Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-5366 State: PUBLISHED Published: 2020-02-20T14:14:26 Last Updated: 2024-08-06T21:05:46.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 implementation in Apple Mac OS X (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/10/12 - https://www.securityfocus.com/bid/56170/info
CVE ID: CVE-2012-5367 State: PUBLISHED Published: 2012-12-03T21:00:00 Last Updated: 2024-08-06T21:05:47.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in OrangeHRM 2.7.1 RC 1 allow remote authenticated administrators to execute arbitrary SQL commands via the sortField parameter to (1) viewCustomers, (2) viewPayGrades, or (3) viewSystemUsers in symfony/web/index.php/admin/, as demonstrated using cross-site request forgery (CSRF) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/117925/OrangeHRM-2.7.1-rc.1-Cross-Site-Request-Forgery-SQL-Injection.html - http://osvdb.org/86858 -
security.org/files/117925/OrangeHRM-2.7.1-rc.1-Cross-Site-Request-Forgery-SQL-Injection.html - http://osvdb.org/86858 - http://www.securityfocus.com/bid/56417 - https://www.htbridge.com/advisory/HTB23119 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79833 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0029.html
CVE ID: CVE-2012-5368 State: PUBLISHED Published: 2012-10-25T10:00:00 Last Updated: 2024-08-06T21:05:46.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 3.5.x before 3.5.3 uses JavaScript code that is obtained through an HTTP session to phpmyadmin.net without SSL, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by modifying this code. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2012-7.php - https://github.com/phpmyadmin/phpmyadmin/commit/a547f3d3e2cf36c6a904fa3e053fd8bddd3fbbb0 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00033.html - http://www.
547f3d3e2cf36c6a904fa3e053fd8bddd3fbbb0 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00033.html - http://www.securityfocus.com/bid/55939 - https://github.com/phpmyadmin/phpmyadmin/commit/50edafc0884aa15d0a1aa178089ac6a1ad2eb18a
CVE ID: CVE-2012-5370 State: PUBLISHED Published: 2012-11-28T11:00:00 Last Updated: 2024-08-06T21:05:47.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash2 algorithm, a different vulnerability than CVE-2011-4838. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=880671 - http://asfws12.file
t Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=880671 - http://asfws12.files.wordpress.com/2012/11/asfws2012-jean_philippe_aumasson-martin_bosslet-hash_flooding_dos_reloaded.pdf - https://www.131002.net/data/talks/appsec12_slides.pdf - http://2012.appsec-forum.ch/conferences/#c17 - http://www.ocert.org/advisories/ocert-2012-001.html - http://rhn.redhat.com/errata/RHSA-2013-0533.html
CVE ID: CVE-2012-5371 State: PUBLISHED Published: 2012-11-28T11:00:00 Last Updated: 2024-08-06T21:05:47.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against a variant of the MurmurHash2 algorithm, a different vulnerability than CVE-2011-4815. Additional Analyst Notes: - CVE Program Container: References: - http
thm, a different vulnerability than CVE-2011-4815. Additional Analyst Notes: - CVE Program Container: References: - http://asfws12.files.wordpress.com/2012/11/asfws2012-jean_philippe_aumasson-martin_bosslet-hash_flooding_dos_reloaded.pdf - http://securitytracker.com/id?1027747 - http://www.osvdb.org/87280 - http://www.securityfocus.com/bid/56484 - https://www.131002.net/data/talks/appsec12_slides.pdf - http://www.ruby-lang.org/en/news/2012/11/09/ruby19-hashdos-cve-2012-5371/ - http://2012.appsec-forum.ch/conferences/#c17 - https://bugzilla.redhat.com/show_bug.cgi?id=875236 - http://secunia.com/advisories/51253 - http://www.ocert.org/advisories/ocert-2012-001.html - http://www.ubuntu.com/usn/
- http://secunia.com/advisories/51253 - http://www.ocert.org/advisories/ocert-2012-001.html - http://www.ubuntu.com/usn/USN-1733-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79993
CVE ID: CVE-2012-5372 State: PUBLISHED Published: 2012-11-28T11:00:00 Last Updated: 2024-08-06T21:05:47.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm. Additional Analyst Notes: - CVE Program Container: References: - http://asfws12.files.wordpress.com/2012/11/asfws2012-jean_philippe_aumasson-martin_bosslet-hash_flooding_dos_reload
s: - http://asfws12.files.wordpress.com/2012/11/asfws2012-jean_philippe_aumasson-martin_bosslet-hash_flooding_dos_reloaded.pdf - https://www.131002.net/data/talks/appsec12_slides.pdf - http://2012.appsec-forum.ch/conferences/#c17 - http://www.ocert.org/advisories/ocert-2012-001.html - http://www.securityfocus.com/bid/56670
CVE ID: CVE-2012-5373 State: PUBLISHED Published: 2012-11-28T11:00:00 Last Updated: 2024-08-06T21:05:47.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm, a different vulnerability than CVE-2012-2739. Additional Analyst Notes: - CVE Program Container: References: - http://asfws12.files.
