Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-3322 State: PUBLISHED Published: 2013-02-20T11:00:00 Last Updated: 2024-08-06T20:05:10.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to a display name. Additional Analyst Notes: - CVE Program Container: References: -
b script or HTML via vectors related to a display name. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV23838 - http://www-01.ibm.com/support/docview.wss?uid=swg21625624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77918
CVE ID: CVE-2012-3323 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T20:05:10.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 6.2 before 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.3 allows remote attackers to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55070 - http://osvdb.org/97924 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV23506 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77920
CVE ID: CVE-2012-3324 State: PUBLISHED Published: 2012-09-25T20:00:00 Last Updated: 2024-08-06T20:05:10.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the UTL_FILE module in IBM DB2 and DB2 Connect 10.1 before FP1 on Windows allows remote authenticated users to modify, delete, or read arbitrary files via a pathname in the file field. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21611040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77924 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC85513
CVE ID: CVE-2012-3325 State: PUBLISHED Published: 2012-08-30T22:00:00 Last Updated: 2024-08-06T20:05:10.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Full Profile before 8.5.0.1, when the PM44303 fix is installed, does not properly validate credentials, which allows remote authenticated users to obtain administrative access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027462 - http://www.securityfocus.com/bid/55309 - http://secunia.com/advisories/54971 - https://exchange.xforce.ib
m/id?1027462 - http://www.securityfocus.com/bid/55309 - http://secunia.com/advisories/54971 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77959 - http://www.ibm.com/support/docview.wss?uid=swg21609067 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM71296 - http://secunia.com/advisories/55115
CVE ID: CVE-2012-3326 State: PUBLISHED Published: 2012-09-10T17:00:00 Last Updated: 2024-08-06T20:05:10.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77960 - http://www-01.ibm.com/su
p://secunia.com/advisories/50551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77960 - http://www-01.ibm.com/support/docview.wss?uid=swg21610081 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV20344
CVE ID: CVE-2012-3327 State: PUBLISHED Published: 2013-02-20T11:00:00 Last Updated: 2024-08-06T20:05:10.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to a login action. Additional Analyst Notes: - CVE Program Container: References: - http://ww
r HTML via vectors related to a login action. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21625624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78039 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV22698
CVE ID: CVE-2012-3328 State: PUBLISHED Published: 2013-02-20T11:00:00 Last Updated: 2024-08-06T20:05:10.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and Configuration Management Database (CCMDB) 7.1 and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden frame footer. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21625624 - https://exchange.xforce.
VE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21625624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78040 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV20823
CVE ID: CVE-2012-3329 State: PUBLISHED Published: 2012-12-19T11:00:00 Last Updated: 2024-08-06T20:05:10.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a (1) temporary file or (2) log file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78044 - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5092090
CVE ID: CVE-2012-3330 State: PUBLISHED Published: 2012-11-14T11:00:00 Last Updated: 2024-08-06T20:05:10.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: The proxy server in IBM WebSphere Application Server 7.0 before 7.0.0.27, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, and WebSphere Virtual Enterprise, allows remote attackers to cause a denial of service (daemon outage) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78047 - http://www.ibm.com/support/docview.wss?uid=swg21614265 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM71319
CVE ID: CVE-2012-3331 State: PUBLISHED Published: 2018-02-08T23:00:00 Last Updated: 2024-08-06T20:05:10.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78048 - http://www-01.ibm.com/support/docview.wss?uid=swg21613895
CVE ID: CVE-2012-3333 State: PUBLISHED Published: 2014-05-26T10:00:00 Last Updated: 2024-08-06T20:05:10.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted parameter in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV26377 - http://www-01.ibm.com/support/docview.wss?uid=swg21670870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78145
