CVE-2012-5631

ipa 3.0 does not properly check server identity before sending credential containing cookies...

CVE-2012-5631

CVE-2012-5631 affects IPA 3.0 where the client fails to properly verify the server identity before sending a credential-containing cookie. Root cause is improper server identity checking on the client side, enabling potential exposure or manipulation of authentication cookies. The impact, as refl...

CVE-2012-5630

CVE-2012-5630 affects libuser versions 0.56 and 0.57 and describes a TOCTOU race condition during copying and removing directory trees. The vulnerability is indexed as a local issue with potential partial integrity/availability impact per CVSS data (local access, medium to high impact in some met...

CVE-2012-5617

gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation...

CVE-2012-5617

Technical details about CVE-2012-5617, including affected products, root cause, and remediation, are not provided in the supplied documents. Monitor updates from vendors and security advisories for confirmed impact and fixes.

CVE-2012-5582

opendnssec misuses libcurl API...

CVE-2012-5582

CVE-2012-5582 concerns opendnssec’s eppclient utility, which misuses the libcurl API. The Red Hat entry documents the root cause as improper use of libcurl, enabling an attacker to bypass intended security mechanisms. Public sources in the connected set describe the flaw and its potential to unde...

CVE-2012-5527

CVE-2012-5527 affects Claws Mail vCalendar plugin; the provided data describe credentials being exposed on the plugin’s interface. No explicit root-cause details, affected versions, exploit information, or official fixes are included in the connected documents. NVD metrics show a low (CVSSv2 base...

CVE-2012-5527

Claws Mail vCalendar plugin: credentials exposed on interface...

CVE-2012-5521

CVE-2012-5521 affects quagga’s ospf6d daemon (version 0.99.21) with a DoS flaw in the way routes are removed. The connected documents consistently identify ospf6d as the affected component and describe a DoS impact; the materials do not provide a patch/version remediation details or exploit speci...

CVE-2012-5578

Python keyring has insecure permissions on new databases allowing world-readable files to be created...

CVE-2012-5535

gnome-system-log polkit policy allows arbitrary files on the system to be read...

CVE-2012-5535

gnome-system-log polkit policy allows arbitrary files on the system to be read...

CVE-2012-5535

CVE-2012-5535 concerns gnome-system-log polkit policy that allows reading arbitrary files on the system. The root cause is a polkit policy mistake that grants read access beyond intended scope. Impact: confidentiality is potentially HIGH (per CVSS-3.1), with non-trivial access possible without us...

CVE-2012-5518

CVE-2012-5518 concerns Red Hat VDSM: certificate generation during node creation allows the daemon to start and serve requests from anyone with a matching key/certificate. The NVD entry lists a CVSS base score of 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N; 3.1: CVSS:3.1 base 7.5, HIGH impact on integrity) a...

CVE-2012-5578

CVE-2012-5578 affects the Python keyring library. The vulnerability arises from insecure permissions on newly created keyring databases, which can allow world-readable files to be created. Underlying impact is confidential information exposure (partial confidentiality) if such files are accessibl...

CVE-2012-5578

Python keyring has insecure permissions on new databases allowing world-readable files to be created...

CVE-2012-6079

W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys...

CVE-2012-6079

CVE-2012-6079 affects the WordPress plugin W3 Total Cache prior to version 0.9.2.5. The described issue allows an attacker to retrieve sensitive cached database information by guessing or accessing hash keys, effectively disclosing data from the cache layer remotely. This vulnerability is documen...

CVE-2012-6078

W3 Total Cache (WordPress plugin) before version 0.9.2.5 generates hash keys insecurely, enabling remote attackers to predict hash values. Affected: W3 Total Cache plugin (WordPress). Root cause: insecure hash key generation. Impact: information exposure via predictable hashes. Remediation: upgra...