vulnerability than CVE-2012-2739. Additional Analyst Notes: - CVE Program Container: References: - http://asfws12.files.wordpress.com/2012/11/asfws2012-jean_philippe_aumasson-martin_bosslet-hash_flooding_dos_reloaded.pdf - http://www.securityfocus.com/bid/56673 - https://www.131002.net/data/talks/appsec12_slides.pdf - https://bugzilla.redhat.com/show_bug.cgi?id=880705 - http://2012.appsec-forum.ch/conferences/#c17 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80299 - http://www.ocert.org/advisories/ocert-2012-001.html
CVE ID: CVE-2012-5374 State: PUBLISHED Published: 2013-02-18T11:00:00 Last Updated: 2024-08-06T21:05:46.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (extended runtime of kernel code) by creating many different files whose names are associated with the same CRC32C hash value. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/testing/patch-3.8-rc1.bz2 - http://crypto.junod.info/2012/12/13/hash-dos-and-btrfs/ - https://github.com/torvalds/linux/commit/9c52057c698fb96f8f07e7a4bcf4801a092bda8
d.info/2012/12/13/hash-dos-and-btrfs/ - https://github.com/torvalds/linux/commit/9c52057c698fb96f8f07e7a4bcf4801a092bda89 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9c52057c698fb96f8f07e7a4bcf4801a092bda89 - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html - http://www.ubuntu.com/usn/USN-1944-1 - http://www.ubuntu.com/usn/USN-1945-1 - http://www.ubuntu.com/usn/USN-2017-1 - http://www.ubuntu.com/usn/USN-1947-1 - http://openwall.com/lists/oss-security/2012/12/13/20 - http://www.ubuntu.com/usn/USN-1946-1
CVE ID: CVE-2012-5375 State: PUBLISHED Published: 2013-02-18T11:00:00 Last Updated: 2024-08-06T21:05:46.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (prevention of file creation) by leveraging the ability to write to a directory important to the victim, and creating a file with a crafted name that is associated with a specific CRC32C hash value. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/testing/patch-3.8-rc1.bz2 - http://crypto.junod.info/2012/12/13/hash-dos-and-btrfs/ - https://
org/pub/linux/kernel/v3.x/testing/patch-3.8-rc1.bz2 - http://crypto.junod.info/2012/12/13/hash-dos-and-btrfs/ - https://github.com/torvalds/linux/commit/9c52057c698fb96f8f07e7a4bcf4801a092bda89 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9c52057c698fb96f8f07e7a4bcf4801a092bda89 - http://www.ubuntu.com/usn/USN-1944-1 - http://www.ubuntu.com/usn/USN-1945-1 - http://www.ubuntu.com/usn/USN-2017-1 - http://www.ubuntu.com/usn/USN-1947-1 - http://openwall.com/lists/oss-security/2012/12/13/20 - http://www.ubuntu.com/usn/USN-1946-1
CVE ID: CVE-2012-5376 State: PUBLISHED Published: 2012-10-11T10:00:00 Last Updated: 2024-08-06T21:05:46.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging access to a renderer process, a different vulnerability than CVE-2012-5112. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15156 - http://secunia.com/advisories/50954 - http://code.google.com/p/chromium/issues/detail?id=154983 - h
oval%3Adef%3A15156 - http://secunia.com/advisories/50954 - http://code.google.com/p/chromium/issues/detail?id=154983 - http://googlechromereleases.blogspot.com/2012/10/stable-channel-update_6105.html - http://osvdb.org/86156 - http://blog.chromium.org/2012/10/pwnium-2-results-and-wrap-up_10.html - http://code.google.com/p/chromium/issues/detail?id=154987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79186
CVE ID: CVE-2012-5377 State: PUBLISHED Published: 2012-10-11T10:00:00 Last Updated: 2024-08-06T21:05:46.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the installation functionality in ActivePerl 5.16.1.1601, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL in the C:\Perl\Site\bin directory, which is added to the PATH system environment variable, as demonstrated by a Trojan horse wlbsctrl.dll file used by the "IKE and AuthIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview. Additional Analyst Notes:
in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86177 - https://www.htbridge.com/advisory/HTB23108
