deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-3485
Published: 2012-08-26
Description: Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable file pathname, which allows local users to gain privileges via an execl system call.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html; http://code.google.com/p/tunnelblick/issues/detail?id=212; http://git.zx2c4.com/Pwnnel-Blicker/tree/pwnnel-blicker-for-kids.sh
CVE: CVE-2012-3486
Published: 2012-08-26
Description: Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html; http://code.google.com/p/tunnelblick/issues/detail?id=212; http://www.openwall.com/lists/oss-security/2012/08/14/1
CVE: CVE-2012-3487
Published: 2012-08-26
Description: Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to be assigned to a target process.
CVSS Score: 1.2 (LOW)
CWE: CWE-362
References: http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html; http://code.google.com/p/tunnelblick/issues/detail?id=212; http://www.openwall.com/lists/oss-security/2012/08/14/1
CVE: CVE-2012-4676
Published: 2012-08-26
Description: The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a different vulnerability than CVE-2012-3485.
CVSS Score: 1.2 (LOW)
CWE: CWE-59
References: http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html; http://code.google.com/p/tunnelblick/issues/detail?id=212; http://www.openwall.com/lists/oss-security/2012/08/14/1
CVE: CVE-2012-4677
Published: 2012-08-26
Description: Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://code.google.com/p/tunnelblick/issues/detail?id=212; http://code.google.com/p/tunnelblick/issues/detail?id=212
CVE: CVE-2012-1175
Published: 2012-08-26
Description: Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://git.savannah.gnu.org/cgit/gnash.git/commit/?id=bb4dc77eecb6ed1b967e3ecbce3dac6c5e6f1527; http://secunia.com/advisories/47183; http://secunia.com/advisories/48466
CVE: CVE-2012-1176
Published: 2012-08-26
Description: Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application crash) via a 4-byte utf-8 sequence.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663189; http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/aacd[PII_REDACTED]98/8d095f85f3665bff?lnk=raot; http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075293.html
CVE: CVE-2012-1177
Published: 2012-08-26
Description: libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-20
References: http://git.gnome.org/browse/libgdata/commit/?h=libgdata-0-10&id=8eff8fa9138859e03e58c2aa76600ab63eb5c29c; http://git.gnome.org/browse/libgdata/commit/?id=6799f2c525a584dc998821a6ce897e463dad7840; http://secunia.com/advisories/50432
CVE: CVE-2012-1296
Published: 2012-08-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body parameter to admin/preview.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/48118; http://www.elefantcms.com/forum/discussion/39/elefant-1.0.2-and-1.1.5-security-updates-released; http://www.elefantcms.com/wiki/Changelog
CVE: CVE-2012-1921
Published: 2012-08-26
Description: Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attackers to hijack the authentication of administrators for requests that change the router passphrase via the pskValue parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://ivanobinetti.blogspot.com/2012/03/sitecom-wlm-2501-change-wireless.html; http://packetstormsecurity.org/files/110770/Sitecom-WLM-2501-Cross-Site-Request-Forgery.html; http://ivanobinetti.blogspot.com/2012/03/sitecom-wlm-2501-change-wireless.html
CVE: CVE-2012-2103
Published: 2012-08-26
Description: The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
CVSS Score: 1.2 (LOW)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668778; http://secunia.com/advisories/48859; http://secunia.com/advisories/51218
CVE: CVE-2012-2104
Published: 2012-08-26
Description: cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668666; http://www.openwall.com/lists/oss-security/2012/04/16/5; http://www.openwall.com/lists/oss-security/2012/04/16/6
CVE: CVE-2012-2146
Published: 2012-08-26
Description: Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for context-dependent users to obtain sensitive information and decrypt the database.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://elixir.ematia.de/trac/ticket/119; http://groups.google.com/group/sqlelixir/browse_thread/thread/efc16227514cffa?pli=1; http://www.openwall.com/lists/oss-security/2012/04/27/8
CVE: CVE-2012-2147
Published: 2012-08-26
Description: munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.openwall.com/lists/oss-security/2012/04/17/2; http://www.openwall.com/lists/oss-security/2012/04/18/2; http://www.openwall.com/lists/oss-security/2012/04/19/3
CVE: CVE-2012-2297
Published: 2012-08-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Creative Commons module 6.x-1.x before 6.x-1.1 for Drupal allow remote authenticated users with the administer creative commons permission to inject arbitrary web script or HTML via the (1) creativecommons_user_message or (2) creativecommons_site_license_additional_text parameter.
