Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-3522 State: PUBLISHED Published: 2014-06-13T14:00:00 Last Updated: 2024-08-06T20:05:12.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/p/geshi/code/2508/ - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105317.html - http://www.openwall.com/lists/oss-security/2012/08/21/11 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105273.html - http://lists.fedoraprojec
12/08/21/11 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105273.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105247.html
CVE ID: CVE-2012-3523 State: PUBLISHED Published: 2012-11-11T11:00:00 Last Updated: 2024-08-06T20:05:12.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2012:156 - http://secunia.com/advisories/50661 - http://lists.opensuse.o
www.mandriva.com/security/advisories?name=MDVSA-2012:156 - http://secunia.com/advisories/50661 - http://lists.opensuse.org/opensuse-updates/2012-09/msg00058.html
CVE ID: CVE-2012-3524 State: PUBLISHED Published: 2012-09-18T17:00:00 Last Updated: 2024-08-06T20:05:12.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the applications that do not cleanse environment variables, not in libdbus itself: "we do not support use of libdbus in setuid binaries that do not sanitize their environment before their first call into libdbus." Additional Analyst No
s in setuid binaries that do not sanitize their environment before their first call into libdbus." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00009.html - http://www.openwall.com/lists/oss-security/2012/09/12/6 - http://www.openwall.com/lists/oss-security/2012/07/26/1 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00000.html - http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html - http://secunia.com/advisories/50544 - https://bugs.freedesktop.org/show_bug.cgi?id=52202 - https://bugzilla.redhat.com/show_bug.cgi?id=847402 - http://www.ubuntu.com/usn/USN-1576-1 - http://secunia.c
?id=52202 - https://bugzilla.redhat.com/show_bug.cgi?id=847402 - http://www.ubuntu.com/usn/USN-1576-1 - http://secunia.com/advisories/50537 - http://www.openwall.com/lists/oss-security/2012/09/17/2 - http://www.exploit-db.com/exploits/21323 - http://www.securityfocus.com/bid/55517 - http://rhn.redhat.com/errata/RHSA-2012-1261.html - http://www.openwall.com/lists/oss-security/2012/07/10/4 - http://www.openwall.com/lists/oss-security/2012/09/14/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:083 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:070 - http://secunia.com/advisories/50710 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00015.html - ht
- http://secunia.com/advisories/50710 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00015.html - https://bugzilla.novell.com/show_bug.cgi?id=697105 - http://www.ubuntu.com/usn/USN-1576-2 - http://stealth.openwall.net/null/dzug.c
CVE ID: CVE-2012-3525 State: PUBLISHED Published: 2012-08-25T16:00:00 Last Updated: 2024-08-06T20:05:12.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1538.html - http://www.openwall.com/lists/oss-security/2012/08/22/5 - http://www.openwall.com/lists/oss-security/2012/08/22/6 - http://www.securityfocus.com/bid/55167 - http://secunia.com/advisories/501
penwall.com/lists/oss-security/2012/08/22/6 - http://www.securityfocus.com/bid/55167 - http://secunia.com/advisories/50124 - https://bugzilla.redhat.com/show_bug.cgi?id=850872 - http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html - http://xmpp.org/resources/security-notices/server-dialback/ - https://github.com/Jabberd2/jabberd2/commit/aabcffae560d5fd00cd1d2ffce5d760353cf0a4d - http://rhn.redhat.com/errata/RHSA-2012-1539.html - http://www.mail-archive.com/jabberd2%40lists.xiaoka.com/msg01903.html - http://secunia.com/advisories/50859
CVE ID: CVE-2012-3526 State: PUBLISHED Published: 2012-09-05T23:00:00 Last Updated: 2024-08-06T20:05:12.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 for the Apache HTTP Server allows remote attackers to cause a denial of service (server or application crash) via multiple X-Forwarded-For headers in a request. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/22/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683984 - http://zecrazytux.net/troubleshooting/apache2-segfault-debugging-tutorial - http://www.openwall.com/lists/oss-security/2012/08/22/
