20289 matches found
CVE-2012-5645
Affects Freeciv server component prior to 2.3.4. A remote attacker can send a specially-crafted network packet, which, when processed, may exhaust memory or cause unbounded CPU usage, resulting in a denial-of-service. The issue is described across multiple sources (NVD, OSV, Debian/Ubuntu tracker...
CVE-2012-5474
Affected software : Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2012.1.1). Vulnerability : the file /etc/openstack-dashboard/local_settings is world readable, exposing the secret key value. Impact (as described) : exposure of secret key information;...
CVE-2012-5476
OpenStack RHOS Essex Preview (2012.2) dashboard package contains a vulnerability where /etc/quantum/quantum.conf is world readable, exposing the admin password and token value. Affected component: OpenStack dashboard configuration on RHOS Essex Preview 2012.2. Root cause: file permissions misconf...
CVE-2012-4980
creationtimestamp| type| source ---|---|--- 2019-12-28 00:55:19+00:00| seen| https://t.me/cibsecurity/8904 2024-03-17 15:21:47+00:00| seen| https://t.me/ctinow/209955...
CVE-2012-4980
The CVE-2012-4980 entry refers to a stack-based buffer overflow in Toshiba ConfigFree’s CFProfile.exe (CF7 file parsing). Documents specify vulnerabilities in the CF7 file format, notably the profileName and comment fields, that could allow a user-assisted attacker to run arbitrary code on Window...
DEBIAN-CVE-2012-3462
A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the user's SELinux user context...
CVE-2012-4420
CVE-2012-4420 affects the JVM implementation of Java SE 7 provided by OpenJDK 7, where integer arrays could be incorrectly initialized after memory allocation, allowing a remote attacker to disclose potentially sensitive information. The connected sources confirm this information disclosure in th...
CVE-2012-2736
In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network...
CVE-2012-3462
SSSD 1.9.0 contains a logic flaw in its access-provider path where HBAC rule results are ignored if the access-provider also sets the user’s SELinux context. Affected component: SSSD HBAC/access-provider integration. Impact described: incorrect HBAC evaluation under scenarios where SELinux user c...
CVE-2012-2736
CVE-2012-2736 affects NetworkManager 0.9.2.0. When a new wireless network is created with WPA/WPA2 security in AdHoc mode, the process can create an open/insecure network rather than a secure one. This has been observed in multiple feeds (NVD, OSV, SUSE, Debian trackers, etc.). The CVSS metrics i...
CVE-2012-6094
creationtimestamp| type| source ---|---|--- 2019-12-20 18:43:04+00:00| seen| https://t.me/cibsecurity/8808 2024-03-16 09:22:05+00:00| seen| https://t.me/ctinow/209428...
CVE-2012-6111
gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...
CVE-2012-6111
gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...
CVE-2012-6111
CVE-2012-6111 affects gnome-keyring: when gnome_keyring_lock_all_sync is used, stored secrets are not discarded. Public metrics indicate confidentiality impact (C: partial per CVSS2; C:H per CVSS3). No exploitation details are provided in the connected documents, and remediation details are not s...
CVE-2012-6111
gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...
CVE-2012-5639
LibreOffice and OpenOffice automatically open embedded content...
CVE-2012-5639
LibreOffice and OpenOffice automatically open embedded content...
CVE-2012-6094
CVE-2012-6094 affects the Common UNIX Printing System (CUPS). The issue is that the option to listen on localhost:631 is not honored, which could allow unauthorized access to the system’s web-based admin interface. Publicly documented mitigations include patches in cups updates (e.g., openSUSE cu...
CVE-2012-5639
CVE-2012-5639 affects OpenOffice/LibreOffice where embedded content is opened automatically without a warning. Public references in Nessus/NCSC suggest OpenOffice has received fixes in OpenOffice 4.1.15, addressing this and related CVEs (e.g., CVE-2023-47804, CVE-2023-1183, CVE-2022-43680). The p...