Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2364 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:23.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lib/filelib.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via an assignment submission with zip compression, leading to text/html rendering during a "download all" action. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/05/23/2 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=ce4126c7a9e07dd0514f7ac297b5e60cad0b8d20
CVE ID: CVE-2012-2365 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:25.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the idnumber field to cohort/edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-31691 - http://openwall.com/lists/oss-security/2012/05/23/2 - https://moodle.org/mod/forum/discuss.php?d=203055 - http://osvdb.org/82072
CVE ID: CVE-2012-2366 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:25.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/data/preset.php in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not properly iterate through an array, which allows remote authenticated users to overwrite arbitrary database activity presets via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/05/23/2 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-31763
CVE ID: CVE-2012-2367 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:25.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 1.9.x before 1.9.18, 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/calendar:manageownentries capability requirement and add a calendar entry via a New Entry action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/82074 - http://openwall.com/lists/oss-security/2012/05/23/2 - http://www.securityfocus.com/bid/53626 - https://moodle.org/mod/forum/discuss.php?d=203057 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HE
.com/bid/53626 - https://moodle.org/mod/forum/discuss.php?d=203057 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-18335
CVE ID: CVE-2012-2368 State: PUBLISHED Published: 2012-08-13T20:00:00Z Last Updated: 2024-09-16T22:50:57.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bytemark Symbiosis before Revision 1322 does not properly validate passwords, which allows remote attackers to gain access to email accounts via an arbitrary password. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/14/3 - http://www.openwall.com/lists/oss-security/2012/05/14/1 - https://projects.bytemark.co.uk/projects/symbiosis/repository/diff?rev=1327&rev_to=1322 - http://secunia.com/advisories/48993
CVE ID: CVE-2012-2369 State: PUBLISHED Published: 2012-05-23T20:00:00 Last Updated: 2024-08-06T19:34:25.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers to execute arbitrary code via format string specifiers in data that generates a log message. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201207-05.xml - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00003.html - http://www.debian.org/security/2012/dsa-2476 - http://openwa
suse.org/opensuse-security-announce/2012-06/msg00003.html - http://www.debian.org/security/2012/dsa-2476 - http://openwall.com/lists/oss-security/2012/05/16/2
CVE ID: CVE-2012-2370 State: PUBLISHED Published: 2012-08-13T20:00:00 Last Updated: 2024-08-06T19:34:23.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash) via a negative (1) height or (2) width in an XBM file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-201206-20.xml - http://rhn.redhat.com/errata/RHSA-2013-0135.html - http://git.gnome.org/browse/gdk-pixbuf/commit/?id=b1bb3053856aede37d473c92f0e5a
.redhat.com/errata/RHSA-2013-0135.html - http://git.gnome.org/browse/gdk-pixbuf/commit/?id=b1bb3053856aede37d473c92f0e5a10e29f10516 - https://bugs.launchpad.net/ubuntu/+source/gdk-pixbuf/+bug/681150 - http://secunia.com/advisories/49125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75578 - http://www.openwall.com/lists/oss-security/2012/05/15/9 - http://git.gnome.org/browse/gdk-pixbuf/commit/?id=4f0f465f991cd454d03189497f923eb40c170c22 - http://secunia.com/advisories/49715 - http://www.securityfocus.com/bid/53548 - http://www.openwall.com/lists/oss-security/2012/05/15/8 - http://git.gnome.org/browse/gdk-pixbuf/
CVE ID: CVE-2012-2371 State: PUBLISHED Published: 2012-08-13T20:00:00Z Last Updated: 2024-09-17T00:07:05.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pagination_wp_facethumb parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49143 - http://packetstormsecurity.org/files/112658/WordPress-WP-FaceThumb-Gallery-0.1-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/53497 - http://www.openwall.com/lists/oss-security/2012/05/15/12 - http://wordpress
l - http://www.securityfocus.com/bid/53497 - http://www.openwall.com/lists/oss-security/2012/05/15/12 - http://wordpress.org/support/topic/plugin-wp-facethumb-reflected-xss-vulnerability-cwe-79 - http://www.openwall.com/lists/oss-security/2012/05/16/1
CVE ID: CVE-2012-2372 State: PUBLISHED Published: 2013-01-22T23:00:00 Last Updated: 2024-08-06T19:34:24.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rds_ib_xmit function in net/rds/ib_send.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service (BUG_ON and kernel panic) by establishing an RDS connection with the source IP address equal to the IPoIB interface's own IP address, as demonstrated by rds-ping. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1540.html - http://www.ubuntu.com/usn/USN-1556-1 - http://rhn.redhat.c