razytux.net/troubleshooting/apache2-segfault-debugging-tutorial - http://www.openwall.com/lists/oss-security/2012/08/22/7 - http://www.securityfocus.com/bid/55154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77987 - http://secunia.com/advisories/50400 - http://www.debian.org/security/2012/dsa-2532
CVE ID: CVE-2012-3527 State: PUBLISHED Published: 2012-09-05T23:00:00 Last Updated: 2024-08-06T20:05:12.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: view_help.php in the backend help system in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to unserialize arbitrary objects and possibly execute arbitrary PHP code via an unspecified parameter, related to a "missing signature (HMAC)." Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/ - http://www.debian.org/security/2012/dsa-2537 - http://www.openwall.com/lists/os
ins/typo3-core/typo3-core-sa-2012-004/ - http://www.debian.org/security/2012/dsa-2537 - http://www.openwall.com/lists/oss-security/2012/08/22/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77791 - http://osvdb.org/84773 - http://secunia.com/advisories/50287
CVE ID: CVE-2012-3528 State: PUBLISHED Published: 2012-09-05T23:00:00 Last Updated: 2024-08-06T20:05:12.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/84771 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/77792 - http://www.debian.org/security/2012/dsa-2537 - h
012-004/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/77792 - http://www.debian.org/security/2012/dsa-2537 - http://www.openwall.com/lists/oss-security/2012/08/22/8 - http://secunia.com/advisories/50287
CVE ID: CVE-2012-3529 State: PUBLISHED Published: 2012-09-05T23:00:00 Last Updated: 2024-08-06T20:05:12.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: The configuration module in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to obtain the encryption key via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/77793 - http://www.debian.org/security/2012/dsa-2537 - http://www.openwall.com/lists/oss-security/2012/08/22/8 - http
es/77793 - http://www.debian.org/security/2012/dsa-2537 - http://www.openwall.com/lists/oss-security/2012/08/22/8 - http://secunia.com/advisories/50287 - http://osvdb.org/84775
CVE ID: CVE-2012-3530 State: PUBLISHED Published: 2012-09-05T23:00:00 Last Updated: 2024-08-06T20:05:12.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain HTML5 JavaScript events. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/77794 - http://www.debian.org/security/2012/dsa-2537 - http://www.o
https://exchange.xforce.ibmcloud.com/vulnerabilities/77794 - http://www.debian.org/security/2012/dsa-2537 - http://www.openwall.com/lists/oss-security/2012/08/22/8 - http://osvdb.org/84772 - http://secunia.com/advisories/50287
CVE ID: CVE-2012-3531 State: PUBLISHED Published: 2012-09-05T23:00:00 Last Updated: 2024-08-06T20:05:12.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Install Tool in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/ - http://www.debian.org/security/2012/dsa-2537 - http://www.openwall.com/lists/oss-security/2012/08/22/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities
sa-2537 - http://www.openwall.com/lists/oss-security/2012/08/22/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78888
CVE ID: CVE-2012-3532 State: PUBLISHED Published: 2013-04-12T22:00:00Z Last Updated: 2024-08-06T20:05:12.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0733.html - http://secunia.com/advisories/53005 - https://bugzilla.redhat.com/show_bug.cgi?id=851046 - http://www.securityfocus.com/bid/59015
CVE ID: CVE-2012-3533 State: PUBLISHED Published: 2012-08-31T20:00:00 Last Updated: 2024-08-06T20:13:49.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55208 - http://www.openwall.com/lists/oss-security/2012/08/24/6 - http://www.openwall.com/lists/oss-security/2012/08/26/1 - https://bugzilla.redhat.com/show_bug.cgi?id=851672 - http://secunia.com/advisories/50409
ts/oss-security/2012/08/26/1 - https://bugzilla.redhat.com/show_bug.cgi?id=851672 - http://secunia.com/advisories/50409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77984 - http://gerrit.ovirt.org/#/c/7209/ - http://gerrit.ovirt.org/#/c/7249/
