Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ps://security-tracker.debian.org/tracker/CVE-2012-5645 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5645 - https://access.redhat.com/security/cve/cve-2012-5645 - http://www.openwall.com/lists/oss-security/2012/12/18/5 - http://www.openwall.com/lists/oss-security/2012/12/31/2 - http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095378.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095381.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-January/096391.html - http://www.openwall.com/lists/oss-security/2012/12/22/4 - http://www.openwall.com/lists/oss-security/2012/12/30/11 - http://www.openwall.com/lists/oss-securi
urity/2012/12/22/4 - http://www.openwall.com/lists/oss-security/2012/12/30/11 - http://www.openwall.com/lists/oss-security/2012/12/30/8 - http://www.securityfocus.com/bid/41352 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696306
CVE ID: CVE-2012-5646 State: PUBLISHED Published: 2013-02-24T21:00:00Z Last Updated: 2024-08-06T21:14:16.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=888518 - https://github.com/openshift/origin-server/pull/1017 - http://www.osvdb.org/89431 - http://rhn.redhat.com/errata/RHSA-2013-0148.html - https://github.com/openshift/origin-server/commit/32564a0839b1517d762afab2013c26c0959bac00 - http://www.secu
0148.html - https://github.com/openshift/origin-server/commit/32564a0839b1517d762afab2013c26c0959bac00 - http://www.securityfocus.com/bid/57189
CVE ID: CVE-2012-5647 State: PUBLISHED Published: 2013-02-24T21:00:00Z Last Updated: 2024-08-06T21:14:16.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openshift/origin-server/pull/1017 - http://www.osvdb.org/89430 - http://rhn.redhat.com/errata/RHSA-2013-0148.html - https://github.com/openshift/origin-server/commit/32564a0839b1517d762afab2013c26c0959bac00 - https://bu
2013-0148.html - https://github.com/openshift/origin-server/commit/32564a0839b1517d762afab2013c26c0959bac00 - https://bugzilla.redhat.com/show_bug.cgi?id=888523 - http://www.securityfocus.com/bid/57189
CVE ID: CVE-2012-5648 State: PUBLISHED Published: 2014-04-04T14:00:00 Last Updated: 2024-08-06T21:14:16.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) app/models/hostext/search.rb or (2) app/models/puppetclass.rb, related to the search mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2012/q4/499 - http://secunia.com/advisories/51557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80793 - https://github.com/theforeman/foreman/commit/387b764b614170f23b3552aca498612
xforce.ibmcloud.com/vulnerabilities/80793 - https://github.com/theforeman/foreman/commit/387b764b614170f23b3552aca498612e341652db - http://osvdb.org/show/osvdb/88623 - http://osvdb.org/show/osvdb/88618
CVE ID: CVE-2012-5649 State: PUBLISHED Published: 2014-05-23T14:00:00 Last Updated: 2024-08-06T21:14:16.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to execute arbitrary code via a JSONP callback, related to Adobe Flash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57314 - http://secunia.com/advisories/51765 - http://archives.neohapsis.com/archives/bugtraq/2013-01/0057.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098092.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-Febr
permail/package-announce/2013-February/098092.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098089.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:067
CVE ID: CVE-2012-5650 State: PUBLISHED Published: 2014-03-18T14:00:00 Last Updated: 2024-08-06T21:14:16.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the browser-based test suite. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/couchdb-user/201301.mbox/%3C2FFF2FD7-8EAF-4EBF-AFDA-5AEB6EAC853F%40apache.org%3E - http://archives.neohapsis.com/archives/bugtraq/2013-01/0056.html
CVE ID: CVE-2012-5651 State: PUBLISHED Published: 2013-01-03T01:00:00 Last Updated: 2024-08-06T21:14:16.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/drupal.git/commitdiff/da8023a - http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 - http://drupal.org/SA-CORE-2012-004 - http://www.securityfocus.com/bid/56993 - http://drupalcode.org/project/drupal.git/commitdiff/b47f95d - http://www.osvdb.o
ttp://www.securityfocus.com/bid/56993 - http://drupalcode.org/project/drupal.git/commitdiff/b47f95d - http://www.osvdb.org/88528 - http://www.debian.org/security/2013/dsa-2776 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80792 - http://www.openwall.com/lists/oss-security/2012/12/20/1
