Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0848 State: PUBLISHED Published: 2012-08-20T19:00:00 Last Updated: 2024-08-06T18:38:14.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ws_snd_decode_frame function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file, related to an incorrect calculation, aka "wrong samples count." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/02/14/4 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=5257743aee0c3982f0079e6553aabc6aa39401d2 - https://exchange.xforce.ibmcloud.com/vulnerabil
/?p=ffmpeg.git%3Ba=commit%3Bh=5257743aee0c3982f0079e6553aabc6aa39401d2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78936 - http://ffmpeg.org/security.html - http://www.openwall.com/lists/oss-security/2012/02/01/11
CVE ID: CVE-2012-0849 State: PUBLISHED Published: 2012-08-27T23:00:00 Last Updated: 2024-08-06T18:38:14.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ff_j2k_dwt_init function in libavcodec/j2k_dwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted JPEG2000 image that triggers an incorrect check for a negative value. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/02/14/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78935 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=1f99939a6361e2e6d67
nge.xforce.ibmcloud.com/vulnerabilities/78935 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=1f99939a6361e2e6d6788494dd7c682b051c6c34 - http://ffmpeg.org/security.html - http://www.openwall.com/lists/oss-security/2012/02/01/11 - http://www.ffmpeg.org/trac/ffmpeg/ticket/776
CVE ID: CVE-2012-0850 State: PUBLISHED Published: 2012-08-20T19:00:00 Last Updated: 2024-08-06T18:38:14.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sbr_qmf_synthesis function in libavcodec/aacsbr.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted mpg file that triggers memory corruption involving the v_off variable, probably a buffer underflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78934 - http://www.openwall.com/lists/oss-security/2012/02/14/4 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=944f5b2779e4aa63f7624df6cd4de83
m/lists/oss-security/2012/02/14/4 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=944f5b2779e4aa63f7624df6cd4de832a53db81b - http://ffmpeg.org/security.html - http://www.openwall.com/lists/oss-security/2012/02/01/11
CVE ID: CVE-2012-0851 State: PUBLISHED Published: 2012-08-20T18:00:00 Last Updated: 2024-08-06T18:38:14.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted H.264 file, related to the chroma_format_idc value. Additional Analyst Notes: - CVE Program Container: References: - http://ffmpeg.org/trac/ffmpeg/ticket/758 - http://www.ubuntu.com/usn/USN-1479-1 - http://www.openwal
iner: References: - http://ffmpeg.org/trac/ffmpeg/ticket/758 - http://www.ubuntu.com/usn/USN-1479-1 - http://www.openwall.com/lists/oss-security/2012/02/14/4 - http://www.debian.org/security/2012/dsa-2494 - http://libav.org/ - http://www.mandriva.com/security/advisories?name=MDVSA-2013:079 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=7fff64e00d886fde11d61958888c82b461cf99b9 - http://ffmpeg.org/security.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78933
CVE ID: CVE-2012-0852 State: PUBLISHED Published: 2012-08-20T18:00:00 Last Updated: 2024-08-06T18:38:14.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1479-1 - http://www.openwall.com/lists/oss-security/2012/02/14/4 - https://ffmpeg.org/tr
- http://www.ubuntu.com/usn/USN-1479-1 - http://www.openwall.com/lists/oss-security/2012/02/14/4 - https://ffmpeg.org/trac/ffmpeg/ticket/794 - http://www.debian.org/security/2012/dsa-2494 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=608708009f69ba4cecebf05120c696167494c897 - http://libav.org/ - http://ffmpeg.org/security.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78932
CVE ID: CVE-2012-0853 State: PUBLISHED Published: 2012-08-20T18:00:00 Last Updated: 2024-08-06T18:38:14.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (infinite loop and crash) and possibly execute arbitrary code via a large component count in an Atrac 3 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1479-1 - http://www.openwall.com/lists/os
st Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1479-1 - http://www.openwall.com/lists/oss-security/2012/02/14/4 - http://ffmpeg.org/trac/ffmpeg/ticket/780 - http://secunia.com/advisories/49089 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c509f4f74713b035a06f79cb4d00e708f5226bc5 - http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=c509f4f74713b035a06f79cb4d00e708f5226bc5 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9af6abdc17deb95c9b1f1d9242ba49b8b5e0b016
CVE ID: CVE-2012-0854 State: PUBLISHED Published: 2012-08-20T19:00:00Z Last Updated: 2024-09-16T21:57:02.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dpcm_decode_frame function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/02/14/4 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=6d8e6fe9dbc365f50521cf0c4a5ffee97c970cb5 - http://ffmpeg.org/security.ht
//git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=6d8e6fe9dbc365f50521cf0c4a5ffee97c970cb5 - http://ffmpeg.org/security.html - http://www.openwall.com/lists/oss-security/2012/02/01/11
CVE ID: CVE-2012-0855 State: PUBLISHED Published: 2012-08-27T23:00:00 Last Updated: 2024-08-06T18:38:14.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the get_sot function in the J2K decoder (j2k.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via unspecified vectors related to the curtileno variable. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=3eedf9f716733b3b4c5205726d2c1ca52b3d3d78 - http://www.openwall.com/lists/oss-security/2012/02/14/4 - http://ffmpeg.org/security.html - http://www.openwall.com/lists/os
://www.openwall.com/lists/oss-security/2012/02/14/4 - http://ffmpeg.org/security.html - http://www.openwall.com/lists/oss-security/2012/02/01/11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78929
CVE ID: CVE-2012-0856 State: PUBLISHED Published: 2012-08-20T19:00:00 Last Updated: 2024-08-06T18:38:14.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.9.1, when the lowres option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted H263 media file. NOTE: this vulnerability exists because of a regression error. Additional Analyst Notes: - CVE Program Container: References: - http://ffmpeg.org/trac/ffmpeg/ticket/757 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=21270cffaeab2f67a613907516b2b0cd6c9eacf4 - http://www.openwa
/757 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=21270cffaeab2f67a613907516b2b0cd6c9eacf4 - http://www.openwall.com/lists/oss-security/2012/02/14/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78928 - http://ffmpeg.org/security.html - http://www.openwall.com/lists/oss-security/2012/02/01/11
CVE ID: CVE-2012-0857 State: PUBLISHED Published: 2012-08-20T19:00:00 Last Updated: 2024-08-06T18:38:14.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the get_qcx function in the J2K decoder (j2kdec.c) in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78927 - http://www.openwall.com/lists/oss-security/2012/02/14/4 - http://ffmpeg.org/security.html - http://www.openwall.com/lists/oss-security/2012/02/01/11
CVE ID: CVE-2012-0858 State: PUBLISHED Published: 2012-08-20T18:00:00Z Last Updated: 2024-09-17T00:31:25.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Shorten file, related to an "invalid free". Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1479-1 - http://www.openwall.com/lists/oss-security/2012/02/14/4 - http:/
r: References: - http://www.ubuntu.com/usn/USN-1479-1 - http://www.openwall.com/lists/oss-security/2012/02/14/4 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=204cb29b3c84a74cbcd059d353c70c8bdc567d98 - http://ffmpeg.org/ - http://libav.org/ - http://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=204cb29b3c84a74cbcd059d353c70c8bdc567d98
CVE ID: CVE-2012-0859 State: PUBLISHED Published: 2012-08-20T18:00:00 Last Updated: 2024-08-06T18:38:14.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: The render_line function in the vorbis codec (vorbis.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Vorbis file, related to a large multiplier. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3893. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1479-1 - http://www.openwall.com/lists/oss-security/2012/02/14/4 - https://exchange.xforce.ibmclo
www.ubuntu.com/usn/USN-1479-1 - http://www.openwall.com/lists/oss-security/2012/02/14/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78925 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=6fcf2bb8af0e7d6bb179e71e67e5fab8ef0d2ec2 - http://ffmpeg.org/security.html
