Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/05/13 - https://github.com/torvalds/linux/commit/a117dacde0288f3ec60b6e5bcedae8fa37ee0dfc - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://rhn.redhat.com/errata/RHSA-2013-0744.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a117dacde0288f3ec60b6e5bcedae8fa37ee0dfc
CVE ID: CVE-2012-6548 State: PUBLISHED Published: 2013-03-14T20:00:00 Last Updated: 2024-08-06T21:36:00.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The udf_encode_fh function in fs/udf/namei.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://www.ubuntu.com/usn/USN-1812-1 - http://www.ubuntu.com/usn/USN-1805-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://rhn.red
http://www.ubuntu.com/usn/USN-1805-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://rhn.redhat.com/errata/RHSA-2013-1051.html - http://www.openwall.com/lists/oss-security/2013/03/05/13 - http://www.ubuntu.com/usn/USN-1808-1 - http://www.ubuntu.com/usn/USN-1809-1 - https://github.com/torvalds/linux/commit/0143fc5e9f6f5aad4764801015bc8d4b4a278200 - http://www.ubuntu.com/usn/USN-1814-1 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://www.ubuntu.com/usn/USN-1813-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0143fc5e9f6f5aad4764801015bc8d4b4a278200 - http://www.ubuntu.com/usn/USN-1811-1
CVE ID: CVE-2012-6549 State: PUBLISHED Published: 2013-03-14T20:00:00 Last Updated: 2024-08-06T21:36:00.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The isofs_export_encode_fh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://www.ubuntu.com/usn/USN-1812-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://www.ubuntu.com/usn/USN-1829-1 - ht
USN-1812-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://www.ubuntu.com/usn/USN-1829-1 - http://www.openwall.com/lists/oss-security/2013/03/05/13 - https://github.com/torvalds/linux/commit/fe685aabf7c8c9f138e5ea900954d295bf229175 - http://www.ubuntu.com/usn/USN-1809-1 - http://www.ubuntu.com/usn/USN-1814-1 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fe685aabf7c8c9f138e5ea900954d295bf229175 - http://www.ubuntu.com/usn/USN-1813-1 - http://www.ubuntu.com/usn/USN-1811-1
CVE ID: CVE-2012-6550 State: PUBLISHED Published: 2013-03-28T17:00:00 Last Updated: 2024-08-06T21:36:00.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ZeroClipboard before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via "the clipText returned from the flash object," a different vulnerability than CVE-2013-1808. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jonrohan/ZeroClipboard/blob/master/docs/releases.md#zeroclipboard-114 - http://seclists.org/fulldisclosure/2013/Feb/103 - https://github.com/jonrohan/ZeroClipboard/commit/51b67b6d696f62aaf003210c08542588222c4913
CVE ID: CVE-2012-6551 State: PUBLISHED Published: 2013-04-21T21:00:00 Last Updated: 2024-08-06T21:36:00.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote attackers to cause a denial of service (broker resource consumption) via HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1029.html - http://activemq.2283324.n4.nabble.com/DISCUSS-ActiveMQ-out-of-the-box-Should-not-include-the-demos-tc4658044.html - https://fisheye6.atlassian.com/changelog/activemq?cs=1404998 - http://www.securityfocus.com/bid/5940
os-tc4658044.html - https://fisheye6.atlassian.com/changelog/activemq?cs=1404998 - http://www.securityfocus.com/bid/59401 - http://activemq.apache.org/activemq-580-release.html - https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12323282 - https://issues.apache.org/jira/browse/AMQ-4124
CVE ID: CVE-2012-6552 State: PUBLISHED Published: 2013-05-10T21:00:00Z Last Updated: 2024-09-17T00:55:31.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in admin/action.php in phpVMS 2.1.x before 2.1.935 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nshahzad/phpVMS/commit/7303aa072061388eba06f0c5a701c688096ebccc - http://forum.phpvms.net/topic/7842-security-fix-released-for-21x/
CVE ID: CVE-2012-6553 State: PUBLISHED Published: 2013-05-23T15:00:00 Last Updated: 2024-08-06T21:36:01.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Resource Hacker 3.6.0.92 allows remote attackers to execute arbitrary code via a Portable Executable (PE) file with a resource section containing a string that has many tab or line feed characters. Additional Analyst Notes: - CVE Program Container: References: - http://waleedassar.blogspot.com/2012/05/resource-hacker-heap-overflow.html - http://secunia.com/advisories/49217 - http://www.securityfocus.com/bid/53608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75738
CVE ID: CVE-2012-6554 State: PUBLISHED Published: 2013-05-23T15:00:00 Last Updated: 2024-08-06T21:36:01.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code via the message[message_text] parameter to chat/add_messag, which is not properly handled when executing the preg_replace function with the eval switch. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18898 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75741 - http://osvdb.org/81966 - http://www.securityfocus.com/bid/53624 - http
hange.xforce.ibmcloud.com/vulnerabilities/75741 - http://osvdb.org/81966 - http://www.securityfocus.com/bid/53624 - http://www.activecollab.com/downloads/category/4/package/62/releases - http://secunia.com/advisories/49246