CVE ID: CVE-2012-3534 State: PUBLISHED Published: 2012-08-31T20:00:00 Last Updated: 2024-08-06T20:13:49.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to cause a denial of service (connection and thread consumption) via a large number of connections. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/25/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77975 - http://www.openwall.com/lists/oss-security/2012/08/27/1 - http://www.securityfocus.com/bid/55198 - http://secunia.com/advisories/50
openwall.com/lists/oss-security/2012/08/27/1 - http://www.securityfocus.com/bid/55198 - http://secunia.com/advisories/50343 - http://www.gnugk.org/gnugk-3.1.html - http://www.openwall.com/lists/oss-security/2012/08/25/3 - http://www.osvdb.org/84862 - http://lists.opensuse.org/opensuse-updates/2016-07/msg00070.html
CVE ID: CVE-2012-3535 State: PUBLISHED Published: 2012-09-05T23:00:00 Last Updated: 2024-08-06T20:13:50.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/openjpeg/issues/detail?id=170 - http://secunia.com/advisories/50360 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090021.html - http://secunia.com/advisories/50681 - http://www.securityfocus.com/bid/55214 - https://excha
/2012-October/090021.html - http://secunia.com/advisories/50681 - http://www.securityfocus.com/bid/55214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77994 - http://osvdb.org/84978 - http://www.openwall.com/lists/oss-security/2012/08/27/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:157 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090579.html - http://rhn.redhat.com/errata/RHSA-2012-1283.html - https://bugzilla.redhat.com/show_bug.cgi?id=842918 - http://www.openwall.com/lists/oss-security/2012/08/27/3
CVE ID: CVE-2012-3536 State: PUBLISHED Published: 2018-02-27T19:00:00Z Last Updated: 2024-09-16T18:09:20.814Z Vendors: Apache Software Foundation Products: Apache Hupa Problem Types: XSS Description: Two XSS vulnerabilities were fixed in message list and view in the Hupa Webmail application from the Apache James project. An attacker could send a carefully crafted email to a user of Hupa which would trigger a XSS when the email was opened or when a list of messages were viewed. This issue was addressed in Hupa 0.0.3. Additional Analyst Notes: - CVE Program Container: References: - https://james.apache.org/hupa/index.html - http://svn.apache.org/viewvc?view=revision&revision=1373762
CVE ID: CVE-2012-3537 State: PUBLISHED Published: 2012-09-05T23:00:00 Last Updated: 2024-08-06T20:13:50.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Crowbar Ohai plugin (chef/cookbooks/ohai/files/default/plugins/crowbar.rb) in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands via vectors related to "insecure handling of tmp files" and predictable file names. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SUSE-Cloud/barclamp-deployer/commit/5ea8d4ddaa4cb1ce834d36889f0fe7ac0d617bc8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78041 - http://www.openwall.com/lis
cb1ce834d36889f0fe7ac0d617bc8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78041 - http://www.openwall.com/lists/oss-security/2012/08/27/7 - https://github.com/dellcloudedge/barclamp-deployer/pull/57 - http://www.securityfocus.com/bid/55240 - https://bugzilla.novell.com/show_bug.cgi?id=774967 - http://secunia.com/advisories/50442 - https://github.com/SUSE-Cloud/barclamp-deployer/commit/b6454268a067fc77ff5de82057b5b53b3cc38b87 - http://osvdb.org/84955 - http://www.openwall.com/lists/oss-security/2012/08/27/5
CVE ID: CVE-2012-3538 State: PUBLISHED Published: 2013-01-04T22:00:00 Last Updated: 2024-08-06T20:13:50.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users to read pulp administrative passwords by reading production.log. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80547 - http://osvdb.org/88139 - http://secunia.com/advisories/51472 - http://rhn.redhat.com/errata/RHSA-2012-1543.html - http://www.securityfocus.com/bid/56819
CVE ID: CVE-2012-3539 State: REJECTED Published: 2012-08-28T10:00:00Z Last Updated: 2024-09-17T00:31:40.782Z Description: No description available.
