Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2673 State: PUBLISHED Published: 2012-07-25T19:00:00 Last Updated: 2024-08-06T19:42:32.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1500.html - http://www.ubuntu.com/u
Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1500.html - http://www.ubuntu.com/usn/USN-1546-1 - https://github.com/ivmai/bdwgc/commit/e10c1eb9908c2774c16b3148b30d2f3823d66a9a - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082988.html - http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/ - http://www.openwall.com/lists/oss-security/2012/06/05/1 - http://www.openwall.com/lists/oss-security/2012/06/07/13 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:158 - http://rhn.redhat.com/errata/RHSA-2014-0150.html - https://github.com/ivmai/bdwgc/commit/83231d0ab5ed60015797c3d1ad9056295ac3b2bb - https://githu
ata/RHSA-2014-0150.html - https://github.com/ivmai/bdwgc/commit/83231d0ab5ed60015797c3d1ad9056295ac3b2bb - https://github.com/ivmai/bdwgc/blob/master/ChangeLog - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082926.html - https://github.com/ivmai/bdwgc/commit/be9df82919960214ee4b9d3313523bff44fd99e1 - http://rhn.redhat.com/errata/RHSA-2014-0149.html - https://github.com/ivmai/bdwgc/commit/6a93f8e5bcad22137f41b6c60a1c7384baaec2b3 - http://www.securityfocus.com/bid/54227
CVE ID: CVE-2012-2674 State: PUBLISHED Published: 2012-07-25T19:00:00Z Last Updated: 2024-09-17T01:01:47.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) chk_malloc, (2) leak_malloc, and (3) leak_memalign functions in libc/bionic/malloc_debug_leak.c in Bionic (libc) for Android, when libc.debug.malloc is set, make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected. Additional Analyst Notes: - CVE Program Container: References: - http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/ - http://www.o
E Program Container: References: - http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/ - http://www.openwall.com/lists/oss-security/2012/06/05/1 - http://www.openwall.com/lists/oss-security/2012/06/07/13 - https://github.com/android/platform_bionic/commit/7f5aa4f35e23fd37425b3a5041737cdf58f87385
CVE ID: CVE-2012-2675 State: PUBLISHED Published: 2012-07-25T19:00:00Z Last Updated: 2024-09-16T18:59:18.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions in nedmalloc (nedmalloc.c) before 1.10 beta2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected. Additional Analyst Notes: - CVE Program Container: References: - http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/ - https://github.com/ned14/nedmalloc/commit/1a759756639ab7543b650a10
log/2012/03/05/memory-allocator-security-revisited/ - https://github.com/ned14/nedmalloc/commit/1a759756639ab7543b650a10c2d77a0ffc7a2000 - http://www.openwall.com/lists/oss-security/2012/06/05/1 - http://www.openwall.com/lists/oss-security/2012/06/07/13 - https://github.com/ned14/nedmalloc/commit/2965eca30c408c13473c4146a9d47d547d288db1 - https://github.com/ned14/nedmalloc/blob/master/Readme.html
CVE ID: CVE-2012-2676 State: PUBLISHED Published: 2012-07-25T19:00:00Z Last Updated: 2024-08-06T19:42:31.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) malloc and (2) calloc functions in Hoard before 3.9 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows on implementing code via a large size value, which causes less memory to be allocated than expected. Additional Analyst Notes: - CVE Program Container: References: - http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/ - http://www.openwall.com/lists/oss-security/2012/06/05/1 - http://www.openwall.com/lists/oss-secu
r-security-revisited/ - http://www.openwall.com/lists/oss-security/2012/06/05/1 - http://www.openwall.com/lists/oss-security/2012/06/07/13 - https://github.com/emeryberger/Hoard/blob/master/NEWS
CVE ID: CVE-2012-2677 State: PUBLISHED Published: 2012-07-25T19:00:00 Last Updated: 2024-08-06T19:42:31.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ordered_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large memory chunk size value, which causes less memory to be allocated than expected. Additional Analyst Notes: - CVE Program Container: References: - https://svn.boost.org/trac/boost/changeset/78326 - http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/ - http://www.openwall.com/lists/oss-security/2012
http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/ - http://www.openwall.com/lists/oss-security/2012/06/05/1 - http://www.openwall.com/lists/oss-security/2012/06/07/13 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082977.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083416.html - https://svn.boost.org/trac/boost/ticket/6701 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:065 - https://security.gentoo.org/glsa/202105-04
CVE ID: CVE-2012-2678 State: PUBLISHED Published: 2012-07-03T16:00:00 Last Updated: 2024-08-06T19:42:31.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: 389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19353 - http://secunia.com/advisories/49734 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDispl
val%3Adef%3A19353 - http://secunia.com/advisories/49734 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083 - http://osvdb.org/83336 - http://www.securityfocus.com/bid/54153 - http://directory.fedoraproject.org/wiki/Release_Notes - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083 - http://rhn.redhat.com/errata/RHSA-2012-1041.html - http://rhn.redhat.com/errata/RHSA-2012-0997.html
CVE ID: CVE-2012-2679 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T19:42:31.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak permissions (world-readable) for /var/log/rhncfg-actions, which allows local users to obtain sensitive information about the rhncfg-client actions by reading the file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=825275 - http://secunia.com/advisories/50978 - http://www.securityfocus.com/bid/55934 - http://www.securitytracker.com/id?1027661 - https://exchange.xforce.ibm
50978 - http://www.securityfocus.com/bid/55934 - http://www.securitytracker.com/id?1027661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79260 - http://rhn.redhat.com/errata/RHSA-2012-1369.html
CVE ID: CVE-2012-2680 State: PUBLISHED Published: 2012-09-28T17:00:00 Last Updated: 2024-08-06T19:42:31.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, does not properly restrict access to resources, which allows remote attackers to obtain sensitive information via unspecified vectors related to (1) "web pages," (2) "export functionality," and (3) "image viewing." Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=829421 - http://www.securityfocus.com/bid/55618 - http://rhn.redhat.com/errata/RHSA-2012-1278.html - https
ow_bug.cgi?id=829421 - http://www.securityfocus.com/bid/55618 - http://rhn.redhat.com/errata/RHSA-2012-1278.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78770 - http://rhn.redhat.com/errata/RHSA-2012-1281.html - http://secunia.com/advisories/50660
CVE ID: CVE-2012-2681 State: PUBLISHED Published: 2012-09-28T17:00:00 Last Updated: 2024-08-06T19:42:31.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, uses predictable random numbers to generate session keys, which makes it easier for remote attackers to guess the session key. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=827558 - http://www.securityfocus.com/bid/55618 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78771 - http://rhn.redhat.com/errata/RHSA-2012-1278.html - http://rhn.redhat.com/errata/RHS
ibmcloud.com/vulnerabilities/78771 - http://rhn.redhat.com/errata/RHSA-2012-1278.html - http://rhn.redhat.com/errata/RHSA-2012-1281.html - http://secunia.com/advisories/50660
CVE ID: CVE-2012-2682 State: PUBLISHED Published: 2014-07-19T19:00:00 Last Updated: 2024-08-06T19:42:31.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a denial of service (inaccessible page) via a non-ASCII character in the name of a link. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0858.html - https://bugzilla.redhat.com/show_bug.cgi?id=830254 - http://rhn.redhat.com/errata/RHSA-2014-0859.html
CVE ID: CVE-2012-2683 State: PUBLISHED Published: 2012-09-28T17:00:00 Last Updated: 2024-08-06T19:42:32.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) "error message displays" or (2) "in source HTML on certain pages." Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=830243 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092562.html - htt
zilla/show_bug.cgi?id=830243 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092562.html - http://www.securityfocus.com/bid/55618 - http://rhn.redhat.com/errata/RHSA-2012-1278.html - http://rhn.redhat.com/errata/RHSA-2012-1281.html - http://secunia.com/advisories/50660 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092543.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78772
CVE ID: CVE-2012-2684 State: PUBLISHED Published: 2012-09-28T17:00:00 Last Updated: 2024-08-06T19:42:31.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to execute arbitrary SQL commands via the (1) agent or (2) object id. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=830245 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092562.html - http://www.securityfocus.com/bid/55618 - ht
sts.fedoraproject.org/pipermail/package-announce/2012-November/092562.html - http://www.securityfocus.com/bid/55618 - http://rhn.redhat.com/errata/RHSA-2012-1278.html - http://rhn.redhat.com/errata/RHSA-2012-1281.html - http://secunia.com/advisories/50660 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092543.html
CVE ID: CVE-2012-2685 State: PUBLISHED Published: 2012-09-28T17:00:00 Last Updated: 2024-08-06T19:42:31.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to cause a denial of service (memory consumption) via a large size in an image request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55618 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=830248 - http://rhn.redhat.com/errata/RHSA-2012-1278.html - http://rhn.redhat.com/errata/RHSA-2012-1281.html - http://secunia.com/advisories/50660 - https://e
RHSA-2012-1278.html - http://rhn.redhat.com/errata/RHSA-2012-1281.html - http://secunia.com/advisories/50660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78774
CVE ID: CVE-2012-2686 State: PUBLISHED Published: 2013-02-08T19:00:00 Last Updated: 2024-08-06T19:42:32.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57755 - http://secunia.com/advisories/55139 - http://www.openssl.org/news/secadv_20130204.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18868 - http://git.openss
