28054 matches found
CVE-2012-3460
CVE-2012-3460 affects cumin; the installation process creates a PostgreSQL database user without a password. This root cause enables potential unauthorized access to the database, contributing to a critical risk profile (CVSS v3.1: CRITICAL, 9.8; CVSS v2: HIGH, 7.5). The vulnerability details ava...
CVE-2012-3543
Technical details about CVE-2012-3543 are not publicly provided in the supplied documents. Monitor for updates from vendors or vulnerability trackers for affected software, impact, and fixed versions.
CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
CVE-2012-2350
Technical details about CVE-2012-2350 are not publicly available in the provided documents; monitor for updates from vendors and security trackers.
CVE-2012-2350
pamshield before 0.9.4: Default configuration does not perform protective action...
CVE-2012-2238
CVE-2012-2238 affects trytond 2.4: ModelView.button fails to validate authorization. Root cause is lack of proper authorization checks on that component. CVSS2 base score 5.0 (I:P) and CVSS3.1 base score 7.5 (I:H) indicate partial integrity impact under a network attack with low complexity and no...
CVE-2012-2238
trytond 2.4: ModelView.button fails to validate authorization...
CVE-2012-1257
Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor...
CVE-2012-1257
CVE-2012-1257 affects Pidgin 2.10.0. The vulnerability arises because Pidgin uses DBUS for certain cleartext communication, allowing local users to obtain sensitive information via a dbus session monitor. This is a local-access issue with partial confidentiality impact per the CVE description; no...
CVE-2012-6136
CVE-2012-6136 affects the Linux tuned daemon (e.g., tuned 2.10.0) where the PID file is created with insecure permissions, enabling local users to kill arbitrary processes. Technical details across multiple advisories (SUSE, Debian/Ubuntu, Red Hat) confirm the same root cause and impact. Remediat...
CVE-2012-6135
RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process...
CVE-2012-6070
Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to interfere with security checks...
CVE-2012-6071
nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...
CVE-2012-6135
CVE-2012-6135 affects Phusion Passenger RubyGem (RubyGems passenger) versions 4.0.0 beta1/beta2. The startup routine can be abused to delete arbitrary files. Exploitation context varies by source: NVD/SUSE/GHSA imply remote access, while the RubySec advisory notes a local attacker during startup....
CVE-2012-6071
CVE-2012-6071 affects nuSOAP prior to 0.7.3-5, where hostname verification of X.509 certificates is inadequate. This is observed as improper hostname validation in nuSOAP, enabling potential Man-in-the-Middle scenarios as reported by sources citing CURLOP_SSL_VERIFYHOST misconfiguration. Document...
CVE-2012-6070
CVE-2012-6070 affects Falconpl prior to 0.9.6.9-git20120606. The root cause is a misuses of the libcurl API that may allow remote attackers to interfere with security checks. The available records do not specify the exact vulnerable component/version beyond Falconpl and the cited git tag, nor do ...
CVE-2012-0843
uzbl: Information disclosure via world-readable cookies storage file...