Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
lease-8-4-13.html - http://www.postgresql.org/docs/8.3/static/release-8-3-20.html - http://www.postgresql.org/about/news/1407/ - http://secunia.com/advisories/50635 - http://www.postgresql.org/support/security/ - http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html - http://secunia.com/advisories/50946 - https://bugzilla.redhat.com/show_bug.cgi?id=849173 - http://www.debian.org/security/2012/dsa-2534 - http://lists.opensuse.org/opensuse-updates/2012-09/msg00102.html - http://lists.opensuse.org/opensuse-updates/2012-10/msg00013.html - http://secunia.com/advisories/50859 - http://lists.opensuse.org/opensuse-updates/2012-10/msg00024.html
CVE ID: CVE-2012-3490 State: PUBLISHED Published: 2020-01-09T20:23:57 Last Updated: 2024-08-06T20:05:12.539Z Vendors: Condor Products: Condor Problem Types: Other Description: The (1) my_popenv_impl and (2) my_spawnv functions in src/condor_utils/my_popen.cpp and the (3) systemCommand function in condor_vm-gahp/vmgahp_common.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the return value of setuid calls, which might cause a subprocess to be created with root privileges and allow remote attackers to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdi
dditional Analyst Notes: - CVE Program Container: References: - http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=94e84ce4 - http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html - http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html - http://www.openwall.com/lists/oss-security/2012/09/20/9 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3490
CVE ID: CVE-2012-3491 State: PUBLISHED Published: 2012-09-28T17:00:00Z Last Updated: 2024-09-16T23:55:46.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=848214 - http://www.securityfocus.com/bid/55632 - http://rhn.redhat.com/errata/RHSA-2012-1278.html - http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html - http://rhn.redhat.co
rrata/RHSA-2012-1278.html - http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html - http://rhn.redhat.com/errata/RHSA-2012-1281.html - http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=1fff5d40 - http://secunia.com/advisories/50666 - http://www.openwall.com/lists/oss-security/2012/09/20/9 - http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html
CVE ID: CVE-2012-3492 State: PUBLISHED Published: 2012-09-28T17:00:00Z Last Updated: 2024-09-16T22:24:48.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55632 - http://rhn.redhat.com/errata/RHSA-2012-1278.html - http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html - http://condor-git.cs
rrata/RHSA-2012-1278.html - http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html - http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=1db67805 - http://rhn.redhat.com/errata/RHSA-2012-1281.html - http://secunia.com/advisories/50666 - http://www.openwall.com/lists/oss-security/2012/09/20/9 - http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3492
CVE ID: CVE-2012-3493 State: PUBLISHED Published: 2012-09-28T17:00:00Z Last Updated: 2024-09-16T22:51:51.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condor_startd port, which leaks the ClaimId. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55632 - http://rhn.redhat.com/errata/RHSA-2012-1278.html - http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html - http:/
n.redhat.com/errata/RHSA-2012-1278.html - http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html - http://rhn.redhat.com/errata/RHSA-2012-1281.html - http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=d2f33972 - http://secunia.com/advisories/50666 - https://bugzilla.redhat.com/show_bug.cgi?id=848222 - http://www.openwall.com/lists/oss-security/2012/09/20/9 - http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html
CVE ID: CVE-2012-3494 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T20:05:12.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service (host crash) by writing to the reserved bits of the DR7 debug control register. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://secunia.com/advisories/50530 - http://secunia.com/advisories/51413 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://l
m/advisories/50530 - http://secunia.com/advisories/51413 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html - http://wiki.xen.org/wiki/Security_Announcements#XSA-12_hypercall_set_debugreg_vulnerability - https://bugzilla.redhat.com/show_bug.cgi?id=851139 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://secunia.com/advisories/50472 - http://www.securityfocus.com/bid/55400 - http://www.openwall.com/lists/oss-security/2012/09/05/5 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.htm
suse-security-announce/2012-09/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html - https://security.gentoo.org/glsa/201604-03 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78265 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html - http://support.citrix.com/article/CTX134708 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html - http://osvdb.org/85197 - http://www.securitytracker.com/id?1027479 - http://lists.opensuse.org/opensuse-security-announce
ttp://osvdb.org/85197 - http://www.securitytracker.com/id?1027479 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html - http://www.debian.org/security/2012/dsa-2544
CVE ID: CVE-2012-3495 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T20:05:12.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the get_free_pirq function as an array index without checking that the return value indicates an error, which allows guest OS users to cause a denial of service (invalid memory write and host crash) and possibly gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://xenbits.xen.org/hg/xen-4.1-testing
: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://xenbits.xen.org/hg/xen-4.1-testing.hg/rev/6779ddca8593 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00001.html - http://secunia.com/advisories/51413 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://wiki.xen.org/wiki/Security_Announcements#XSA-13_hypercall_physdev_get_free_pirq_vulnerability - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://www.securityfocus.com/bid/55406 - http://www.securitytracker.com/id?1027480 - https://security.gentoo.org/glsa/201604-03 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html - http://
ecurity.gentoo.org/glsa/201604-03 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html - http://support.citrix.com/article/CTX134708 - http://www.openwall.com/lists/oss-security/2012/09/05/6 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
CVE ID: CVE-2012-3496 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T20:05:12.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://secunia.com/advisories/50530 - http://secunia.com/advisories/51413 - http://security.gentoo.org/glsa/glsa-201309-24.xml - https://bugzilla.redhat.