4.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18868 - http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=125093b59f3c2a2d33785b5563d929d0472f1721 - http://marc.info/?l=bugtraq&m=137545771702053&w=2 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001 - http://marc.info/?l=bugtraq&m=137545771702053&w=2 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://secunia.com/advisories/55108 - https://bugzilla.redhat.com/show_bug.cgi?id=908029 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19660 - http://support.apple.com/kb/HT5880
CVE ID: CVE-2012-2687 State: PUBLISHED Published: 2012-08-22T19:00:00 Last Updated: 2024-08-06T19:42:31.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://secunia.com/advisories/50894 - ht
am Container: References: - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://secunia.com/advisories/50894 - http://www.securityfocus.com/bid/55131 - http://httpd.apache.org/security/vulnerabilities_24.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19539 - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html - http://rhn.redhat.com/errata/RHSA-2012-1594.html - http://www.ubuntu.com/usn/USN-1627-1 - http://secunia.com/advisories/51607 - http://www-01.ibm.com/support/docview.wss?uid=nas2a2b50a0ca011b37c86257a96003c9a4f - http://lists.opensuse.org/opensuse-updates/2013-02/msg00011.html - http://lists.apple.com/archive
b37c86257a96003c9a4f - http://lists.opensuse.org/opensuse-updates/2013-02/msg00011.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://mail-archives.apache.org/mod_mbox/www-announce/201208.mbox/%3C0BFFEA9B-801B-4BAA-9534-56F640268E30%40apache.org%3E - http://rhn.redhat.com/errata/RHSA-2012-1592.html - http://www.apache.org/dist/httpd/CHANGES_2.4.3 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-201303e.html - http://rhn.redhat.com/errata/RHSA-2013-0130.html - http://rhn.redhat.com/errata/RHSA-2012-1591.html - http://lists.opensuse.org/opensuse-updates/2013-02/msg00012.html - https://oval.cisecurity.org/repository/search/def
l - http://lists.opensuse.org/opensuse-updates/2013-02/msg00012.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18832 - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html - http://support.apple.com/kb/HT5880 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/
d.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs
.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5357d1f6bd10
902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - htt
ists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2012-2688 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-06T19:42:32.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55078 - https://hermes.opensuse.org/messages/15376003 - http://www.debian.org/security/2012/dsa-2527 - http://www.php.net/ChangeLog-5.php - http://www.securitytracker.com/id?1027287 - http://www.securityfocus.com/bid/54638 - http:
www.php.net/ChangeLog-5.php - http://www.securitytracker.com/id?1027287 - http://www.securityfocus.com/bid/54638 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://rhn.redhat.com/errata/RHSA-2013-1307.html - http://support.apple.com/kb/HT5501 - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00022.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/77155 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:108 - http://www.ubuntu.com/usn/USN-1569-1 - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html
CVE ID: CVE-2012-2689 State: REJECTED Published: 2021-07-09T11:49:05 Last Updated: 2021-07-09T11:49:05 Description: No description available.
CVE ID: CVE-2012-2690 State: PUBLISHED Published: 2012-06-29T19:00:00 Last Updated: 2024-08-06T19:42:32.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49545 - https://www.redhat.com/archives/libguestfs/2012-May/msg00104.html - http://www.securityfocus.com/bid/53932 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76220 - http://rhn.redhat.com/erra
ww.securityfocus.com/bid/53932 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76220 - http://rhn.redhat.com/errata/RHSA-2012-0774.html - http://secunia.com/advisories/49431
CVE ID: CVE-2012-2691 State: PUBLISHED Published: 2012-06-17T01:00:00 Last Updated: 2024-08-06T19:42:32.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.mantisbt.org/bugs/view.php?id=14340 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html - http://www.securityfocus.com/bid/56467 - https://github.com/mantisbt/mantisbt/commit/175d973105fe9f03a37ced537b74
html - http://www.securityfocus.com/bid/56467 - https://github.com/mantisbt/mantisbt/commit/175d973105fe9f03a37ced537b742611631067e0 - http://security.gentoo.org/glsa/glsa-201211-01.xml - https://github.com/mantisbt/mantisbt/commit/edc8142bb8ac0ac0df1a3824d78c15f4015d959e - http://secunia.com/advisories/49414 - http://www.openwall.com/lists/oss-security/2012/06/11/6 - http://www.mantisbt.org/bugs/changelog_page.php?version_id=148 - http://secunia.com/advisories/51199 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html - http://www.securityfocus.com/bid/53907 - http://www.openwall.com/lists/oss-security/2012/06/09/1 - http://lists.fedoraproject.org/pipermail/
ocus.com/bid/53907 - http://www.openwall.com/lists/oss-security/2012/06/09/1 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/76180