CVE ID: CVE-2012-0860 State: PUBLISHED Published: 2013-01-04T22:00:00 Last Updated: 2024-08-06T18:38:14.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bootstrap.py Python module in /tmp/. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1508.html - http://www.securityfocus.com/bid/56825 - http://rhn.redhat.com/errata/RHSA-2012-1506.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80543 - https://
http://rhn.redhat.com/errata/RHSA-2012-1506.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80543 - https://bugzilla.redhat.com/show_bug.cgi?id=790730 - http://www.securitytracker.com/id?1027838
CVE ID: CVE-2012-0861 State: PUBLISHED Published: 2013-01-04T22:00:00 Last Updated: 2024-08-06T18:38:14.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and vds_bootstrap.py, which prevents SSL certificates from being validated and allows remote attackers to execute arbitrary Python code via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1508.html - http://www.securityfocus.com/bid/56825 - http://rhn.redhat.com/errata/RHSA-2012-1506.h
.com/errata/RHSA-2012-1508.html - http://www.securityfocus.com/bid/56825 - http://rhn.redhat.com/errata/RHSA-2012-1506.html - http://rhn.redhat.com/errata/RHSA-2012-1505.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80544 - http://www.securitytracker.com/id?1027838
CVE ID: CVE-2012-0862 State: PUBLISHED Published: 2012-06-04T20:00:00 Last Updated: 2024-08-06T18:38:14.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027050 - http://www.openwall.com/lists/oss-security/2012/05/09/5 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081446.html - http://www.osvdb.org/81774 - https://exc
ttp://lists.fedoraproject.org/pipermail/package-announce/2012-May/081446.html - http://www.osvdb.org/81774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75965 - https://bugzilla.redhat.com/attachment.cgi?id=583311 - http://rhn.redhat.com/errata/RHSA-2013-1302.html - https://bugzilla.redhat.com/show_bug.cgi?id=790940 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081428.html - http://www.openwall.com/lists/oss-security/2012/05/10/2 - http://www.securityfocus.com/bid/53720 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:155 - http://www.xinetd.org/#changes
CVE ID: CVE-2012-0863 State: PUBLISHED Published: 2012-04-30T14:00:00 Last Updated: 2024-08-06T18:38:14.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52024 - https://bugs.launchpad.net/ubuntu/+source/mumble/+bug/783405 - http://www.openwall.com/lists/oss-security/2012/02/15/2 - https://github.com/mumble-voip/mumble/commit/5632c35d6759f5e13a7dfe78e4ee6
penwall.com/lists/oss-security/2012/02/15/2 - https://github.com/mumble-voip/mumble/commit/5632c35d6759f5e13a7dfe78e4ee6403ff6a8e3e - http://www.debian.org/security/2012/dsa-2411 - http://bugs.gentoo.org/show_bug.cgi?id=403939 - https://bugzilla.redhat.com/show_bug.cgi?id=791000 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659039 - http://secunia.com/advisories/47951 - http://www.openwall.com/lists/oss-security/2012/02/15/1
CVE ID: CVE-2012-0864 State: PUBLISHED Published: 2013-05-02T14:00:00Z Last Updated: 2024-08-06T18:38:14.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://www.securityfocus.com/bid/52201 - http://rhn.redhat.com/errata/RHSA-2012-0393.html - http://rhn.redhat.com/errata/RHSA-2012-03
curityfocus.com/bid/52201 - http://rhn.redhat.com/errata/RHSA-2012-0393.html - http://rhn.redhat.com/errata/RHSA-2012-0397.html - http://sourceware.org/git/?p=glibc.git%3Ba=commitdiff%3Bh=7c1f4834d398163d1ac8101e35e9c36fc3176e6e - http://rhn.redhat.com/errata/RHSA-2012-0488.html - http://sourceware.org/ml/libc-alpha/2012-02/msg00023.html - https://bugzilla.redhat.com/show_bug.cgi?id=794766 - http://www.phrack.org/issues.html?issue=67&id=9#article
CVE ID: CVE-2012-0865 State: PUBLISHED Published: 2012-02-21T00:00:00 Last Updated: 2024-08-06T18:38:14.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) r parameter to switch.php or (2) goto parameter to admin/login.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/02/13/5 - http://www.openwall.com/lists/oss-security/2012/02/18/1 - http://yehg.net/lab/pr0js/advisories/%5Bcubecart_3.0.20_3.0.x%5D_open_url_redirection - http://www.