CVE ID: CVE-2012-5378 State: PUBLISHED Published: 2012-10-11T10:00:00 Last Updated: 2024-08-06T21:05:46.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL in the C:\TD\bin directory, which is added to the PATH system environment variable, as demonstrated by a Trojan horse wlbsctrl.dll file used by the "IKE and AuthIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview. Additional Analyst Notes: - CVE Program
ista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86179 - https://www.htbridge.com/advisory/HTB23108
CVE ID: CVE-2012-5379 State: PUBLISHED Published: 2012-10-11T10:00:00Z Last Updated: 2025-01-16T20:55:18.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Python27 or C:\Python27\Scripts directory, which may be added to the PATH system environment variable by an administrator, as demonstrated by a Trojan horse wlbsctrl.dll file used by the "IKE and AuthIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows
nd AuthIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview. NOTE: CVE disputes this issue because the unsafe PATH is established only by a separate administrative action that is not a default part of the ActivePython installation Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.htbridge.com/advisory/HTB23108
CVE ID: CVE-2012-5380 State: PUBLISHED Published: 2012-10-11T10:00:00Z Last Updated: 2024-09-17T01:01:38.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the installation functionality in Ruby 1.9.3-p194, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Ruby193\bin directory, which may be added to the PATH system environment variable by an administrator, as demonstrated by a Trojan horse wlbsctrl.dll file used by the "IKE and AuthIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview. NOTE:
dules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview. NOTE: CVE disputes this issue because the unsafe PATH is established only by a separate administrative action that is not a default part of the Ruby installation Additional Analyst Notes: - ADP Container: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23108
CVE ID: CVE-2012-5381 State: PUBLISHED Published: 2012-10-11T10:00:00 Last Updated: 2024-08-06T21:05:46.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the installation functionality in PHP 5.3.17, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\PHP directory, which may be added to the PATH system environment variable by an administrator, as demonstrated by a Trojan horse wlbsctrl.dll file used by the "IKE and AuthIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview. NOTE: CVE disputes
service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview. NOTE: CVE disputes this issue because the unsafe PATH is established only by a separate administrative action that is not a default part of the PHP installation Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86172 - https://www.htbridge.com/advisory/HTB23108
CVE ID: CVE-2012-5382 State: PUBLISHED Published: 2012-10-11T10:00:00 Last Updated: 2024-08-06T21:05:46.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the installation functionality in Zend Server 5.6.0 SP4, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Zend\ZendServer\share\ZendFramework\bin directory, which may be added to the PATH system environment variable by an administrator, as demonstrated by a Trojan horse wlbsctrl.dll file used by the "IKE and AuthIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and
e "IKE and AuthIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview. NOTE: CVE disputes this issue because the choice of C:\ (and the resulting unsafe PATH) is established by an administrative action that is not a default part of the Zend Server installation Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86174 - https://www.htbridge.com/advisory/HTB23108
