28003 matches found
Design/Logic Flaw
In Support Incident Tracker SiT! 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235...
CVE-2019-20223
In Support Incident Tracker SiT! 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235...
CVE-2012-5617
creationtimestamp| type| source ---|---|--- 2019-12-31 22:56:32+00:00| seen| https://t.me/cibsecurity/8934 2019-12-31 23:03:08+00:00| seen| https://t.me/VulnerabilityNews/11532 2024-02-27 08:16:55+00:00| seen| https://t.me/ctinow/194073...
Security feature bypass
gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it did not fixed the security issue...
CVE-2012-5663
creationtimestamp| type| source ---|---|--- 2019-12-31 00:56:34+00:00| seen| https://t.me/cibsecurity/8925 2024-03-18 11:42:11+00:00| seen| https://t.me/ctinow/210405...
CVE-2012-5474
creationtimestamp| type| source ---|---|--- 2019-12-30 22:26:24+00:00| seen| https://t.me/cibsecurity/8921 2024-03-18 11:42:09+00:00| seen| https://t.me/ctinow/210402...
CVE-2012-5645
creationtimestamp| type| source ---|---|--- 2019-12-30 22:26:22+00:00| seen| https://t.me/cibsecurity/8919 2024-03-18 11:42:10+00:00| seen| https://t.me/ctinow/210404...
CVE-2012-5663
The CVE-2012-5663 entry affects the isearch package (textproc/isearch) prior to version 1.47.01nb1. The root cause is the use of tempnam() to create temporary files in /tmp, a publicly-writable directory, leading to potential integrity concerns. Per the referenced data, the vulnerability has inte...
CVE-2012-5645
A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption...
CVE-2012-5476
Within the RHOS Essex Preview 2012.2 of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the admin password and token value...
CVE-2012-5474
The file /etc/openstack-dashboard/localsettings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release python-django-horizon package before 2012.1.1 is world readable and exposes the secret key value...
CVE-2012-5476
Within the RHOS Essex Preview 2012.2 of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the admin password and token value...
CVE-2012-5645
A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption...
CVE-2012-5645
Affects Freeciv server component prior to 2.3.4. A remote attacker can send a specially-crafted network packet, which, when processed, may exhaust memory or cause unbounded CPU usage, resulting in a denial-of-service. The issue is described across multiple sources (NVD, OSV, Debian/Ubuntu tracker...
CVE-2012-5474
Affected software : Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2012.1.1). Vulnerability : the file /etc/openstack-dashboard/local_settings is world readable, exposing the secret key value. Impact (as described) : exposure of secret key information;...
CVE-2012-5476
OpenStack RHOS Essex Preview (2012.2) dashboard package contains a vulnerability where /etc/quantum/quantum.conf is world readable, exposing the admin password and token value. Affected component: OpenStack dashboard configuration on RHOS Essex Preview 2012.2. Root cause: file permissions misconf...
CVE-2012-4980
creationtimestamp| type| source ---|---|--- 2019-12-28 00:55:19+00:00| seen| https://t.me/cibsecurity/8904 2024-03-17 15:21:47+00:00| seen| https://t.me/ctinow/209955...
CVE-2012-4980
The CVE-2012-4980 entry refers to a stack-based buffer overflow in Toshiba ConfigFree’s CFProfile.exe (CF7 file parsing). Documents specify vulnerabilities in the CF7 file format, notably the profileName and comment fields, that could allow a user-assisted attacker to run arbitrary code on Window...