Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-5584 State: PUBLISHED Published: 2012-12-26T17:00:00Z Last Updated: 2024-09-16T18:55:25.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node permissions, which allows remote attackers to read a node's headers by accessing a table of contents block. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/11/29/2 - http://drupal.org/node/1841026 - http://drupal.org/node/1841046
CVE ID: CVE-2012-5585 State: PUBLISHED Published: 2012-12-26T17:00:00 Last Updated: 2024-08-06T21:14:15.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Mixpanel module 6.x-1.x before 6.x-1.1 in Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrary web script or HTML via the Maxpanel token. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56719 - http://drupalcode.org/project/mixpanel.git/commit/7dbd715 - http://www.openwall.com/lists/oss-security/2012/11/29/2 - http://drupal.org/node/1762886 - http://drupal.org/node/1852098
tp://www.openwall.com/lists/oss-security/2012/11/29/2 - http://drupal.org/node/1762886 - http://drupal.org/node/1852098 - http://drupal.org/node/1853198
CVE ID: CVE-2012-5586 State: PUBLISHED Published: 2012-12-26T17:00:00 Last Updated: 2024-08-06T21:14:15.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Services module 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "access user profiles" permission to access arbitrary users' emails via vectors related to the "user index method" and "the path to the user resource." Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1842026 - http://www.securityfocus.com/bid/56723 - http://www.openwall.com/lists/oss-security/2012/11/29/2 - http://drupal.org/node/1853200 - http://drupal.org/node/184
- http://www.openwall.com/lists/oss-security/2012/11/29/2 - http://drupal.org/node/1853200 - http://drupal.org/node/1842022
CVE ID: CVE-2012-5587 State: PUBLISHED Published: 2012-12-26T17:00:00Z Last Updated: 2024-09-17T04:23:52.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Email Field module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the mailto link. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1853214 - http://www.openwall.com/lists/oss-security/2012/11/29/2 - http://drupal.org/node/1852612
CVE ID: CVE-2012-5588 State: PUBLISHED Published: 2012-12-26T17:00:00Z Last Updated: 2024-09-16T20:11:19.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact field formatter is set to the full or teaser display mode, does not properly check permissions, which allows remote attackers to email the stored address via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1853214 - http://www.openwall.com/lists/oss-security/2012/11/29/2 - http://drupal.org/node/1852612
CVE ID: CVE-2012-5589 State: PUBLISHED Published: 2012-12-26T17:00:00Z Last Updated: 2024-09-16T22:56:31.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not properly check node permissions when generating an in-content link, which allows remote authenticated users with text-editing permissions to read arbitrary node titles via a generated link. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1289294 - http://www.openwall.com/lists/oss-security/2012/11/29/2 - http://drupal.org/node/1853244 - http://drupal.org/node/1289292
CVE ID: CVE-2012-5590 State: PUBLISHED Published: 2012-12-26T17:00:00 Last Updated: 2024-08-06T21:14:16.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1853268 - http://www.openwall.com/lists/oss-security/2012/11/29/2 - http://www.securityfocus.com/bid/56720
CVE ID: CVE-2012-5591 State: PUBLISHED Published: 2012-12-26T17:00:00Z Last Updated: 2024-09-16T23:36:48.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Zero Point module 6.x-1.x before 6.x-1.18 and 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the path aliases. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1853376 - http://www.openwall.com/lists/oss-security/2012/11/29/2 - http://drupal.org/node/1853350 - http://drupal.org/node/1853358
CVE ID: CVE-2012-5592 State: REJECTED Published: 2012-12-05T11:00:00Z Last Updated: 2024-09-17T02:51:54.790Z Description: No description available.
CVE ID: CVE-2012-5593 State: REJECTED Published: 2012-12-05T11:00:00Z Last Updated: 2024-09-16T19:04:35.586Z Description: No description available.
CVE ID: CVE-2012-5594 State: REJECTED Published: 2012-12-05T11:00:00Z Last Updated: 2024-09-16T22:36:04.369Z Description: No description available.
CVE ID: CVE-2012-5595 State: REJECTED Published: 2012-12-05T11:00:00Z Last Updated: 2024-09-16T16:48:51.751Z Description: No description available.
CVE ID: CVE-2012-5596 State: REJECTED Published: 2012-12-05T11:00:00Z Last Updated: 2024-09-16T20:46:40.800Z Description: No description available.
