Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
val%3Adef%3A19499 - http://marc.info/?l=bugtraq&m=136570436423916&w=2 - http://www.us-cert.gov/cas/techalerts/TA13-032A.html - http://rhn.redhat.com/errata/RHSA-2013-0236.html - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://www.kb.cert.org/vuls/id/858729 - http://rhn.redhat.com/errata/RHSA-2013-0237.html - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - http://www.securityfocus.com/bid/57697 - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1018 - http://rhn.redhat.com/err
intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1018 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://marc.info/?l=bugtraq&m=136570436423916&w=2 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16384 - http://marc.info/?l=bugtraq&m=136733161405818&w=2
CVE ID: CVE-2012-1543 State: PUBLISHED Published: 2013-02-02T00:00:00 Last Updated: 2024-08-06T19:01:02.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to an invalid type cast in the JSObject class. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-
invalid type cast in the JSObject class. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA13-032A.html - http://www.kb.cert.org/vuls/id/858729 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1026 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16673 - http://marc.info/?l=bugtraq&m=136733161405818&w=2
CVE ID: CVE-2012-1544 State: REJECTED Published: 2012-03-09T11:00:00 Last Updated: 2012-06-15T09:00:00 Description: No description available.
CVE ID: CVE-2012-1545 State: PUBLISHED Published: 2012-03-09T11:00:00Z Last Updated: 2024-09-17T02:01:01.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging access to a Low integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012. Additional Analyst Notes: - CVE Program Container: References: - http://pwn2own.zerodayinitiative.com/status.html - http://arstechnica.com/business/news/2012/03/ie-9-on-latest-windows-gets-stomped-at-hacker-contest.ars - http://www.zdnet.com/bl
rstechnica.com/business/news/2012/03/ie-9-on-latest-windows-gets-stomped-at-hacker-contest.ars - http://www.zdnet.com/blog/security/pwn2own-2012-ie-9-hacked-with-two-0day-vulnerabilities/10621 - http://twitter.com/vupen/statuses/177895844828291073
CVE ID: CVE-2012-1556 State: PUBLISHED Published: 2014-09-12T14:00:00 Last Updated: 2024-08-06T19:01:02.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Synology Photo Station 5 for DiskStation Manager (DSM) 3.2-1955 allows remote attackers to inject arbitrary web script or HTML via the name parameter to photo/photo_one.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73976 - http://osvdb.org/80034 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0045.html - http://www.securityfocus.com/bid/52416 - http://secunia.com/advisories/48334
CVE ID: CVE-2012-1557 State: PUBLISHED Published: 2012-03-12T19:00:00 Last Updated: 2024-08-06T19:01:02.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU#2, 9.x before 9.5 MU#11, 10.0.x before MU#13, 10.1.x before MU#22, 10.2.x before MU#16, and 10.3.x before MU#5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in March 2012. Additional Analyst Notes: - CVE Program Container: References: - http://www.h-online.com/security/news/item/Bug-in-Plesk-administration-software-is-being-actively-exploited-1446587.html -
tp://www.h-online.com/security/news/item/Bug-in-Plesk-administration-software-is-being-actively-exploited-1446587.html - http://kb.parallels.com/en/113321 - http://www.osvdb.org/79769 - http://www.openwall.com/lists/oss-security/2012/03/08/3 - http://download1.parallels.com/Plesk/PP10/parallels-plesk-panel-10-windows-updates-release-notes.html#10216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73628 - http://secunia.com/advisories/48262 - http://www.securityfocus.com/bid/52267 - http://download1.parallels.com/Plesk/PP10/parallels-plesk-panel-10-linux-updates-release-notes.html#10216 - http://www.cert.fi/haavoittuvuudet/2012/haavoittuvuus-2012-035.html - http://www.securitytracker.c
se-notes.html#10216 - http://www.cert.fi/haavoittuvuudet/2012/haavoittuvuus-2012-035.html - http://www.securitytracker.com/id?1026760
CVE ID: CVE-2012-1558 State: PUBLISHED Published: 2012-03-12T19:00:00 Last Updated: 2024-08-06T19:01:02.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted X.509 certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48634 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74095 - http://www.securityfocus.com/bid/52828 - http://www.yassl.com/yaSSL/Docs-cyassl-changelog.html