erences: - http://rhn.redhat.com/errata/RHSA-2012-1540.html - http://www.ubuntu.com/usn/USN-1556-1 - http://rhn.redhat.com/errata/RHSA-2012-0743.html - https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=c7b6a0a1d8d636852be130fa15fa8be10d4704e8 - http://www.securityfocus.com/bid/54062 - https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html - https://bugzilla.redhat.com/show_bug.cgi?id=822754 - http://www.ubuntu.com/usn/USN-1555-1 - http://ubuntu.com/usn/usn-1529-1 - http://marc.info/?l=bugtraq&m=139447903326211&w=2
CVE ID: CVE-2012-2373 State: PUBLISHED Published: 2012-08-09T10:00:00 Last Updated: 2024-08-06T19:34:26.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is enabled, does not properly use the Page Middle Directory (PMD), which allows local users to cause a denial of service (panic) via a crafted application that triggers a race condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5 - http://rhn.redhat.com/errata/RHSA-2012-0743.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3B
n.redhat.com/errata/RHSA-2012-0743.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26c191788f18129af0eb32a358cdaea0c7479626 - http://www.openwall.com/lists/oss-security/2012/05/18/11 - https://bugzilla.redhat.com/show_bug.cgi?id=822821 - https://github.com/torvalds/linux/commit/26c191788f18129af0eb32a358cdaea0c7479626 - http://ubuntu.com/usn/usn-1529-1 - http://marc.info/?l=bugtraq&m=139447903326211&w=2
CVE ID: CVE-2012-2374 State: PUBLISHED Published: 2012-05-23T20:00:00 Last Updated: 2024-08-06T19:34:25.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53612 - http://www.tornadoweb.org/documentation/releases/v2.2.1.html - http://secunia.com/advisories/49185 - http://www.openwall.com/lists/oss-security/2012/05/18/6 - http://openwall.com/lists/oss-security/2
om/advisories/49185 - http://www.openwall.com/lists/oss-security/2012/05/18/6 - http://openwall.com/lists/oss-security/2012/05/18/12
CVE ID: CVE-2012-2375 State: PUBLISHED Published: 2012-06-13T10:00:00 Last Updated: 2024-08-06T19:34:25.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy operation, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words in an FATTR4_ACL reply. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-4131. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.2 - http://r
yst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.2 - http://rhn.redhat.com/errata/RHSA-2012-1580.html - https://bugzilla.redhat.com/show_bug.cgi?id=822869 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=20e0fa98b751facf9a1101edaefbc19c82616a68 - http://www.openwall.com/lists/oss-security/2012/05/18/13 - https://github.com/torvalds/linux/commit/20e0fa98b751facf9a1101edaefbc19c82616a68 - http://marc.info/?l=bugtraq&m=139447903326211&w=2
CVE ID: CVE-2012-2376 State: PUBLISHED Published: 2012-05-21T15:00:00 Last Updated: 2024-08-06T19:34:23.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM object VARIANT types, as exploited in the wild in May 2012. Additional Analyst Notes: - CVE Program Container: References: - http://isc.sans.edu/diary.html?storyid=13255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75778 - http://www.exploit-db.com/exploits/18861/ - https://bugzilla.redhat.com/show_bug.cgi?id=823464 - http
rabilities/75778 - http://www.exploit-db.com/exploits/18861/ - https://bugzilla.redhat.com/show_bug.cgi?id=823464 - http://openwall.com/lists/oss-security/2012/05/20/2 - http://www.securitytracker.com/id?1027089
CVE ID: CVE-2012-2377 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T19:34:23.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1028.html - http://www.securityfocus.com/bid/54183 - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http:
/RHSA-2012-1028.html - http://www.securityfocus.com/bid/54183 - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-2013-0198.html - http://rhn.redhat.com/errata/RHSA-2013-0195.html - http://rhn.redhat.com/errata/RHSA-2013-0196.html - http://secunia.com/advisories/50084 - http://www.osvdb.org/83085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76540 - http://rhn.redhat.com/errata/RHSA-2013-0193.html - http://secunia.com/advisories/51984 - http://secunia.com/advisories/50549 - http://rhn.redhat.com/errata/RHSA-2013-0191.html - https://bugzilla.redhat.com/show_bug.cgi?id=823392 - http://secunia.com/advisories/49669 - http://rhn.redhat.com/errata/RHSA-2
//bugzilla.redhat.com/show_bug.cgi?id=823392 - http://secunia.com/advisories/49669 - http://rhn.redhat.com/errata/RHSA-2012-1232.html - http://rhn.redhat.com/errata/RHSA-2013-0197.html - http://rhn.redhat.com/errata/RHSA-2013-0194.html - http://rhn.redhat.com/errata/RHSA-2012-1125.html
CVE ID: CVE-2012-2378 State: PUBLISHED Published: 2013-01-05T00:00:00 Last Updated: 2024-08-06T19:34:24.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enforce child policies of a WS-SecurityPolicy 1.1 SupportingToken policy on the client side, which allows remote attackers to bypass the (1) AlgorithmSuite, (2) SignedParts, (3) SignedElements, (4) EncryptedParts, and (5) EncryptedElements policies. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1594.html - http://secunia.com/advisories/51607 - http://cxf.apache.org/cve-2012-23
tp://rhn.redhat.com/errata/RHSA-2012-1594.html - http://secunia.com/advisories/51607 - http://cxf.apache.org/cve-2012-2378.html - http://www.securityfocus.com/bid/53880 - http://rhn.redhat.com/errata/RHSA-2012-1592.html - http://rhn.redhat.com/errata/RHSA-2012-1591.html - http://svn.apache.org/viewvc?view=revision&revision=1337150 - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.c