30 - http://secunia.com/advisories/51413 - http://security.gentoo.org/glsa/glsa-201309-24.xml - https://bugzilla.redhat.com/show_bug.cgi?id=854590 - http://securitytracker.com/id?1027481 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://secunia.com/advisories/50472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78267 - http://www.openwall.com/lists/oss-security/2012/09/05/7 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00002.html - http://www.securityfocus.com/bid/55412 - http://www.osvdb.org/85200 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2012-
ensuse.org/opensuse-security-announce/2012-09/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html - https://security.gentoo.org/glsa/201604-03 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html - http://support.citrix.com/article/CTX134708 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html - http://wiki.xen.org/wiki/Security_Announcements#XSA-14_XENMEM_populate_physmap_DoS_vulnerability - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html - http://www.debian.org/security/2012/dsa-2544
CVE ID: CVE-2012-3497 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T20:05:12.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) TMEMC_SAVE_GET_CLIENT_WEIGHT, (2) TMEMC_SAVE_GET_CLIENT_CAP, (3) TMEMC_SAVE_GET_CLIENT_FLAGS and (4) TMEMC_SAVE_END in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (NULL pointer dereference or memory corruption and host crash) or possibly have other unspecified impacts via a NULL client id. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.securitytracker.com/id?1027482 - http://wiki.xen.org/wi
: References: - http://secunia.com/advisories/55082 - http://www.securitytracker.com/id?1027482 - http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities - http://secunia.com/advisories/51413 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.securityfocus.com/bid/55410 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html - http://www.openwall.com/lists/oss-security/2012/09/05/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78268 - http://osvdb.org/85199 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - htt
ml/xen-announce/2012-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://secunia.com/advisories/50472 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://secunia.com/advisories/51352 - http://secunia.com/advisories/51324 - https://security.gentoo.org/glsa/201604-03 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
CVE ID: CVE-2012-3498 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T20:05:12.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause a denial of service (host crash) and possibly read hypervisor or guest memory via vectors related to a missing range check of map->index. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://secunia.com/advisories/50530 - http://secunia.com/advisories/51413 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.securityfocus.com/bid/55414 - h
a.com/advisories/51413 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.securityfocus.com/bid/55414 - http://wiki.xen.org/wiki/Security_Announcements#XSA-16_PHYSDEVOP_map_pirq_index_vulnerability - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://secunia.com/advisories/50472 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00005.html - http://osvdb.org/85198 - https://security.gentoo.org/glsa/201604-03 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78269 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html - http://support.citrix.com/article/CTX134708 - http://lists.opensuse.org/opensuse-security-
ounce/2012-09/msg00003.html - http://support.citrix.com/article/CTX134708 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html - http://www.openwall.com/lists/oss-security/2012/09/05/9 - https://bugzilla.redhat.com/show_bug.cgi?id=851193 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html - http://securitytracker.com/id?1027483
CVE ID: CVE-2012-3499 State: PUBLISHED Published: 2013-02-26T16:00:00 Last Updated: 2024-08-06T20:05:12.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving hostnames and URIs in the (1) mod_imagemap, (2) mod_info, (3) mod_ldap, (4) mod_proxy_ftp, and (5) mod_status modules. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/ldap/util_ldap_cache_mgr.c?r1=12