CVE ID: CVE-2012-1561 State: PUBLISHED Published: 2014-04-08T14:00:00 Last Updated: 2024-08-06T19:01:02.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "checkbox and radio button functionalities." Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1432320 - http://drupal.org/node/1432318 - http://www.openwall.com/lists/oss-security/2012/03/19/9 - http://www.osvdb.org/79015 - http://www.openwall.com/li
2318 - http://www.openwall.com/lists/oss-security/2012/03/19/9 - http://www.osvdb.org/79015 - http://www.openwall.com/lists/oss-security/2012/03/16/9 - http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://secunia.com/advisories/47941 - http://drupalcode.org/project/finder.git/commit/58443aa - http://drupalcode.org/project/finder.git/commit/13e2d0c - https://drupal.org/node/1432970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73110 - http://secunia.com/advisories/47943
CVE ID: CVE-2012-1562 State: PUBLISHED Published: 2020-01-15T12:56:07 Last Updated: 2024-08-06T19:01:02.704Z Vendors: Joomla! Products: Joomla! core Problem Types: authentication error Description: Joomla! core before 2.5.3 allows unauthorized password change. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/19/11 - https://developer.joomla.org/security/news/394-20120304-core-password-change.html
CVE ID: CVE-2012-1563 State: PUBLISHED Published: 2020-01-15T12:59:50 Last Updated: 2024-08-06T19:01:02.676Z Vendors: Joomla! Products: Joomla! Problem Types: Admin Account Creation Description: Joomla! before 2.5.3 allows Admin Account Creation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/19/11 - https://www.exploit-db.com/exploits/41156/ - https://developer.joomla.org/security/news/395-20120303-core-privilege-escalation.html
CVE ID: CVE-2012-1564 State: PUBLISHED Published: 2012-10-06T21:00:00 Last Updated: 2024-08-06T19:01:02.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in administration/create_album.php in YVS Image Gallery allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/19/12 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79529 - http://www.openwall.com/lists/oss-security/2012/02/27/7 - http://www.openwall.com/lists/oss-security/2012/02/27/27
CVE ID: CVE-2012-1565 State: PUBLISHED Published: 2012-10-06T21:00:00 Last Updated: 2024-08-06T19:01:02.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4, 4.5, and 4.6 has unknown impact and attack vectors related to an insecure direct object reference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74060 - http://issues.ez.no/19238 - http://secunia.com/advisories/48338 - http://osvdb.org/80098 - http://www.openwall.com/lists/oss-security/2012/03/19/13 - http://www.openwall.com/lists/oss-security/2012/03/19/6 - http://www.securityfocus.com/bid/5251
security/2012/03/19/13 - http://www.openwall.com/lists/oss-security/2012/03/19/6 - http://www.securityfocus.com/bid/52516
CVE ID: CVE-2012-1566 State: PUBLISHED Published: 2020-02-07T13:23:01 Last Updated: 2024-08-06T19:01:02.462Z Vendors: LinuxMint Products: Mint Problem Types: authentication error Description: LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintNanny. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/19/14
CVE ID: CVE-2012-1567 State: PUBLISHED Published: 2020-02-07T13:25:30 Last Updated: 2024-08-06T19:01:02.698Z Vendors: LinuxMint Products: Mint Problem Types: authentication error Description: LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintUpdate. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/19/14 - https://github.com/linuxmint/mintupdate/blob/master/usr/lib/linuxmint/mintUpdate/mintUpdate.py#L1444
CVE ID: CVE-2012-1568 State: PUBLISHED Published: 2013-03-01T02:00:00Z Last Updated: 2024-08-06T19:01:02.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 5 and 6 and Fedora 15 and 16 does not properly handle use of many shared libraries by a 32-bit executable file, which makes it easier for context-dependent attackers to bypass the ASLR protection mechanism by leveraging a predictable base address for one of these libraries. Additional Analyst Notes: - CVE Program Container: References: - http://scarybeastsecurity.blogspot.com/2012/03/some-random-observations-on-linux-aslr
