20289 matches found
CVE-2012-5639
LibreOffice and OpenOffice automatically open embedded content...
CVE-2012-3409
The vulnerability CVE-2012-3409 affects ecryptfs-utils: the suid helper does not restrict mounting filesystems with nosuid,nodev, enabling a possible local privilege escalation. Multiple advisories reference this issue (SUSE CVE-2012-3409; Debian security tracker; Ubuntu-related OSV entries; Fedo...
CVE-2012-2312
creationtimestamp| type| source ---|---|--- 2019-12-18 20:43:30+00:00| seen| https://t.me/cibsecurity/8755...
CVE-2012-2656
CVE-2012-2656: An XML External Entity (XXE) vulnerability exists in Restlet 1.1.10 within an endpoint using XML transport, enabling a remote attacker to obtain sensitive information. Affected component: Restlet 1.1.10 (XML transport endpoint). Root cause: XXE in the XML processing path. Documente...
CVE-2012-2312
An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets reused from the thread pool that still retains the security context from the process last used, which lets a local user obtain elevated...
CVE-2012-2312
CVE-2012-2312 affects JBoss AS 7 Community Release. The issue arises from improper security context propagation: a thread-pool-reused security context may retain the previous process’s context, enabling a local user to obtain elevated privileges. The connected documents corroborate the elevated-p...
Apple Mac OS X Security Updates (HT210788)-02
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
macOS 10.15.x < 10.15.2 / 10.14.x < 10.14.6 Security Update 2019-002 / 10.13.x < 10.13.6 Security Update 2019-007
The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6 Security Update 2019-007, 10.14.x prior to 10.14.6 Security Update 2019-002, or 10.15.x prior to 10.15.2. It is, therefore, affected by multiple vulnerabilities : - slapd in OpenLDAP before 2.4.30 allows...
Design/Logic Flaw
smokeping before 2.6.9 has XSS incomplete fix for CVE-2012-0790...
DEBIAN-CVE-2012-1577
lib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0...
CVE-2012-1577
lib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0...
CVE-2012-1577
CVE-2012-1577 affects the OpenBSD C library (lib/libc/stdlib/random.c). The issue is that the RNG returns 0 when seeded with 0, indicating a flawed seed handling/root-of-failure in random() implementation. The available records identify the affected component and the seeding behavior as the vulne...
EulerOS 2.0 SP2 : elinks (EulerOS-SA-2019-2376)
According to the version of the elinks package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.CVE-2012-6709 Note that Tenable Network Security has extracted the...
CVE-2012-2092
creationtimestamp| type| source ---|---|--- 2019-12-06 20:48:10+00:00| seen| https://t.me/cibsecurity/8555 2024-03-07 21:12:08+00:00| seen| https://t.me/ctinow/202772...
CVE-2012-2130
A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys...
CVE-2012-2148
Technical details (affected product/version, root cause, impact, or mitigations) are not publicly available in the provided documents. Monitor for updates to official advisories and vendor notices.
CVE-2012-2130
CVE-2012-2130 affects PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption issue in DH and RSA key generation, leading to a Security Bypass. Public advisories (SUSE, UBuntu, Gentoo GLSA 201310-10, Gentoo NASL) confirm the same vector and impact across multiple distributions. The root cause is...
CVE-2012-1615
CVE-2012-1615 affects Fedora’s sectool. The vulnerability is a local privilege escalation caused by an incorrect DBus file in sectool, enabling partial confidentiality/integ rity/availability impact as described in the NVD metrics. Exploitation status is not provided in the documents. The issue w...