rainbutterfly/cve_corpus huggingface dataset:
CVE-2012-1086 
Cross-site scripting (XSS) vulnerability in the UrlTool (aeurltool) extension 0.1.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-14T17:00:00.000Z
CVE-2012-1087 
Cross-site scripting (XSS) vulnerability in the Post data records to facebook (bc_post2facebook) extension before 0.2.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-14T17:00:00.000Z
CVE-2012-1088 
iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by (1) configure or (2) examples/dhcp-client-script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-15T11:00:00.000Z
CVE-2012-1089 
Directory traversal vulnerability in Apache Wicket 1.4.x before 1.4.20 and 1.5.x before 1.5.5 allows remote attackers to read arbitrary web-application files via a relative pathname in a URL for a Wicket resource that corresponds to a null package.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-23T18:00:00.000Z
CVE-2012-1090 
The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-17T10:00:00.000Z
CVE-2012-1093 
The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation during package installation.
Problem types: description: script x11-common creates directories in insecure manner
Affected products: vendor: Debian
product: x11-common
Published: 2020-02-21T18:05:01.000Z
CVE-2012-1094 
JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed.
Problem types: description: Other
Affected products: vendor: n/a
product: JBoss AS 7
Published: 2020-03-10T16:19:11.000Z
CVE-2012-1095 
osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a terminal emulator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-06T16:00:00.000Z
CVE-2012-1096 
NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.
Problem types: description: Other
Affected products: vendor: GNOME
product: NetworkManager
Published: 2020-03-10T16:36:31.000Z
CVE-2012-1097 
The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a (1) PTRACE_GETREGSET or (2) PTRACE_SETREGSET ptrace call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-17T10:00:00.000Z
CVE-2012-1098 
Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object that is manipulated through certain methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-13T10:00:00.000Z
CVE-2012-1099 
Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving certain generation of OPTION elements within SELECT elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-13T10:00:00.000Z
CVE-2012-1100 
Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-14T15:00:00.000Z
CVE-2012-1101 
systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedure).
Problem types: description: Other
Affected products: vendor: systemd
product: systemd
Published: 2020-03-11T14:58:57.000Z
CVE-2012-1102 
It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.
Problem types: cwe_id: CWE-611
description: CWE-611
Affected products: vendor: n/a
product: perl-xml-atom
Published: 2021-07-09T10:42:36.000Z
CVE-2012-1103 
emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary files via crafted MML tags, which are not properly quoted in an email reply cna cause the files to be attached to the message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-25T23:00:00.000Z
CVE-2012-1104 
A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed.
Problem types: description: Improper management of service proxying
Affected products: vendor: jasig project
product: phpCAS
Published: 2019-12-05T17:49:19.000Z
CVE-2012-1105 
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner.
Problem types: description: Debug log and proxy configuration session data stored in /tmp without proper protection
Affected products: vendor: Jasig Project
product: php-pear-CAS
Published: 2019-12-05T18:26:36.000Z
CVE-2012-1106 
The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-03T16:00:00.000Z
CVE-2012-1107 
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-06T18:00:00.000Z
CVE-2012-1108 
The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-06T18:00:00.000Z
CVE-2012-1109 
mwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic functions
Problem types: description: denial of service when parsing #iferror magic functions
Affected products: vendor: Python
product: mwlib
Published: 2019-11-12T14:32:10.000Z
CVE-2012-1110 
Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user, (2) email, (3) email2, (4) f17_zip, or (5) agree parameter to join.php; (6) PATH_INFO, (7) st, (8) f17_city, (9) f17_country, (10) f17_state, (11) f17_zip, (12) f19, (13) wphoto, (14) search, or (15) v parameter to search.php; (16) PATH_INFO or (17) st parameter to photo_search.php; or (18) return parameter to photo_view.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-06T18:00:00.000Z
CVE-2012-1111 
lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-27T20:00:00.000Z
CVE-2012-1112 
Directory traversal vulnerability in Open-Realty CMS 2.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the select_users_template parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-06T18:00:00.000Z
CVE-2012-1113 
Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-22T18:00:00.000Z
CVE-2012-1114 
A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_id action. and the filteruid parameter to list.php.
Problem types: description: UNKNOWN_TYPE
Affected products: vendor: ldap-account-manager
product: LDAP Account Manager (LAM)
Published: 2019-12-05T20:03:52.000Z
CVE-2012-1115 
A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php.
Problem types: description: XSS flaws via 'export', 'add_value_form' and 'dn' variables
Affected products: vendor: ldap-account-manager
product: LDAP Account Manager (LAM) Pro
Published: 2019-12-05T20:20:25.000Z
CVE-2012-1116 
SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-26T00:00:00.000Z
CVE-2012-1117 
Cross-site scripting (XSS) vulnerability in Joomla! 2.5.0 and 2.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-26T00:00:00.000Z
CVE-2012-1118 
The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly restrict access when the private_bug_view_threshold is set to an array, which allows remote attackers to bypass intended restrictions and perform certain operations on private bug reports.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-29T19:00:00.000Z
CVE-2012-1119 
MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-29T19:00:00.000Z
CVE-2012-1120 
The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete and delete_bug_threshold permissions, which allows remote authenticated users with read and write SOAP API privileges to delete arbitrary bug reports and bug notes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-29T19:00:00.000Z
CVE-2012-1121 
MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-29T19:00:00.000Z
CVE-2012-1122 
bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permission of the receiving project when moving a bug report, which allows remote authenticated users with the report_bug_threshold and move_bug_threshold privileges for a project to bypass intended access restrictions and move bug reports to a different project.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-29T19:00:00.000Z
CVE-2012-1123 
The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-29T19:00:00.000Z
CVE-2012-1124 
SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the search_terms parameter.
Problem types: description: SQL Injection
Affected products: vendor: phxEventManager
product: phxEventManager
Published: 2020-02-11T20:00:59.000Z
CVE-2012-1125 
Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin before 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the directory specified by the folder parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-08T17:00:00.000Z
CVE-2012-1126 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a BDF font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1127 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1128 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1129 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted SFNT string in a Type 42 font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1130 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a PCF font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1131 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors related to the cell table of a font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1132 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1133 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1134 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted private-dictionary data in a Type 1 font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1135 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the NPUSHB and NPUSHW instructions in a TrueType font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1136 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODING field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1137 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1138 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the MIRP instruction in a TrueType font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1139 
Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1140 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1141 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted ASCII string in a BDF font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1142 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph-outline data in a font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1143 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1144 
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-25T10:00:00.000Z
CVE-2012-1145 
spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the NULL organization when mod_wsgi is used, which allows remote attackers to cause a denial of service (/var partition disk consumption and failed updates) via a large number of package uploads.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-16T00:00:00.000Z
CVE-2012-1146 
The mem_cgroup_usage_unregister_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events that are attached to the same eventfd, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by registering memory threshold events.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-17T10:00:00.000Z
CVE-2012-1147 
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-03T19:00:00.000Z
CVE-2012-1148 
Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-03T19:00:00.000Z
CVE-2012-1149 
Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-21T15:00:00.000Z
CVE-2012-1150 
Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-05T21:00:00.000Z