Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2721 State: PUBLISHED Published: 2012-06-27T00:00:00 Last Updated: 2024-08-06T19:42:32.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default views in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal do not properly check permissions when all users have the "access content" permission removed, which allows remote attackers to bypass access restrictions and possibly have other unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53838 - http://drupal.org/node/1619736 - http://www.osvdb.org/82728 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://drupalcode.org
e/1619736 - http://www.osvdb.org/82728 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://drupalcode.org/project/og.git/commitdiff/1485708 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76150 - http://drupal.org/node/1619810 - http://secunia.com/advisories/49397
CVE ID: CVE-2012-2722 State: PUBLISHED Published: 2012-06-27T00:00:00 Last Updated: 2024-08-06T19:42:32.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: The node selection interface in the WYSIWYG editor (CKEditor) in the Node Embed module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.0 for Drupal does not properly check permissions, which allows remote attackers to bypass intended access restrictions and read node titles. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/node_embed.git/commitdiff/d06f022 - http://drupal.org/node/1618430 - http://www.osvdb.org/82735 - http://www.securityfocus.com/bid/53835 - http://www.openwall.co
//drupal.org/node/1618430 - http://www.osvdb.org/82735 - http://www.securityfocus.com/bid/53835 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76148 - http://drupal.org/node/1618428 - http://secunia.com/advisories/48348 - http://drupal.org/node/1619824 - http://drupalcode.org/project/node_embed.git/commitdiff/7a2296c
CVE ID: CVE-2012-2723 State: PUBLISHED Published: 2012-06-27T00:00:00 Last Updated: 2024-08-06T19:42:32.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with maestro admin permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76145 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://drupalcode.org/project/maestro.git/commitdiff/c499971 - http://secunia.com
.com/lists/oss-security/2012/06/14/3 - http://drupalcode.org/project/maestro.git/commitdiff/c499971 - http://secunia.com/advisories/49393 - http://drupal.org/node/1617952 - http://drupal.org/node/1619830 - http://www.osvdb.org/82713
CVE ID: CVE-2012-2724 State: PUBLISHED Published: 2020-01-09T19:51:42 Last Updated: 2024-08-06T19:42:32.301Z Vendors: Simplenews Products: Simplenews Problem Types: Path Disclosure Description: The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email addresses of new mailing list subscribers when confirmation is required, which allows remote attackers to obtain sensitive information via the confirmation page. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1619848 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://drupal.org/node/1619812 - http://drupal.org/
/1619848 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://drupal.org/node/1619812 - http://drupal.org/node/1619818 - http://drupal.org/node/1619820 - http://drupalcode.org/project/simplenews.git/commitdiff/36352c1 - http://drupalcode.org/project/simplenews.git/commitdiff/6d5704c - http://drupalcode.org/project/simplenews.git/commitdiff/faec6a6 - http://www.securityfocus.com/bid/53839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76143
CVE ID: CVE-2012-2725 State: PUBLISHED Published: 2012-06-27T00:00:00 Last Updated: 2024-08-06T19:42:32.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: classes/Filter/WhitelistedExternalFilter.php in the Authoring HTML module 6.x-1.x before 6.x-1.1 for Drupal does not properly validate sources with the host white list, which allows remote authenticated users to bypass intended access restrictions and conduct cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76127 - http://drupalcode.org/project/authoring_html.git/commitdiff/ceae1ab - http://drupal.org/node/1619852 - http://
s/76127 - http://drupalcode.org/project/authoring_html.git/commitdiff/ceae1ab - http://drupal.org/node/1619852 - http://secunia.com/advisories/49387 - http://drupal.org/node/1619086 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://www.osvdb.org/82739