CVE ID: CVE-2012-5383 State: PUBLISHED Published: 2012-10-11T10:00:00 Last Updated: 2024-08-06T21:05:46.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the installation functionality in Oracle MySQL 5.5.28, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the "C:\MySQL\MySQL Server 5.5\bin" directory, which may be added to the PATH system environment variable by an administrator, as demonstrated by a Trojan horse wlbsctrl.dll file used by the "IKE and AuthIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Re
thIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview. NOTE: CVE disputes this issue because the unsafe PATH is established only by a separate administrative action that is not a default part of the MySQL installation Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86175 - https://www.htbridge.com/advisory/HTB23108
CVE ID: CVE-2012-5384 State: PUBLISHED Published: 2012-10-11T15:00:00Z Last Updated: 2024-09-16T17:54:02.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the (1) $name or (2) $description variables in edit_entry_handler.php, or (3) $url, (4) $tempfullname, or (5) $ext_users[] variables in view_entry.php, different vectors than CVE-2012-0846. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/webcalendar/files/webcalendar%201.2/1.2.5/README.txt/download - http://sourceforge.net/tracker/?f
urceforge.net/projects/webcalendar/files/webcalendar%201.2/1.2.5/README.txt/download - http://sourceforge.net/tracker/?func=detail&aid=3488543&group_id=3870&atid=303870
CVE ID: CVE-2012-5385 State: PUBLISHED Published: 2012-10-11T15:00:00Z Last Updated: 2024-09-17T00:11:53.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference. Additional Analyst Notes: - CVE Program Container: References: - http://webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog?pathrev=REL_1_2
CVE ID: CVE-2012-5386 State: PUBLISHED Published: 2012-10-11T15:00:00Z Last Updated: 2024-09-17T01:01:59.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in phpPaleo 4.8b180 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phppaleo4_lang cookie, a different vulnerability than CVE-2012-1671. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48398
CVE ID: CVE-2012-5387 State: PUBLISHED Published: 2012-10-24T10:00:00 Last Updated: 2024-08-06T21:05:47.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcms_o_developer_name parameter in a save action to wp-admin/admin.php, as demonstrated by a developer name containing XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79520 - http://www.exploit-db.c
VE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79520 - http://www.exploit-db.com/exploits/22156/ - http://www.securityfocus.com/bid/56166 - http://packetstormsecurity.org/files/117590/White-Label-CMS-1.5-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - http://wordpress.org/extend/plugins/white-label-cms/changelog/ - http://osvdb.org/86568
CVE ID: CVE-2012-5388 State: PUBLISHED Published: 2012-10-24T10:00:00 Last Updated: 2024-08-06T21:05:47.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wlcms_o_developer_name parameter in a save action to wp-admin/admin.php, a related issue to CVE-2012-5387. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/22156/ - http://wordpress.org/extend/plugins/white-label-cms/changelog/ - http://www.securityfocus.com/bid/56166 - https://exc
- http://wordpress.org/extend/plugins/white-label-cms/changelog/ - http://www.securityfocus.com/bid/56166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79522 - http://packetstormsecurity.org/files/117590/White-Label-CMS-1.5-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
CVE ID: CVE-2012-5389 State: PUBLISHED Published: 2020-01-23T21:29:23 Last Updated: 2024-08-06T21:05:47.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83310
CVE ID: CVE-2012-5390 State: PUBLISHED Published: 2014-06-06T14:00:00 Last Updated: 2024-08-06T21:05:47.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job. Additional Analyst Notes: - CVE Program Container: References: - http://research.cs.wisc.edu/htcondor/security/vulnerabilities/CONDOR-2012-0003.html - http://www.securityfocus.com/bid/57328 - http://secunia.com/advisories/51862