CVE ID: CVE-2012-3334 State: PUBLISHED Published: 2012-09-25T20:00:00 Last Updated: 2024-08-06T20:05:10.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 11.50 before 11.50.xC9W2 and 11.70 before 11.70.xC5 allows remote authenticated users to execute arbitrary code via crafted arguments in a SET COLLATION statement. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78277 - http://www.ibm.com/support/docview.wss?uid=swg21611800 - http://osvdb.org/85736 - http://www.securityfocus.com/bid/55668
CVE ID: CVE-2012-3336 State: PUBLISHED Published: 2020-09-01T15:39:02.106242Z Last Updated: 2024-09-16T18:24:47.049Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/AC:L/I:L/UI:N/AV:N/PR:L/S:U/C:L/E:U/RL:O/RC:C) Vendors: IBM Products: InfoSphere Guardium Problem Types: Data Manipulation Description: IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 78282. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=s
78282. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21611130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78282
CVE ID: CVE-2012-3337 State: PUBLISHED Published: 2020-09-01T15:41:22.011802Z Last Updated: 2024-09-17T01:26:46.111Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/I:N/S:U/PR:N/C:L/UI:N/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Guardium Problem Types: Obtain Information Description: IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing &quot;dot dot&quot; sequences (/../) to download arbitrary files on the system. IBM X-Force ID: 78284. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21611129 -
ional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21611129 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78284
CVE ID: CVE-2012-3338 State: PUBLISHED Published: 2020-09-01T16:08:58.750503Z Last Updated: 2024-09-16T17:17:41.842Z Severity: LOW (CVSS 3.7 CVSS:3.0/AC:H/A:N/UI:N/AV:N/C:N/PR:N/S:U/I:L/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Guardium Problem Types: Gain Access Description: IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker could exploit this vulnerability to create unprivileged user accounts. IBM X-Force ID: 78286. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21611126 - h
onal Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21611126 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78286
CVE ID: CVE-2012-3340 State: PUBLISHED Published: 2020-09-01T16:10:01.232216Z Last Updated: 2024-09-16T20:27:12.826Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/UI:N/AV:N/S:U/PR:L/C:L/A:N/AC:L/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Guardium Problem Types: Obtain Information Description: IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21611128 - https://exchang
otes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21611128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78291
CVE ID: CVE-2012-3341 State: PUBLISHED Published: 2020-09-01T16:11:09.226602Z Last Updated: 2024-09-16T17:48:27.677Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AC:L/A:N/PR:L/S:C/C:L/AV:N/UI:N/I:L/RC:C/RL:O/E:U) Vendors: IBM Products: InfoSphere Guardium Problem Types: Gain Access Description: IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie
of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 78294. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21611131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78294
CVE ID: CVE-2012-3342 State: PUBLISHED Published: 2013-02-02T00:00:00 Last Updated: 2024-08-06T20:05:11.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=136570436423916&w=2 - http://www.us-cert.gov/cas/techalerts/TA13-032A.html - http://rhn.redhat.com/errat
fo/?l=bugtraq&m=136570436423916&w=2 - http://www.us-cert.gov/cas/techalerts/TA13-032A.html - http://rhn.redhat.com/errata/RHSA-2013-0236.html - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://www.securityfocus.com/bid/57700 - http://www.kb.cert.org/vuls/id/858729 - http://rhn.redhat.com/errata/RHSA-2013-0237.html - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19274 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19198 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - http://rhn.redhat.com/errat
.info/?l=bugtraq&m=136733161405818&w=2 - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16287 - http://marc.info/?l=bugtraq&m=136570436423916&w=2 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - http://marc.info/?l=bugtraq&m=136733161405818&w=2
CVE ID: CVE-2012-3343 State: PUBLISHED Published: 2012-06-09T00:00:00Z Last Updated: 2024-09-17T01:41:57.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Microdasys before 3.5.1-B708, as used in Bloxx Web Filtering before 5.0.14 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests that trigger error pages containing XSS sequences, a different vulnerability than CVE-2012-2564. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MAPG-8R9LBY - http://www.kb.cert.org/vuls/id/722963
CVE ID: CVE-2012-3345 State: PUBLISHED Published: 2012-06-15T14:00:00 Last Updated: 2024-08-06T20:05:11.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/06/15/3 - https://security.gentoo.org/glsa/201706-23
