[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1565?

[Assistant] {'name': 'ezpublish-unspec-vuln(74060)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74060'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://issues.ez.no/19238'}, {'name': '48338', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48338'}, {'name': '80098', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80098'}, {'name': '[oss-security] 20120319 Re: CVE request: eZ Publish: insecure direct object reference', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/19/13'}, {'name': '[oss-security] 20120319 CVE request: eZ Publish: insecure direct object reference', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/19/6'}, {'name': '52516', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52516'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1565?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1566 mean in the context of cybersecurity?

[Assistant] CVE-2012-1566


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1566.

[Assistant] LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintNanny.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1566?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/19/14'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1566?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1567 mean in the context of cybersecurity?

[Assistant] CVE-2012-1567


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1567.

[Assistant] LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintUpdate.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1567?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/19/14'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/linuxmint/mintupdate/blob/master/usr/lib/linuxmint/mintUpdate/mintUpdate.py#L1444'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1567?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1568 mean in the context of cybersecurity?

[Assistant] CVE-2012-1568


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1568.

[Assistant] The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 5 and 6 and Fedora 15 and 16 does not properly handle use of many shared libraries by a 32-bit executable file, which makes it easier for context-dependent attackers to bypass the ASLR protection mechanism by leveraging a predictable base address for one of these libraries.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1568?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://scarybeastsecurity.blogspot.com/2012/03/some-random-observations-on-linux-aslr.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=302a4fc15aebf202b6dffd6c804377c6058ee6e4'}, {'name': '[oss-security] 20120320 Re: CVE request -- kernel: execshield: predictable ascii armour base address', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/20/4'}, {'name': '[oss-security] 20120321 Re: CVE request -- kernel: execshield: predictable ascii armour base address', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2012/03/21/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=804947'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1568?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1569 mean in the context of cybersecurity?

[Assistant] CVE-2012-1569


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1569.

[Assistant] The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1569?

[Assistant] {'name': '57260', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57260'}, {'name': 'RHSA-2012:0427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0427.html'}, {'name': '48578', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48578'}, {'name': 'RHSA-2012:0531', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0531.html'}, {'name': '49002', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49002'}, {'name': 'FEDORA-2012-4357', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077339.html'}, {'name': '[oss-security] 20120320 Re: CVE request: libtasn1 "asn1_get_length_der()" DER decoding issue', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/20/8'}, {'name': '[oss-security] 20120321 Re: CVE request: GnuTLS TLS record handling issue / MU-201202-01', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/21/5'}, {'name': '48488', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48488'}, {'name': 'USN-1436-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1436-1'}, {'name': 'FEDORA-2012-4342', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/076865.html'}, {'name': 'FEDORA-2012-4451', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077284.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.gnu.org/software/gnutls/security.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=804920'}, {'name': 'RHSA-2012:0488', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0488.html'}, {'name': 'FEDORA-2012-4308', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/076856.html'}, {'name': 'SUSE-SU-2014:0320', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html'}, {'name': '[gnutls-devel] 20120316 gnutls 3.0.16', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5932'}, {'name': '1026829', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026829'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://linux.oracle.com/errata/ELSA-2014-0596.html'}, {'name': '48596', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48596'}, {'name': '50739', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/50739'}, {'name': '48397', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48397'}, {'name': '48505', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48505'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.mudynamics.com/2012/03/20/gnutls-and-libtasn1-vulns/'}, {'name': '[help-libtasn1] 20120319 GNU Libtasn1 2.12 released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://article.gmane.org/gmane.comp.gnu.libtasn1.general/53'}, {'name': '[help-libtasn1] 20120319 minimal fix to security issue', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://article.gmane.org/gmane.comp.gnu.libtasn1.general/54'}, {'name': '[oss-security] 20120320 CVE request: libtasn1 "asn1_get_length_der()" DER decoding issue', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/20/3'}, {'name': 'DSA-2440', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2440'}, {'name': 'MDVSA-2012:039', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2012:039'}, {'name': 'FEDORA-2012-4409', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076699.html'}, {'name': '20120320 Mu Dynamics, Inc. Security Advisories MU-201202-01 and MU-201202-02 for GnuTLS and Libtasn1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-03/0099.html'}, {'name': 'FEDORA-2012-4417', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078207.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1569?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1570 mean in the context of cybersecurity?