E Program Container: References: - http://scarybeastsecurity.blogspot.com/2012/03/some-random-observations-on-linux-aslr.html - https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=302a4fc15aebf202b6dffd6c804377c6058ee6e4 - http://www.openwall.com/lists/oss-security/2012/03/20/4 - http://openwall.com/lists/oss-security/2012/03/21/3 - https://bugzilla.redhat.com/show_bug.cgi?id=804947
CVE ID: CVE-2012-1569 State: PUBLISHED Published: 2012-03-26T19:00:00 Last Updated: 2024-08-06T19:01:02.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57260 - http://rhn.redhat.com/errata/RHSA-2012-0427.html - http://secunia.co
References: - http://secunia.com/advisories/57260 - http://rhn.redhat.com/errata/RHSA-2012-0427.html - http://secunia.com/advisories/48578 - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://secunia.com/advisories/49002 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077339.html - http://www.openwall.com/lists/oss-security/2012/03/20/8 - http://www.openwall.com/lists/oss-security/2012/03/21/5 - http://secunia.com/advisories/48488 - http://www.ubuntu.com/usn/USN-1436-1 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/076865.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077284.html - http://www.gnu.org/software/
5.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077284.html - http://www.gnu.org/software/gnutls/security.html - https://bugzilla.redhat.com/show_bug.cgi?id=804920 - http://rhn.redhat.com/errata/RHSA-2012-0488.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/076856.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html - http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5932 - http://www.securitytracker.com/id?1026829 - http://linux.oracle.com/errata/ELSA-2014-0596.html - http://secunia.com/advisories/48596 - http://secunia.com/advisories/50739 - http://secunia.com/advisories/48397 - http://secu
//secunia.com/advisories/48596 - http://secunia.com/advisories/50739 - http://secunia.com/advisories/48397 - http://secunia.com/advisories/48505 - http://blog.mudynamics.com/2012/03/20/gnutls-and-libtasn1-vulns/ - http://article.gmane.org/gmane.comp.gnu.libtasn1.general/53 - http://article.gmane.org/gmane.comp.gnu.libtasn1.general/54 - http://www.openwall.com/lists/oss-security/2012/03/20/3 - http://www.debian.org/security/2012/dsa-2440 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:039 - http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076699.html - http://archives.neohapsis.com/archives/bugtraq/2012-03/0099.html - http://lists.fedoraproject.org/pipermail/
6699.html - http://archives.neohapsis.com/archives/bugtraq/2012-03/0099.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078207.html
CVE ID: CVE-2012-1570 State: PUBLISHED Published: 2012-03-28T10:00:00 Last Updated: 2024-08-06T19:01:02.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/20/10 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74119 - http://www.openwall.com/lists/oss-secur
ity/2012/03/20/10 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74119 - http://www.openwall.com/lists/oss-security/2012/03/20/1 - http://secunia.com/advisories/48492 - https://bugzilla.redhat.com/show_bug.cgi?id=804770 - http://osvdb.org/80192 - http://www.securitytracker.com/id?1026821 - http://www.maradns.org/changelog.html
CVE ID: CVE-2012-1571 State: PUBLISHED Published: 2012-07-17T21:00:00 Last Updated: 2024-08-06T19:01:02.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2422 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:035 - https://github.com/glensc/file/commit/1aec04dbf8a24b8a6ba64c4f74efa0628e36db0b - http://mx.gw.com/pipermail/file/2012/000914.html - http
om/glensc/file/commit/1aec04dbf8a24b8a6ba64c4f74efa0628e36db0b - http://mx.gw.com/pipermail/file/2012/000914.html - https://github.com/glensc/file/commit/1859fdb4e67c49c463c4e0078054335cd46ba295 - http://www.ubuntu.com/usn/USN-2123-1
CVE ID: CVE-2012-1572 State: PUBLISHED Published: 2019-11-12T16:48:15 Last Updated: 2024-08-06T19:01:02.621Z Vendors: keystone Products: Keystone Problem Types: extremely long passwords can crash Keystone Description: OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-1572 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1572
CVE ID: CVE-2012-1573 State: PUBLISHED Published: 2012-03-26T19:00:00 Last Updated: 2024-08-06T19:01:01.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1418-1 - http://secunia.com/advisories/57260 - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://article.