e.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2012-2379 State: PUBLISHED Published: 2013-01-03T01:00:00 Last Updated: 2024-08-06T19:34:23.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1559.html - http://cxf.apache.org/cve-2012-2379.html - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-2013-0198.html -
e-2012-2379.html - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-2013-0198.html - http://rhn.redhat.com/errata/RHSA-2012-1594.html - http://rhn.redhat.com/errata/RHSA-2013-0195.html - http://rhn.redhat.com/errata/RHSA-2013-0196.html - http://secunia.com/advisories/51607 - http://rhn.redhat.com/errata/RHSA-2013-0193.html - http://secunia.com/advisories/51984 - http://rhn.redhat.com/errata/RHSA-2012-1592.html - http://svn.apache.org/viewvc?view=revision&revision=1338219 - http://rhn.redhat.com/errata/RHSA-2013-0191.html - http://rhn.redhat.com/errata/RHSA-2012-1593.html - http://rhn.redhat.com/errata/RHSA-2012-1573.html - http://rhn.redhat.com/errata/RHSA
at.com/errata/RHSA-2012-1593.html - http://rhn.redhat.com/errata/RHSA-2012-1573.html - http://rhn.redhat.com/errata/RHSA-2012-1591.html - http://rhn.redhat.com/errata/RHSA-2013-0197.html - http://rhn.redhat.com/errata/RHSA-2013-0194.html - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311
740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2012-2380 State: PUBLISHED Published: 2012-06-26T10:00:00Z Last Updated: 2024-09-16T18:54:28.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 allow remote attackers to hijack the authentication of admins or editors by leveraging the HTTP POST functionality. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0376.html
CVE ID: CVE-2012-2381 State: PUBLISHED Published: 2012-06-26T10:00:00Z Last Updated: 2024-09-17T02:07:14.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging the blogger role. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0377.html
CVE ID: CVE-2012-2382 State: REJECTED Published: 2017-07-21T19:00:00 Last Updated: 2017-07-21T18:57:01 Description: No description available.
CVE ID: CVE-2012-2383 State: PUBLISHED Published: 2012-06-13T10:00:00 Last Updated: 2024-08-06T19:34:25.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the i915_gem_execbuffer2 function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.3.5 on 32-bit platforms allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53971 - https://bugzilla.redhat.com/show_bug.cgi?id=824176 - http://rhn.redhat.com/errata/RHSA-
ww.securityfocus.com/bid/53971 - https://bugzilla.redhat.com/show_bug.cgi?id=824176 - http://rhn.redhat.com/errata/RHSA-2012-1156.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ed8cd3b2cd61004cab85380c52b1817aca1ca49b - http://www.openwall.com/lists/oss-security/2012/05/22/8 - http://marc.info/?l=bugtraq&m=139447903326211&w=2 - https://github.com/torvalds/linux/commit/ed8cd3b2cd61004cab85380c52b1817aca1ca49b
CVE ID: CVE-2012-2384 State: PUBLISHED Published: 2012-06-13T10:00:00 Last Updated: 2024-08-06T19:34:25.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the i915_gem_do_execbuffer function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.3.5 on 32-bit platforms allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53971 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=44afb
/www.securityfocus.com/bid/53971 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=44afb3a04391a74309d16180d1e4f8386fdfa745 - https://github.com/torvalds/linux/commit/44afb3a04391a74309d16180d1e4f8386fdfa745 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.5 - http://www.openwall.com/lists/oss-security/2012/05/22/8 - https://bugzilla.redhat.com/show_bug.cgi?id=824178 - http://marc.info/?l=bugtraq&m=139447903326211&w=2
CVE ID: CVE-2012-2385 State: PUBLISHED Published: 2012-06-29T19:00:00 Last Updated: 2024-08-06T19:34:25.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082766.html - https://github.com/keithw/mosh/commit/9791768705528e911bfca6c4d8aa88139035060e - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082814.html - http://lists.fedoraproject
39035060e - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082814.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082850.html - http://www.securityfocus.com/bid/53646 - http://secunia.com/advisories/49260 - http://www.openwall.com/lists/oss-security/2012/05/22/9 - https://github.com/keithw/mosh/issues/271 - https://bugzilla.redhat.com/show_bug.cgi?id=823943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75779 - https://github.com/keithw/mosh/blob/master/ChangeLog
CVE ID: CVE-2012-2386 State: PUBLISHED Published: 2012-07-07T10:00:00 Last Updated: 2024-08-06T19:34:25.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tar file that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=158d8a6b088662ce9d31e0c777c6ebe90efdc854 - https://bugzilla.redhat.com/show_bug.cgi?id=823594 - http://lists.opensus
3Bh=158d8a6b088662ce9d31e0c777c6ebe90efdc854 - https://bugzilla.redhat.com/show_bug.cgi?id=823594 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html - https://bugs.php.net/bug.php?id=61065 - http://www.php.net/ChangeLog-5.php - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://support.apple.com/kb/HT5501 - http://openwall.com/lists/oss-security/2012/05/22/10 - http://0x1byte.blogspot.com/2011/04/php-phar-extension-heap-overflow.html