Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.gentoo.org/glsa/glsa-201309-24.xml - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80023 - http://lists.xen.org/archives/html/xen-announce/2012-11/msg00003.html - http://www.openwall.com/lists/oss-security/2012/11/13/2 - http://www.securitytracker.com/id?1027760 - http://osvdb.org/87297 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html - http://secunia.com/advisories/51352 - http://secunia.com/advisories/51324 - https://security.gentoo.org/glsa/201604-03 - http://www.securityfocus.com/bid/56498 - http://li
a.com/advisories/51324 - https://security.gentoo.org/glsa/201604-03 - http://www.securityfocus.com/bid/56498 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
CVE ID: CVE-2012-4537 State: PUBLISHED Published: 2012-11-21T23:00:00 Last Updated: 2024-08-06T20:42:54.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka "Memory mapping failure DoS vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1540.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html - http://secunia.com/advisori
012-1540.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html - http://secunia.com/advisories/55082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80024 - http://www.openwall.com/lists/oss-security/2012/11/13/6 - http://secunia.com/advisories/51413 - http://secunia.com/advisories/51200 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.debian.org/security/2012/dsa-2582 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html - http://lists.xen.org/archives/html/xen-announce/2012-11/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://secunia.com/advisories/51468 - http://lis
//lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://secunia.com/advisories/51468 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://secunia.com/advisories/51352 - http://secunia.com/advisories/51324 - https://security.gentoo.org/glsa/201604-03 - http://www.securityfocus.com/bid/56498 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html - http://osvdb.org/87307 - http://www.securitytracker.com/id?1027761
CVE ID: CVE-2012-4538 State: PUBLISHED Published: 2012-11-24T20:00:00 Last Updated: 2024-08-06T20:42:54.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://secunia.com/advisories/51413 - http://secunia.com/advisories/51200 - http://www.securitytracker.com/id?1027762 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://ww
ories/51200 - http://www.securitytracker.com/id?1027762 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.debian.org/security/2012/dsa-2582 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html - http://osvdb.org/87306 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://secunia.com/advisories/51468 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80025 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://secunia.com/advisories/51352 - http://secunia.com/advisories/51324 - https://security.gentoo.org/glsa/2
21.html - http://secunia.com/advisories/51352 - http://secunia.com/advisories/51324 - https://security.gentoo.org/glsa/201604-03 - http://www.openwall.com/lists/oss-security/2012/11/13/3 - http://www.securityfocus.com/bid/56498 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html - http://lists.xen.org/archives/html/xen-announce/2012-11/msg00004.html
CVE ID: CVE-2012-4539 State: PUBLISHED Published: 2012-11-21T23:00:00 Last Updated: 2024-08-06T20:42:54.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hypercall infinite loop DoS vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/11/13/4 - http://secunia.com/advisories/55082 - http://www.osvdb.org/87305 - http://secunia.com/advisories/51413 - http://secun
- http://secunia.com/advisories/55082 - http://www.osvdb.org/87305 - http://secunia.com/advisories/51413 - http://secunia.com/advisories/51200 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.debian.org/security/2012/dsa-2582 - http://www.securitytracker.com/id?1027763 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80026 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://secunia.com/advisories/51468 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html - htt
- http://secunia.com/advisories/51468 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html - http://lists.xen.org/archives/html/xen-announce/2012-11/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://secunia.com/advisories/51352 - http://secunia.com/advisories/51324 - https://security.gentoo.org/glsa/201604-03 - http://www.securityfocus.com/bid/56498 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
CVE ID: CVE-2012-4540 State: PUBLISHED Published: 2012-11-11T11:00:00 Last Updated: 2024-08-06T20:42:53.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a "triggering event attached to applet." NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has b
event attached to applet." NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://icedtea.classpath.org/hg/release/icedtea-web-1.1/file/d759ec560073/NEWS - http://www.debian.org/security/2013/dsa-2768 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00019.html - http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/596a718be03f - http://www.securityfocus.com/bid/56434 - http://rhn.redhat.com/errata/RHSA-2012-1434.html - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-Novem
34 - http://rhn.redhat.com/errata/RHSA-2012-1434.html - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-November/020775.html - http://secunia.com/advisories/51220 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00073.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79894 - http://secunia.com/advisories/51374 - http://www.securitytracker.com/id?1027738 - http://www.ubuntu.com/usn/USN-1625-1 - https://bugzilla.redhat.com/show_bug.cgi?id=869040 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00071.html - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-September/024750.html - http://secunia.com/advisories/51206 - http://lists.opensuse.org/opensuse
