| Max CVSS | 7.5 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-4131 | 4.6 |
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
|
13-02-2023 - 04:32 | 17-05-2012 - 11:00 | |
| CVE-2010-3294 | 4.3 |
Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
13-02-2023 - 04:22 | 24-09-2010 - 19:00 | |
| CVE-2011-4623 | 2.1 |
Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which tri
|
13-02-2023 - 01:21 | 25-09-2012 - 23:55 | |
| CVE-2011-2716 | 6.8 |
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
|
27-08-2020 - 20:15 | 03-07-2012 - 16:40 | |
| CVE-2011-4029 | 1.9 |
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (removed execution permission) via a symlink attack
|
24-08-2020 - 17:14 | 03-07-2012 - 19:55 | |
| CVE-2011-3922 | 7.5 |
Stack-based buffer overflow in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to glyph handling.
|
07-05-2020 - 18:43 | 07-01-2012 - 11:55 | |
| CVE-2012-2102 | 3.5 |
MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and using HANDLER READ NEXT.
|
17-12-2019 - 20:23 | 17-08-2012 - 00:55 | |
| CVE-2012-2328 | 5.0 |
internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash values without restricting the ability to trigger hash c
|
30-10-2018 - 16:27 | 10-02-2014 - 18:15 | |
| CVE-2012-2664 | 4.3 |
The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attac
|
29-08-2017 - 01:31 | 29-06-2012 - 19:55 | |
| CVE-2012-2690 | 2.1 |
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
|
29-08-2017 - 01:31 | 29-06-2012 - 19:55 | |
| CVE-2012-2141 | 3.5 |
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry
|
29-08-2017 - 01:31 | 14-08-2012 - 22:55 | |
| CVE-2012-1106 | 1.9 |
The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local
|
29-08-2017 - 01:31 | 03-07-2012 - 16:40 | |
| CVE-2012-1164 | 2.6 |
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.
|
07-01-2017 - 02:59 | 29-06-2012 - 19:55 | |
| CVE-2012-2693 | 3.7 |
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to acces
|
15-01-2013 - 04:30 | 17-06-2012 - 03:41 | |
| CVE-2012-1586 | 2.1 |
mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.
|
28-08-2012 - 04:00 | 27-08-2012 - 23:55 | |
| CVE-2011-5000 | 3.5 |
The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length fi
|
22-07-2012 - 03:33 | 05-04-2012 - 14:55 | |
| CVE-2012-0833 | 2.3 |
The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with
|
17-07-2012 - 04:00 | 03-07-2012 - 16:40 |