[Assistant] CVE-2012-1570


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1570.

[Assistant] The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1570?

[Assistant] {'name': '[oss-security] 20120320 Re: CVE request: maradns deleted domain record cache persistance flaw', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/20/10'}, {'name': 'maradns-domain-spoofing(74119)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74119'}, {'name': '[oss-security] 20120319 CVE request: maradns deleted domain record cache persistance flaw', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/20/1'}, {'name': '48492', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48492'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=804770'}, {'name': '80192', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80192'}, {'name': '1026821', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026821'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.maradns.org/changelog.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1570?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1571 mean in the context of cybersecurity?

[Assistant] CVE-2012-1571


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1571.

[Assistant] file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1571?

[Assistant] {'name': 'DSA-2422', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2422'}, {'name': 'MDVSA-2012:035', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2012:035'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/glensc/file/commit/1aec04dbf8a24b8a6ba64c4f74efa0628e36db0b'}, {'name': '[file] 20120221 file-5.11 is now available', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mx.gw.com/pipermail/file/2012/000914.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/glensc/file/commit/1859fdb4e67c49c463c4e0078054335cd46ba295'}, {'name': 'USN-2123-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2123-1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1571?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1572 mean in the context of cybersecurity?

[Assistant] CVE-2012-1572


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1572.

[Assistant] OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1572?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2012-1572'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1572'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1572?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1573 mean in the context of cybersecurity?

[Assistant] CVE-2012-1573


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1573.

[Assistant] gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1573?

[Assistant] {'name': 'USN-1418-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1418-1'}, {'name': '57260', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57260'}, {'name': 'RHSA-2012:0531', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0531.html'}, {'name': '[gnutls-devel] 20120302 gnutls 3.0.15', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5912'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commit%3Bh=b495740f2ff66550ca9395b3fda3ea32c3acb185'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=805432'}, {'name': '48511', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48511'}, {'name': '80259', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80259'}, {'name': '52667', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52667'}, {'name': '[oss-security] 20120321 Re: CVE request: GnuTLS TLS record handling issue / MU-201202-01', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/21/5'}, {'name': '48488', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48488'}, {'name': '48712', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48712'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.gnu.org/software/gnutls/security.html'}, {'name': '1026828', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026828'}, {'name': 'FEDORA-2012-4569', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077071.html'}, {'name': 'FEDORA-2012-4578', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076496.html'}, {'name': 'RHSA-2012:0488', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0488.html'}, {'name': 'SUSE-SU-2014:0320', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html'}, {'name': '48596', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48596'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.mudynamics.com/2012/03/20/gnutls-and-libtasn1-vulns/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commit%3Bh=422214868061370aeeb0ac9cd0f021a5c350a57d'}, {'name': '[oss-security] 20120321 CVE request: GnuTLS TLS record handling issue / MU-201202-01', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/21/4'}, {'name': '[gnutls-devel] 20120302 gnutls 2.12.16', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5910'}, {'name': 'DSA-2441', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2441'}, {'name': 'MDVSA-2012:040', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2012:040'}, {'name': 'RHSA-2012:0429', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0429.html'}, {'name': '20120320 Mu Dynamics, Inc. Security Advisories MU-201202-01 and MU-201202-02 for GnuTLS and Libtasn1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-03/0099.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1573?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1574 mean in the context of cybersecurity?

[Assistant] CVE-2012-1574


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1574.

[Assistant] The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to impersonate arbitrary cluster user accounts via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1574?

