Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-1089 State: PUBLISHED Published: 2012-03-23T18:00:00 Last Updated: 2024-08-06T18:45:27.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Apache Wicket 1.4.x before 1.4.20 and 1.5.x before 1.5.5 allows remote attackers to read arbitrary web-application files via a relative pathname in a URL for a Wicket resource that corresponds to a null package. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80301 - http://www.securityfocus.com/bid/52679 - http://wicket.apache.org/2012/03/22/wicket-cve-2012-1089.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74276
CVE ID: CVE-2012-1090 State: PUBLISHED Published: 2012-05-17T10:00:00 Last Updated: 2024-08-06T18:45:27.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/88d7d4e4a439f32acc56a6d860e415ee71d3df08 - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html - http://rhn.redhat.com/errata/RHSA-2012-0481.html - http:/
pensuse.org/opensuse-security-announce/2012-04/msg00021.html - http://rhn.redhat.com/errata/RHSA-2012-0481.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10 - http://secunia.com/advisories/48964 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html - https://bugzilla.redhat.com/show_bug.cgi?id=798293 - http://secunia.com/advisories/48842 - http://www.openwall.com/lists/oss-security/2012/02/28/4
CVE ID: CVE-2012-1091 State: REJECTED Published: 2012-02-29T11:00:00Z Last Updated: 2024-09-16T23:06:00.598Z Description: No description available.
CVE ID: CVE-2012-1092 State: REJECTED Published: 2012-02-29T11:00:00Z Last Updated: 2024-09-16T18:18:24.252Z Description: No description available.
CVE ID: CVE-2012-1093 State: PUBLISHED Published: 2020-02-21T18:05:01 Last Updated: 2024-08-06T18:45:27.483Z Vendors: Debian Products: x11-common Problem Types: script x11-common creates directories in insecure manner Description: The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation during package installation. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-1093 - https://access.redhat.com/security/cve/cve-2012-1093 - http://www.openwall.com/lists/oss-security/2012/03/01/1 - http://www.openwall.com/lists/oss-security/2012/02/29/1 - http:
ttp://www.openwall.com/lists/oss-security/2012/03/01/1 - http://www.openwall.com/lists/oss-security/2012/02/29/1 - http://vladz.devzero.fr/012_x11-common-vuln.html - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2012-1094 State: PUBLISHED Published: 2020-03-10T16:19:11 Last Updated: 2024-08-06T18:45:27.400Z Vendors: n/a Products: JBoss AS 7 Problem Types: Other Description: JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1094 - https://access.redhat.com/security/cve/cve-2012-1094
CVE ID: CVE-2012-1095 State: PUBLISHED Published: 2014-02-06T16:00:00 Last Updated: 2024-08-06T18:45:27.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a terminal emulator. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/02/2 - https://bugzilla.redhat.com/show_bug.cgi?id=798353 - http://www.openwall.com/lists/oss-security/2012/02/28/15 - https://bugzilla.novell.com/show_bug.cgi?id=749335 - http://www.openwall.com/li
l.com/lists/oss-security/2012/02/28/15 - https://bugzilla.novell.com/show_bug.cgi?id=749335 - http://www.openwall.com/lists/oss-security/2012/02/28/9 - http://lists.opensuse.org/opensuse-updates/2012-03/msg00035.html
CVE ID: CVE-2012-1096 State: PUBLISHED Published: 2020-03-10T16:36:31 Last Updated: 2024-08-06T18:45:27.252Z Vendors: GNOME Products: NetworkManager Problem Types: Other Description: NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-1096 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1096 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-1096 - https://access.redhat.com/security/cve/cve-2012-1096 - http://www.openwall.com/lists/oss-security/2012
d=CVE-2012-1096 - https://access.redhat.com/security/cve/cve-2012-1096 - http://www.openwall.com/lists/oss-security/2012/03/02/3 - https://bugzilla.gnome.org/show_bug.cgi?id=793329
CVE ID: CVE-2012-1097 State: PUBLISHED Published: 2012-05-17T10:00:00 Last Updated: 2024-08-06T18:45:27.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a (1) PTRACE_GETREGSET or (2) PTRACE_SETREGSET ptrace call. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html - http://secunia.co
