|
294341
|
- |
|
mantisbt
|
mantisbt
|
The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete and delete_bug_threshold permissions, which allows remote authenticated users with read and write SO…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-1120
|
2024-11-21 10:36 |
2012-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294342
|
- |
|
mantisbt
|
mantisbt
|
MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-1119
|
2024-11-21 10:36 |
2012-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294343
|
- |
|
mantisbt
|
mantisbt
|
The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly restrict access when the private_bug_view_threshold is set to an array, which allows remote attacke…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-1118
|
2024-11-21 10:36 |
2012-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294344
|
- |
|
libreoffice debian redhat apache fedoraproject
|
libreoffice debian_linux enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_desktop enterprise_linux_server enterprise_linux enterprise_linux_workstation
|
Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application c…
|
CWE-189
Numeric Errors
|
CVE-2012-1149
|
2024-11-21 10:36 |
2012-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294345
|
- |
|
debian
|
advanced_package_tool
|
APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attacker…
|
CWE-20
Improper Input Validation
|
CVE-2012-0954
|
2024-11-21 10:36 |
2012-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294346
|
- |
|
canonical
|
ubuntu_linux
|
The Apport hook (DistUpgradeApport.py) in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uploads the /var/log/dist-upgrade directory when reporting bugs to Launchpad, which allows rem…
|
CWE-200
Information Exposure
|
CVE-2012-0950
|
2024-11-21 10:36 |
2012-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294347
|
- |
|
redhat
|
satellite
|
spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the NULL organization when mod_wsgi is used, which allows remot…
|
CWE-287
Improper Authentication
|
CVE-2012-1145
|
2024-11-21 10:36 |
2012-06-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294348
|
- |
|
canonical gnome
|
ubuntu_linux update-manager-core
|
DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone_system_state.tar.gz and (2) system_state.tar.gz, which allows …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-0948
|
2024-11-21 10:36 |
2012-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294349
|
- |
|
mit
|
kerberos_5
|
The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a deni…
|
NVD-CWE-Other
|
CVE-2012-1013
|
2024-11-21 10:36 |
2012-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294350
|
- |
|
mit
|
kerberos_5
|
server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which m…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-1012
|
2024-11-21 10:36 |
2012-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|