CVE ID: CVE-2012-5652 State: PUBLISHED Published: 2013-01-03T01:00:00 Last Updated: 2024-08-06T21:14:16.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/drupal.git/commitdiff/da8023a - http://drupal.org/SA-CORE-2012-004 - http://www.securityfocus.com/bid/56993 - http://osvdb.org/88527 - http://www.debian.org/security/2013/dsa-2776 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80794 - http://www.openwall.com/lists/oss-security/2012/12/20
776 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80794 - http://www.openwall.com/lists/oss-security/2012/12/20/1 - http://secunia.com/advisories/51517
CVE ID: CVE-2012-5653 State: PUBLISHED Published: 2013-01-03T01:00:00 Last Updated: 2024-08-06T21:14:16.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file upload feature in Drupal 6.x before 6.27 and 7.x before 7.18 allows remote authenticated users to bypass the protection mechanism and execute arbitrary PHP code via a null byte in a file name. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/88529 - http://drupalcode.org/project/drupal.git/commitdiff/da8023a - http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 - http://drupal.org/SA-CORE-2012-004 - http://www.securityfocus.com/bid/56993 - http://drupalcode.org/project/drup
3:074 - http://drupal.org/SA-CORE-2012-004 - http://www.securityfocus.com/bid/56993 - http://drupalcode.org/project/drupal.git/commitdiff/b47f95d - http://www.debian.org/security/2013/dsa-2776 - http://www.openwall.com/lists/oss-security/2012/12/20/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80795
CVE ID: CVE-2012-5654 State: PUBLISHED Published: 2013-01-03T01:00:00Z Last Updated: 2024-09-16T23:30:50.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags, which might allow remote attackers to obtain sensitive information by reading the (1) description, (2) dc.description or (3) og:description meta tags. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1859208 - http://drupal.org/node/1859282 - http://www.openwall.com/lists/oss-security/2012/
es: - http://drupal.org/node/1859208 - http://drupal.org/node/1859282 - http://www.openwall.com/lists/oss-security/2012/12/20/1
CVE ID: CVE-2012-5655 State: PUBLISHED Published: 2013-01-03T01:00:00Z Last Updated: 2024-08-06T21:14:16.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Context module 6.x-3.x before 6.x-3.1 and 7.x-3.x before 7.x-3.0-beta6 for Drupal does not properly restrict access to block content, which allows remote attackers to obtain sensitive information via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1870550 - http://drupalcode.org/project/context.git/commitdiff/4452bf1 - http://www.securityfocus.com/bid/56993 - http://www.openwall.com/lists/oss-security/2012/12/20/1 - http://drupalcode.org/project/context.git/commit
m/bid/56993 - http://www.openwall.com/lists/oss-security/2012/12/20/1 - http://drupalcode.org/project/context.git/commitdiff/d8bf8b6 - http://secunia.com/advisories/51517
CVE ID: CVE-2012-5656 State: PUBLISHED Published: 2013-01-18T11:00:00 Last Updated: 2024-08-06T21:14:16.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/12/20/3 - http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095380.html - http://bazaar.launchpad.net/~inkscape.dev/inkscape/trunk/revision/11931 - http://www.ubuntu.com/usn/USN-1712-1 - https://launchpad.net/inksc
pad.net/~inkscape.dev/inkscape/trunk/revision/11931 - http://www.ubuntu.com/usn/USN-1712-1 - https://launchpad.net/inkscape/+milestone/0.48.4 - http://www.securityfocus.com/bid/56965 - https://bugs.launchpad.net/inkscape/+bug/1025185 - http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095398.html - http://lists.opensuse.org/opensuse-updates/2013-02/msg00041.html - http://lists.opensuse.org/opensuse-updates/2013-02/msg00043.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-December/095024.html
CVE ID: CVE-2012-5657 State: PUBLISHED Published: 2013-05-02T14:00:00Z Last Updated: 2024-08-06T21:14:16.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service (CPU and memory consumption) via an XML External Entity (XXE) attack. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/12/20/2 - http://www.debian.org/security/2012/dsa-2602 - http://www.mandriva.com/security/advi