CVSS Score: 2.1 (LOW)
CWE: CWE-79
References: http://drupal.org/node/1547478; http://drupal.org/node/1547520; http://secunia.com/advisories/48937
CVE: CVE-2012-4678
Published: 2012-08-26
Description: munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of service (disk consumption) via many requests to an image with unique parameters.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668667; http://munin-monitoring.org/changeset/4825; http://www.openwall.com/lists/oss-security/2012/04/16/5
CVE: CVE-2012-1933
Published: 2012-08-27
Description: Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) include/phorum_load.php, (2) conf/install_conf.php, or (3) conf/liveuser_configuration.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0130.html; http://dev.sourcefabric.org/browse/CS-4179; http://secunia.com/advisories/48769
CVE: CVE-2012-1934
Published: 2012-08-27
Description: SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attackers to execute arbitrary SQL commands via the f_country_code parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0130.html; http://dev.sourcefabric.org/browse/CS-4179; http://dev.sourcefabric.org/browse/CS-4181
CVE: CVE-2012-1935
Published: 2012-08-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arbitrary web script or HTML via the (1) Back parameter to admin/ad.php, or the (2) token or (3) f_email parameter to admin/password_check_token.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0130.html; http://dev.sourcefabric.org/browse/CS-4179; http://dev.sourcefabric.org/browse/CS-4182
CVE: CVE-2012-2112
Published: 2012-08-27
Description: Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.typo3.org/pipermail/typo3-announce/2012/000241.html; http://lists.typo3.org/pipermail/typo3-announce/2012/000242.html; http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-002/
CVE: CVE-2012-2128
Published: 2012-08-27
Description: Cross-site request forgery (CSRF) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to hijack the authentication of administrators for requests that add arbitrary users. NOTE: this issue has been disputed by the vendor, who states that it is resultant from CVE-2012-2129: "the exploit code simply uses the XSS hole to extract a valid CSRF token."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://bugs.dokuwiki.org/index.php?do=details&task_id=2488; http://ircrash.com/uploads/dokuwiki.txt; http://seclists.org/bugtraq/2012/Apr/121
CVE: CVE-2012-2129
Published: 2012-08-27
Description: Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.dokuwiki.org/index.php?do=details&task_id=2487; http://ircrash.com/uploads/dokuwiki.txt; http://seclists.org/bugtraq/2012/Apr/121
CVE: CVE-2012-4679
Published: 2012-08-27
Description: Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the f_user_name parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://dev.sourcefabric.org/browse/CS-4184; http://secunia.com/advisories/48769; http://www.securityfocus.com/bid/52941
CVE: CVE-2011-4944
Published: 2012-08-27
Description: Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.
CVSS Score: 1.9 (LOW)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650555; http://bugs.python.org/file23824/pypirc-secure.diff; http://bugs.python.org/issue13512
CVE: CVE-2012-0849
Published: 2012-08-27
Description: Integer overflow in the ff_j2k_dwt_init function in libavcodec/j2k_dwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted JPEG2000 image that triggers an incorrect check for a negative value.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=1f99939a6361e2e6d6788494dd7c682b051c6c34; http://www.ffmpeg.org/trac/ffmpeg/ticket/776
CVE: CVE-2012-0855
Published: 2012-08-27
Description: Heap-based buffer overflow in the get_sot function in the J2K decoder (j2k.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via unspecified vectors related to the curtileno variable.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=3eedf9f716733b3b4c5205726d2c1ca52b3d3d78; http://www.openwall.com/lists/oss-security/2012/02/01/11
CVE: CVE-2012-1586
Published: 2012-08-27
Description: mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html; http://www.openwall.com/lists/oss-security/2012/03/27/1
CVE: CVE-2012-1587
Published: 2012-08-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2011-4944.  Reason: This candidate is a duplicate of CVE-2011-4944.  Notes: All CVE users should reference CVE-2011-4944 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2012-3410
Published: 2012-08-27
Description: Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119
References: ftp://ftp.gnu.org/pub/gnu/bash/bash-4.2-patches/bash42-033; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681278; http://secunia.com/advisories/51086
CVE: CVE-2012-3418
Published: 2012-08-27
Description: libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a PDU with the numcreds field value greater than the number of actual elements to the __pmDecodeCreds function in p_creds.c; (2) the string byte number value to the __pmDecodeNameList function in p_pmns.c; (3) the numids value to the __pmDecodeIDList function in p_pmns.c; (4) unspecified vectors to the __pmDecodeProfile function in p_profile.c; the (5) status number value or (6) string number value to the __pmDecodeNameList function in p_pmns.c; (7) certain input to the __pmDecodeResult function in p_result.c; (8) the name length field (namelen) to the DecodeNameReq function in p_pmns.c; (9) a crafted PDU_FETCH request to the __pmDecodeFetch function in p_fetch.c; (10) the namelen field in the __pmDecodeInstanceReq function in p_instance.c; (11) the buflen field to the __pmDecodeText function in p_text.c; (12) PDU_INSTANCE packets to the __pmDecodeInstance in p_instance.c; or the (13) c_numpmid or (14) v_numval fields to the __pmDecodeLogControl function in p_lcontrol.c, which triggers integer overflows, heap-based buffer overflows, and/or buffer over-reads.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html
CVE: CVE-2012-3419
Published: 2012-08-27
Description: Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html
CVE: CVE-2012-3420
Published: 2012-08-27
Description: Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon crash) via a large number of PDUs with (1) a crafted context number to the DoFetch function in pmcd/src/dofetch.c or (2) a negative type value to the __pmGetPDU function in libpcp/src/pdu.c.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html
CVE: CVE-2012-3421
Published: 2012-08-27
Description: The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service (pmcd hang) by sending individual bytes of a PDU separately, related to an "event-driven programming flaw."
