28048 matches found
CVE-2012-5474
Affected software : Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2012.1.1). Vulnerability : the file /etc/openstack-dashboard/local_settings is world readable, exposing the secret key value. Impact (as described) : exposure of secret key information;...
CVE-2012-5476
OpenStack RHOS Essex Preview (2012.2) dashboard package contains a vulnerability where /etc/quantum/quantum.conf is world readable, exposing the admin password and token value. Affected component: OpenStack dashboard configuration on RHOS Essex Preview 2012.2. Root cause: file permissions misconf...
CVE-2012-4980
creationtimestamp| type| source ---|---|--- 2019-12-28 00:55:19+00:00| seen| https://t.me/cibsecurity/8904 2024-03-17 15:21:47+00:00| seen| https://t.me/ctinow/209955...
CVE-2012-4980
The CVE-2012-4980 entry refers to a stack-based buffer overflow in Toshiba ConfigFree’s CFProfile.exe (CF7 file parsing). Documents specify vulnerabilities in the CF7 file format, notably the profileName and comment fields, that could allow a user-assisted attacker to run arbitrary code on Window...
CVE-2013-4664
SPBAS Business Automation Software 2012 has XSS...
Cross site scripting
SPBAS Business Automation Software 2012 has XSS...
Cross site request forgery (csrf)
SPBAS Business Automation Software 2012 has CSRF...
CVE-2013-4664
The connected records (RH:CVE-2013-4664, NVD, PRION, Red Hat, CVELIST, PRION) consistently identify SPBAS Business Automation Software 2012 as vulnerable to XSS (CVE-2013-4664). The initial description states the same. Details beyond that are not provided in these documents (no explicit impact, a...
CVE-2013-4664
SPBAS Business Automation Software 2012 has XSS...
CVE-2012-4420
creationtimestamp| type| source ---|---|--- 2019-12-27 00:55:10+00:00| seen| https://t.me/cibsecurity/8863 2024-03-17 10:46:45+00:00| seen| https://t.me/ctinow/209856...
DEBIAN-CVE-2012-3462
A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the user's SELinux user context...
CVE-2012-4420
CVE-2012-4420 affects the JVM implementation of Java SE 7 provided by OpenJDK 7, where integer arrays could be incorrectly initialized after memory allocation, allowing a remote attacker to disclose potentially sensitive information. The connected sources confirm this information disclosure in th...
CVE-2012-2736
In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network...
CVE-2012-3462
SSSD 1.9.0 contains a logic flaw in its access-provider path where HBAC rule results are ignored if the access-provider also sets the user’s SELinux context. Affected component: SSSD HBAC/access-provider integration. Impact described: incorrect HBAC evaluation under scenarios where SELinux user c...
CVE-2012-2736
CVE-2012-2736 affects NetworkManager 0.9.2.0. When a new wireless network is created with WPA/WPA2 security in AdHoc mode, the process can create an open/insecure network rather than a secure one. This has been observed in multiple feeds (NVD, OSV, SUSE, Debian trackers, etc.). The CVSS metrics i...
CVE-2012-6094
creationtimestamp| type| source ---|---|--- 2019-12-20 18:43:04+00:00| seen| https://t.me/cibsecurity/8808 2024-03-16 09:22:05+00:00| seen| https://t.me/ctinow/209428...
CVE-2012-6111
creationtimestamp| type| source ---|---|--- 2019-12-20 18:43:03+00:00| seen| https://t.me/cibsecurity/8807...
CVE-2012-5639
creationtimestamp| type| source ---|---|--- 2019-12-20 16:43:20+00:00| seen| https://t.me/cibsecurity/8798 2024-01-09 15:00:07+00:00| seen| https://t.me/truesecator/5270...