sn/USN-1418-1 - http://secunia.com/advisories/57260 - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5912 - http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commit%3Bh=b495740f2ff66550ca9395b3fda3ea32c3acb185 - https://bugzilla.redhat.com/show_bug.cgi?id=805432 - http://secunia.com/advisories/48511 - http://osvdb.org/80259 - http://www.securityfocus.com/bid/52667 - http://www.openwall.com/lists/oss-security/2012/03/21/5 - http://secunia.com/advisories/48488 - http://secunia.com/advisories/48712 - http://www.gnu.org/software/gnutls/security.html - http://www.securitytracker.com/id?1026828 - http://lists.fedoraproject.org/
/www.gnu.org/software/gnutls/security.html - http://www.securitytracker.com/id?1026828 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077071.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076496.html - http://rhn.redhat.com/errata/RHSA-2012-0488.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html - http://secunia.com/advisories/48596 - http://blog.mudynamics.com/2012/03/20/gnutls-and-libtasn1-vulns/ - http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commit%3Bh=422214868061370aeeb0ac9cd0f021a5c350a57d - http://www.openwall.com/lists/oss-security/2012/03/21/4 - http://article.gmane.org/gmane.comp.encryption.
21a5c350a57d - http://www.openwall.com/lists/oss-security/2012/03/21/4 - http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5910 - http://www.debian.org/security/2012/dsa-2441 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:040 - http://rhn.redhat.com/errata/RHSA-2012-0429.html - http://archives.neohapsis.com/archives/bugtraq/2012-03/0099.html
CVE ID: CVE-2012-1574 State: PUBLISHED Published: 2012-04-12T10:00:00 Last Updated: 2024-08-06T19:01:02.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to impersonate arbitrary cluster user accounts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2012/Apr/70 - http://secunia.com/advisories/48775 - https://www.cloude
References: - http://seclists.org/fulldisclosure/2012/Apr/70 - http://secunia.com/advisories/48775 - https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html - http://archives.neohapsis.com/archives/bugtraq/2012-04/0051.html - http://secunia.com/advisories/48776 - http://www.securityfocus.com/bid/52939 - https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin
CVE ID: CVE-2012-1575 State: PUBLISHED Published: 2012-04-22T18:00:00 Last Updated: 2024-08-06T19:01:02.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48810 - http://www.securityfocus.com/bid/53000 - https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html - http://rhn.redhat.com/errata/RHSA-2012-0476.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74844 - http://rhn.redh
rhn.redhat.com/errata/RHSA-2012-0476.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74844 - http://rhn.redhat.com/errata/RHSA-2012-0477.html - https://bugzilla.redhat.com/show_bug.cgi?id=805712 - http://www.securitytracker.com/id?1026921 - https://bugzilla.redhat.com/attachment.cgi?id=571986 - http://secunia.com/advisories/48829
CVE ID: CVE-2012-1576 State: PUBLISHED Published: 2012-10-01T20:00:00 Last Updated: 2024-08-06T19:01:02.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: The myuser_delete function in libathemecore/account.c in Atheme 5.x before 5.2.7, 6.x before 6.0.10, and 7.x before 7.0.0-beta2 does not properly clean up CertFP entries when a user is deleted, which allows remote attackers to access a different user account or cause a denial of service (daemon crash) via a login as a deleted user. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-09.xml - http://www.openwall.com/lists/oss-security/2012/03/23/2 - http://www.openwall.co
ty.gentoo.org/glsa/glsa-201209-09.xml - http://www.openwall.com/lists/oss-security/2012/03/23/2 - http://www.openwall.com/lists/oss-security/2012/03/22/3 - http://archives.neohapsis.com/archives/fulldisclosure/2012-03/0248.html - http://secunia.com/advisories/50704 - http://jira.atheme.org/browse/SRV-166 - http://www.securityfocus.com/bid/52675 - http://secunia.com/advisories/48481 - http://git.atheme.org/atheme/commit/?id=3d9551761db2
CVE ID: CVE-2012-1577 State: PUBLISHED Published: 2019-12-10T18:45:07 Last Updated: 2024-08-06T19:01:02.509Z Vendors: dietlibc Products: dietlibc Problem Types: Insufficient Random Number Generation Description: lib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-1577 - http://www.openwall.com/lists/oss-security/2012/03/23/14 - http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdlib/random.c#rev1.16 - https://github.com/ensc/dietlibc/blob/master/CHANGES