Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-5506 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (infinite loop) via an RSS feed request for a folder the user does not have permission to access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone-hotfix/releases/20121106 - https://plone.org/products/plone/security/advisories/20121106/2
ps://plone.org/products/plone-hotfix/releases/20121106 - https://plone.org/products/plone/security/advisories/20121106/22
CVE ID: CVE-2012-5507 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T21:05:47.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - https://bugs.launchpad.net/zope2/+bug/1071067 - http://www.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone-hotfix/releases/20121106 - https://pl
ww.openwall.com/lists/oss-security/2012/11/10/1 - https://plone.org/products/plone-hotfix/releases/20121106 - https://plone.org/products/plone/security/advisories/20121106/23
CVE ID: CVE-2012-5508 State: PUBLISHED Published: 2014-11-03T22:00:00 Last Updated: 2024-08-06T21:05:47.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG reseeding issue in Zope. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - https://bugs.launchpad.net/zope2/+bug/1071067 - https://plone.org/produ
/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt - https://bugs.launchpad.net/zope2/+bug/1071067 - https://plone.org/products/plone/security/advisories/20121106/24 - https://plone.org/products/plone-hotfix/releases/20121124 - http://www.openwall.com/lists/oss-security/2012/11/10/1
CVE ID: CVE-2012-5509 State: PUBLISHED Published: 2013-03-12T21:00:00Z Last Updated: 2024-08-06T21:05:47.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: aeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for a temporary file in /tmp, which allows local users to read credentials by reading this file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=875294 - http://rhn.redhat.com/errata/RHSA-2013-0545.html
CVE ID: CVE-2012-5510 State: PUBLISHED Published: 2012-12-13T11:00:00 Last Updated: 2024-08-06T21:05:47.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/12/03/6 - http://secunia.com/advisories/55082 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html - http://lists.opensuse.org/opensuse-updat
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html - http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html - http://support.citrix.com/article/CTX135777 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.debian.org/security/2012/dsa-2582 - http://secunia.com/advisories/51397 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html - http://secunia.com/advisories/51486 - http://secunia.com/advisories/51487 - http://www.securityfocus.com/bid/56794 - http://secunia.com/advisories/51468 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.
suse.org/opensuse-updates/2013-04/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html - http://www.osvdb.org/88128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80478 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
CVE ID: CVE-2012-5511 State: PUBLISHED Published: 2012-12-13T11:00:00 Last Updated: 2024-08-06T21:05:47.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html - http://www.openwall.com/lists/oss-security/2012/12/03/10 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html - http://www.securityfocus.
ss-security/2012/12/03/10 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html - http://www.securityfocus.com/bid/56796 - http://support.citrix.com/article/CTX135777 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.debian.org/security/2013/dsa-2636 - http://secunia.com/advisories/51397 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html - http://secunia.com/advisories/51486 - http://secunia.com/advisories/51487 - http://www.osvdb.org/88129 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2
s.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80484
CVE ID: CVE-2012-5512 State: PUBLISHED Published: 2012-12-13T11:00:00 Last Updated: 2024-08-06T21:05:47.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html - http://www.securityfocus.com/bid/56799 - http://support.citrix.com/article/CTX135777 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://secun
/56799 - http://support.citrix.com/article/CTX135777 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://secunia.com/advisories/51397 - http://www.openwall.com/lists/oss-security/2012/12/03/7 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html - http://secunia.com/advisories/51486 - http://secunia.com/advisories/51487 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80481 - http://www.osvdb.org/88132 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
CVE ID: CVE-2012-5513 State: PUBLISHED Published: 2012-12-13T11:00:00 Last Updated: 2024-08-06T21:05:47.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved range. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1540.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html - http://secunia.com/advisories/55082 - http://lists.op
ts.opensuse.org/opensuse-security-announce/2014-04/msg00000.html - http://secunia.com/advisories/55082 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html - http://www.openwall.com/lists/oss-security/2012/12/03/11 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html - http://support.citrix.com/article/CTX135777 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.debian.org/security/2012/dsa-2582 - http://secunia.com/advisories/51397 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html - http://secunia.com/advisories/51486 - http://secunia.com/advisories/51487 - http://www.securityfocus.com/bid/56797 - http://secunia