ail/distro-pkg-dev/2013-September/024750.html - http://secunia.com/advisories/51206 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00040.html - http://www.securityfocus.com/bid/62426 - http://www.openwall.com/lists/oss-security/2012/11/07/5 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:171 - https://bugzilla.redhat.com/show_bug.cgi?id=1007960 - http://icedtea.classpath.org/hg/release/icedtea-web-1.3/rev/e7970f3da5fe - http://lists.opensuse.org/opensuse-updates/2013-01/msg00065.html
CVE ID: CVE-2012-4541 State: PUBLISHED Published: 2012-11-19T11:00:00Z Last Updated: 2024-09-17T00:36:04.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Piwik before 1.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://piwik.org/blog/2012/10/piwik-1-9/ - http://www.openwall.com/lists/oss-security/2012/10/22/1 - http://www.openwall.com/lists/oss-security/2012/10/23/2
CVE ID: CVE-2012-4542 State: PUBLISHED Published: 2013-02-28T19:00:00 Last Updated: 2024-08-06T20:42:54.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SG_IO ioctl call that leverages overlapping opcodes. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0496.html - http://rhn.redhat.com/errata/RHSA-2013-0882.html - http://rhn.redhat.com/errata/RHSA-2013-0928.html - http://marc.info/?l=linux-kernel&m=135903967015813&
-2013-0882.html - http://rhn.redhat.com/errata/RHSA-2013-0928.html - http://marc.info/?l=linux-kernel&m=135903967015813&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=875360 - http://marc.info/?l=linux-kernel&m=135904012416042&w=2 - http://rhn.redhat.com/errata/RHSA-2013-0579.html - https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=76a274e17114abf1a77de6b651424648ce9e10c8
CVE ID: CVE-2012-4543 State: PUBLISHED Published: 2013-01-04T22:00:00 Last Updated: 2024-08-06T20:42:55.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize to the displayCRL script, or (3) nonce variable to the profileProcess script. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=864397 - http://www.securitytracker.com/id?1027846 - http://rhn.redhat.com/errata/RHSA-2012-1550.html - http://secunia.com/advisories/51482 - h
uritytracker.com/id?1027846 - http://rhn.redhat.com/errata/RHSA-2012-1550.html - http://secunia.com/advisories/51482 - http://www.securityfocus.com/bid/56843 - http://rhn.redhat.com/errata/RHSA-2013-0511.html
CVE ID: CVE-2012-4544 State: PUBLISHED Published: 2012-10-31T16:00:00 Last Updated: 2024-08-06T20:42:54.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html - http://secunia.com/advisories/51071 - http://www.openwall.com/lists/oss-security/2012/10/26/3 - http://lists.fedor
tml - http://secunia.com/advisories/51071 - http://www.openwall.com/lists/oss-security/2012/10/26/3 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html - http://secunia.com/advisories/51413 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html - http://www.debian.org/security/2013/dsa-2636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79617 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html - http://www.securityfocus.com/bid/56289 - http://www.securitytracker.com/id?1027699 - http://rhn.redhat.com/errata/RHS
- http://www.securityfocus.com/bid/56289 - http://www.securitytracker.com/id?1027699 - http://rhn.redhat.com/errata/RHSA-2013-0241.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://osvdb.org/86619 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://secunia.com/advisories/51352 - http://secunia.com/advisories/51324 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
CVE ID: CVE-2012-4545 State: PUBLISHED Published: 2013-01-03T01:00:00 Last Updated: 2024-08-06T20:42:53.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:075 - http://www.securityfocus.com/bid/57065 - http://www.debian.org/security/2012/dsa-2592 - https://excha
e=MDVSA-2013:075 - http://www.securityfocus.com/bid/57065 - http://www.debian.org/security/2012/dsa-2592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80882 - http://repo.or.cz/w/elinks.git/blobdiff/89056e21fc7ab8e1c2d4e06ec9d0c6d01e70669a..da18694ff7dd0b67dfcb3c417fb0579b1e7d02d7:/src/protocol/http/http_negotiate.c - http://rhn.redhat.com/errata/RHSA-2013-0250.html - http://bugzilla.elinks.cz/show_bug.cgi?id=1124 - http://secunia.com/advisories/51569
CVE ID: CVE-2012-4546 State: PUBLISHED Published: 2013-04-03T00:00:00Z Last Updated: 2024-08-06T20:42:54.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration for IPA servers in Red Hat Enterprise Linux 6, when revoking a certificate from an Identity Management replica, does not properly update another Identity Management replica, which causes inconsistent Certificate Revocation Lists (CRLs) to be used and might allow remote attackers to bypass intended access restrictions via a revoked certificate. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0528.html
CVE ID: CVE-2012-4547 State: PUBLISHED Published: 2012-10-31T10:00:00 Last Updated: 2024-08-06T20:42:53.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/10/29/7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79638 - http://openwall.com/lists/oss-security/2012/10/26/1 - http://www.securityfocus.com/bid/56280 - http://awstats.sourceforge.net/docs/awstats_changelog.txt
CVE ID: CVE-2012-4548 State: PUBLISHED Published: 2012-11-11T11:00:00 Last Updated: 2024-08-06T20:42:54.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in argument to the highlight command. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=870713 - http://secunia.com/advisories/51167 - http://www.securityfocus.com/bid/56315 - http://git.zx2c4.com/cgit/commit/?id=7ea35f9f8ecf61ab42be9947aae1176ab6e089bd - http://lists.opensuse.o