CVE ID: CVE-2012-3540 State: PUBLISHED Published: 2012-09-05T23:00:00 Last Updated: 2024-08-06T20:13:50.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: this issue was originally assigned CVE-2012-3542 by mistake. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78196 - https://bugs.launchpad.net/horizon/+bug/1039077 - http://www.openwall.com/lists/oss-security/2012/
lnerabilities/78196 - https://bugs.launchpad.net/horizon/+bug/1039077 - http://www.openwall.com/lists/oss-security/2012/08/30/4 - https://github.com/openstack/horizon/commit/35eada8a27323c0f83c400177797927aba6bc99b - http://www.ubuntu.com/usn/USN-1565-1 - http://www.securityfocus.com/bid/55329 - https://lists.launchpad.net/openstack/msg16281.html - http://secunia.com/advisories/50480 - http://www.openwall.com/lists/oss-security/2012/08/30/5 - https://lists.launchpad.net/openstack/msg16278.html
CVE ID: CVE-2012-3541 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2012-3542 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-08-06T20:13:50.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user's default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50467 - http://www.securityfocus.com/bid/55326
tes: - CVE Program Container: References: - http://secunia.com/advisories/50467 - http://www.securityfocus.com/bid/55326 - https://lists.launchpad.net/openstack/msg16282.html - https://github.com/openstack/keystone/commit/c13d0ba606f7b2bdc609a7f388334e5efec3f3aa - http://www.openwall.com/lists/oss-security/2012/08/30/6 - https://github.com/openstack/keystone/commit/5438d3b5a219d7c8fa67e66e538d325a61617155 - http://secunia.com/advisories/50494 - https://bugs.launchpad.net/keystone/+bug/1040626 - http://www.ubuntu.com/usn/USN-1552-1
CVE ID: CVE-2012-3543 State: PUBLISHED Published: 2019-11-21T14:00:56 Last Updated: 2024-08-06T20:13:50.119Z Vendors: mono Products: mono Problem Types: Hash collision issue Description: mono 2.10.x ASP.NET Web Form Hash collision DoS Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-3543 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3543 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-3543 - https://access.redhat.com/security/cve/cve-2012-3543 - https://bugs.gentoo.org/show_bug.cgi?id=CVE-2012-3543 - http://www.openwall.com/lists/oss-security/2012/08/28/14 - http://www.securityfocus.com/bid/55251 - http://www.
2-3543 - http://www.openwall.com/lists/oss-security/2012/08/28/14 - http://www.securityfocus.com/bid/55251 - http://www.ubuntu.com/usn/USN-2547-1
CVE ID: CVE-2012-3544 State: PUBLISHED Published: 2013-06-01T10:00:00 Last Updated: 2024-08-06T20:13:50.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data. Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc?view=revision&revision=1378702 - http://www.securityfocus.com/bid/59797 - http://svn.apache.org/viewvc?view=revision&revision=1378921 - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://tomcat.apache.org/security-7.
&revision=1378921 - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://tomcat.apache.org/security-7.html - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://svn.apache.org/viewvc?view=revision&revision=1476592 - http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/coyote/http11/filters/ChunkedInputFilter.java?r1=1476592&r2=1476591&pathrev=1476592 - http://tomcat.apache.org/security-6.html - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://seclists.org/fulldisclosure/2014/Dec/23 - http://archives.neohapsis.com/archives/bugtraq/2013-05/0042.html - http://www.ubuntu.com/usn/USN-1841-1 - http://www.securityfoc
rchives.neohapsis.com/archives/bugtraq/2013-05/0042.html - http://www.ubuntu.com/usn/USN-1841-1 - http://www.securityfocus.com/bid/64758 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomc
che.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2012-3545 State: REJECTED Published: 2017-05-16T20:00:00 Last Updated: 2017-05-16T19:57:01 Description: No description available.
CVE ID: CVE-2012-3546 State: PUBLISHED Published: 2012-12-19T11:00:00 Last Updated: 2024-08-06T20:13:50.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://www.securitytracker.com/id?1027833 - http://www.ubuntu.com/usn/USN-1685-1 - http://www.securityfocus.com/bid/56