=bugtraq&m=136612293908376&w=2 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/ldap/util_ldap_cache_mgr.c?r1=1209766&r2=1418752&diff_format=h - http://www.securityfocus.com/bid/58165 - http://httpd.apache.org/security/vulnerabilities_24.html - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/mappers/mod_imagemap.c?r1=1398480&r2=1413732&diff_format=h - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101196.html - http://rhn.redhat.com/errata/RHSA-2013-1209.html - http://rhn.redhat.com/errata/RHSA-2013-0815.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19312 - http://rhn.redhat.com/errata/RHSA-2013-1207.html -
g/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19312 - http://rhn.redhat.com/errata/RHSA-2013-1207.html - http://httpd.apache.org/security/vulnerabilities_22.html - http://www.debian.org/security/2013/dsa-2637 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_info.c?r1=1225799&r2=1413732&diff_format=h - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_ftp.c?r1=1404625&r2=1413732&diff_format=h - http://www.fujitsu.com/global/support/software/security/products-f/interstage-201303e.html - http://rhn.redhat.com/errata/RHSA-2013-1208.html - http://svn.apache.org/vie
curity/products-f/interstage-201303e.html - http://rhn.redhat.com/errata/RHSA-2013-1208.html - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c?r1=1389564&r2=1413732&diff_format=h - http://www.securityfocus.com/bid/64758 - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://support.apple.com/kb/HT5880 - http://secunia.com/advisories/55032 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org
https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3
b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.o
ead.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%
httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2012-3500 State: PUBLISHED Published: 2012-10-01T00:00:00 Last Updated: 2024-08-06T20:05:12.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error output file. Additional Analyst Notes: - CVE Program Container: References: - http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commit%3Bh=4d23a5e6c90f7a37b0972b30f5d31dce97a93eb0 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:123 - https://exchange.xforce.ibmcloud.com/vulnerabilities
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78230 - http://www.securityfocus.com/bid/55358 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0316 - https://bugzilla.redhat.com/show_bug.cgi?id=848022 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/087335.html - http://www.debian.org/security/2012/dsa-2549 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086159.html - http://git.fedorahosted.org/cgit/rpmdevtools.git/commit/?id=90b4400c2ab2e80cecfd8dfdf031536376ed2cdb - http://secunia.com/advisories/50600 - http://lists.fedoraproject.org/pipermail/package-an
e80cecfd8dfdf031536376ed2cdb - http://secunia.com/advisories/50600 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086138.html - http://www.ubuntu.com/usn/USN-1593-1 - http://www.openwall.com/lists/oss-security/2012/08/31/7 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00000.html
CVE ID: CVE-2012-3501 State: PUBLISHED Published: 2012-08-25T10:00:00Z Last Updated: 2024-09-16T23:46:47.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call, which allows remote attackers to cause a denial of service (daemon crash) via a URL with certain characters, as demonstrated using %0D or %0A. Additional Analyst Notes: - CVE Program Container: References: - http://squidclamav.darold.net/news.html - http://www.openwall.com/lists/oss-security/2012/08/16/4 - http://www.osvdb.org/84138 - https://bugs.gentoo.org/show_bu
- http://www.openwall.com/lists/oss-security/2012/08/16/4 - http://www.osvdb.org/84138 - https://bugs.gentoo.org/show_bug.cgi?id=428778 - https://github.com/darold/squidclamav/commit/80f74451f628264d1d9a1f1c0bbcebc932ba5e00 - http://www.openwall.com/lists/oss-security/2012/08/16/2 - http://www.securityfocus.com/bid/54663 - http://secunia.com/advisories/49057 - http://freecode.com/projects/squidclamav/releases/346722
CVE ID: CVE-2012-3502 State: PUBLISHED Published: 2012-08-22T19:00:00 Last Updated: 2024-08-06T20:05:12.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_http module in the Apache HTTP Server 2.4.x before 2.4.3 does not properly determine the situations that require closing a back-end connection, which allows remote attackers to obtain sensitive information in opportunistic circumstances by reading a response that was intended for a different client. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55131 - http://h