|
291711
|
- |
|
redhat
|
cloudforms
|
The ldap_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when using Active Directory for authentication, allows remote attackers to bypass authentication via unspecified vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-5604
|
2024-11-21 10:44 |
2013-03-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291712
|
- |
|
katello
|
katello
|
script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file.
|
CWE-200
Information Exposure
|
CVE-2012-5561
|
2024-11-21 10:44 |
2013-03-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291713
|
- |
|
jforum
|
jforum
|
Multiple cross-site scripting (XSS) vulnerabilities in jforum.page in JForum 2.1.9 allow remote attackers to inject arbitrary web script or HTML via the (1) action, (2) match_type, (3) sort_by, or (4…
|
CWE-79
Cross-site Scripting
|
CVE-2012-5337
|
2024-11-21 10:44 |
2013-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291714
|
- |
|
qt
digia
canonical
|
qt
ubuntu_linux
|
The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensi…
|
CWE-200
Information Exposure
|
CVE-2012-5624
|
2024-11-21 10:44 |
2013-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291715
|
- |
|
redhat
fedora_project
|
enterprise_linux
fedora_release_rawhide
|
A certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and Fedora Rawhide calls the glibc error function instead of the error function in the OpenSSH codebase, …
|
CWE-20
Improper Input Validation
|
CVE-2012-5536
|
2024-11-21 10:44 |
2013-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291716
|
- |
|
linux
|
linux_kernel
|
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (prevention of file creation) by leveraging the ability to write to a…
|
CWE-310
Cryptographic Issues
|
CVE-2012-5375
|
2024-11-21 10:44 |
2013-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291717
|
- |
|
linux
|
linux_kernel
|
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (extended runtime of kernel code) by creating many different files wh…
|
CWE-310
Cryptographic Issues
|
CVE-2012-5374
|
2024-11-21 10:44 |
2013-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291718
|
- |
|
hp
|
arcsight_connector_appliance_firmware
arcsight_connector_appliance
arcsight_logger
|
Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via unknown vectors.
|
NVD-CWE-noinfo
|
CVE-2012-5199
|
2024-11-21 10:44 |
2013-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291719
|
- |
|
hp
|
arcsight_connector_appliance_firmware
arcsight_connector_appliance
arcsight_logger
|
Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to obtain sensitive information via unknown vectors.
|
NVD-CWE-noinfo
|
CVE-2012-5198
|
2024-11-21 10:44 |
2013-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291720
|
- |
|
google
|
android_debug_bridge
|
android-tools 4.1.1 in Android Debug Bridge (ADB) allows local users to overwrite arbitrary files via a symlink attack on /tmp/adb.log.
|
CWE-59
Link Following
|
CVE-2012-5564
|
2024-11-21 10:44 |
2013-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