nia.com/advisories/51486 - http://secunia.com/advisories/51487 - http://www.securityfocus.com/bid/56797 - http://secunia.com/advisories/51468 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80482 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html - http://www.osvdb.org/88131 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html - http://secunia.com/advisories/51495 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00000.html
CVE ID: CVE-2012-5514 State: PUBLISHED Published: 2012-12-13T11:00:00 Last Updated: 2024-08-06T21:05:47.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html - http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html - http://www.securityfocus.com/b
013-01/msg00011.html - http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html - http://www.securityfocus.com/bid/56803 - http://support.citrix.com/article/CTX135777 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.debian.org/security/2012/dsa-2582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80483 - http://www.openwall.com/lists/oss-security/2012/12/03/12 - http://secunia.com/advisories/51397 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html - http://secunia.com/advisories/51486 - http://secunia.com/advisories/51487 - http://www.osvdb.org/88130 - http://secunia.com/advisories/51468 - http://lists.opensuse.org/opensuse-updates/20
51487 - http://www.osvdb.org/88130 - http://secunia.com/advisories/51468 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
CVE ID: CVE-2012-5515 State: PUBLISHED Published: 2012-12-13T11:00:00 Last Updated: 2024-08-06T21:05:47.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80479 - http://secunia.com/advisories/55082 - http://lists.opensuse.org/opensuse-security-announ
oud.com/vulnerabilities/80479 - http://secunia.com/advisories/55082 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html - http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html - http://support.citrix.com/article/CTX135777 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.debian.org/security/2012/dsa-2582 - http://secunia.com/advisories/51397 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html - http://secunia.com/advisories/51486 - http://secunia.com/advisories/51487 - http://lists.xen.org/archives/html/xen-announce/2012-12/msg00001.html - http://www.securityfocus.com/bid/56798 - http://www.osvdb.org/88127 - http://
/html/xen-announce/2012-12/msg00001.html - http://www.securityfocus.com/bid/56798 - http://www.osvdb.org/88127 - http://secunia.com/advisories/51468 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html - http://www.openwall.com/lists/oss-security/2012/12/03/9 - http://secunia.com/advisories/51495 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00000.html
CVE ID: CVE-2012-5516 State: PUBLISHED Published: 2013-01-04T22:00:00 Last Updated: 2024-08-06T21:05:47.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage domains, does not properly wipe-after-delete, which prevents disks from being securely deleted and might allow local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56825 - http://rhn.redhat.com/errata/RHSA-2012-1506.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80546 - http://www.securitytracker.com/id?102
RHSA-2012-1506.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80546 - http://www.securitytracker.com/id?1027838
CVE ID: CVE-2012-5517 State: PUBLISHED Published: 2012-12-21T11:00:00 Last Updated: 2024-08-06T21:05:47.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact in opportunistic circumstances by using memory that was hot-added by an administrator. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://www.ubuntu.com/usn/USN-1679-1 - http://rhn.redhat.com/errata/RHSA-2012-1580.html - http://www.kerne
tch-3.6.bz2 - http://www.ubuntu.com/usn/USN-1679-1 - http://rhn.redhat.com/errata/RHSA-2012-1580.html - http://www.kernel.org/pub/linux/kernel/v3.x/ - https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html - http://www.ubuntu.com/usn/USN-1673-1 - https://github.com/torvalds/linux/commit/08dff7b7d629807dbb1f398c68dd9cd58dd657a1 - http://www.openwall.com/lists/oss-security/2012/11/13/11 - http://www.ubuntu.com/usn/USN-1678-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=08dff7b7d629807dbb1f398c68dd9cd58dd657a1 - http://www.securityfocus.com/bid/56527 - http://www.ubuntu.com/usn/USN-1671-1 - http://lists.opensuse.org/opensuse-security-a
//www.securityfocus.com/bid/56527 - http://www.ubuntu.com/usn/USN-1671-1 - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html - http://www.ubuntu.com/usn/USN-1677-1 - https://bugzilla.redhat.com/show_bug.cgi?id=875374
CVE ID: CVE-2012-5518 State: PUBLISHED Published: 2019-11-25T13:06:50 Last Updated: 2024-08-06T21:05:47.263Z Vendors: vdsm Products: vdsm Problem Types: certificate generation upon node creation Description: vdsm: certificate generation upon node creation allowing vdsm to start and serve requests from anyone who has a matching key (and certificate) Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5518 - https://access.redhat.com/security/cve/cve-2012-5518 - http://www.openwall.com/lists/oss-security/2012/11/11/3
