deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-2500
Published: 2012-08-06
Description: Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29470.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-310
References: http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html; http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html
CVE: CVE-2012-1344
Published: 2012-08-06
Description: Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service (device reload) by using a web browser to refresh the SSL VPN portal page, as demonstrated by the Android browser, aka Bug ID CSCtr86328.
CVSS Score: 3.5 (LOW)
CWE: CWE-119
References: http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html; http://www.securitytracker.com/id?1027371; http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html
CVE: CVE-2012-1346
Published: 2012-08-06
Description: Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP packets to the CERPT port, aka Bug ID CSCtx38369.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: https://www.cisco.com/en/US/docs/voice_ip_comm/cer/8_7/english/release/notes/CER0_BK_CEE780BD_00_cisco-emergency-responder-87-release_chapter_00.html; https://www.cisco.com/en/US/docs/voice_ip_comm/cer/8_7/english/release/notes/CER0_BK_CEE780BD_00_cisco-emergency-responder-87-release_chapter_00.html
CVE: CVE-2012-1348
Published: 2012-08-06
Description: Cisco Wide Area Application Services (WAAS) appliances with software 4.4, 5.0, and 5.1 include a one-way hash of a password within output text, which might allow remote attackers to obtain sensitive information via a brute-force attack on the hash string, aka Bug ID CSCty17279.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v501/release/notes/ws501xrn.pdf; http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v501/release/notes/ws501xrn.pdf
CVE: CVE-2012-1350
Published: 2012-08-06
Description: Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang) via IAPP 0x3281 packets, aka Bug ID CSCtc12426.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/docs/wireless/access_point/ios/release/notes/12_3_8_JED1rn.html; http://www.cisco.com/en/US/docs/wireless/access_point/ios/release/notes/12_3_8_JED1rn.html
CVE: CVE-2012-1357
Published: 2012-08-06
Description: The igmp_snoop_orib_fill_source_update function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers to cause a denial of service (device reload) via IGMP packets, aka Bug ID CSCts46521.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/release/notes/Rel_5_1_3_N1_1/Nexus5000_Release_Notes_5_1_3_N1.pdf; http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/release/notes/Rel_5_1_3_N1_1/Nexus5000_Release_Notes_5_1_3_N1.pdf
CVE: CVE-2012-1361
Published: 2012-08-06
Description: Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows remote attackers to obtain sensitive crosstalk information by listening during a PSTN call, aka Bug ID CSCtx77750.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-3TCAVS.html; http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-3TCAVS.html
CVE: CVE-2012-2665
Published: 2012-08-06
Description: Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Open Document Text (.odt) file with (1) a child tag within an incorrect parent tag, (2) duplicate tags, or (3) a Base64 ChecksumAttribute whose length is not evenly divisible by four.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://rhn.redhat.com/errata/RHSA-2012-1135.html; http://secunia.com/advisories/50142; http://secunia.com/advisories/50146
CVE: CVE-2012-3448
Published: 2012-08-06
Description: Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://ganglia.info/?p=549; http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084196.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084202.html
CVE: CVE-2012-2022
Published: 2012-08-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9.1x, and 9.20 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03405705; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03405705
CVE: CVE-2012-2317
Published: 2012-08-07
Description: The Debian php_crypt_revamped.patch patch for PHP 5.3.x, as used in the php5 package before 5.3.3-7+squeeze4 in Debian GNU/Linux squeeze, the php5 package before 5.3.2-1ubuntu4.17 in Ubuntu 10.04 LTS, and the php5 package before 5.3.5-1ubuntu7.10 in Ubuntu 11.04, does not properly handle an empty salt string, which might allow remote attackers to bypass authentication by leveraging an application that relies on the PHP crypt function to choose a salt for password hashing.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=581170; http://www.openwall.com/lists/oss-security/2012/05/04/7; http://www.openwall.com/lists/oss-security/2012/05/05/2
CVE: CVE-2012-2648
Published: 2012-08-07
Description: Cross-site scripting (XSS) vulnerability in the GoodReader app 3.16 and earlier for iOS on the iPad, and 3.15.1 and earlier for iOS on the iPhone and iPod touch, allows remote attackers to inject arbitrary web script or HTML via vectors involving use of this app in conjunction with a web browser.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN01598734/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000073; http://jvn.jp/en/jp/JVN01598734/index.html
CVE: CVE-2012-4005
Published: 2012-08-07
Description: The NHN Japan NAVER LINE application before 2.5.5 for Android does not properly handle implicit intents, which allows remote attackers to obtain sensitive message information via a crafted application.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN67435981/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000074; http://lineblog.naver.jp/archives/12893561.html
CVE: CVE-2012-2652
Published: 2012-08-07
Description: The bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node, which allows local users to overwrite or read arbitrary files via a symlink attack on an unspecified temporary file.