CVE ID: CVE-2012-2726 State: PUBLISHED Published: 2012-06-27T00:00:00 Last Updated: 2024-08-06T19:42:32.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Protest module 6.x-1.x before 6.x-1.2 or 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "administer protest" permission to inject arbitrary web script or HTML via the protest_body parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76126 - http://drupal.org/node/1618090 - http://drupalcode.org/project/protest.git/commitdiff/cf8c543 - htt
nerabilities/76126 - http://drupal.org/node/1618090 - http://drupalcode.org/project/protest.git/commitdiff/cf8c543 - http://drupalcode.org/project/protest.git/commitdiff/c85eaed - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://www.osvdb.org/82715 - http://drupal.org/node/1618092 - http://drupal.org/node/1619856
CVE ID: CVE-2012-2727 State: PUBLISHED Published: 2012-06-27T00:00:00 Last Updated: 2024-08-06T19:42:32.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when synchronizing user data, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76292 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://drupal.org/node/1632734 - http://drupal.org/node/1632704 - http://www.osvdb.org/82958 -
s-security/2012/06/14/3 - http://drupal.org/node/1632734 - http://drupal.org/node/1632704 - http://www.osvdb.org/82958 - http://drupal.org/node/1632702 - http://secunia.com/advisories/49480 - http://www.securityfocus.com/bid/53992
CVE ID: CVE-2012-2728 State: PUBLISHED Published: 2012-06-27T00:00:00 Last Updated: 2024-08-06T19:42:32.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Node Hierarchy module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to hijack the authentication of administrators for requests that change a node hierarchy position via an (1) up or (2) down action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53993 - http://drupal.org/node/1632900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76345 - http://www.openwall.com/lists/oss-security/2012/06/14/3
0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76345 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://drupalcode.org/project/nodehierarchy.git/commitdiff/8b4b3f5 - http://drupal.org/node/1632432
CVE ID: CVE-2012-2729 State: PUBLISHED Published: 2012-06-27T00:00:00 Last Updated: 2024-08-06T19:42:32.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the SimpleMeta module 6.x-1.x before 6.x-2.0 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) delete or (2) add a meta tag entry. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76344 - http://www.securityfocus.com/bid/53997 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://drupal.org/node/1632908 - http://drupal.org/node/15348
http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://drupal.org/node/1632908 - http://drupal.org/node/1534874
CVE ID: CVE-2012-2730 State: PUBLISHED Published: 2012-06-27T00:00:00 Last Updated: 2024-08-06T19:42:32.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Protected Node module 6.x-1.x before 6.x-1.6 for Drupal does not properly "protect node access when nodes are accessed outside of the standard node view," which allows remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49509 - http://www.securityfocus.com/bid/54001 - http://www.osvdb.org/82984 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://drupal.org/node/1632918 - https://exchange.xforce.ibmcloud.com/vu
.openwall.com/lists/oss-security/2012/06/14/3 - http://drupal.org/node/1632918 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76291 - http://drupal.org/node/1258034
CVE ID: CVE-2012-2731 State: PUBLISHED Published: 2012-06-27T00:00:00 Last Updated: 2024-08-06T19:42:32.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote attackers to obtain sensitive information by sniffing or reading the cache of the HTML of a webpage. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/uc_ajax_cart.git/commitdiff/b59cdd5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76332 - http://www.securityfocus.com/bid/53999 - http://drupal.org/node/1633048 - http://
e.ibmcloud.com/vulnerabilities/76332 - http://www.securityfocus.com/bid/53999 - http://drupal.org/node/1633048 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://drupal.org/node/1619586
CVE ID: CVE-2012-2732 State: REJECTED Published: 2012-06-26T18:00:00Z Last Updated: 2024-09-17T00:02:09.802Z Description: No description available.