CVE ID: CVE-2012-6555 State: PUBLISHED Published: 2013-05-23T15:00:00Z Last Updated: 2024-09-16T20:17:47.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to inject arbitrary web script or HTML via the discussion title. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18908 - http://www.securityfocus.com/bid/53633 - http://www.henryhoggard.co.uk/security/191/ - http://secunia.com/advisories/49249
CVE ID: CVE-2012-6556 State: PUBLISHED Published: 2013-05-23T15:00:00Z Last Updated: 2024-09-16T19:20:55.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the (1) User/FirstName or (2) User/LastName parameter to the edit user page. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18912 - http://www.securityfocus.com/bid/53637 - http://www.henryhoggard.co.uk/security/197 - http://secunia.co
exploits/18912 - http://www.securityfocus.com/bid/53637 - http://www.henryhoggard.co.uk/security/197 - http://secunia.com/advisories/49215
CVE ID: CVE-2012-6557 State: PUBLISHED Published: 2013-05-23T15:00:00Z Last Updated: 2024-09-16T19:05:38.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the (1) AboutMe/RealName, (2) AboutMe/Name, (3) AboutMe/Quote, (4) AboutMe/Loc, (5) AboutMe/Emp, (6) AboutMe/JobTit, (7) AboutMe/HS, (8) AboutMe/Col, (9) AboutMe/Bio, (10) AboutMe/Inter, (11) AboutMe/Mus, (12) AboutMe/Gam, (13) AboutMe/Mov, (14) AboutMe/FTV, or (15) AboutMe/Bks parameter to the Edit My Details page. NOTE: some of these details are obtained from th
AboutMe/FTV, or (15) AboutMe/Bks parameter to the Edit My Details page. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53631 - http://www.henryhoggard.co.uk/security/183/ - http://www.exploit-db.com/exploits/18911 - http://secunia.com/advisories/49207
CVE ID: CVE-2012-6558 State: PUBLISHED Published: 2013-05-23T15:00:00 Last Updated: 2024-08-06T21:36:01.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in HeavenTools PE Explorer 1.99 R6 allows remote attackers to execute arbitrary code via the size value for a string in the resource section of a Portable Executable (PE) file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49239 - http://waleedassar.blogspot.com/2012/05/pe-explorer-heap-overflow-vulnerability.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75742 - http://www.securityfocus.com/bid/53618
CVE ID: CVE-2012-6559 State: PUBLISHED Published: 2013-05-23T15:00:00 Last Updated: 2024-08-06T21:36:01.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) mac, (3) graphtype, (4) name, or (5) type parameter to stats.php; or (6) comment parameter to deviceadd.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75761 - http://www.exploit-db.com/exploits/18900
CVE ID: CVE-2012-6560 State: PUBLISHED Published: 2013-05-23T15:00:00 Last Updated: 2024-08-06T21:36:01.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands via the status parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75763 - http://www.exploit-db.com/exploits/18900
CVE ID: CVE-2012-6561 State: PUBLISHED Published: 2013-05-23T15:00:00 Last Updated: 2024-08-06T21:36:00.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in engine/lib/views.php in Elgg before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the view parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://blog.elgg.org/pg/blog/evan/read/209/elgg-185-released - http://secunia.com/advisories/49129 - http://elgg.org/getelgg.php?forward=elgg-1.8.5.zip - http://www.securityfocus.com/bid/53623 - https://exchang
es/49129 - http://elgg.org/getelgg.php?forward=elgg-1.8.5.zip - http://www.securityfocus.com/bid/53623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75756
CVE ID: CVE-2012-6562 State: PUBLISHED Published: 2013-05-23T15:00:00 Last Updated: 2024-08-06T21:36:00.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary accounts. Additional Analyst Notes: - CVE Program Container: References: - http://blog.elgg.org/pg/blog/evan/read/209/elgg-185-released - http://secunia.com/advisories/49129 - http://elgg.org/getelgg.php?forward=elgg-1.8.5.zip - http://www.securityfocus.com/bid/53623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75757
CVE ID: CVE-2012-6563 State: PUBLISHED Published: 2013-05-23T15:00:00 Last Updated: 2024-08-06T21:36:01.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://blog.elgg.org/pg/blog/evan/read/209/elgg-185-released - http://secunia.com/advisories/49129 - http://elgg.org/getelgg.php?forward=elgg-1.8.5.zip - http://www.securityfocus.com/bid/53623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75757
CVE ID: CVE-2012-6564 State: PUBLISHED Published: 2013-06-17T10:00:00Z Last Updated: 2024-09-16T16:28:30.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in REDCap before 4.14.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE ID: CVE-2012-6565 State: PUBLISHED Published: 2013-06-17T10:00:00Z Last Updated: 2024-09-17T02:31:59.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in REDCap before 4.14.3 allows remote authenticated users to inject arbitrary web script or HTML via uppercase characters in JavaScript events within user-defined labels. Additional Analyst Notes: - CVE Program Container: References: - http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE ID: CVE-2012-6566 State: PUBLISHED Published: 2013-06-17T10:00:00Z Last Updated: 2024-09-16T18:43:39.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in REDCap before 4.14.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE ID: CVE-2012-6567 State: PUBLISHED Published: 2013-06-17T10:00:00Z Last Updated: 2024-09-16T17:37:37.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: REDCap before 4.14.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the logic of a custom rule. Additional Analyst Notes: - CVE Program Container: References: - http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE ID: CVE-2012-6568 State: PUBLISHED Published: 2013-06-20T15:00:00Z Last Updated: 2024-09-16T19:51:43.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the back-end component in Huawei UTPS 1.0 allows local users to gain privileges via a long IDS_PLUGIN_NAME string in a plug-in configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/download/116604/huawei-overflow.txt - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-204627.htm