CVSS Score: 4.4 (MEDIUM)
References: http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commit%3Bh=eba25057b9a5e19d10ace2bc7716667a31297169; http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html
CVE: CVE-2012-3413
Published: 2012-08-07
Description: The HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not disable JavaScript, Java, and Plugins, which allows remote attackers to inject arbitrary web script or HTML via a crafted email.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-16
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083946.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084262.html; http://secunia.com/advisories/50008
CVE: CVE-2012-3449
Published: 2012-08-07
Description: Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683665; http://www.openwall.com/lists/oss-security/2012/08/02/6; http://www.openwall.com/lists/oss-security/2012/08/03/6
CVE: CVE-2012-3452
Published: 2012-08-07
Description: gnome-screensaver 3.4.x before 3.4.4 and 3.5.x before 3.5.4, when multiple screens are used, only locks the screen with the active focus, which allows physically proximate attackers to bypass screen locking and access an unattended workstation.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2012/08/03/3; http://www.openwall.com/lists/oss-security/2012/08/03/5; https://bugzilla.gnome.org/show_bug.cgi?id=679441
CVE: CVE-2012-3453
Published: 2012-08-07
Description: logol 1.5.0 uses world writable permissions for the /var/lib/logol/results directory, which allows local users to delete or overwrite arbitrary files.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683647; http://www.openwall.com/lists/oss-security/2012/08/03/8; http://www.securityfocus.com/bid/54802
CVE: CVE-2012-3454
Published: 2012-08-07
Description: eXtplorer 2.1.0b6 uses world writable permissions for the /var/lib/extplorer/ftp_tmp directory, which allows local users to delete or overwrite arbitrary files.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2012/08/03/7; http://www.securityfocus.com/bid/54801; http://www.openwall.com/lists/oss-security/2012/08/03/7
CVE: CVE-2012-4177
Published: 2012-08-07
Description: The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument.
CVSS Score: 10.0 (HIGH)
CWE: CWE-78
References: http://forums.ubi.com/showthread.php/699940-Uplay-PC-Patch-2-0-4-Security-fix; http://osvdb.org/84402; http://seclists.org/fulldisclosure/2012/Jul/375
CVE: CVE-2012-0213
Published: 2012-08-07
Description: The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-August/084609.html; http://rhn.redhat.com/errata/RHSA-2012-1232.html; http://secunia.com/advisories/49040
CVE: CVE-2012-3386
Published: 2012-08-07
Description: The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264, CWE-362
References: http://git.savannah.gnu.org/cgit/automake.git/commit/?id=784b3e6ccc7c72a1c95c340cbbe8897d6b689d76; http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089187.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-September/087538.html
CVE: CVE-2012-3422
Published: 2012-08-07
Description: The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted web page, which causes an uninitialized memory location to be read.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.1/NEWS; http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00004.html
CVE: CVE-2012-3423
Published: 2012-08-07
Description: The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL terminators, which allows remote attackers to cause a denial of service (crash), obtain sensitive information from memory, or execute arbitrary code via a crafted Java applet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=518; http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=863; http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.1/NEWS
CVE: CVE-2012-3429
Published: 2012-08-07
Description: The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries, which allows remote DNS servers to cause a denial of service (named service hang) via a "$" character in a DN in a DNS query.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://git.fedorahosted.org/cgit/bind-dyndb-ldap.git/commit/?id=f345805c73c294db42452ae966c48fbc36c48006; http://rhn.redhat.com/errata/RHSA-2012-1139.html; http://secunia.com/advisories/50086
CVE: CVE-2012-3437
Published: 2012-08-07
Description: The Magick_png_malloc function in coders/png.c in ImageMagick 6.7.8 and earlier does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2013-03/msg00101.html; http://secunia.com/advisories/50091; http://secunia.com/advisories/50398
CVE: CVE-2012-3438
Published: 2012-08-07
Description: The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://graphicsmagick.hg.sourceforge.net/hgweb/graphicsmagick/graphicsmagick/rev/d6e469d02cd2; http://lists.opensuse.org/opensuse-updates/2013-03/msg00102.html; http://secunia.com/advisories/50090
CVE: CVE-2012-3445
Published: 2012-08-07
Description: The virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain* API calls with typed parameters, which might allow remote authenticated users to cause a denial of service (libvirtd crash) via an RPC command with nparams set to zero, which triggers an out-of-bounds read or a free of an invalid pointer.