CVE ID: CVE-2012-2733 State: PUBLISHED Published: 2012-11-16T21:00:00 Last Updated: 2024-08-06T19:42:32.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://secunia.com/advisories/51371 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html - ht
908376&w=2 - http://secunia.com/advisories/51371 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19218 - http://www.ubuntu.com/usn/USN-1637-1 - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878 - http://tomcat.apache.org/security-7.html - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878 - http://www.securityfocus.com/bid/56402 - http://svn.apache.org/viewvc?view=revision&revision=1356208 - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://lists.opensuse.org/opensuse-update
tp://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html - http://svn.apache.org/viewvc?view=revision&revision=1350301 - http://www.securitytracker.com/id?1027729
CVE ID: CVE-2012-2734 State: PUBLISHED Published: 2012-09-28T17:00:00 Last Updated: 2024-08-06T19:42:32.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to hijack the authentication of arbitrary users for requests that execute commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55618 - http://rhn.redhat.com/errata/RHSA-2012-1278.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78775 - http://rhn.redhat.com/errat
om/errata/RHSA-2012-1278.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78775 - http://rhn.redhat.com/errata/RHSA-2012-1281.html - http://secunia.com/advisories/50660 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=832124
CVE ID: CVE-2012-2735 State: PUBLISHED Published: 2012-09-28T17:00:00 Last Updated: 2024-08-06T19:42:32.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55618 - http://rhn.redhat.com/errata/RHSA-2012-1278.html - http://rhn.redhat.com/errata/RHSA-2012-1281.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78776 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=832151
https://exchange.xforce.ibmcloud.com/vulnerabilities/78776 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=832151 - http://secunia.com/advisories/50660
CVE ID: CVE-2012-2736 State: PUBLISHED Published: 2019-12-26T19:53:17 Last Updated: 2024-08-06T19:42:32.436Z Vendors: network-manager Products: network-manager Problem Types: Insecure Permissions Description: In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-2736 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2736 - https://access.redhat.com/security/cve/cve-2012-2736 - http://lists.opensuse.org/opensuse-updates/2012-09/msg00049.html - http://www.openwall.com/lists/oss-security
012-2736 - http://lists.opensuse.org/opensuse-updates/2012-09/msg00049.html - http://www.openwall.com/lists/oss-security/2012/06/15/2 - http://www.openwall.com/lists/oss-security/2012/06/15/4 - http://www.ubuntu.com/usn/USN-1483-1 - http://www.ubuntu.com/usn/USN-1483-2
CVE ID: CVE-2012-2737 State: PUBLISHED Published: 2012-07-22T17:00:00 Last Updated: 2024-08-06T19:42:32.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/54223 - http://cgit.freedesktop.org/accountsservice/commit/?id=bd51aa4cdac380f55d607f4ffdf2ab3c00d08721 - http://secunia.com/advisories/49695 - http://www.ubunt
untsservice/commit/?id=bd51aa4cdac380f55d607f4ffdf2ab3c00d08721 - http://secunia.com/advisories/49695 - http://www.ubuntu.com/usn/USN-1485-1 - https://bugzilla.redhat.com/show_bug.cgi?id=832532 - http://secunia.com/advisories/49759 - http://osvdb.org/83398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76648 - https://hermes.opensuse.org/messages/15100967 - http://cgit.freedesktop.org/accountsservice/commit/?id=26213aa0e0d8dca5f36cc23f6942525224cbe9f5 - http://cgit.freedesktop.org/accountsservice/commit/?id=27f3d93a82fde4f6c7ab54f3f008af04f93f9c69 - http://www.openwall.com/lists/oss-security/2012/06/28/9 - http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083359.htm
all.com/lists/oss-security/2012/06/28/9 - http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083359.html - http://cgit.freedesktop.org/accountsservice/commit/?id=4c5b12e363410e490e776e4b4a86dcce157a543d
CVE ID: CVE-2012-2738 State: PUBLISHED Published: 2012-07-22T16:00:00 Last Updated: 2024-08-06T19:42:32.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083403.html - https://bugzilla.gnome.org/show_bug.cgi?id=676090 - http://ftp.gnome.org/pub/GNOME/sources/vte/0.32/vte-0.32.2.changes - http://ftp.gnome.org/pub/GNOME/sources/vte/0.32/vte-0.32.2.