m/lists/oss-security/2012/12/20/2 - http://www.debian.org/security/2012/dsa-2602 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:115 - http://framework.zend.com/security/advisory/ZF2012-05 - http://secunia.com/advisories/51583 - http://openwall.com/lists/oss-security/2012/12/20/4
CVE ID: CVE-2012-5658 State: PUBLISHED Published: 2013-02-24T22:00:00Z Last Updated: 2024-08-06T21:14:16.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: rhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the password and other sensitive information in cleartext, which allows context-dependent attackers to obtain sensitive information, as demonstrated by including log files or Bugzilla reports in support channels. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0220.html - https://bugzilla.redhat.com/show_bug.cgi?id=889062
CVE ID: CVE-2012-5659 State: PUBLISHED Published: 2013-03-12T22:00:00Z Last Updated: 2024-09-16T16:38:20.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=854011 - http://rhn.redhat.com/errata/RHSA-2013-0215.html - http://git.fedorahosted.org/cgit/abrt.git/commit/?id=b173d8
=854011 - http://rhn.redhat.com/errata/RHSA-2013-0215.html - http://git.fedorahosted.org/cgit/abrt.git/commit/?id=b173d81b577953b96a282167c7eecd66bf111a4f
CVE ID: CVE-2012-5660 State: PUBLISHED Published: 2013-03-12T22:00:00Z Last Updated: 2024-08-06T21:14:16.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0215.html - https://bugzilla.redhat.com/show_bug.cgi?id=887866 - http://git.fedorahosted.org/cgit/libreport.git/commit/?id=3bbf961b1884dd32654dd39b360dd78e
.com/show_bug.cgi?id=887866 - http://git.fedorahosted.org/cgit/libreport.git/commit/?id=3bbf961b1884dd32654dd39b360dd78ef294b10a
CVE ID: CVE-2012-5661 State: REJECTED Published: 2013-02-01T20:00:00Z Last Updated: 2024-09-16T16:38:55.643Z Description: No description available.
CVE ID: CVE-2012-5662 State: PUBLISHED Published: 2014-05-27T15:00:00 Last Updated: 2024-08-06T21:14:16.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52650 - https://bugzilla.redhat.com/show_bug.cgi?id=889373 - http://osvdb.org/91572 - http://sourceforge.net/projects/x3270/files/x3270/3.3.12ga12/ - https://exchange.x
?id=889373 - http://osvdb.org/91572 - http://sourceforge.net/projects/x3270/files/x3270/3.3.12ga12/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/82984
CVE ID: CVE-2012-5663 State: PUBLISHED Published: 2019-12-30T21:01:40 Last Updated: 2024-08-06T21:14:16.411Z Vendors: textproc/isearch package Products: textproc/isearch package Problem Types: Other Description: The isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-writable area (/tmp). Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-5663 - https://access.redhat.com/security/cve/cve-2012-5663 - http://www.openwall.com/lists/oss-security/2012/12/21/2 - http://www.openwall.com/lists/oss-security/2012/12/21/3 - http://gnats.netbsd.org/47360
CVE ID: CVE-2012-5664 State: REJECTED Published: 2012-12-26T20:00:00.000Z Last Updated: 2025-02-13T15:46:08.631Z Description: No description available.
CVE ID: CVE-2012-5665 State: PUBLISHED Published: 2013-01-03T01:00:00 Last Updated: 2024-08-06T21:14:16.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings.php, which allows remote attackers to edit app configurations of user_webdavauth and user_ldap by editing this file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/owncloud/core/commit/c4ecbad - http://www.securityfocus.com/bid/57030 - https://github.com/owncloud/core/commit/db7ca53 - http://www.openwall.com/lists/oss-security/2012/12/22/5 - http://owncloud.org/changelog/ - http://secunia.com/a
b7ca53 - http://www.openwall.com/lists/oss-security/2012/12/22/5 - http://owncloud.org/changelog/ - http://secunia.com/advisories/51614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80808 - http://www.openwall.com/lists/oss-security/2012/12/22/2
CVE ID: CVE-2012-5666 State: PUBLISHED Published: 2013-01-03T01:00:00Z Last Updated: 2024-09-16T20:27:10.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bookmarks/js/bookmarks.js in ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to apps/bookmark/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57030 - http://www.openwall.com/lists/oss-security/2012/12/22/5 - http://owncloud.org/changelog/ - http://secunia.com/advisories/51614 - https://github.com/owncloud/apps/commit/eafa9b2 - https://gith
ud.org/changelog/ - http://secunia.com/advisories/51614 - https://github.com/owncloud/apps/commit/eafa9b2 - https://github.com/owncloud/core/commit/b24c929cc0 - http://www.openwall.com/lists/oss-security/2012/12/22/2