.com/bid/56315 - http://git.zx2c4.com/cgit/commit/?id=7ea35f9f8ecf61ab42be9947aae1176ab6e089bd - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00004.html - http://secunia.com/advisories/50734 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00021.html - http://www.openwall.com/lists/oss-security/2012/10/28/1 - http://www.openwall.com/lists/oss-security/2012/10/28/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79665 - http://secunia.com/advisories/51222 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00022.html
CVE ID: CVE-2012-4549 State: PUBLISHED Published: 2013-01-05T00:00:00Z Last Updated: 2024-08-06T20:42:54.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The processInvocation function in org.jboss.as.ejb3.security.AuthorizationInterceptor in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) before 6.0.1, authorizes all requests when no roles are allowed for an Enterprise Java Beans (EJB) method invocation, which allows attackers to bypass intended access restrictions for EJB methods. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1594.html - http://secunia.com/advisories/51607 - http://rhn.redhat.com/errata
- http://rhn.redhat.com/errata/RHSA-2012-1594.html - http://secunia.com/advisories/51607 - http://rhn.redhat.com/errata/RHSA-2012-1592.html - http://rhn.redhat.com/errata/RHSA-2012-1591.html
CVE ID: CVE-2012-4550 State: PUBLISHED Published: 2013-01-05T00:00:00Z Last Updated: 2024-08-06T20:42:54.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) before 6.0.1, when using role-based authorization for Enterprise Java Beans (EJB) access, does not call the intended authorization modules, which prevents JACC permissions from being applied and allows remote attackers to obtain access to the EJB. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1594.html - http://secunia.com/advisories/51607 - http://rhn.redhat.com/errata/RHSA-2012-1592.html - http://rhn.redh
012-1594.html - http://secunia.com/advisories/51607 - http://rhn.redhat.com/errata/RHSA-2012-1592.html - http://rhn.redhat.com/errata/RHSA-2012-1591.html
CVE ID: CVE-2012-4551 State: PUBLISHED Published: 2012-11-30T22:00:00Z Last Updated: 2024-09-16T17:52:58.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in libunity-webapps before 2.4.1 allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via a crafted web site, related to "certain hash tables." Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1635-1 - https://bugs.launchpad.net/ubuntu/%2Bsource/libunity-webapps/%2Bbug/1068495 - http://www.openwall.com/lists/oss-security/2012/10/29/3 - http://www.securityfocus.com/bid/56314 - http://baza
1068495 - http://www.openwall.com/lists/oss-security/2012/10/29/3 - http://www.securityfocus.com/bid/56314 - http://bazaar.launchpad.net/~webapps/libunity-webapps/trunk/revision/815
CVE ID: CVE-2012-4552 State: PUBLISHED Published: 2012-11-18T23:00:00 Last Updated: 2024-08-06T20:42:54.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute arbitrary code via a crafted 3d model file that triggers a long error message, as demonstrated by a .ase file. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/87001 - http://secunia.com/advisories/51340 - http://www.openwall.com/lists/oss-security/2012/10/29/9 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091937.html - http://lists.fedoraprojec
0/29/9 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091937.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091964.html - https://bugzilla.redhat.com/show_bug.cgi?id=871187 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00015.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091932.html
CVE ID: CVE-2012-4553 State: PUBLISHED Published: 2012-11-11T11:00:00Z Last Updated: 2024-09-17T00:42:19.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP code via an external database server, related to "transient conditions." Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/drupal.git/commit/b912710 - http://www.openwall.com/lists/oss-security/2012/10/29/4 - http://drupal.org/node/1815904 - http://drupal.org/node/1815912 - http://www.openwall.com/lists/oss-security/2012/10/30/5
CVE ID: CVE-2012-4554 State: PUBLISHED Published: 2012-11-11T11:00:00Z Last Updated: 2024-09-17T00:00:50.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE declaration in an XRDS file. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/drupal.git/commit/b912710 - http://www.openwall.com/lists/oss-security/2012/10/29/4 - http://drupal.org/node/1815912 - http://www.openwall.com/lists/oss-security/2012/10/30/5
CVE ID: CVE-2012-4555 State: PUBLISHED Published: 2013-01-04T22:00:00Z Last Updated: 2024-08-06T20:42:54.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 does not properly handle interruptions of token format operations, which allows remote attackers to cause a denial of service (NULL pointer dereference and Apache httpd web server child process crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027846 - http://rhn.redhat.com/errata/RHSA-2012-1550.html - https://bugzilla.redhat.com/show_bug.cgi?id=869570 - http
d?1027846 - http://rhn.redhat.com/errata/RHSA-2012-1550.html - https://bugzilla.redhat.com/show_bug.cgi?id=869570 - http://secunia.com/advisories/51482 - http://www.securityfocus.com/bid/56843
CVE ID: CVE-2012-4556 State: PUBLISHED Published: 2013-01-04T22:00:00Z Last Updated: 2024-08-06T20:42:55.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service (Apache httpd web server child process restart) via certain unspecified empty search fields in a user certificate search query. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027846 - http://rhn.redhat.com/errata/RHSA-2012-1550.html - https://bugzilla.redhat.com/show_bug.cgi?id=869579 - http://secunia.com/advisories/51482 - http://www.