CVE-2012-0694

CVE-2012-0694 affects SugarCRM Community Edition

CVE-2012-0694

SugarCRM CE = 6.3.1 contains scripts that use "unserialize" with user controlled input which allows remote attackers to execute arbitrary PHP code...

DEBIAN-CVE-2012-0046

mediawiki allows deleted text to be exposed...

CVE-2012-2945

Hadoop 1.0.3 contains a symlink vulnerability...

CVE-2012-0046

mediawiki allows deleted text to be exposed...

CVE-2012-0046

mediawiki allows deleted text to be exposed...

CVE-2012-0046

mediawiki allows deleted text to be exposed...

CVE-2012-0046

MediaWiki is affected by CVE-2012-0046 where an information-disclosure flaw allows remote attackers to view deleted text via the prop=revisions parameter. Affected versions include MediaWiki before 1.17.2 or before 1.18.1, with fixes in 1.17.2 and 1.18.1. Remediation: upgrade to 1.17.2+ or 1.18.1...

CVE-2012-1187

Technical details about CVE-2012-1187 are not publicly provided in the supplied documents; no affected versions, impact, or fixes are specified. Monitor for updates.

CVE-2012-2945

The provided documents confirm a concrete vulnerability in Hadoop 1.0.3 described as a symlink vulnerability caused by storing PID files in the shared /tmp directory by default. Public details show a symlink from /tmp/hadoop-root-tasktracker.pid pointing to /etc/passwd- (local file-system symlink...

CVE-2012-5577

Python keyring lib before 0.10 created keyring files with world-readable permissions...

DEBIAN-CVE-2012-5577

Python keyring lib before 0.10 created keyring files with world-readable permissions...

CVE-2012-5577

Python keyring lib before 0.10 created keyring files with world-readable permissions...

CVE-2012-5577

CVE-2012-5577 affects the Python keyring library prior to 0.10, where keyring files were created with world-readable permissions. This is the concrete detail available across the connected sources; no additional exploit vectors, systems, or remediation steps are specified in the provided document...

Security Bulletin: IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise Edition is affected by ASoC vulnerability (CVE-2012-5351)

Summary IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise has addressed the ASoC vulnerability. Vulnerability Details CVEID: CVE-2012-5351 DESCRIPTION: Apache Axis2 could allow a remote attacker to bypass security restrictions. An attacker could exploit this vulnerability using a SAML...

SUSE-SU-2019:1373-2 Security update for axis

This update for axis fixes the following issues: Security issue fixed: - CVE-2012-5784, CVE-2014-3596: Fixed missing connection hostname check against X.509 certificate name bsc1134598...

Photon OS 1.0: Bash PHSA-2019-1.0-0252

An update of the bash package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0252. The text itself is copyright C VMware, Inc. include"compat.inc"; if description scriptid129783;...

[ASA-201910-4] ruby-rdoc: cross-site scripting

Arch Linux Security Advisory ASA-201910-4 ========================================= Severity: Medium Date : 2019-10-02 CVE-ID : CVE-2012-6708 CVE-2015-9251 Package : ruby-rdoc Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-1041 Summary ======= The package...

EulerOS Virtualization for ARM 64 3.0.2.0 : bash (EulerOS-SA-2019-1942)

According to the version of the bash package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A heap-based buffer overflow was discovered in bash when wide characters, not supported by the current locale set in LCCTYPE...

EulerOS 2.0 SP5 : bash (EulerOS-SA-2019-1911)

According to the version of the bash package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A heap-based buffer overflow was discovered in bash when wide characters, not supported by the current locale set in LCCTYPE environment variable, are...