deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-0087
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0101 and CVE-2012-0102.
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html; http://osvdb.org/78377
CVE: CVE-2012-0088
Published: 2012-01-18
Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Benefits Administration.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/78397; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.securityfocus.com/bid/51480
CVE: CVE-2012-0089
Published: 2012-01-18
Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/72485; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2012-0091
Published: 2012-01-18
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52.05 allows remote authenticated users to affect integrity and availability via unknown vectors related to Upgrade Change Assistance.
CVSS Score: 2.7 (LOW)
References: http://osvdb.org/78402; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/72486
CVE: CVE-2012-0094
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows remote attackers to affect availability, related to TCP/IP.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/78420; http://secunia.com/advisories/48308; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2012-0096
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Network.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/78422; http://secunia.com/advisories/48308; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2012-0097
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect confidentiality via unknown vectors related to ksh93 Shell.
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/78426; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/72509
CVE: CVE-2012-0098
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2011-0813.
CVSS Score: 1.9 (LOW)
References: http://osvdb.org/78427; http://secunia.com/advisories/48308; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2012-0099
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to sshd.
CVSS Score: 2.6 (LOW)
References: http://osvdb.org/78425; http://secunia.com/advisories/48308; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2012-0100
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kerberos.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/78421; http://secunia.com/advisories/48308; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2012-0101
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2012-0102.
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html; http://osvdb.org/78378
CVE: CVE-2012-0102
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2012-0101.
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html; http://osvdb.org/78379
CVE: CVE-2012-0103
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to Kernel.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/78423; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/72499
CVE: CVE-2012-0104
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect availability via unknown vectors related to Web Container.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/78417; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/72497
CVE: CVE-2012-0105
Published: 2012-01-18
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Guest Additions.
CVSS Score: 3.7 (LOW)
References: http://lists.opensuse.org/opensuse-updates/2012-10/msg00041.html; http://osvdb.org/78442; http://secunia.com/advisories/48755
CVE: CVE-2012-0109
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect confidentiality and availability, related to TCP/IP.
CVSS Score: 3.6 (LOW)
References: http://osvdb.org/78424; http://secunia.com/advisories/48308; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2012-0110
Published: 2012-01-18
Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK.
CVSS Score: 4.4 (MEDIUM)
References: http://www-01.ibm.com/support/docview.wss?uid=swg21660640; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.securityfocus.com/bid/51452
CVE: CVE-2012-0111
Published: 2012-01-18
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality and integrity via unknown vectors related to Shared Folders.
CVSS Score: 3.6 (LOW)
References: http://lists.opensuse.org/opensuse-updates/2012-10/msg00041.html; http://secunia.com/advisories/48755; http://secunia.com/advisories/50897
CVE: CVE-2012-0112
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.
CVSS Score: 3.5 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://secunia.com/advisories/48250; http://secunia.com/advisories/53372
CVE: CVE-2012-0113
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0118.
CVSS Score: 5.5 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://secunia.com/advisories/48250; http://secunia.com/advisories/53372
CVE: CVE-2012-0114
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows local users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 3.0 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html; http://secunia.com/advisories/48250
CVE: CVE-2012-0115
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://secunia.com/advisories/48250; http://secunia.com/advisories/53372
CVE: CVE-2012-0116
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://secunia.com/advisories/48250; http://secunia.com/advisories/53372
CVE: CVE-2012-0117
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2012-0118
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0113.
CVSS Score: 4.9 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://secunia.com/advisories/48250; http://secunia.com/advisories/53372
CVE: CVE-2012-0119
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://secunia.com/advisories/48250; http://secunia.com/advisories/53372
CVE: CVE-2012-0120
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0485, and CVE-2012-0492.
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://secunia.com/advisories/48250; http://secunia.com/advisories/53372
CVE: CVE-2012-0484
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html; http://osvdb.org/78372
CVE: CVE-2012-0485
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0492.
