CVE-2012-5954

CVE-2012-5954 affects IBM Tivoli Storage Manager for Space Management (TSM HSM). The issue allows a remote attacker to read or modify HSM-managed file system objects via unknown vectors in affected versions: HSM before 6.2.5.0 and 6.3.x before 6.3.1.0. IBM bulletin details remediation: upgrade to...

CVE-2012-0957

CVE-2012-0957 affects the Linux kernel prior to 3.4.16. The override_release function in kernel/sys.c can let a local user leak kernel stack memory by calling uname with the UNAME26 personality. This is a local-privilege scenario; no remote vector is described in the provided documents. Affected ...

CVE-2012-4565

CVE-2012-4565 affects the Linux kernel up to version 3.4.18 (pre-3.4.19) in tcp_illinois_info within net/ipv4/tcp_illinois.c. When net.ipv4.tcp_congestion_control illinois is enabled, local users can trigger a divide-by-zero OOPS by reading TCP stats, causing denial of service. Mitigation is to u...

CVE-2012-4444

The CVE-2012-4444 issue affects the Linux kernel prior to 2.6.36, where the ip6_frag_queue function in net/ipv6/reassembly.c can be exploited remotely to bypass certain network restrictions by sending overlapping IPv6 fragments. The vulnerability is consistently described in multiple sources (Lin...

CVE-2012-4859

CVE-2012-4859 affects IBM Tivoli Storage Manager for Space Management (TSM HSM) up to 6.2.5.0 and 6.3.x up to 6.3.1.0, allowing a local attacker to read/modify file system objects via unspecified vectors. IBM security pages describe two related vulnerabilities (CVE-2012-4859: local access; CVE-20...

CVE-2012-4508

CVE-2012-4508 is a race condition in the Linux kernel's ext4 extents handling (fs/ext4/extents.c) that, before version 3.4.16, allows a local unprivileged user to read data from a deleted file by reading an extent that isn’t properly marked uninitialized. The issue is fixed in the 3.4.16 update (...

CVE-2012-0841

libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted XML data...

CVE-2012-3482

Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to 1 cause a denial of service crash and delayed delivery of inbound mail via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or 2 obtain sensitive informati...

CVE-2012-1712

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2012-1712.

CVE-2012-0841

CVE-2012-0841 affects libxml2 up to version 2.8.0, where hash computation can be induced to collide, enabling context‑dependent attackers to trigger a denial of service via crafted XML data. The issue is repeatedly cited in multiple advisories and Nessus plugins, linking the vulnerability to the ...

CVE-2012-1712

Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space Server before 10.0 Update 7 Patch 2 has unknown impact and attack vectors...

CVE-2012-0882

CVE-2012-0882 describes a buffer overflow in yaSSL as used by MySQL 5.5.20 and possibly other versions (5.5.x before 5.5.22 and 5.1.x before 5.1.62). This could allow remote code execution via unspecified vectors; vulnerability demonstrated by VulnDisco Pack Professional 9.17. The provided descri...

CVE-2012-1699

The CVE-2012-1699 entry concerns the xfs font server (Difs) in X.Org X11R6 up to 6.6 and XFree86 before 3.3.3. The root cause is that ProcSetEventMask in difs/events.c calls SendErrToClient with a mask value instead of a pointer. This can allow local users to cause memory corruption and a crash o...

CVE-2012-1714

CVE-2012-1714 affects Oracle Hyperion Financial Management (HFM) versions 11.1.1.4 and 11.1.2.1.104, via a vulnerability in the TList 6 ActiveX control. The issue permits remote code execution through unknown vectors; no concrete exploit details or impact vector are provided beyond this, and no r...

CVE-2012-3133

CVE-2012-3133 describes a buffer overflow in the DataDirect ODBC driver, affecting Oracle Hyperion Interactive Reporting (11.1.2.1/11.1.2.2), Essbase Server (11.1.2.1/11.1.2.2), Production Reporting Server (11.1.2.1/11.1.2.2), and Integration Services Server (11.1.2.1/11.1.2.2). The root cause is...

CVE-2012-1714

Unspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11.1.1.4 and 11.1.2.1.104 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2012-5244

creationtimestamp| type| source ---|---|--- 2012-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23573...

CVE-2012-6636

creationtimestamp| type| source ---|---|--- 2012-12-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41675 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/browser/webviewaddjavascriptinterface.rb 2025-02-06...

FireFly Mediaserver 1.0.0.1359 - Null Pointer Dereference

FireFly Mediaserver 1.0.0.1359 - Null Pointer Dereference Advisory ID: HTB23129 Product: FireFly Mediaserver Vendor: FireFly Vulnerable Versions: 1.0.0.1359 and probably prior Tested Version: 1.0.0.1359 in Windows 7 SP1 Vendor Notification: November 21, 2012 Public Disclosure: December 19, 2012...

JBoss Enterprise Application Platform 安全绕过漏洞(CVE-2012-4549)

Bugtraq ID:56990 CVE ID:CVE-2012-4549 JBOSS是一个基于J2EE的开放源代码的应用服务器。 在不允许任何角色调用EJB方法时，需要拒绝所有用户的调用。当允许角色列表为空时，org.jboss.as.ejb3.security.AuthorizationInterceptor中的processInvocation方法不正确授权方法调用，允许攻击者绕过安全限制执行未授权操作。 0 JBoss Enterprise Application Platform 6 厂商解决方案 JBoss Enterprise Application Platform...