CVE ID: CVE-2012-6569 State: PUBLISHED Published: 2013-06-20T15:00:00Z Last Updated: 2024-09-17T02:36:51.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-u_194370.htm
CVE ID: CVE-2012-6570 State: PUBLISHED Published: 2013-06-20T15:00:00Z Last Updated: 2024-09-16T23:46:14.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches does not check whether HTTP data is longer than the value of the Content-Length field, which allows remote HTTP servers to conduct heap-based buffer overflow attacks and execute arbitrary code via a crafted response. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bu
se. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-u_194361.htm
CVE ID: CVE-2012-6571 State: PUBLISHED Published: 2013-06-20T15:00:00Z Last Updated: 2024-09-16T21:08:50.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-u_194371.htm
CVE ID: CVE-2012-6572 State: PUBLISHED Published: 2013-06-21T19:00:00 Last Updated: 2024-08-06T21:36:00.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the phptemplate_preprocess_node function in template.php in the Inf08 theme 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a taxonomy vocabulary name. Additional Analyst Notes: - CVE Program Container: References: - http://www.madirish.net/550 - https://drupal.org/node/1782286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78575 - http://osvdb.org/85422 - https://drupal.
org/node/1782286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78575 - http://osvdb.org/85422 - https://drupal.org/node/1782686 - http://secunia.com/advisories/50557
CVE ID: CVE-2012-6573 State: PUBLISHED Published: 2013-06-25T18:00:00 Last Updated: 2024-08-06T21:36:01.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving autocomplete results. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/1762684 - http://www.securityfocus.com/bid/55290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78153 - http://osvdb.org/85062 - http://seclists.org/fulldisclosure/2013/Jun/212 - http://s
ibmcloud.com/vulnerabilities/78153 - http://osvdb.org/85062 - http://seclists.org/fulldisclosure/2013/Jun/212 - http://secunia.com/advisories/50443 - https://drupal.org/node/1762686 - https://drupal.org/node/1762734
CVE ID: CVE-2012-6574 State: PUBLISHED Published: 2013-06-27T20:00:00 Last Updated: 2024-08-06T21:36:01.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Fonecta verify module 7.x-1.x before 7.x-1.6 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55614 - https://drupal.org/node/1789258 - https://drupal.org/node/1778782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78699
CVE ID: CVE-2012-6575 State: PUBLISHED Published: 2013-06-27T20:00:00 Last Updated: 2024-08-06T21:36:00.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Exposed Filter Data module 6.x-1.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/85190 - https://drupal.org/node/1775582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78316 - https://drupal.org/node/1774636
CVE ID: CVE-2012-6576 State: PUBLISHED Published: 2013-06-27T20:00:00Z Last Updated: 2024-09-17T03:17:34.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the PRH Search module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/1778778 - http://secunia.com/advisories/50672 - https://drupal.org/node/1789252
CVE ID: CVE-2012-6577 State: PUBLISHED Published: 2013-06-27T20:00:00 Last Updated: 2024-08-06T21:36:01.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/formhandler - https://exchange.xforce.ibmcloud.com/vulnerabilities/79670 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-012/
CVE ID: CVE-2012-6578 State: PUBLISHED Published: 2013-07-24T10:00:00Z Last Updated: 2024-09-17T02:41:14.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled with a "Sign by default" queue configuration, uses a queue's key for signing, which might allow remote attackers to spoof messages by leveraging the lack of authentication semantics. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html
CVE ID: CVE-2012-6579 State: PUBLISHED Published: 2013-07-24T10:00:00Z Last Updated: 2024-09-17T04:05:16.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to configure encryption or signing for certain outbound e-mail, and possibly cause a denial of service (loss of e-mail readability), via an e-mail message to a queue's address. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html
CVE ID: CVE-2012-6580 State: PUBLISHED Published: 2013-07-24T10:00:00Z Last Updated: 2024-09-17T02:11:50.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, does not ensure that the UI labels unencrypted messages as unencrypted, which might make it easier for remote attackers to spoof details of a message's origin or interfere with encryption-policy auditing via an e-mail message to a queue's address. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html