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://osvdb.org/78383; http://secunia.com/advisories/48250
CVE: CVE-2012-0486
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/78384; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2012-0487
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/78385; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2012-0488
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/78386; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2012-0489
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/78387; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2012-0490
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect availability via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html; http://osvdb.org/78388
CVE: CVE-2012-0491
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0493, and CVE-2012-0495.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/78389; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2012-0492
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0485.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://osvdb.org/78393; http://secunia.com/advisories/48250
CVE: CVE-2012-0493
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, and CVE-2012-0495.
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/78394; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2012-0494
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows local users to affect availability via unknown vectors.
CVSS Score: 1.7 (LOW)
References: http://osvdb.org/78375; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2012-0495
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, and CVE-2012-0493.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/78390; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2012-0496
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/78371; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2011-3375
Published: 2012-01-19
Description: Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://tomcat.apache.org/security-6.html; http://tomcat.apache.org/security-7.html; http://www.debian.org/security/2012/dsa-2401
CVE: CVE-2012-0022
Published: 2012-01-19
Description: Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0112.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7248&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8746&w=2
CVE: CVE-2011-1376
Published: 2012-01-19
Description: iscdeploy in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.43, 7.0 before 7.0.0.21, and 8.0 before 8.0.0.2 on the IBM i platform sets weak permissions under systemapps/isclite.ear/ and bin/client_ffdc/, which allows local users to read or modify files via standard filesystem operations.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg21569205; http://www-01.ibm.com/support/docview.wss?uid=swg24031675; http://www.ibm.com/support/docview.wss?uid=swg1PM49712
CVE: CVE-2011-4142
Published: 2012-01-19
Description: The Web Search feature in EMC SourceOne Email Management 6.5 before 6.5.2.4033, 6.6 before 6.6.1.2194, and 6.7 before 6.7.2.2033 places cleartext credentials in log files, which allows local users to obtain sensitive information by reading these files.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://www.securityfocus.com/archive/1/521290; http://www.securityfocus.com/archive/1/521290
CVE: CVE-2011-4053
Published: 2012-01-19
Description: Untrusted search path vulnerability in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) before 9.0.0.11291 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVSS Score: 9.3 (HIGH)
References: http://www.us-cert.gov/control_systems/pdf/ICSA-11-353-01.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-11-353-01.pdf
CVE: CVE-2011-4659
Published: 2012-01-19
Description: Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than CVE-2011-2555.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120118-te; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120118-te
CVE: CVE-2011-4873
Published: 2012-01-19
Description: Unspecified vulnerability in the server in Certec EDV atvise before 2.1 allows remote attackers to cause a denial of service (daemon crash) via crafted requests to TCP port 4840.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/atvise_1-adv.txt; http://secunia.com/advisories/47638; http://www.securityfocus.com/bid/51553
CVE: CVE-2012-0035
Published: 2012-01-19
Description: Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
CVSS Score: 9.3 (HIGH)
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072285.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072288.html; http://lists.gnu.org/archive/html/emacs-devel/2012-01/msg00387.html
CVE: CVE-2012-0268
Published: 2012-01-19
Description: Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-189
References: http://secunia.com/advisories/47041; http://secunia.com/advisories/47041
CVE: CVE-2012-0329
Published: 2012-01-19
Description: Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878.
CVSS Score: 9.0 (HIGH)
CWE: CWE-94
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120118-dmm; http://www.securitytracker.com/id?1026541; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120118-dmm
CVE: CVE-2007-6744
Published: 2012-01-19
Description: Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an incorrect interaction between InstallShield and Signcode.exe.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Installation-InstallShield-InstallShield2008Premier-Public-ProductInfo-IS2008PremProReleaseNotes2pdf&sliceId=pdfPage_42; http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Installation-InstallShield-InstallShield2008Premier-Public-ProductInfo-IS2008PremProReleaseNotes2pdf&sliceId=pdfPage_42