CVE ID: CVE-2012-5519 State: PUBLISHED Published: 2012-11-20T00:00:00 Last Updated: 2024-08-06T21:05:47.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/11/11/5 - http://www.ubuntu.com/usn/USN-1654-1 - http://support.apple.com/kb/HT5784 - http://lists.apple.com/archives/secu
/11/5 - http://www.ubuntu.com/usn/USN-1654-1 - http://support.apple.com/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80012 - http://www.openwall.com/lists/oss-security/2012/11/11/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791 - http://rhn.redhat.com/errata/RHSA-2013-0580.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html - http://www.openwall.com/lists/oss-security/2012/11/10/5 - http://www.securityfocus.com/bid/56494 - http://lists.opensuse.org/opensuse-security-announce/2015-06
ity/2012/11/10/5 - http://www.securityfocus.com/bid/56494 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html
CVE ID: CVE-2012-5520 State: PUBLISHED Published: 2012-11-26T11:00:00 Last Updated: 2024-08-06T21:05:47.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP address or (2) port number field in an OMP request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-11/0059.html - http://archives.neohapsis.com/archives/bugtraq/2012-11/0047.html - http://openwall.com/lists/oss-security/2012/11/13/9 - http://openwall.com/lists/oss-security/2012/11/14/5 - http://www.openvas.o
penwall.com/lists/oss-security/2012/11/13/9 - http://openwall.com/lists/oss-security/2012/11/14/5 - http://www.openvas.org/OVSA20121112.html - http://secunia.com/advisories/49128 - http://wald.intevation.org/scm/viewvc.php?view=rev&root=openvas&revision=14437 - http://www.securityfocus.com/bid/56497 - http://openwall.com/lists/oss-security/2012/11/14/11 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0055.html - http://openwall.com/lists/oss-security/2012/11/13/12
CVE ID: CVE-2012-5521 State: PUBLISHED Published: 2019-11-25T13:15:50 Last Updated: 2024-08-06T21:05:47.304Z Vendors: quagga Products: quagga Problem Types: UNKNOWN_TYPE Description: quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-5521 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5521 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5521 - https://access.redhat.com/security/cve/cve-2012-5521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80096 - http://www.openwall.com/lists/oss-security/2012/11/13/14 - http://
/exchange.xforce.ibmcloud.com/vulnerabilities/80096 - http://www.openwall.com/lists/oss-security/2012/11/13/14 - http://www.securityfocus.com/bid/56530
CVE ID: CVE-2012-5522 State: PUBLISHED Published: 2012-11-16T00:00:00 Last Updated: 2024-08-06T21:05:47.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: MantisBT before 1.2.12 does not use an expected default value during decisions about whether a user may modify the status of a bug, which allows remote authenticated users to bypass intended access restrictions and make status changes by leveraging a blank value for a per-status setting. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html - http://www.mantisbt.org/bugs/view.php?id=14496 - http://www.securityfocus.com/bid/56520 - ht
2012-November/093063.html - http://www.mantisbt.org/bugs/view.php?id=14496 - http://www.securityfocus.com/bid/56520 - http://openwall.com/lists/oss-security/2012/11/14/1 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html - http://www.mantisbt.org/bugs/changelog_page.php?version_id=150 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html
CVE ID: CVE-2012-5523 State: PUBLISHED Published: 2012-11-16T00:00:00 Last Updated: 2024-08-06T21:05:47.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might allow remote authenticated users to obtain sensitive information by adding a note to a bug before losing permission to view that bug. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html - http://www.securityfocus.com/bid/56520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80070 - http
093063.html - http://www.securityfocus.com/bid/56520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80070 - http://openwall.com/lists/oss-security/2012/11/14/1 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html - http://www.mantisbt.org/bugs/changelog_page.php?version_id=150 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html - http://www.mantisbt.org/bugs/view.php?id=14704
CVE ID: CVE-2012-5524 State: PUBLISHED Published: 2014-02-08T00:00:00 Last Updated: 2024-08-06T21:05:47.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attackers to conduct man-in-the-middle (MITM) attacks and spoof servers via an arbitrary certificate from a trusted CA. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201401-02.xml - https://trac.gajim.org/ticket/7252 - http://www.openwall.com/lists/oss-security/2012/11/11/6 - https://trac.gajim.org/query?status=closed&group=resolution&milest
://www.openwall.com/lists/oss-security/2012/11/11/6 - https://trac.gajim.org/query?status=closed&group=resolution&milestone=0.15.3
CVE ID: CVE-2012-5525 State: PUBLISHED Published: 2012-12-13T11:00:00 Last Updated: 2024-08-06T21:05:47.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a crafted GFN that triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/12/03/6 - http://secunia.com/advisories/55082 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://secunia.com/advisories/51397 - http://www.osvdb.org/88133 - http://www.securityfocus.com/bid/56805 - https://exchange.xforce.ibmcl
m/advisories/51397 - http://www.osvdb.org/88133 - http://www.securityfocus.com/bid/56805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80480