deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-3563
Published: 2012-06-14
Description: Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via a web page that contains invalid character encodings.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/windows/1200b/; https://exchange.xforce.ibmcloud.com/vulnerabilities/76358; http://www.opera.com/docs/changelogs/windows/1200b/
CVE: CVE-2012-3564
Published: 2012-06-14
Description: Opera before 12.00 Beta allows remote attackers to cause a denial of service (application hang) via an absolutely positioned wrap=off TEXTAREA element located next to an "overflow: auto" block element.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/windows/1200b/; https://exchange.xforce.ibmcloud.com/vulnerabilities/76359; http://www.opera.com/docs/changelogs/windows/1200b/
CVE: CVE-2012-3565
Published: 2012-06-14
Description: Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted characters in domain names, as demonstrated by "IDNA2008 tests."
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/windows/1200b/; https://exchange.xforce.ibmcloud.com/vulnerabilities/76360; http://www.opera.com/docs/changelogs/windows/1200b/
CVE: CVE-2012-3566
Published: 2012-06-14
Description: Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application hang) via JavaScript code that changes a form before submission.
CVSS Score: 4.3 (MEDIUM)
References: http://www.opera.com/docs/changelogs/windows/1200b/; https://exchange.xforce.ibmcloud.com/vulnerabilities/76361; http://www.opera.com/docs/changelogs/windows/1200b/
CVE: CVE-2012-3567
Published: 2012-06-14
Description: Opera before 12.00 Beta allows remote attackers to cause a denial of service (memory consumption or application hang) via an IFRAME element that uses the src="#" syntax to embed a parent document.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/windows/1200b/; https://exchange.xforce.ibmcloud.com/vulnerabilities/76362; http://www.opera.com/docs/changelogs/windows/1200b/
CVE: CVE-2012-3568
Published: 2012-06-14
Description: Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted WebGL content, as demonstrated by a codeflow.org WebGL demo.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/windows/1200b/; https://exchange.xforce.ibmcloud.com/vulnerabilities/76363; http://www.opera.com/docs/changelogs/windows/1200b/
CVE: CVE-2012-3288
Published: 2012-06-14
Description: VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denial of service (memory corruption) on the host OS via a crafted Checkpoint file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.vmware.com/security/advisories/VMSA-2012-0011.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17178; http://www.vmware.com/security/advisories/VMSA-2012-0011.html
CVE: CVE-2012-3289
Published: 2012-06-14
Description: VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash) via crafted traffic from a remote virtual device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: http://www.vmware.com/security/advisories/VMSA-2012-0011.html; http://www.vmware.com/security/advisories/VMSA-2012-0011.html
CVE: CVE-2012-2631
Published: 2012-06-15
Description: Cross-site scripting (XSS) vulnerability in WEBLOGIC @WEB ShoppingCart before 1.5.2.0, and @WEB ShoppingCart T 1.5.0.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN78305073/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000055; http://www.atmarkweb.jp/atcart/
CVE: CVE-2012-3345
Published: 2012-06-15
Description: ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2012/06/15/3; https://security.gentoo.org/glsa/201706-23; http://www.openwall.com/lists/oss-security/2012/06/15/3
CVE: CVE-2012-2632
Published: 2012-06-15
Description: SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intended URL restrictions via a TCP session.
CVSS Score: 2.6 (LOW)
References: http://jvn.jp/en/jp/JVN24646833/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000059; http://www.seil.jp/support/security/a01232.html
CVE: CVE-2012-2633
Published: 2012-06-15
Description: Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN15646988/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000058; http://osvdb.org/82017
CVE: CVE-2012-2634
Published: 2012-06-15
Description: Cross-site scripting (XSS) vulnerability in FeedDemon before 4.0, when the feed preview option is enabled, allows remote attackers to inject arbitrary web script or HTML via a feed.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN18397171/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000056; http://jvn.jp/en/jp/JVN18397171/index.html
CVE: CVE-2012-2635
Published: 2012-06-15
Description: The Dolphin Browser HD application before 7.6 and Dolphin for Pad application before 1.0.1 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN90751882/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000057; http://jvn.jp/en/jp/JVN90751882/index.html
CVE: CVE-2011-3193
Published: 2012-06-16
Description: Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-787
References: http://cgit.freedesktop.org/harfbuzz.old/commit/?id=81c8ef785b079980ad5b46be4fe7c7bf156dbf65; http://cgit.freedesktop.org/harfbuzz/commit/src/harfbuzz-gpos.c?id=da2c52abcd75d46929b34cad55c4fb2c8892bc08; http://git.gnome.org/browse/pango/commit/pango/opentype/harfbuzz-gpos.c?id=a7a715480db66148b1f[PII_REDACTED]08a7991dcd0
CVE: CVE-2011-3194
Published: 2012-06-16
Description: Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the TIFFTAG_SAMPLESPERPIXEL tag in a greyscale TIFF image with multiple samples per pixel.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066209.html; http://lists.opensuse.org/opensuse-updates/2011-10/msg00007.html; http://lists.opensuse.org/opensuse-updates/2011-10/msg00008.html
CVE: CVE-2011-4328
Published: 2012-06-16
Description: plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=649384; http://git.savannah.gnu.org/gitweb/?p=gnash.git%3Ba=commitdiff%3Bh=fa481c116e65ccf9137c7ddc8abc3cf05dc12f55; http://lists.opensuse.org/opensuse-updates/2012-03/msg00003.html
CVE: CVE-2011-4408
Published: 2012-06-16
Description: The Single Sign On Client (ubuntu-sso-client) for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle (MITM) attack.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/82747; http://secunia.com/advisories/49448; http://www.securityfocus.com/bid/53829
CVE: CVE-2011-4409
Published: 2012-06-16
Description: The Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS does not properly validate SSL certificates, which allows remote attackers to spoof a server and modify or read sensitive information via a man-in-the-middle (MITM) attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/49442; http://ubuntu.com/usn/usn-1465-1; http://ubuntu.com/usn/usn-1465-2
