CVE-2012-2086

CVE-2012-2086: A SQL injection vulnerability exists in Gajim’s get_last_conversation_lines (common/logger.py) prior to 0.15, allowing remote attackers to execute arbitrary SQL commands through the jig parameter. This is documented across multiple sources (OSV/OSVDB/NVD mirrors and Gentoo GLSA ref...

CVE-2012-4601

CVE-2012-4601 affects Nicola Asuni TCExam before 11.3.009. The vulnerability is an SQL injection caused by improper sanitization of input in two parameters: the POST parameter user_groups[] to admin/code/tce_edit_test.php and the POST parameter subject_id to admin/code/tce_show_all_questions.php....

CVE-2012-6031

The dotmemget function in the Transcendent Memory TMEM in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service CPU hang and host crash via unspecified vectors related to a spinlock being held in the "badcopy error path." NOTE: this issue was originally published as part o...

CVE-2012-6033

Technical details for CVE-2012-6033 are not provided in the connected documents. The initial description notes a privilege check flaw in Xen TMEM, but no specifics on affected versions, impact, or fixes are available here. Monitor for updates.

CVE-2012-6034

The 1 tmemcsavegetnextpage and 2 tmemcsavegetnextinv functions and the 3 TMEMCSAVEGETPOOLUUID sub-operation in the Transcendent Memory TMEM in Xen 4.0, 4.1, and 4.2 "do not check incoming guest output buffer pointers," which allows local guest OS users to cause a denial of service memory corrupti...

CVE-2012-2377

CVE-2012-2377 affects: JBoss Enterprise Portal Platform <5.2.2, JBoss SOA Platform <5.3.0, and BRMS Platform

CVE-2012-3496

Technical details (affected product/version, root cause, impact, exploit info, or fixes) for CVE-2012-3496 are not present in the connected documents. Monitor for updates from sources referencing this CVE.

CVE-2012-3498

CVE-2012-3498 affects Xen 4.1/4.2 and Citrix XenServer 6.0.2 and earlier. The vulnerability (PHYSDEVOP_map_pirq index) arises from a missing range check on map->index, enabling a local HVM guest to crash the host and potentially read hypervisor/guest memory. Impact per sources: Denial of Servi...

CVE-2012-4602

TCExam (Nicola Asuni) before 11.3.009 is affected by XSS in admin/code/tce_select_users_popup.php, via unsanitized inputs in the cid and uids GET parameters, enabling arbitrary script/HTML in admin sessions. Root cause: lack of input sanitization. Exploitation details are described in linked advi...

CVE-2012-6031

Technical details about CVE-2012-6031 are not publicly available in the provided Connected documents. The Xen TMEM denial-of-service issue, including affected versions and exact vectors, cannot be confirmed here. Monitor for updates and new disclosures.

CVE-2012-6030

CVE-2012-6030 affects Xen’s Transcendent Memory (TMEM) do_tmem_op. Root cause: broken locking checks in an error-path, enabling local guest OS users to cause a host crash and potentially other unspecified impacts. Affected: Xen 4.0, 4.1, 4.2. Impact described as denial of service (host crash) wit...

CVE-2012-4411

CVE-2012-4411 affects the Xen hypervisor graphical console. The vulnerability allows a local OS guest administrator to access sensitive host resource information through the qemu monitor. It concerns Xen releases 4.0, 4.1 and 4.2, and is noted as potentially a duplicate of CVE-2007-0998. The issu...

CVE-2012-6032

Technical details for CVE-2012-6032 are not present in the provided connected documents. Public information about affected components, root cause, impact or fixes is not available here; monitor for updates.

CVE-2012-3515

CVE-2012-3515 affects QEMU (as used in Xen 4.0/4.1) where emulating certain devices with a virtual console backend lets local guest OS users gain privileges via a crafted escape VT100 sequence that overwrites a device model’s address space. Connected documents confirm this CVE is included in mult...

CVE-2012-0818

RESTEasy vulnerable to XML External Entity (XXE) injection in DOM/XML processing prior to version 2.3.1, allowing remote attackers to read arbitrary files via an external entity reference. Root cause is improper handling of external entities in RESTEasy’s XML/DOM/JAXB processing (notably the JAXB...

CVE-2012-3431

The vulnerability CVE-2012-3431 affects the Teiid JDBC socket used by JBoss Enterprise Data Services Platform before 5.3.0, where login messages were not encrypted by default as documented. This enables a man-in-the-middle attacker to obtain login credentials and related JDBC traffic. Remediation...

CVE-2012-3494

The CVE-2012-3494 issue affects Xen hypervisor code, specifically the set_debugreg hypercall in include/asm-x86/debugreg.h, impacting Xen 4.0–4.2 and Citrix XenServer 6.0.2 and earlier on x86-64. The vulnerability arises when a guest OS user can write to the reserved bits of the DR7 debug control...

CVE-2012-6035

The CVE-2012-6035 entry concerns Xen’s Transcendent Memory (TMEM) in Xen 4.0–4.2, where do_tmem_destroy_pool does not properly validate pool IDs. This can lead to denial of service (memory corruption and host crash) and could allow arbitrary code execution via unspecified vectors. The description...

CVE-2012-6034

CVE-2012-6034 affects Xen TMEM (Transcendent Memory) in Xen 4.0–4.2. The vulnerable code paths are tmemc_save_get_next_page, tmemc_save_get_next_inv, and the TMEMC_SAVE_GET_POOL_UUID sub-operation, which fail to validate incoming guest output buffer pointers. This can allow a local guest OS user ...

CVE-2012-6036

Technical details for CVE-2012-6036 are not provided in the connected documents. Public information appears limited to references listing the CVE among Xen TMEM issues; monitor for updates and additional disclosures.