|
292891
|
- |
|
redhat
|
automatic_bug_reporting_tool
|
The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.s…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-1106
|
2024-11-21 10:36 |
2012-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292892
|
- |
|
openldap
|
openldap
|
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attrib…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-1164
|
2024-11-21 10:36 |
2012-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292893
|
- |
|
mantisbt
|
mantisbt
|
The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password.
|
CWE-287
Improper Authentication
|
CVE-2012-1123
|
2024-11-21 10:36 |
2012-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292894
|
- |
|
mantisbt
|
mantisbt
|
bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permission of the receiving project when moving a bug report, which allows remote authenticated users wit…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-1122
|
2024-11-21 10:36 |
2012-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292895
|
- |
|
mantisbt
|
mantisbt
|
MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-1121
|
2024-11-21 10:36 |
2012-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292896
|
- |
|
mantisbt
|
mantisbt
|
The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete and delete_bug_threshold permissions, which allows remote authenticated users with read and write SO…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-1120
|
2024-11-21 10:36 |
2012-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292897
|
- |
|
mantisbt
|
mantisbt
|
MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-1119
|
2024-11-21 10:36 |
2012-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292898
|
- |
|
mantisbt
|
mantisbt
|
The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly restrict access when the private_bug_view_threshold is set to an array, which allows remote attacke…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-1118
|
2024-11-21 10:36 |
2012-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292899
|
- |
|
libreoffice debian redhat apache fedoraproject
|
libreoffice debian_linux enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_desktop enterprise_linux_server enterprise_linux enterprise_linux_workstation
|
Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application c…
|
CWE-189
Numeric Errors
|
CVE-2012-1149
|
2024-11-21 10:36 |
2012-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292900
|
- |
|
debian
|
advanced_package_tool
|
APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attacker…
|
CWE-20
Improper Input Validation
|
CVE-2012-0954
|
2024-11-21 10:36 |
2012-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|