[Assistant] {'name': '20120405 [CVE-2012-1574] Apache Hadoop user impersonation vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2012/Apr/70'}, {'name': '48775', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48775'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html'}, {'name': '20120405 [CVE-2012-1574] Apache Hadoop user impersonation vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-04/0051.html'}, {'name': '48776', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48776'}, {'name': '52939', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52939'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1574?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1575 mean in the context of cybersecurity?

[Assistant] CVE-2012-1575


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1575.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1575?

[Assistant] {'name': '48810', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48810'}, {'name': '53000', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53000'}, {'name': '[cumin-developers] 20120306 r5238 - in trunk: cumin/python/cumin cumin/python/cumin/grid cumin/python/cumin/inventory cumin/python/cumin/messaging rosemary/python/rosemary wooly/python/wooly', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html'}, {'name': 'RHSA-2012:0476', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0476.html'}, {'name': 'cumin-redhat-unspec-xss(74844)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74844'}, {'name': 'RHSA-2012:0477', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0477.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=805712'}, {'name': '1026921', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026921'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/attachment.cgi?id=571986'}, {'name': '48829', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48829'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1575?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1576 mean in the context of cybersecurity?

[Assistant] CVE-2012-1576


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1576.

[Assistant] The myuser_delete function in libathemecore/account.c in Atheme 5.x before 5.2.7, 6.x before 6.0.10, and 7.x before 7.0.0-beta2 does not properly clean up CertFP entries when a user is deleted, which allows remote attackers to access a different user account or cause a denial of service (daemon crash) via a login as a deleted user.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1576?

[Assistant] {'name': 'GLSA-201209-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201209-09.xml'}, {'name': '[oss-security] 20120322 Re: atheme.org Security Advisory ASA-2012-03-01: Improper cleanup of CertFP entries may result in undefined behaviour', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/23/2'}, {'name': '[oss-security] 20120321 atheme.org Security Advisory ASA-2012-03-01: Improper cleanup of CertFP entries may result in undefined behaviour', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/22/3'}, {'name': '20120321 atheme.org Security Advisory ASA-2012-03-01: Improper cleanup of CertFP entries may result in undefined behaviour', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2012-03/0248.html'}, {'name': '50704', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/50704'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jira.atheme.org/browse/SRV-166'}, {'name': '52675', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52675'}, {'name': '48481', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48481'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.atheme.org/atheme/commit/?id=3d9551761db2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1576?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1577 mean in the context of cybersecurity?

[Assistant] CVE-2012-1577


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1577.

[Assistant] lib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1577?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2012-1577'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/23/14'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdlib/random.c#rev1.16'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/ensc/dietlibc/blob/master/CHANGES'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1577?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1578 mean in the context of cybersecurity?

[Assistant] CVE-2012-1578


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1578.

[Assistant] Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allow remote attackers to hijack the authentication of users with the block permission for requests that (1) block a user via a request to the Block module or (2) unblock a user via a request to the Unblock module.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1578?

[Assistant] {'name': 'mediawiki-multiple-csrf(78911)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/78911'}, {'name': '[oss-security] 20120323 CVEs for MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/24/1'}, {'name': '[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html'}, {'name': '48504', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48504'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.wikimedia.org/show_bug.cgi?id=34212'}, {'name': '[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.17.3', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html'}, {'name': '[oss-security] 20120322 MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/22/9'}, {'name': '80361', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80361'}, {'name': '52689', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52689'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1578?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1579 mean in the context of cybersecurity?

[Assistant] CVE-2012-1579


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1579.

[Assistant] The resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private data such as CSRF tokens in a JavaScript file, which allows remote attackers to obtain sensitive information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1579?

[Assistant] {'name': '[oss-security] 20120323 CVEs for MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/24/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.wikimedia.org/show_bug.cgi?id=34907'}, {'name': '[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html'}, {'name': '48504', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48504'}, {'name': '[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.17.3', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html'}, {'name': '[oss-security] 20120322 MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/22/9'}, {'name': '52689', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52689'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1579?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1580 mean in the context of cybersecurity?