ata/RHSA-2012-0531.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html - http://secunia.com/advisories/48898 - https://bugzilla.redhat.com/show_bug.cgi?id=799209 - http://rhn.redhat.com/errata/RHSA-2012-0481.html - http://www.openwall.com/lists/oss-security/2012/03/05/1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10 - http://secunia.com/advisories/48964 - https://github.com/torvalds/linux/commit/c8e252586f8d5de906385d8cf6385fee289a825e - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html - http://secunia.com/advisories/48842 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c8e252586f8d5de90
com/advisories/48842 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c8e252586f8d5de906385d8cf6385fee289a825e
CVE ID: CVE-2012-1098 State: PUBLISHED Published: 2012-03-13T10:00:00 Last Updated: 2024-08-06T18:45:27.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object that is manipulated through certain methods. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075675.html - http://www.openwall.com/lists/oss-security/2012/03/03/1 - https://bugzilla.redhat.com/show_bug.cgi?id=799275 - h
.html - http://www.openwall.com/lists/oss-security/2012/03/03/1 - https://bugzilla.redhat.com/show_bug.cgi?id=799275 - http://www.openwall.com/lists/oss-security/2012/03/02/6 - http://groups.google.com/group/rubyonrails-security/msg/1c2e01a5e42722c9?dmode=source&output=gplain - http://weblog.rubyonrails.org/2012/3/1/ann-rails-3-0-12-has-been-released
CVE ID: CVE-2012-1099 State: PUBLISHED Published: 2012-03-13T10:00:00 Last Updated: 2024-08-06T18:45:27.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving certain generation of OPTION elements within SELECT elements. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075675.html - http://www.openwall.com/lists/oss
: - http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075675.html - http://www.openwall.com/lists/oss-security/2012/03/03/1 - http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075740.html - https://bugzilla.redhat.com/show_bug.cgi?id=799276 - http://www.debian.org/security/2012/dsa-2466 - http://www.openwall.com/lists/oss-security/2012/03/02/6 - http://groups.google.com/group/rubyonrails-security/msg/6fca4f5c47705488?dmode=source&output=gplain - http://weblog.rubyonrails.org/2012/3/1/ann-rails-3-0-12-has-been-released
CVE ID: CVE-2012-1100 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T18:45:27.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=799789 - http://rhn.redhat.com/errata/RHSA-2012-0396.html - http://rhn.redhat.com/errata/RHSA-2012-0406.html
CVE ID: CVE-2012-1101 State: PUBLISHED Published: 2020-03-11T14:58:57 Last Updated: 2024-08-06T18:45:27.371Z Vendors: systemd Products: systemd Problem Types: Other Description: systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedure). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1101 - http://www.openwall.com/lists/oss-security/2012/03/05/4 - https://cgit.freedesktop.org/systemd/systemd/commit/?id=9a46fc3b9014de1bf0ed1f3004a536b08a19ebb3 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=662029
CVE ID: CVE-2012-1102 State: PUBLISHED Published: 2021-07-09T10:42:36 Last Updated: 2024-08-06T18:45:27.209Z Vendors: n/a Products: perl-xml-atom Problem Types: CWE-611 Description: It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used. Additional Analyst Notes: - CVE Program Container: References: - https://metacpan.org/release/MIYAGAWA/XML-Atom-0.39/source/Changes - https://seclists.org/oss-sec/2012/q1/549
CVE ID: CVE-2012-1103 State: PUBLISHED Published: 2012-09-25T23:00:00Z Last Updated: 2024-09-16T22:56:49.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary files via crafted MML tags, which are not properly quoted in an email reply cna cause the files to be attached to the message. Additional Analyst Notes: - CVE Program Container: References: - http://notmuchmail.org/news/release-0.11.1/ - http://www.securityfocus.com/bid/52155 - http://www.openwall.com/lists/oss-security/2012/03/05/6 - http://www.debian.org/security/2012/dsa-2416 - http://git.n
- http://www.openwall.com/lists/oss-security/2012/03/05/6 - http://www.debian.org/security/2012/dsa-2416 - http://git.notmuchmail.org/git/notmuch/blobdiff/3f2050ac221a4c940c12442f156f12fff11600c6..ae438ccd8c77831158c7c30f19710d798ee4a6b4:/emacs/notmuch-mua.el - http://www.openwall.com/lists/oss-security/2012/03/04/5 - http://secunia.com/advisories/48139