CVE ID: CVE-2012-5667 State: PUBLISHED Published: 2013-01-03T11:00:00 Last Updated: 2024-08-06T21:14:16.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/grep/+bug/1091473 - http://www.securityfocus.com/bid/57033 - http://git.sv.gnu.org/gitweb/?p=grep.git%3Ba=shortlog%3Bh=v2.11 - http://git.savannah.gnu.org/cgit/grep.git/commit/?id=8fcf61523644df42e1905c81bed26838e0b04f91 - h
a=shortlog%3Bh=v2.11 - http://git.savannah.gnu.org/cgit/grep.git/commit/?id=8fcf61523644df42e1905c81bed26838e0b04f91 - https://bugzilla.redhat.com/show_bug.cgi?id=889935 - http://rhn.redhat.com/errata/RHSA-2015-1447.html - http://lists.gnu.org/archive/html/bug-grep/2012-12/msg00004.html - http://git.savannah.gnu.org/cgit/grep.git/commit/?id=cbbc1a45b9f843c811905c97c90a5d31f8e6c189 - http://openwall.com/lists/oss-security/2012/12/22/6
CVE ID: CVE-2012-5668 State: PUBLISHED Published: 2013-01-24T21:00:00 Last Updated: 2024-08-06T21:14:16.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027921 - http://www.freetype.org/ - https://savannah.nongnu.org/bugs/?37905 - http://www.ubuntu.com/usn/USN-1686-1 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html - http://ww
05 - http://www.ubuntu.com/usn/USN-1686-1 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html - http://www.openwall.com/lists/oss-security/2012/12/25/2 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.520186 - http://secunia.com/advisories/51900 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=9b6b5754b57c12b820e01305eb69b8863a161e5a - http://lists.opensuse.org/opensuse-updates/2013-01/msg00068.html - http://secunia.com/advisories/51826
CVE ID: CVE-2012-5669 State: PUBLISHED Published: 2013-01-24T21:00:00 Last Updated: 2024-08-06T21:14:16.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027921 - http://www.freetype.org/ - http://www.ubuntu.com/usn/USN-1686-1 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=07bdb6e289c7954e2a533039dc
buntu.com/usn/USN-1686-1 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=07bdb6e289c7954e2a533039dc93c1c136099d2d - http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html - http://www.openwall.com/lists/oss-security/2012/12/25/2 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html - http://rhn.redhat.com/errata/RHSA-2013-0216.html - https://savannah.nongnu.org/bugs/?37906 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.520186 - http://secunia.com/advisories/51900 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00068.html - http://secunia.com/advisories/51826
CVE ID: CVE-2012-5670 State: PUBLISHED Published: 2013-01-24T21:00:00 Last Updated: 2024-08-06T21:14:16.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027921 - http://www.freetype.org/ - http://www.ubuntu.com/usn/USN-1686-1 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html - http://www.openwall.com/lists/oss-security/2012/12/25/2 - h
/lists.opensuse.org/opensuse-updates/2013-01/msg00078.html - http://www.openwall.com/lists/oss-security/2012/12/25/2 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7f2e4f4f553f6836be7683f66226afac3fa979b8 - https://savannah.nongnu.org/bugs/?37907 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.520186 - http://secunia.com/advisories/51900 - http://secunia.com/advisories/51826
CVE ID: CVE-2012-5671 State: PUBLISHED Published: 2012-10-31T16:00:00 Last Updated: 2024-08-06T21:14:16.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and acl_smtp_connect and acl_smtp_rcpt are not set to "warn control = dkim_disable_verify," allows remote attackers to execute arbitrary code via an email from a malicious DNS server. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51115 - http://www.openwall.com/lists/oss-security/2012/10/26/5 - http://secunia.com/advisories/51155 - https://lists.ex
51115 - http://www.openwall.com/lists/oss-security/2012/10/26/5 - http://secunia.com/advisories/51155 - https://lists.exim.org/lurker/message/20121026.080330.74b9147b.en.html - http://www.ubuntu.com/usn/USN-1618-1 - http://secunia.com/advisories/51098 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090900.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090963.html - http://secunia.com/advisories/51153 - http://osvdb.org/86616 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00018.html - http://www.securityfocus.com/bid/56285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79615 - http://lists.fedoraproject.org/pip