Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-5391 State: PUBLISHED Published: 2014-06-02T15:00:00 Last Updated: 2024-08-06T21:05:47.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Special:UserLogin in MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions via the session_id. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83008 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-November/000122.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100843.html - http://lists.fedoraproject.org/pipermail/pack
ists.fedoraproject.org/pipermail/package-announce/2013-March/100843.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100845.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098975.html - https://bugzilla.wikimedia.org/show_bug.cgi?id=40995
CVE ID: CVE-2012-5394 State: PUBLISHED Published: 2013-12-13T18:00:00 Last Updated: 2024-08-06T21:05:47.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to hijack the authentication of users for requests that login via vectors involving image loading. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.wikimedia.org/show_bug.cgi?id=40747 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-November/000135.html - http://lists.fedoraproject.org/pipermail/package-ann
imedia.org/pipermail/mediawiki-announce/2013-November/000135.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123011.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/122998.html
CVE ID: CVE-2012-5395 State: PUBLISHED Published: 2014-06-02T15:00:00 Last Updated: 2024-08-06T21:05:47.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in the CentralAuth extension for MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions via the centralauth_Session cookie. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.wikimedia.org/show_bug.cgi?id=40962 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-November/000122.html
CVE ID: CVE-2012-5409 State: PUBLISHED Published: 2012-11-01T10:00:00 Last Updated: 2024-08-06T21:05:47.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages received over an Ethernet network, which allows remote attackers to write data to any memory location and consequently execute arbitrary code via crafted messages, as demonstrated by an arbitrary pointer dereference attack or a buffer overflow attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50900 - http://ics-cert.us-cert.gov/advisories/ICSA-12-305-01 - ht
ontainer: References: - http://secunia.com/advisories/50900 - http://ics-cert.us-cert.gov/advisories/ICSA-12-305-01 - http://www.osvdb.org/86129 - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-938777.pdf - http://ioactive.com/pdfs/SIEMENS_Sipass_Integrated_Ethernet_Bus_Arbitrary_Pointer_Dereference_V4.pdf
CVE ID: CVE-2012-5415 State: PUBLISHED Published: 2013-04-16T10:00:00Z Last Updated: 2024-09-17T01:05:51.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs CSCue31622 and CSCuc71272. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-5415
CVE ID: CVE-2012-5416 State: PUBLISHED Published: 2012-11-02T01:00:00 Last Updated: 2024-08-06T21:05:47.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 allows remote attackers to cause a denial of service (daemon hang) via unspecified parameters in a POST request, aka Bug ID CSCua66341. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86859 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121031-mp - https://exchange.xforce.ibmcloud.com/vulnerabilities/79721
CVE ID: CVE-2012-5417 State: PUBLISHED Published: 2012-11-02T01:00:00 Last Updated: 2024-08-06T21:05:47.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properly restrict access to certain JBoss MainDeployer functionality, which allows remote attackers to execute arbitrary commands via JBoss Application Server Remote Method Invocation (RMI) services, aka Bug ID CSCtz44924. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56348 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121031-dcnm - http://www.securitytracker.com/id?10277
cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121031-dcnm - http://www.securitytracker.com/id?1027712
CVE ID: CVE-2012-5419 State: PUBLISHED Published: 2013-01-17T15:00:00 Last Updated: 2024-08-06T21:05:47.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) software 8.7.1 and 8.7.1.1 for the Cisco ASA 1000V Cloud Firewall allows remote attackers to cause a denial of service (device reload) via a malformed H.225 H.323 IPv4 packet, aka Bug IDs CSCuc42812 and CSCuc88741. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130116-asa1000v
CVE ID: CVE-2012-5422 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T21:05:47.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco IOS before 15.3(2)T on AS5400 devices allows remote authenticated users to cause a denial of service (spurious errors) via unknown vectors, aka Bug ID CSCub61009. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/ios/15_3m_and_t/release/notes/15_3m_and_t.pdf
CVE ID: CVE-2012-5424 State: PUBLISHED Published: 2012-11-07T23:00:00 Last Updated: 2024-08-06T21:05:47.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Access Control System (ACS) 5.x before 5.2 Patch 11 and 5.3 before 5.3 Patch 7, when a certain configuration involving TACACS+ and LDAP is used, does not properly validate passwords, which allows remote attackers to bypass authentication by sending a valid username and a crafted password string, aka Bug ID CSCuc65634. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121107-acs - http://osvdb.org/87251 - https://exchange
isco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121107-acs - http://osvdb.org/87251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79860 - http://www.securityfocus.com/bid/56433 - http://secunia.com/advisories/51194 - http://www.securitytracker.com/id?1027733