CVSS Score: 5.0 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html
CVE: CVE-2012-3467
Published: 2012-08-27
Description: Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://rhn.redhat.com/errata/RHSA-2012-1277.html; http://rhn.redhat.com/errata/RHSA-2012-1279.html; http://secunia.com/advisories/50186
CVE: CVE-2012-4036
Published: 2012-08-27
Description: Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the addons directory.  NOTE: this vulnerability can be leveraged by remote attackers using CVE-2012-1216.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/84479; http://secunia.com/advisories/50153; http://www.pbboard.com/forums/t10352.html
CVE: CVE-2012-4680
Published: 2012-08-27
Description: Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ (backslash) character, allows remote attackers to read arbitrary files or list arbitrary directories via a .. (dot dot) in a URI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://ics-cert.us-cert.gov/advisories/ICSA-12-258-01; http://secunia.com/advisories/50297; http://www.foofus.net/?page_id=616
CVE: CVE-2012-4681
Published: 2012-08-28
Description: Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html; http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html; http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/
CVE: CVE-2012-3539
Published: 2012-08-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4681. Reason: This candidate is a duplicate of CVE-2012-4681. Notes: All CVE users should reference CVE-2012-4681 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2012-1635
Published: 2012-08-28
Description: The hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which allows remote attackers to bypass intended access restrictions, as demonstrated when using the XML sitemap module to obtain sensitive information about unpublished content.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://drupal.org/node/1407456; http://www.openwall.com/lists/oss-security/2012/04/07/1; https://drupal.org/node/1409268
CVE: CVE-2012-1641
Published: 2012-08-28
Description: The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote authenticated users with the administer finder permission to execute arbitrary PHP code via admin/build/finder/import.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-264
References: http://drupal.org/node/1432318; http://drupal.org/node/1432320; http://drupalcode.org/project/finder.git/commit/bc0cc82
CVE: CVE-2012-1642
Published: 2012-08-28
Description: includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce access permissions on broken links, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://drupal.org/node/1440508; http://drupalcode.org/project/linkchecker.git/commit/fef0ddf; http://secunia.com/advisories/48022
CVE: CVE-2012-1643
Published: 2012-08-28
Description: The Faster Permissions module 7.x-2.x before 7.x-1.2 for Drupal does not check the "administer permissions" permission, which allows remote attackers to modify access permissions via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://drupal.org/node/1441556; http://drupalcode.org/project/fp.git/commitdiff/39e7587; http://secunia.com/advisories/48019
CVE: CVE-2012-1644
Published: 2012-08-28
Description: The Organic Groups (OG) Vocabulary module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with certain administrator permissions to modify the vocabularies of other groups via unspecified vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://drupal.org/node/1441086; http://drupalcode.org/project/og_vocab.git/commitdiff/cd8de08; http://secunia.com/advisories/48020
CVE: CVE-2012-1645
Published: 2012-08-28
Description: The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified vectors, as demonstrated by reading settings.php.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://drupal.org/node/1441480; http://drupal.org/node/1441482; http://drupalcode.org/project/cdn.git/commitdiff/cd2a5ff
CVE: CVE-2012-1647
Published: 2012-08-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in the "stand alone PHP application for the OSM Player," as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal, allow remote attackers to inject arbitrary web script or HTML via (1) $_SERVER['HTTP_HOST'] or (2) $_SERVER['SCRIPT_NAME'] to players/osmplayer/player/OSMPlayer.php, (3) playlist parameter to players/osmplayer/player/getplaylist.php, and possibly other vectors related to $_SESSION.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupalcode.org/project/mediafront.git/commitdiff/6300750; http://drupalcode.org/project/mediafront.git/commitdiff/b3857aa; http://www.openwall.com/lists/oss-security/2012/04/07/1