CVSS Score: 3.5 (LOW)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-updates/2012-08/msg00023.html; http://rhn.redhat.com/errata/RHSA-2012-1202.html; http://secunia.com/advisories/50118
CVE: CVE-2012-4178
Published: 2012-08-07
Description: SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/20123; http://www.securityfocus.com/bid/54721; http://www.securitytracker.com/id?1027358
CVE: CVE-2010-5142
Published: 2012-08-08
Description: chef-server-api/app/controllers/users.rb in the API in Chef before 0.9.0 does not require administrative privileges for the create, destroy, and update methods, which allows remote authenticated users to manage user accounts via requests to the /users URI.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://tickets.opscode.com/browse/CHEF-1289; https://github.com/opscode/chef/commit/c3bb41f727fbe00e5de719d687757b24c8dcdfc8; http://tickets.opscode.com/browse/CHEF-1289
CVE: CVE-2011-4922
Published: 2012-08-08
Description: cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://hg.pidgin.im/pidgin/main/rev/8c850977cb42; http://openwall.com/lists/oss-security/2012/01/04/13; http://www.pidgin.im/news/security/?id=50
CVE: CVE-2011-5097
Published: 2012-08-08
Description: chef-server-api/app/controllers/cookbooks.rb in Chef Server in Chef before 0.9.18, and 0.10.x before 0.10.2, does not require administrative privileges for the update and destroy methods, which allows remote authenticated users to (1) upload cookbooks via a knife cookbook upload command or (2) delete cookbooks via a knife cookbook delete command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://tickets.opscode.com/browse/CHEF-2436; https://github.com/opscode/chef/commit/a4ea6edab2fecb922f999cffb0daa04eeeec7a26; http://tickets.opscode.com/browse/CHEF-2436
CVE: CVE-2011-5098
Published: 2012-08-08
Description: chef-server-api/app/controllers/clients.rb in Chef Server in Chef before 0.9.20, and 0.10.x before 0.10.6, does not require administrative privileges for creating admin clients, which allows remote authenticated users to bypass intended access restrictions by leveraging read permission for the validation key and executing a knife client create command with the --admin option.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://tickets.opscode.com/browse/CHEF-2649; https://github.com/opscode/chef/commit/33f0e9c58bbf047e1b401a834f3abfe72d9a8947; http://tickets.opscode.com/browse/CHEF-2649
CVE: CVE-2012-0421
Published: 2012-08-08
Description: The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00001.html; https://bugzilla.novell.com/771335; http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00001.html
CVE: CVE-2012-2191
Published: 2012-08-08
Description: IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack, which allows remote attackers to cause a denial of service (application crash) via crafted values in the TLS Record Layer, a different vulnerability than CVE-2012-2333.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/51279; http://www-01.ibm.com/support/docview.wss?uid=swg1IV31980; http://www-01.ibm.com/support/docview.wss?uid=swg1IV31981
CVE: CVE-2012-2203
Published: 2012-08-08
Description: IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for certificate objects without enforcing file integrity, which makes it easier for remote attackers to spoof SSL servers via vectors involving insertion of an arbitrary root Certification Authority (CA) certificate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/51279; http://www-01.ibm.com/support/docview.wss?uid=swg1IV31973; http://www-01.ibm.com/support/docview.wss?uid=swg1IV31975
CVE: CVE-2012-2960
Published: 2012-08-08
Description: Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03606700; http://www.kb.cert.org/vuls/id/960468; http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03606700
CVE: CVE-2012-3424
Published: 2012-08-08
Description: The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to cause a denial of service by leveraging access to an application that uses a with_http_digest helper method, as demonstrated by the authenticate_or_request_with_http_digest method.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://lists.opensuse.org/opensuse-updates/2012-08/msg00046.html; http://rhn.redhat.com/errata/RHSA-2013-0154.html; http://weblog.rubyonrails.org/2012/7/26/ann-rails-3-2-7-has-been-released/
CVE: CVE-2012-3440
Published: 2012-08-08
Description: A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-59
References: http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2[PII_REDACTED].html; http://www.securityfocus.com/bid/54868; https://bugzilla.redhat.com/show_bug.cgi?id=844442
CVE: CVE-2012-2649
Published: 2012-08-08
Description: The Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allow remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://jvn.jp/en/jp/JVN99730704/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000075; https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir
CVE: CVE-2012-4004
Published: 2012-08-08
Description: Cross-site scripting (XSS) vulnerability in the Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allows remote attackers to inject arbitrary web script or HTML via a crafted application that interacts with an unspecified Sleipnir Mobile function.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN39519659/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000076; https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir
CVE: CVE-2012-2136
Published: 2012-08-09
Description: The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cc9b17ad29ecaa20bfe426a8d4dbfb94b13ff1cc; http://rhn.redhat.com/errata/RHSA-2012-0743.html; http://rhn.redhat.com/errata/RHSA-2012-1087.html
CVE: CVE-2012-2373
Published: 2012-08-09
Description: The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is enabled, does not properly use the Page Middle Directory (PMD), which allows local users to cause a denial of service (panic) via a crafted application that triggers a race condition.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26c191788f18129af0eb32a358cdaea0c7479626; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6211&w=2; http://rhn.redhat.com/errata/RHSA-2012-0743.html