CVE ID: CVE-2012-5427 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T21:05:47.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS Unified Border Element (CUBE) in Cisco IOS before 15.3(2)T allows remote authenticated users to cause a denial of service (input queue wedge) via a crafted series of RTCP packets, aka Bug ID CSCuc42518. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/ios/15_3m_and_t/release/notes/15_3m_and_t.pdf
CVE ID: CVE-2012-5429 State: PUBLISHED Published: 2013-01-17T21:00:00Z Last Updated: 2024-09-17T03:03:37.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VPN driver in Cisco VPN Client on Windows does not properly interact with the kernel, which allows local users to cause a denial of service (kernel fault and system crash) via a crafted application, aka Bug ID CSCuc81669. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-5429
CVE ID: CVE-2012-5444 State: PUBLISHED Published: 2013-01-17T15:00:00 Last Updated: 2024-08-06T21:05:47.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communication Server (VCS) X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified Conductor request, aka Bug ID CSCub67989. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-5444
CVE ID: CVE-2012-5445 State: PUBLISHED Published: 2012-12-28T11:00:00 Last Updated: 2024-08-06T21:05:47.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Phone 7900 series devices (aka TNP phones) with software before 9.3.1-ES10 does not properly validate unspecified system calls, which allows attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a crafted binary. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-uipphone - http://events.ccc.de/congress/2012/Fahrplan/events/5400.en.html
CVE ID: CVE-2012-5450 State: PUBLISHED Published: 2012-12-03T21:00:00 Last Updated: 2024-08-06T21:05:47.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) 1.11.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deld parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/117951/CMS-Made-Simple-1.11.2-Cross-Site-Request-Forgery.html - https://www.htbridge.com/advisory/HTB23121 - http://secunia.com/advisories/51185 - http://for
ite-Request-Forgery.html - https://www.htbridge.com/advisory/HTB23121 - http://secunia.com/advisories/51185 - http://forum.cmsmadesimple.org/viewtopic.php?f=1&t=63545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79881 - http://viewsvn.cmsmadesimple.org/diff.php?repname=cmsmadesimple&path=%2Ftrunk%2Flib%2Ffilemanager%2FImageManager%2FClasses%2FImageManager.php&rev=8400&peg=8498 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0035.html
CVE ID: CVE-2012-5451 State: PUBLISHED Published: 2015-04-24T14:00:00 Last Updated: 2024-08-06T21:05:47.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in HttpUtils.dll in TVMOBiLi before 2.1.0.3974 allow remote attackers to cause a denial of service (tvMobiliService service crash) via a long string in a (1) GET or (2) HEAD request to TCP port 30888. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23120 - http://www.tvmobili.com/changelog.php - http://www.securityfocus.com/bid/56853
CVE ID: CVE-2012-5452 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T21:05:47.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) multi_title parameter to blocks/add/; (2) cost, (3) days, or (4) title[en] parameter to plans/add/; (5) name or (6) title[en] parameter to fields/group/add/ in admin/manage/; or (7) f[accounts][fullname] or (8) f[accounts][username] parameter to advsearch/. NOTE: This might overlap CVE-2011-5211. NOTE: it was later reported that the f[accounts][fullname] and f[accounts][username] ve
his might overlap CVE-2011-5211. NOTE: it was later reported that the f[accounts][fullname] and f[accounts][username] vectors might also affect 2.2.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.subrion.com/forums/announcements/893-subrion-open-source-cms-2-2-2-has-been-released.html - http://packetstormsecurity.org/files/116434/Subrion-CMS-2.2.1-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78467 - http://www.securityfocus.com/bid/55502 - https://www.htbridge.com/advisory/HTB23113 - http://secunia.com/advisories/44917 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5105.php - https://exchange.xforce.ibmcloud.com/vuln
ories/44917 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5105.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/78468 - http://packetstormsecurity.org/files/117460/Subrion-CMS-2.2.1-XSS-CSRF-SQL-Injection.html
CVE ID: CVE-2012-5453 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T21:05:47.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated users to execute arbitrary SQL commands via the field parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-5167. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56237 - http://secunia.com/advisories/51034 - https://www.htbridge.com/advisory/HTB23117 - http://osvdb.org/86424
CVE ID: CVE-2012-5454 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T21:05:47.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allows remote authenticated users to modify arbitrary user passwords via a crafted request. NOTE: this might be due to an incomplete fix for CVE-2012-5168. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86428 - http://www.securityfocus.com/bid/56237 - http://secunia.com/advisories/51034 - https://www.htbridge.com/advisory/HTB23117
CVE ID: CVE-2012-5455 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T21:05:47.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the language search component in Joomla! before 3.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "typographical error." Additional Analyst Notes: - CVE Program Container: References: - http://www.joomla.org/announcements/release-news/5468-joomla-3-0-1-released.html - http://www.securityfocus.com/bid/55858 - http://osvdb.org/86134 - http://developer.joomla.org/security/news/541-20121001-core-xss-vulnerability - https://exchange
