CVE-2012-5582

CVE-2012-5582 concerns opendnssec’s eppclient utility, which misuses the libcurl API. The Red Hat entry documents the root cause as improper use of libcurl, enabling an attacker to bypass intended security mechanisms. Public sources in the connected set describe the flaw and its potential to unde...

CVE-2012-5582

opendnssec misuses libcurl API...

CVE-2012-5527

CVE-2012-5527 affects Claws Mail vCalendar plugin; the provided data describe credentials being exposed on the plugin’s interface. No explicit root-cause details, affected versions, exploit information, or official fixes are included in the connected documents. NVD metrics show a low (CVSSv2 base...

CVE-2012-5527

Claws Mail vCalendar plugin: credentials exposed on interface...

CVE-2012-5521

CVE-2012-5521 affects quagga’s ospf6d daemon (version 0.99.21) with a DoS flaw in the way routes are removed. The connected documents consistently identify ospf6d as the affected component and describe a DoS impact; the materials do not provide a patch/version remediation details or exploit speci...

CVE-2012-5578

Python keyring has insecure permissions on new databases allowing world-readable files to be created...

CVE-2012-5535

CVE-2012-5535 concerns gnome-system-log polkit policy that allows reading arbitrary files on the system. The root cause is a polkit policy mistake that grants read access beyond intended scope. Impact: confidentiality is potentially HIGH (per CVSS-3.1), with non-trivial access possible without us...

CVE-2012-5535

gnome-system-log polkit policy allows arbitrary files on the system to be read...

CVE-2012-5535

gnome-system-log polkit policy allows arbitrary files on the system to be read...

CVE-2012-5518

CVE-2012-5518 concerns Red Hat VDSM: certificate generation during node creation allows the daemon to start and serve requests from anyone with a matching key/certificate. The NVD entry lists a CVSS base score of 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N; 3.1: CVSS:3.1 base 7.5, HIGH impact on integrity) a...

CVE-2012-5578

Python keyring has insecure permissions on new databases allowing world-readable files to be created...

CVE-2012-5578

CVE-2012-5578 affects the Python keyring library. The vulnerability arises from insecure permissions on newly created keyring databases, which can allow world-readable files to be created. Underlying impact is confidential information exposure (partial confidentiality) if such files are accessibl...

CVE-2012-6079

W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys...

CVE-2012-6079

CVE-2012-6079 affects the WordPress plugin W3 Total Cache prior to version 0.9.2.5. The described issue allows an attacker to retrieve sensitive cached database information by guessing or accessing hash keys, effectively disclosing data from the cache layer remotely. This vulnerability is documen...

CVE-2012-6078

W3 Total Cache (WordPress plugin) before version 0.9.2.5 generates hash keys insecurely, enabling remote attackers to predict hash values. Affected: W3 Total Cache plugin (WordPress). Root cause: insecure hash key generation. Impact: information exposure via predictable hashes. Remediation: upgra...

CVE-2012-6077

The CVE-2012-6077 issue affects the WordPress W3 Total Cache plugin (versions before 0.9.2.5). The root cause is insecure storage of database cache files, enabling remote attackers to retrieve password hash information. Documents indicate exposure of usernames and password hashes via the plugin’s...

CVE-2012-0812

PostfixAdmin 2.3.4 has multiple XSS vulnerabilities...

CVE-2012-0877

Technical details about CVE-2012-0877 are not provided in the connected documents. Public information in the initial description is limited to the vulnerability name and general impact. Monitor for updates.

CVE-2012-0812

PostfixAdmin 2.3.4 is affected by multiple XSS vulnerabilities due to insufficient input validation in the web interface. Impact stated as client-side code execution possibilities; exploitation details are not provided in the supplied documents. A remediation exists: upgrade to PostfixAdmin 2.3.5...

CVE-2012-3407

CVE-2012-3407 concerns the open-source utility plow (a command-line playlist generator). Connected sources indicate a local buffer overflow vulnerability in plow. The CNVD entry explains the root cause as memory operations performed without proper data boundary validation, leading to reads/writes...