CVE: CVE-2012-0210
Published: 2012-06-16
Description: debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary code via the file name in a (1) .dsc or (2) .changes file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=797ddc961532eb0aeb46153e3f28c8e9ea0500d2; http://secunia.com/advisories/47955; http://secunia.com/advisories/48039
CVE: CVE-2012-0211
Published: 2012-06-16
Description: debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=87f88232eb643f0c118c6ba38db8e966915b450f; http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=9cbe605d3eab4f9e67525f69b676c55b273b7a03; http://secunia.com/advisories/47955
CVE: CVE-2012-0212
Published: 2012-06-16
Description: debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=9cbe605d3eab4f9e67525f69b676c55b273b7a03; http://secunia.com/advisories/47955; http://secunia.com/advisories/48039
CVE: CVE-2012-1145
Published: 2012-06-16
Description: spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the NULL organization when mod_wsgi is used, which allows remote attackers to cause a denial of service (/var partition disk consumption and failed updates) via a large number of package uploads.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://rhn.redhat.com/errata/RHSA-2012-0436.html; http://secunia.com/advisories/48664; http://www.osvdb.org/81481
CVE: CVE-2012-1502
Published: 2012-06-16
Description: Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a NULL byte in a password string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-updates/2012-04/msg00027.html; http://secunia.com/advisories/48312; http://secunia.com/advisories/48332
CVE: CVE-2012-2395
Published: 2012-06-16
Description: Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00000.html; http://www.openwall.com/lists/oss-security/2012/05/23/18
CVE: CVE-2012-3574
Published: 2012-06-16
Description: Unrestricted file upload vulnerability in includes/doajaxfileupload.php in the MM Forms Community plugin 2.2.5 and 2.2.6 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/temp.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/49411; http://www.exploit-db.com/exploits/18997; http://www.opensyscom.fr/Actualites/wordpress-plugins-mm-forms-community-shell-upload-vulnerability.html
CVE: CVE-2012-3575
Published: 2012-06-16
Description: Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/rbxslider.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/49463; http://www.exploit-db.com/exploits/19019; http://www.opensyscom.fr/Actualites/wordpress-plugins-rbx-gallery-multiple-arbitrary-file-upload-vulnerability.html
CVE: CVE-2012-3576
Published: 2012-06-16
Description: Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://plugins.trac.wordpress.org/changeset?old_path=%2Fwpstorecart&old=555124&new_path=%2Fwpstorecart&new=555124; http://secunia.com/advisories/49459; http://wordpress.org/extend/plugins/wpstorecart/changelog/
CVE: CVE-2011-1473
Published: 2012-06-16
Description: OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-5094.  NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2014-02/0061.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7000&w=2; http://orchilles.com/2011/03/ssl-renegotiation-dos.html
CVE: CVE-2011-5094
Published: 2012-06-16
Description: Mozilla Network Security Services (NSS) 3.x, with certain settings of the SSL_ENABLE_RENEGOTIATION option, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-1473.  NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment
CVSS Score: 4.3 (MEDIUM)
References: http://orchilles.com/2011/03/ssl-renegotiation-dos.html; http://vincent.bernat.im/en/blog/2011-ssl-dos-mitigation.html; http://www.educatedguesswork.org/2011/10/ssltls_and_computational_dos.html
CVE: CVE-2012-1583
Published: 2012-06-16
Description: Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d0772b70faaf8e9f2013b6c4273d94d5eac8047a; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7000&w=2
CVE: CVE-2012-1711
Published: 2012-06-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to CORBA.
CVSS Score: 7.5 (HIGH)
References: http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-June/019076.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7681&w=2; http://rhn.redhat.com/errata/RHSA-2012-0734.html
CVE: CVE-2012-1713
Published: 2012-06-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html
CVE: CVE-2012-1716
Published: 2012-06-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html
CVE: CVE-2012-1717
Published: 2012-06-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.
CVSS Score: 2.1 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html
CVE: CVE-2012-1718
Published: 2012-06-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect availability via unknown vectors related to Security.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html
CVE: CVE-2012-1719
Published: 2012-06-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect integrity, related to CORBA.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html
CVE: CVE-2012-1720
Published: 2012-06-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier, when running on Solaris, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking.
CVSS Score: 3.7 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7681&w=2; http://secunia.com/advisories/51080; http://www.ibm.com/support/docview.wss?uid=swg21615246
CVE: CVE-2012-1721
Published: 2012-06-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1722.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7681&w=2
CVE: CVE-2012-1722
Published: 2012-06-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1721.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7681&w=2
CVE: CVE-2012-1723
Published: 2012-06-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-June/019076.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7681&w=2; http://rhn.redhat.com/errata/RHSA-2012-0734.html
CVE: CVE-2012-1724
Published: 2012-06-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect availability, related to JAXP.
CVSS Score: 5.0 (MEDIUM)
References: http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-June/019076.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7681&w=2; http://rhn.redhat.com/errata/RHSA-2012-0734.html
CVE: CVE-2012-1725
Published: 2012-06-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html
CVE: CVE-2012-1726
Published: 2012-06-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7681&w=2; http://security.gentoo.org/glsa/glsa-201406-32.xml