ttp://osvdb.org/86134 - http://developer.joomla.org/security/news/541-20121001-core-xss-vulnerability - https://exchange.xforce.ibmcloud.com/vulnerabilities/79171 - http://secunia.com/advisories/50879
CVE ID: CVE-2012-5456 State: PUBLISHED Published: 2012-10-24T10:00:00 Last Updated: 2024-08-06T21:05:47.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zoner AntiVirus Free application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, as demonstrated by a server used for updating virus signature files. Additional Analyst Notes: - CVE Program Container: References: - http://www2.dcsec.uni-hannover.de/files/android/p50-fahl.pdf - http://www.securityfocus.com/bid/56292 - https://exchange.x
tp://www2.dcsec.uni-hannover.de/files/android/p50-fahl.pdf - http://www.securityfocus.com/bid/56292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79591
CVE ID: CVE-2012-5458 State: PUBLISHED Published: 2012-11-14T11:00:00 Last Updated: 2024-08-06T21:05:47.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows host OS users to gain host OS privileges via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79924 - http://osvdb.org/87118 - http://www.securityfocus.com/bid/56469 - http://www.vmware.com/security/advisories/VMSA-2012-0015.html
CVE ID: CVE-2012-5459 State: PUBLISHED Published: 2012-11-14T11:00:00 Last Updated: 2024-08-06T21:05:47.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a "system folder." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56470 - http://osvdb.org/87119 - http://www.vmware.com/security/advisories/VMSA-2012-0015.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79923
CVE ID: CVE-2012-5460 State: PUBLISHED Published: 2013-07-31T21:00:00Z Last Updated: 2024-09-16T22:36:07.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitrary web script or HTML via the WWHSearchWordsText parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-07/0148.html - http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2013-03-874&viewMode=view
CVE ID: CVE-2012-5468 State: PUBLISHED Published: 2012-12-18T01:00:00 Last Updated: 2024-08-06T21:05:47.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:064 - http://www.openwall.com/lists/oss-security/2012/12/03/13 - http://secunia.com/advisories/51521 - http://bogofilter.so
- http://www.openwall.com/lists/oss-security/2012/12/03/13 - http://secunia.com/advisories/51521 - http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01 - http://www.securityfocus.com/bid/56804 - http://www.debian.org/security/2012/dsa-2585 - https://bugzilla.redhat.com/show_bug.cgi?id=883358 - http://secunia.com/advisories/51334 - http://bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80524 - http://bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6975
CVE ID: CVE-2012-5469 State: PUBLISHED Published: 2012-12-20T11:00:00Z Last Updated: 2024-09-17T00:40:45.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/portable-phpmyadmin/changelog/ - http://archives.neohapsis.com/archives/bugtraq/2012-12/0092.html
CVE ID: CVE-2012-5470 State: PUBLISHED Published: 2012-10-26T10:00:00 Last Updated: 2024-08-06T21:05:47.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted PNG file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/21889/ - http://openwall.com/lists/oss-security/2012/10/24/3 - http://www.securityfocus.com/bid/55850 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15540
CVE ID: CVE-2012-5471 State: PUBLISHED Published: 2012-11-21T11:00:00 Last Updated: 2024-08-06T21:05:47.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dropbox Repository File Picker in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to access the Dropbox of a different user by leveraging an unattended workstation after a logout. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56505 - https://moodle.org/mod/forum/discuss.php?d=216155 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-29872 - http://openwall.com/lists/oss-security/2012/11/19/1
CVE ID: CVE-2012-5472 State: PUBLISHED Published: 2012-11-21T11:00:00 Last Updated: 2024-08-06T21:05:47.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/formslib.php in Moodle 2.2.x before 2.2.6 and 2.3.x before 2.3.3 allows remote authenticated users to bypass intended access restrictions via a modified value of a frozen form field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56505 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-32785 - https://moodle.org/mod/forum/discuss.php?d=216156 - http://openwall.com/lists/oss-security/2012/11/19/1
CVE ID: CVE-2012-5473 State: PUBLISHED Published: 2012-11-21T11:00:00 Last Updated: 2024-08-06T21:05:47.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to read activity entries of a different group's users via an advanced search. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=216157 - http://www.securityfocus.com/bid/56505 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34448 - http://openwall.com/lists/oss-security/2012/11/19/1
CVE ID: CVE-2012-5474 State: PUBLISHED Published: 2019-12-30T19:36:51 Last Updated: 2024-08-06T21:05:47.279Z Vendors: python-django-horizon Products: python-django-horizon Problem Types: Dashboard /etc/openstack-dashboard/local_settings secret key exposure Description: The file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2012.1.1) is world readable and exposes the secret key value. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-5474 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5474 - https://access.redhat.com/security/
/tracker/CVE-2012-5474 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5474 - https://access.redhat.com/security/cve/cve-2012-5474 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092841.html
CVE ID: CVE-2012-5475 State: REJECTED Published: 2012-11-16T11:00:00Z Last Updated: 2024-09-17T02:01:15.784Z Description: No description available.