CVE ID: CVE-2012-5597 State: REJECTED Published: 2012-12-05T11:00:00Z Last Updated: 2024-09-17T00:00:43.267Z Description: No description available.
CVE ID: CVE-2012-5598 State: REJECTED Published: 2012-12-05T11:00:00Z Last Updated: 2024-09-17T00:25:49.443Z Description: No description available.
CVE ID: CVE-2012-5599 State: REJECTED Published: 2012-12-05T11:00:00Z Last Updated: 2024-09-16T18:44:09.413Z Description: No description available.
CVE ID: CVE-2012-5600 State: REJECTED Published: 2012-12-05T11:00:00Z Last Updated: 2024-09-17T00:47:05.694Z Description: No description available.
CVE ID: CVE-2012-5601 State: REJECTED Published: 2012-12-05T11:00:00Z Last Updated: 2024-09-17T01:11:24.891Z Description: No description available.
CVE ID: CVE-2012-5602 State: REJECTED Published: 2012-12-05T11:00:00Z Last Updated: 2024-09-17T00:02:03.259Z Description: No description available.
CVE ID: CVE-2012-5603 State: PUBLISHED Published: 2013-01-04T22:00:00 Last Updated: 2024-08-06T21:14:15.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: proxies_controller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check permissions, which allows remote authenticated users to read consumer certificates or change arbitrary users' settings via unspecified vectors related to the "consumer UUID" of a system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80549 - https://bugzilla.redhat.com/show_bug.cgi?id=882129 - http://osvdb.org/88140 - http://secunia.com/advisories/51472 - http://osvdb.
ugzilla.redhat.com/show_bug.cgi?id=882129 - http://osvdb.org/88140 - http://secunia.com/advisories/51472 - http://osvdb.org/88142 - http://rhn.redhat.com/errata/RHSA-2012-1543.html - http://www.securityfocus.com/bid/56819 - http://rhn.redhat.com/errata/RHSA-2013-0544.html
CVE ID: CVE-2012-5604 State: PUBLISHED Published: 2013-03-01T02:00:00 Last Updated: 2024-08-06T21:14:15.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ldap_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when using Active Directory for authentication, allows remote attackers to bypass authentication via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=882136 - http://rhn.redhat.com/errata/RHSA-2013-0544.html
CVE ID: CVE-2012-5605 State: PUBLISHED Published: 2013-01-04T22:00:00 Last Updated: 2024-08-06T21:14:16.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grinder in Red Hat CloudForms before 1.1 uses world-writable permissions for /var/lib/pulp/cache/grinder/, which allows local users to modify grinder cache files. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/88141 - https://bugzilla.redhat.com/show_bug.cgi?id=828447 - https://bugzilla.redhat.com/show_bug.cgi?id=882138 - http://secunia.com/advisories/51472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80550 - http://rhn.redhat.com/errata/RHSA-2012-1543.html - http://www.securityfocu
e.xforce.ibmcloud.com/vulnerabilities/80550 - http://rhn.redhat.com/errata/RHSA-2012-1543.html - http://www.securityfocus.com/bid/56819
CVE ID: CVE-2012-5606 State: PUBLISHED Published: 2012-12-18T01:00:00Z Last Updated: 2024-09-16T19:24:47.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) file name to apps/files_versions/js/versions.js or (2) apps/files/js/filelist.js; or (3) event title to 3rdparty/fullcalendar/js/fullcalendar.js. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/owncloud/core/commit/e5f2d46 - https://github.com/owncloud/core/commit/ce66759 - http://secunia.com/advisories/51357 - http://owncloud.org/s
/e5f2d46 - https://github.com/owncloud/core/commit/ce66759 - http://secunia.com/advisories/51357 - http://owncloud.org/security/advisories/oc-sa-2012-001/ - http://www.openwall.com/lists/oss-security/2012/11/30/3 - http://owncloud.org/changelog/ - https://github.com/owncloud/core/commit/e45f36c
CVE ID: CVE-2012-5607 State: PUBLISHED Published: 2012-12-18T01:00:00Z Last Updated: 2024-09-16T18:03:39.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly check the security token, which allows remote attackers to change an accounts password via unspecified vectors related to a "Remote Timing Attack." Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/security/advisories/oc-sa-2012-002/ - https://github.com/owncloud/core/commit/99cd922 - http://www.openwall.com/lists/oss-security/2012/11/30/3 - http://owncloud.org/changelog/