CVE ID: CVE-2012-3347 State: PUBLISHED Published: 2012-06-13T19:00:00 Last Updated: 2024-08-06T20:05:12.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment mechanism, a different vulnerability than CVE-2012-1828. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MAPG-8RQL83 - http://www.kb.cert.org/vuls/id/773035 - http://secunia.com/advisories/493
- http://www.kb.cert.org/vuls/id/MAPG-8RQL83 - http://www.kb.cert.org/vuls/id/773035 - http://secunia.com/advisories/49335
CVE ID: CVE-2012-3350 State: PUBLISHED Published: 2012-07-12T21:00:00 Last Updated: 2024-08-06T20:05:12.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76774 - http://osvdb.org/83538 - http://archives.neohapsis.com/archives/bugtraq/2012-07/0026.html - http://www.exploit-db.com/exploits/19629 - http://www.securityfocus.com/bid/54287
CVE ID: CVE-2012-3351 State: PUBLISHED Published: 2020-02-20T17:52:01 Last Updated: 2024-08-06T20:05:12.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) logo.link, or (3) aboutlink parameter, or a nested URI scheme name for (4) javascript, (5) asfunction, or (6) vbscript. Additional Analyst Notes: - CVE Program Container: References: - http://developer.longtailvideo.com/trac/ticket/1585 - http://technet.microsoft.com/security/msvr/msvr12-009 - https://www.securityfocus.com/bid/54101/discuss - https
t/1585 - http://technet.microsoft.com/security/msvr/msvr12-009 - https://www.securityfocus.com/bid/54101/discuss - https://www.securityfocus.com/bid/55199/exploit - https://www.exploit-db.com/exploits/37552 - https://www.exploit-db.com/exploits/37672
CVE ID: CVE-2012-3353 State: PUBLISHED Published: 2018-01-08T21:00:00Z Last Updated: 2024-09-16T23:56:19.347Z Vendors: Apache Software Foundation Products: Apache Sling Problem Types: Content Loading Vulnerability Description: The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in the Sling JCR content loader module makes it possible to import arbitrary files in the content repository, including local files, causing potential information leaks. Users should upgrade to version 2.1.6 of the JCR ContentLoader Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/50994d80dd5cf93f1365dacfcaecf5c12f1efe522c4ff6040b3c521a%40%3Cdev.sling.apache.org
https://lists.apache.org/thread.html/50994d80dd5cf93f1365dacfcaecf5c12f1efe522c4ff6040b3c521a%40%3Cdev.sling.apache.org%3E - https://issues.apache.org/jira/browse/SLING-2512
CVE ID: CVE-2012-3354 State: PUBLISHED Published: 2012-11-20T00:00:00 Last Updated: 2024-08-06T20:05:11.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/06/25/2 - https://bugzilla.redhat.com/show_bug.cgi?id=835145 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:073 - http://www.openwall.com/lists/oss-security/2012/06/24/2
tp://www.mandriva.com/security/advisories?name=MDVSA-2013:073 - http://www.openwall.com/lists/oss-security/2012/06/24/2 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090755.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090938.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090899.html - http://www.freelists.org/post/dokuwiki/Fwd-DokuWiki-Full-path-disclosure
CVE ID: CVE-2012-3355 State: PUBLISHED Published: 2012-07-17T21:00:00 Last Updated: 2024-08-06T20:05:12.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=678661 - http://www.openwall.com/lists/oss-security/2012/06/25/5 - https://hermes.opensuse.org/messages/15351848 - http://www.openwall.com/lists/oss-security/20
ss-security/2012/06/25/5 - https://hermes.opensuse.org/messages/15351848 - http://www.openwall.com/lists/oss-security/2012/06/25/7 - http://www.securityfocus.com/bid/54186 - http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-3355.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616673 - http://www.ubuntu.com/usn/USN-1503-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76538 - https://bugzilla.redhat.com/show_bug.cgi?id=835076
CVE ID: CVE-2012-3356 State: PUBLISHED Published: 2012-07-22T16:00:00 Last Updated: 2024-08-06T20:05:11.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authorization, which allows remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/06/25/8 - http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2760 - http://www.securityfocus.com/bid/54197 - http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.15/CHAN
- http://www.securityfocus.com/bid/54197 - http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.15/CHANGES - https://exchange.xforce.ibmcloud.com/vulnerabilities/76614 - http://osvdb.org/83225 - http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2755 - https://lwn.net/Articles/505096/ - http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2759 - http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2757 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0175 - http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2756 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:134 - http://www.debian.org/security/2012/dsa
evision=2756 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:134 - http://www.debian.org/security/2012/dsa-2563 - http://viewvc.tigris.org/issues/show_bug.cgi?id=353