntu.com/usn/USN-1645-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.19 - http://www.ubuntu.com/usn/USN-1647-1 - http://rhn.redhat.com/errata/RHSA-2012-1580.html - http://www.ubuntu.com/usn/USN-1652-1 - https://github.com/torvalds/linux/commit/8f363b77ee4fbf7c3bbcf5ec2c5ca482d396d664 - https://bugzilla.redhat.com/show_bug.cgi?id=871848 - http://www.ubuntu.com/usn/USN-1646-1 - http://www.ubuntu.com/usn/USN-1651-1 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091110.html - http://www.ubuntu.com/usn/USN-1648-1 - http://www.securityfocus.com/bid/56346 - http://w
nce/2012-November/091110.html - http://www.ubuntu.com/usn/USN-1648-1 - http://www.securityfocus.com/bid/56346 - http://www.openwall.com/lists/oss-security/2012/10/31/5 - http://www.ubuntu.com/usn/USN-1649-1 - http://www.ubuntu.com/usn/USN-1650-1 - http://secunia.com/advisories/51409
CVE ID: CVE-2012-4566 State: PUBLISHED Published: 2012-11-20T00:00:00Z Last Updated: 2024-09-16T16:17:34.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DTLS support in radsecproxy before 1.6.2 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, which might allow remote attackers to bypass intended access restrictions and spoof clients, a different vulnerability than CVE-2012-4523. Additional Analyst Notes: - CVE Program Container: References: - https://postlister.uninett.no/sympa/arc/radsecproxy/2012-10/msg00001.html - http://secunia.com/advisories/51251
ences: - https://postlister.uninett.no/sympa/arc/radsecproxy/2012-10/msg00001.html - http://secunia.com/advisories/51251 - http://www.openwall.com/lists/oss-security/2012/10/31/6 - http://www.debian.org/security/2012/dsa-2573 - https://postlister.uninett.no/sympa/arc/radsecproxy/2012-09/msg00001.html - http://www.openwall.com/lists/oss-security/2012/10/17/7 - http://git.nordu.net/?p=radsecproxy.git%3Ba=commit%3Bh=3682c935facf5ccd7fa600644bbb76957155c680
CVE ID: CVE-2012-4567 State: PUBLISHED Published: 2017-10-23T18:00:00 Last Updated: 2024-08-06T20:42:54.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) inc/inc.ClassUI.php or (2) out/out.DocumentNotify.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/06/1 - http://www.openwall.com/lists/oss-security/2012/10/31/7 - http://www.securityfocus.com/bid/55822 - http://sourceforge.net/p/mydms/code/HEAD/tree/trunk/CHANGELOG
CVE ID: CVE-2012-4568 State: PUBLISHED Published: 2017-10-23T18:00:00 Last Updated: 2024-08-06T20:42:54.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/06/1 - http://www.openwall.com/lists/oss-security/2012/10/31/7 - http://sourceforge.net/p/mydms/code/HEAD/tree/trunk/CHANGELOG
CVE ID: CVE-2012-4569 State: PUBLISHED Published: 2017-10-23T18:00:00 Last Updated: 2024-08-06T20:42:54.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in out/out.UsrMgr.php in LetoDMS (formerly MyDMS) before 3.3.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/06/1 - http://www.openwall.com/lists/oss-security/2012/10/31/7 - http://www.securityfocus.com/bid/55823 - http://sourceforge.net/p/mydms/code/HEAD/tree/trunk/CHANGELOG
CVE ID: CVE-2012-4570 State: PUBLISHED Published: 2017-10-23T18:00:00 Last Updated: 2024-08-06T20:42:54.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/06/1 - http://www.openwall.com/lists/oss-security/2012/10/31/7 - http://www.securityfocus.com/bid/55822 - http://sourceforge.net/p/mydms/code/HEAD/tree/trunk/CHANGELOG
CVE ID: CVE-2012-4571 State: PUBLISHED Published: 2012-11-30T22:00:00Z Last Updated: 2024-09-17T03:07:17.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.python.org/pypi/keyring - https://bugs.launchpad.net/ubuntu/+source/python-keyring/+bug/1004845 - http://www.openwall.com/lists/oss-security/2012/10/31/8 - http://www.ubuntu.com/usn/USN-1634-1
CVE ID: CVE-2012-4572 State: PUBLISHED Published: 2013-10-28T21:00:00Z Last Updated: 2024-08-06T20:42:54.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization module for a new application when an implementation is already loaded and the modules share class names, which allows local users to control certain applications' authorization decisions via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0833.html - http://rhn.redhat.com/errata/RHSA-2013-1437.htm
tainer: References: - http://rhn.redhat.com/errata/RHSA-2013-0833.html - http://rhn.redhat.com/errata/RHSA-2013-1437.html - http://rhn.redhat.com/errata/RHSA-2013-0834.html
CVE ID: CVE-2012-4573 State: PUBLISHED Published: 2012-11-11T11:00:00 Last Updated: 2024-08-06T20:42:54.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51174 - http://secunia.com/advisories/51234 - http://www.ubuntu.com/usn/USN-1626-1 - http://rhn.redhat.com/errata/RHSA-2012-1558.html - http://www.securityfocus.com/bid/56437 - https://github.com/openstack/gla