CVE ID: CVE-2012-1104 State: PUBLISHED Published: 2019-12-05T17:49:19 Last Updated: 2024-08-06T18:45:27.367Z Vendors: jasig project Products: phpCAS Problem Types: Improper management of service proxying Description: A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-1104 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1104 - http://www.openwall.com/lists/oss-security/2012/03/05/7 - https://www.securityfocus.com/bid/52279 - https://gitlab.vsb.cz/kal0178/sixmon/blob/b18bcde090dc38fc9
ity/2012/03/05/7 - https://www.securityfocus.com/bid/52279 - https://gitlab.vsb.cz/kal0178/sixmon/blob/b18bcde090dc38fc968a0b1e38d1dab08b8c369e/web/lib/CAS/CAS-1.3.5/docs/ChangeLog
CVE ID: CVE-2012-1105 State: PUBLISHED Published: 2019-12-05T18:26:36 Last Updated: 2024-08-06T18:45:27.250Z Vendors: Jasig Project Products: php-pear-CAS Problem Types: Debug log and proxy configuration session data stored in /tmp without proper protection Description: An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-1105 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1105 - http://www.openwall.c
ker.debian.org/tracker/CVE-2012-1105 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1105 - http://www.openwall.com/lists/oss-security/2012/03/05/7 - https://gitlab.vsb.cz/kal0178/sixmon/blob/b18bcde090dc38fc968a0b1e38d1dab08b8c369e/web/lib/CAS/CAS-1.3.5/docs/ChangeLog - https://www.securityfocus.com/bid/52280
CVE ID: CVE-2012-1106 State: PUBLISHED Published: 2012-07-03T16:00:00 Last Updated: 2024-08-06T18:45:27.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/54121 - http://rhn.redhat.com/errata/RHSA-2012-0841.html - https://fedorahosted.org/abrt/changeset/23d6997d7886abe118c28254f7f73f0b19b2d4e0 - ht
t.com/errata/RHSA-2012-0841.html - https://fedorahosted.org/abrt/changeset/23d6997d7886abe118c28254f7f73f0b19b2d4e0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76524
CVE ID: CVE-2012-1107 State: PUBLISHED Published: 2012-09-06T18:00:00 Last Updated: 2024-08-06T18:45:27.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49688 - http://osvdb.org/79814 - http://secunia.com/advisories/48792 - http://mail.kde.org/pipermail/taglib-devel/2012-March/002186.html - http://www.gentoo.org/security/en/glsa/glsa-201206-16.x
p://mail.kde.org/pipermail/taglib-devel/2012-March/002186.html - http://www.gentoo.org/security/en/glsa/glsa-201206-16.xml - https://github.com/taglib/taglib/commit/77d61c6eca4d08b9b025738acf6b926cc750db23 - http://secunia.com/advisories/48211 - http://www.securityfocus.com/bid/52284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73666 - http://mail.kde.org/pipermail/taglib-devel/2012-March/002187.html - http://www.openwall.com/lists/oss-security/2012/03/05/19
CVE ID: CVE-2012-1108 State: PUBLISHED Published: 2012-09-06T18:00:00 Last Updated: 2024-08-06T18:45:27.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49688 - http://osvdb.org/79813 - https://github.com/taglib/taglib/commit/b3646a07348ffa276ea41a9dae03ddc63ea6c532 - http://secunia.com/advisories/48792 - http://mail.kde.org/pipermail/taglib-devel/2012-March/002186.html - http://www.gentoo.org/security/en/gls
sories/48792 - http://mail.kde.org/pipermail/taglib-devel/2012-March/002186.html - http://www.gentoo.org/security/en/glsa/glsa-201206-16.xml - http://mail.kde.org/pipermail/taglib-devel/2012-March/002191.html - http://secunia.com/advisories/48211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73665 - http://www.securityfocus.com/bid/52284 - http://www.openwall.com/lists/oss-security/2012/03/05/19
CVE ID: CVE-2012-1109 State: PUBLISHED Published: 2019-11-12T14:32:10 Last Updated: 2024-08-06T18:45:27.479Z Vendors: Python Products: mwlib Problem Types: denial of service when parsing #iferror magic functions Description: mwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic functions Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1109 - http://www.openwall.com/lists/oss-security/2012/03/05/20 - https://www.securityfocus.com/bid/52577
CVE ID: CVE-2012-1110 State: PUBLISHED Published: 2012-09-06T18:00:00 Last Updated: 2024-08-06T18:45:27.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user, (2) email, (3) email2, (4) f17_zip, or (5) agree parameter to join.php; (6) PATH_INFO, (7) st, (8) f17_city, (9) f17_country, (10) f17_state, (11) f17_zip, (12) f19, (13) wphoto, (14) search, or (15) v parameter to search.php; (16) PATH_INFO or (17) st parameter to photo_search.php; or (18) return parameter to photo_view.php. Additional Analyst Notes: - CVE Program Contai