CVE ID: CVE-2012-5608 State: PUBLISHED Published: 2012-12-18T01:00:00Z Last Updated: 2024-09-16T17:33:12.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in apps/user_webdavauth/settings.php in ownCloud 4.5.x before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via arbitrary POST parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51357 - http://www.openwall.com/lists/oss-security/2012/11/30/3 - http://owncloud.org/changelog/ - http://owncloud.org/security/advisories/oc-sa-2012-003/ - https://github.com/owncloud/core/commit/054c168
CVE ID: CVE-2012-5609 State: PUBLISHED Published: 2012-12-18T01:00:00Z Last Updated: 2024-09-16T18:12:59.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted mount.php file in a ZIP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/owncloud/core/commit/4619c66 - http://secunia.com/advisories/51357 - https://github.com/owncloud/core/commit/e8a0cea - http://www.openwall.com/lists/oss-security/2012/11/30/3 - http://owncloud.org/changelog/ - http://owncloud.org/security/advisories/o
penwall.com/lists/oss-security/2012/11/30/3 - http://owncloud.org/changelog/ - http://owncloud.org/security/advisories/oc-sa-2012-004/
CVE ID: CVE-2012-5610 State: PUBLISHED Published: 2012-12-18T01:00:00Z Last Updated: 2024-09-17T00:35:31.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a special crafted name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51357 - https://github.com/owncloud/core/commit/f599267 - http://owncloud.org/security/advisories/oc-sa-2012-005/ - http://www.openwall.com/lists/oss-security/2012/11/30/3 - http://owncloud.org/changelog/ - https://git
oc-sa-2012-005/ - http://www.openwall.com/lists/oss-security/2012/11/30/3 - http://owncloud.org/changelog/ - https://github.com/owncloud/core/commit/6540c0fc63 - https://github.com/owncloud/core/commit/4b86c43 - https://github.com/owncloud/core/commit/3cd416b667
CVE ID: CVE-2012-5611 State: PUBLISHED Published: 2012-12-03T11:00:00 Last Updated: 2024-08-06T21:14:16.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command. Additional Analyst Notes: - CVE Program Container: References: - https://kb.askmonty.org/en/mariadb-5528a-release-notes/ - http://lists.opensuse.org/opensuse-security-
er: References: - https://kb.askmonty.org/en/mariadb-5528a-release-notes/ - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00001.html - http://www.exploit-db.com/exploits/23075 - http://www.ubuntu.com/usn/USN-1703-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:102 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00020.html - http://secunia.com/advisories/53372 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.html - http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html - http://www.openwall.com/lists/oss-security/2012/12/02/
.oracle.com/technetwork/topics/security/cpujan2013-1515902.html - http://www.openwall.com/lists/oss-security/2012/12/02/3 - https://kb.askmonty.org/en/mariadb-5166-release-notes/ - http://rhn.redhat.com/errata/RHSA-2013-0180.html - http://seclists.org/fulldisclosure/2012/Dec/4 - http://security.gentoo.org/glsa/glsa-201308-06.xml - http://www.openwall.com/lists/oss-security/2012/12/02/4 - http://rhn.redhat.com/errata/RHSA-2012-1551.html - http://www.debian.org/security/2012/dsa-2581 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00002.html - http://secunia.com/advisories/51443 - http://lists.opensu
pensuse.org/opensuse-security-announce/2013-01/msg00002.html - http://secunia.com/advisories/51443 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00010.html - https://kb.askmonty.org/en/mariadb-5311-release-notes/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16395 - http://www.ubuntu.com/usn/USN-1658-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - https://kb.askmonty.org/en/mariadb-5213-release-notes/
CVE ID: CVE-2012-5612 State: PUBLISHED Published: 2012-12-03T11:00:00 Last Updated: 2024-08-06T21:14:15.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.
FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/23076 - http://seclists.org/fulldisclosure/2012/Dec/5 - http://www.ubuntu.com/usn/USN-1703-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:102 - http://secunia.com/advisories/53372 - http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html - http://www.openwall.com/lists/oss-security/2012/12/02/3 - http://security.gentoo.org/glsa/glsa-201308-06.xml - http://www.openwall.com/lists/oss-security/2012/12/02/4 - http://lists.opensuse.org/opensuse-s
glsa/glsa-201308-06.xml - http://www.openwall.com/lists/oss-security/2012/12/02/4 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html - https://mariadb.atlassian.net/browse/MDEV-3908 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16960 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-5613 State: PUBLISHED Published: 2012-12-03T00:00:00 Last Updated: 2024-08-06T21:14:16.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as the MySQL administrator. NOTE: the vendor disputes this issue, stating that this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: it could be argued that
dministrator does not follow recommendations in the product's installation documentation. NOTE: it could be argued that this should not be included in CVE because it is a configuration issue. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53372 - http://www.openwall.com/lists/oss-security/2012/12/02/3 - http://security.gentoo.org/glsa/glsa-201308-06.xml - http://www.openwall.com/lists/oss-security/2012/12/02/4 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html - http://seclists.org/fulldisclosure/2012/Dec/6
CVE ID: CVE-2012-5614 State: PUBLISHED Published: 2012-12-03T11:00:00 Last Updated: 2024-08-06T21:14:16.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027829 - http://secunia.com/advisories/53372 - http://www.openwall.com/lists/oss-security/2012/12/02/3 - http://security.gentoo.org/glsa/gl
unia.com/advisories/53372 - http://www.openwall.com/lists/oss-security/2012/12/02/3 - http://security.gentoo.org/glsa/glsa-201308-06.xml - http://www.openwall.com/lists/oss-security/2012/12/02/4 - http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html - http://rhn.redhat.com/errata/RHSA-2013-0772.html - http://seclists.org/fulldisclosure/2012/Dec/7 - https://bugzilla.redhat.com/show_bug.cgi?id=882607 - https://mariadb.atlassian.net/browse/MDEV-3910 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-5615 State: PUBLISHED Published: 2012-12-03T11:00:00 Last Updated: 2024-08-06T21:14:15.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:102 - http://secunia.com/advisories/53372 - http://www.openwall.com/lists/oss-security/2012/12/02/3 - http://seclists
13:102 - http://secunia.com/advisories/53372 - http://www.openwall.com/lists/oss-security/2012/12/02/3 - http://seclists.org/fulldisclosure/2012/Dec/9 - http://security.gentoo.org/glsa/glsa-201308-06.xml - http://www.openwall.com/lists/oss-security/2012/12/02/4 - https://mariadb.atlassian.net/browse/MDEV-3909 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2012-5616 State: PUBLISHED Published: 2013-01-22T23:00:00 Last Updated: 2024-08-06T21:14:16.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3.0.6 stores sensitive information in the log4j.conf log file, which allows local users to obtain (1) the SSH private key as recorded by the createSSHKeyPair API, (2) the password of an added host as recorded by the AddHost API, or the password of an added VM as recorded by the (3) DeployVM or (4) ResetPasswordForVM API. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX136163 - ht
M API. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX136163 - http://osvdb.org/89146 - http://seclists.org/fulldisclosure/2013/Jan/65 - http://osvdb.org/89147 - http://www.securityfocus.com/bid/57225 - http://mail-archives.apache.org/mod_mbox/incubator-cloudstack-users/201301.mbox/%3C1BD2169F-BBFE-4E27-B50F-F17D7D08B565%40stratosec.co%3E - http://secunia.com/advisories/51821 - http://www.securityfocus.com/bid/57259 - http://osvdb.org/89070 - http://secunia.com/advisories/51366 - http://secunia.com/advisories/51827 - http://www.securitytracker.com/id?1027978
CVE ID: CVE-2012-5617 State: PUBLISHED Published: 2019-11-25T13:42:01 Last Updated: 2024-08-06T21:14:15.905Z Vendors: gksu-polkit Products: gksu-polkit Problem Types: escalation due to improper authentication settings in policykit configuration file Description: gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-5617 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5617 - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113182.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113218.htm
kage-announce/2013-August/113182.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113218.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-March/099739.html - http://www.openwall.com/lists/oss-security/2012/12/12/8 - http://www.securityfocus.com/bid/56918
CVE ID: CVE-2012-5618 State: PUBLISHED Published: 2020-02-04T13:17:59 Last Updated: 2024-08-06T21:14:16.239Z Vendors: Ushahidi Products: Ushahidi Problem Types: insufficient entropy Description: Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/12/04/1 - https://github.com/ushahidi/Ushahidi_Web/commit/e8c7ecd42818c331db8945d20f8b1865bc6d157e