tp.gnome.org/pub/GNOME/sources/vte/0.32/vte-0.32.2.changes - http://ftp.gnome.org/pub/GNOME/sources/vte/0.32/vte-0.32.2.news - http://www.securityfocus.com/bid/54281 - http://www.openwall.com/lists/oss-security/2012/06/15/11 - http://www.openwall.com/lists/oss-security/2012/05/23/6 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://lists.opensuse.org/opensuse-updates/2012-08/msg00001.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083398.html
CVE ID: CVE-2012-2739 State: PUBLISHED Published: 2012-11-28T11:00:00Z Last Updated: 2024-08-06T19:42:32.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. Additional Analyst Notes: - CVE Program Container: References: - http://www.nruns.com/_downloads/advisory28122011.pdf - http://armoredbarista.blogspot.de/2012/02/investigating-hashdos-issue.html
w.nruns.com/_downloads/advisory28122011.pdf - http://armoredbarista.blogspot.de/2012/02/investigating-hashdos-issue.html - https://bugzilla.redhat.com/show_bug.cgi?id=750533 - http://www.openwall.com/lists/oss-security/2012/06/17/1 - http://www.kb.cert.org/vuls/id/903934 - http://www.openwall.com/lists/oss-security/2012/06/15/12 - http://mail.openjdk.java.net/pipermail/core-libs-dev/2012-May/010238.html - http://www.ocert.org/advisories/ocert-2011-003.html
CVE ID: CVE-2012-2740 State: PUBLISHED Published: 2012-09-06T17:00:00Z Last Updated: 2024-09-16T18:03:41.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in public_html/lists/admin in phpList before 2.10.18 allows remote attackers to execute arbitrary SQL commands via the sortby parameter in a find action. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1027181 - http://www.securityfocus.com/bid/52657 - http://www.openwall.com/lists/oss-security/2012/06/16/1 - https://mantis.phplist.com/view.php?id=16557 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5081.php - http://www.exploit-db.com/exploit
m/view.php?id=16557 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5081.php - http://www.exploit-db.com/exploits/18639 - https://www.phplist.com/?lid=567 - http://www.openwall.com/lists/oss-security/2012/06/17/2
CVE ID: CVE-2012-2741 State: PUBLISHED Published: 2012-09-06T17:00:00Z Last Updated: 2024-09-16T20:06:26.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in public_html/lists/admin/ in phpList before 2.10.18 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a reconcileusers action. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1027181 - http://www.securityfocus.com/bid/52657 - http://www.openwall.com/lists/oss-security/2012/06/16/1 - https://mantis.phplist.com/view.php?id=16557 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5081.php - http://
https://mantis.phplist.com/view.php?id=16557 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5081.php - http://www.exploit-db.com/exploits/18639 - https://www.phplist.com/?lid=567 - http://www.openwall.com/lists/oss-security/2012/06/17/2
CVE ID: CVE-2012-2742 State: PUBLISHED Published: 2012-06-27T22:00:00 Last Updated: 2024-08-06T19:42:32.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76407 - http://www.openwall.com/lists/oss-security/2012/06/18/1 - http://www.securityfocus.com/bid/54060 - http://www.openwall.com/lists/oss-security/20
lists/oss-security/2012/06/18/1 - http://www.securityfocus.com/bid/54060 - http://www.openwall.com/lists/oss-security/2012/06/18/3 - https://bugs.gentoo.org/show_bug.cgi?id=421571 - http://oss.codepoet.no/revelation/issue/61/file-format-magic-string-version-mismatch - http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html
CVE ID: CVE-2012-2743 State: PUBLISHED Published: 2012-06-27T22:00:00 Last Updated: 2024-08-06T19:42:32.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76408 - http://www.openwall.com/lists/oss-security/2012/06/18/1 - http://www.securityfocus.com/bid/54060 - http://www.openwall.com/lists/oss-security/2012/06/18/3 - https://bugs.gentoo.org/show_bug.cgi?id=421571 - h
bid/54060 - http://www.openwall.com/lists/oss-security/2012/06/18/3 - https://bugs.gentoo.org/show_bug.cgi?id=421571 - http://oss.codepoet.no/revelation/issue/61/file-format-magic-string-version-mismatch - http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html
CVE ID: CVE-2012-2744 State: PUBLISHED Published: 2012-08-09T10:00:00 Last Updated: 2024-08-06T19:42:32.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/ipv6/netfilter/nf_conntrack_reasm.c in the Linux kernel before 2.6.34, when the nf_conntrack_ipv6 module is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via certain types of fragmented IPv6 packets. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=833402 - http://www.securityfocus.com/bid/54367 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 - http://www.securitytracker.com/id?1027235 - ht
id/54367 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 - http://www.securitytracker.com/id?1027235 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9e2dcf72023d1447f09c47d77c99b0c49659e5ce - https://github.com/torvalds/linux/commit/9e2dcf72023d1447f09c47d77c99b0c49659e5ce - http://rhn.redhat.com/errata/RHSA-2012-1064.html - http://secunia.com/advisories/49928 - http://rhn.redhat.com/errata/RHSA-2012-1148.html