arameter to photo_search.php; or (18) return parameter to photo_view.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/79827 - http://secunia.com/advisories/48165 - http://www.osvdb.org/79828 - http://www.osvdb.org/79829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73669 - http://www.securityfocus.com/bid/52295 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0013.html - http://www.osvdb.org/79830 - http://www.openwall.com/lists/oss-security/2012/03/05/21 - http://www.openwall.com/lists/oss-security/2012/03/05/15 - http://yehg.net/lab/pr0js/advisories/%5Betano_1.2.x%5D_xss
CVE ID: CVE-2012-1111 State: PUBLISHED Published: 2014-10-27T20:00:00 Last Updated: 2024-08-06T18:45:27.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/927060 - http://lists.opensuse.org/opensuse-updates/2012-03/msg00019.html - https://bugzilla.novell.com/show_bug.cgi?id=745339 - http://seclists.org/oss-sec/2012/q1/566 - http://seclists.org/oss-sec/2012/q1/557
CVE ID: CVE-2012-1112 State: PUBLISHED Published: 2012-09-06T18:00:00 Last Updated: 2024-08-06T18:45:27.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Open-Realty CMS 2.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the select_users_template parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://yehg.net/lab/pr0js/advisories/%5Bopen-realty_2.5.8_2.x%5D_lfi - http://www.securityfocus.com/bid/52296 - http://www.openwall.com/lists/oss-security/2012/03/05/23 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0012.html - https://exchange.
/lists/oss-security/2012/03/05/23 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0012.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/73736 - http://www.openwall.com/lists/oss-security/2012/03/05/14
CVE ID: CVE-2012-1113 State: PUBLISHED Published: 2012-04-22T18:00:00 Last Updated: 2024-08-06T18:45:27.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078851.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078873.html - http://secunia.com/advisories/48767 - http://gallery.menalto.com/gallery_3_0_3_and_ga
-announce/2012-April/078873.html - http://secunia.com/advisories/48767 - http://gallery.menalto.com/gallery_3_0_3_and_gallery_2_3_2 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078618.html - http://www.securityfocus.com/bid/52996 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078925.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078752.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74837 - https://bugzilla.redhat.com/show_bug.cgi?id=812045 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078816.html
CVE ID: CVE-2012-1114 State: PUBLISHED Published: 2019-12-05T20:03:52 Last Updated: 2024-08-06T18:45:27.370Z Vendors: ldap-account-manager Products: LDAP Account Manager (LAM) Problem Types: UNKNOWN_TYPE Description: A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_id action. and the filteruid parameter to list.php. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-1114 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1114 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089328.html - http://www.o
cgi?id=CVE-2012-1114 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089328.html - http://www.openwall.com/lists/oss-security/2012/03/12/1 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089297.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089313.html - http://www.openwall.com/lists/oss-security/2012/03/05/24 - http://www.openwall.com/lists/oss-security/2012/03/12/10 - http://www.securityfocus.com/bid/52255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73971
CVE ID: CVE-2012-1115 State: PUBLISHED Published: 2019-12-05T20:20:25 Last Updated: 2024-08-06T18:45:27.466Z Vendors: ldap-account-manager Products: LDAP Account Manager (LAM) Pro Problem Types: XSS flaws via 'export', 'add_value_form' and 'dn' variables Description: A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089328.html - https://security-tracker.debian.org/tracker/CVE-2012-1115 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1115 - http://www.op