[Assistant] CVE-2012-1580


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1580.

[Assistant] Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload files.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1580?

[Assistant] {'name': '[oss-security] 20120323 CVEs for MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/24/1'}, {'name': '80364', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80364'}, {'name': '[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.wikimedia.org/show_bug.cgi?id=35317'}, {'name': '48504', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48504'}, {'name': '[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.17.3', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html'}, {'name': '[oss-security] 20120322 MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/22/9'}, {'name': 'mediawiki-specialupload-csrf(74286)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74286'}, {'name': '52689', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52689'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1580?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1581 mean in the context of cybersecurity?

[Assistant] CVE-2012-1581


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1581.

[Assistant] MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote attackers to change the passwords of arbitrary users.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1581?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.wikimedia.org/show_bug.cgi?id=35078'}, {'name': '[oss-security] 20120323 CVEs for MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/24/1'}, {'name': '[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html'}, {'name': '48504', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48504'}, {'name': 'mediawiki-random-numbers-sec-bypass(78910)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/78910'}, {'name': '[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.17.3', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html'}, {'name': '[oss-security] 20120322 MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/22/9'}, {'name': '52689', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52689'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1581?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1582 mean in the context of cybersecurity?

[Assistant] CVE-2012-1582


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1582.

[Assistant] Cross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to inject arbitrary web script or HTML via a crafted page with "forged strip item markers," as demonstrated using the CharInsert extension.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1582?

[Assistant] {'name': '[oss-security] 20120323 CVEs for MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/24/1'}, {'name': '[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html'}, {'name': '48504', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48504'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.wikimedia.org/show_bug.cgi?id=35315'}, {'name': '80363', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80363'}, {'name': '[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.17.3', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html'}, {'name': 'mediawiki-wikitext-xss(74288)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74288'}, {'name': '[oss-security] 20120322 MediaWiki security and maintenance release 1.18.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/22/9'}, {'name': '52689', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52689'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1582?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1583 mean in the context of cybersecurity?

[Assistant] CVE-2012-1583


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1583.

[Assistant] Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1583?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d0772b70faaf8e9f2013b6c4273d94d5eac8047a'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=752304'}, {'name': '1026930', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026930'}, {'name': '53139', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53139'}, {'name': 'RHSA-2012:0488', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0488.html'}, {'name': '48881', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48881'}, {'name': 'SSRT100852', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=133951357207000&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22'}, {'name': 'HPSBMU02776', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=133951357207000&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/d0772b70faaf8e9f2013b6c4273d94d5eac8047a'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1583?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1584 mean in the context of cybersecurity?

[Assistant] CVE-2012-1584


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1584.

[Assistant] Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted file header field in a media file, which triggers a large memory allocation.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1584?

[Assistant] {'name': '49688', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49688'}, {'name': 'taglib-mid-dos(78909)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/78909'}, {'name': '52290', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52290'}, {'name': '48792', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48792'}, {'name': '[pipermail] 20120304 multiple security vulnerabilities in taglib', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail.kde.org/pipermail/taglib-devel/2012-March/002186.html'}, {'name': 'GLSA-201206-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-201206-16.xml'}, {'name': '[pipermail] 20120305 multiple security vulnerabilities in taglib', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail.kde.org/pipermail/taglib-devel/2012-March/002191.html'}, {'name': '[oss-security] 20120326 Re: CVE-Request taglib vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/26/4'}, {'name': '[oss-security] 20120321 Re: CVE-Request taglib vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/21/11'}, {'name': '48211', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48211'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/taglib/taglib/commit/dcdf4fd954e3213c355746fa15b7480461972308'}, {'name': '[oss-security] 20120305 Re: CVE-Request taglib vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/05/19'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1584?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1585 mean in the context of cybersecurity?

[Assistant] CVE-2012-1585


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1585.

[Assistant] OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1585?

