28619 matches found
CVE-2012-2350
pamshield before 0.9.4: Default configuration does not perform protective action...
CVE-2012-2238
CVE-2012-2238 affects trytond 2.4: ModelView.button fails to validate authorization. Root cause is lack of proper authorization checks on that component. CVSS2 base score 5.0 (I:P) and CVSS3.1 base score 7.5 (I:H) indicate partial integrity impact under a network attack with low complexity and no...
CVE-2012-2238
trytond 2.4: ModelView.button fails to validate authorization...
CVE-2012-1257
Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor...
CVE-2012-1257
CVE-2012-1257 affects Pidgin 2.10.0. The vulnerability arises because Pidgin uses DBUS for certain cleartext communication, allowing local users to obtain sensitive information via a dbus session monitor. This is a local-access issue with partial confidentiality impact per the CVE description; no...
CVE-2012-6136
CVE-2012-6136 affects the Linux tuned daemon (e.g., tuned 2.10.0) where the PID file is created with insecure permissions, enabling local users to kill arbitrary processes. Technical details across multiple advisories (SUSE, Debian/Ubuntu, Red Hat) confirm the same root cause and impact. Remediat...
CVE-2012-6071
nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...
CVE-2012-6135
RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process...
CVE-2012-6070
Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to interfere with security checks...
CVE-2012-6135
CVE-2012-6135 affects Phusion Passenger RubyGem (RubyGems passenger) versions 4.0.0 beta1/beta2. The startup routine can be abused to delete arbitrary files. Exploitation context varies by source: NVD/SUSE/GHSA imply remote access, while the RubySec advisory notes a local attacker during startup....
CVE-2012-6071
CVE-2012-6071 affects nuSOAP prior to 0.7.3-5, where hostname verification of X.509 certificates is inadequate. This is observed as improper hostname validation in nuSOAP, enabling potential Man-in-the-Middle scenarios as reported by sources citing CURLOP_SSL_VERIFYHOST misconfiguration. Document...
CVE-2012-6070
CVE-2012-6070 affects Falconpl prior to 0.9.6.9-git20120606. The root cause is a misuses of the libcurl API that may allow remote attackers to interfere with security checks. The available records do not specify the exact vulnerable component/version beyond Falconpl and the cited git tag, nor do ...
CVE-2012-0824
gnusound 0.7.5 has format string issue...
CVE-2012-0843
uzbl: Information disclosure via world-readable cookies storage file...
CVE-2012-0843
uzbl: Information disclosure via world-readable cookies storage file...
CVE-2012-0824
gnusound 0.7.5 has format string issue...
CVE-2012-0843
CVE-2012-0843 affects the uzbl browser, where information disclosure arises from a world-readable cookies storage file. Root cause is exposure of cookies data stored in a world-readable file, enabling partial confidentiality impact (C: HIGH in CVSS3.1) with local, low-complexity access and no aut...
CVE-2012-0824
gnusound 0.7.5 has format string issue...
CVE-2012-0824
CVE-2012-0824 affects gnusound 0.7.5 with a format string issue (root cause: improper format string handling). Public data in the initial doc shows CVSS metrics: CVSS v2 base 7.5 (HIGH) and CVSS v3.1 base 9.8 (CRITICAL). No explicit exploitation details or affected versions beyond 0.7.5 are provi...