urity/2012/02/18/1 - http://yehg.net/lab/pr0js/advisories/%5Bcubecart_3.0.20_3.0.x%5D_open_url_redirection - http://www.openwall.com/lists/oss-security/2012/02/12/4 - http://osvdb.org/79140 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0058.html - http://osvdb.org/79141 - http://www.securitytracker.com/id?1026711 - http://www.securityfocus.com/bid/51966
CVE ID: CVE-2012-0866 State: PUBLISHED Published: 2012-07-18T23:00:00 Last Updated: 2024-08-06T18:38:15.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table. Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/about/news/1377/ - http://www.mandriva.com/security/advisories?name=MDVSA-2012:0
References: - http://www.postgresql.org/about/news/1377/ - http://www.mandriva.com/security/advisories?name=MDVSA-2012:027 - http://secunia.com/advisories/49273 - http://rhn.redhat.com/errata/RHSA-2012-0678.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:026 - http://www.postgresql.org/docs/9.0/static/release-9-0-7.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:092 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.postgresql.org/docs/8.4/static/release-8-4-11.html - http://www.debian.org/security/2012/dsa-2418 - http://www.postgresql.org/docs/8.3/static/release-8-3-18.html - http://secunia.com/advisories/49272 - http://www.p
418 - http://www.postgresql.org/docs/8.3/static/release-8-3-18.html - http://secunia.com/advisories/49272 - http://www.postgresql.org/docs/9.1/static/release-9-1-3.html - http://rhn.redhat.com/errata/RHSA-2012-0677.html - http://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html
CVE ID: CVE-2012-0867 State: PUBLISHED Published: 2012-07-18T23:00:00 Last Updated: 2024-08-06T18:38:14.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/about/news/1377/ - http://secunia.com/advisories/49273 - http://rhn.redhat.com/errata/RHSA-2012-0678.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:026 - http://www.post
edhat.com/errata/RHSA-2012-0678.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:026 - http://www.postgresql.org/docs/9.0/static/release-9-0-7.html - http://www.postgresql.org/docs/8.4/static/release-8-4-11.html - http://www.debian.org/security/2012/dsa-2418 - http://www.postgresql.org/docs/9.1/static/release-9-1-3.html - http://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html
CVE ID: CVE-2012-0868 State: PUBLISHED Published: 2012-07-18T23:00:00 Last Updated: 2024-08-06T18:38:14.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQL script that is used when the database is restored. Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/about/news/1377/ - http://www.mandriva.com/security/advisories?name=MDVSA-2012:027 - http:
: - http://www.postgresql.org/about/news/1377/ - http://www.mandriva.com/security/advisories?name=MDVSA-2012:027 - http://secunia.com/advisories/49273 - http://rhn.redhat.com/errata/RHSA-2012-0678.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:026 - http://www.postgresql.org/docs/9.0/static/release-9-0-7.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.postgresql.org/docs/8.4/static/release-8-4-11.html - http://www.debian.org/security/2012/dsa-2418 - http://www.postgresql.org/docs/8.3/static/release-8-3-18.html - http://secunia.com/advisories/49272 - http://www.postgresql.org/docs/9.1/static/release-9-1-3.html - http://rhn.redhat.com/err
/secunia.com/advisories/49272 - http://www.postgresql.org/docs/9.1/static/release-9-1-3.html - http://rhn.redhat.com/errata/RHSA-2012-0677.html - http://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html
CVE ID: CVE-2012-0869 State: PUBLISHED Published: 2012-09-25T23:00:00 Last Updated: 2024-08-06T18:38:14.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78966 - http://fex.rus.uni-stuttgart.de/fex.html - http://archives.neohapsis.com/archives/bugtraq/2012-02/0112.html - http://secunia.com/advisories/47971 - http://www.openwa
tp://archives.neohapsis.com/archives/bugtraq/2012-02/0112.html - http://secunia.com/advisories/47971 - http://www.openwall.com/lists/oss-security/2012/02/23/2 - http://www.openwall.com/lists/oss-security/2012/02/20/1 - http://osvdb.org/79420 - http://www.openwall.com/lists/oss-security/2012/02/20/8 - http://www.securityfocus.com/bid/52085 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0109.html