[Assistant] {'name': '[Openstack] 20120329 [OSSA 2012-003] Long server names grow nova-api log files significantly (CVE-2012-1585)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://osdir.com/ml/openstack-cloud-computing/2012-03/msg01133.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.launchpad.net/nova/+bug/962515'}, {'name': 'FEDORA-2012-5026', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lwn.net/Alerts/491298/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1585?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1586 mean in the context of cybersecurity?

[Assistant] CVE-2012-1586


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1586.

[Assistant] mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1586?

[Assistant] {'name': 'SUSE-SU-2012:0575', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html'}, {'name': '[oss-security] 20120327 Re: CVE id request: cifs-utils', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/27/6'}, {'name': '[oss-security] 20120327 CVE id request: cifs-utils', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/27/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.samba.org/show_bug.cgi?id=8821'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1586?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1587 mean in the context of cybersecurity?

[Assistant] CVE-2012-1587


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1587.

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1587?

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1587?

[Assistant] REJECTED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1588 mean in the context of cybersecurity?

[Assistant] CVE-2012-1588


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1588.

[Assistant] Algorithmic complexity vulnerability in the _filter_url function in the text filtering system (modules/filter/filter.module) in Drupal 7.x before 7.14 allows remote authenticated users with certain roles to cause a denial of service (CPU consumption) via a long email address.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1588?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/drupal.git/commit/db79496ae983447506f016a20738c3d7e5d059fa'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/drupal-7.14'}, {'name': 'MDVSA-2013:074', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:074'}, {'name': '49012', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49012'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1557938'}, {'name': '53368', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53368'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1558468'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1588?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1589 mean in the context of cybersecurity?

[Assistant] CVE-2012-1589


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1589.

[Assistant] Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1589?

[Assistant] {'name': '81679', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/81679'}, {'name': '53365', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53365'}, {'name': 'MDVSA-2013:074', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:074'}, {'name': 'JVN#45898075', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN45898075/index.html'}, {'name': '49012', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49012'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1557938'}, {'name': 'JVNDB-2012-000045', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2012-000045'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1589?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1590 mean in the context of cybersecurity?

[Assistant] CVE-2012-1590


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1590.

[Assistant] The forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished forum posts, which allows remote authenticated users to obtain sensitive information such as the post title via the forum overview page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1590?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/drupal-7.14'}, {'name': '53359', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53359'}, {'name': 'MDVSA-2013:074', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:074'}, {'name': '49012', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49012'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1557938'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1302404'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/drupal.git/commit/352645e4a636cadeb5576231b3547972eebdd8e5'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1590?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1591 mean in the context of cybersecurity?

[Assistant] CVE-2012-1591


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1591.

[Assistant] The image module in Drupal 7.x before 7.14 does not properly check permissions when caching derivative image styles of private images, which allows remote attackers to read private image styles.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1591?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1507988'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/drupal-7.14'}, {'name': '53359', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53359'}, {'name': 'MDVSA-2013:074', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:074'}, {'name': '49012', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49012'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1557938'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/drupal.git/commit/3bf6761ff7537dc68e22ea73f155134f3cfd41a8'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1591?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1592 mean in the context of cybersecurity?

[Assistant] CVE-2012-1592


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1592.

[Assistant] A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1592?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2012-1592'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1592'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/cve-2012-1592'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/28/12'}, {'name': '[struts-issues] 20200122 [jira] [Created] (WW-5055) Fix for security vulnerability CVE-2012-1592 identified in the National Vulnerability Database', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r348ed455a140273c40b974f0615dee692f7c9b26c6de2118b4280ef2%40%3Cissues.struts.apache.org%3E'}, {'name': '[struts-issues] 20200123 [jira] [Closed] (WW-5055) Fix for security vulnerability CVE-2012-1592 identified in the National Vulnerability Database', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r93c4e3f6cb138cd117c739714f07e47af547183ba099ba46be2b2a5b%40%3Cissues.struts.apache.org%3E'}, {'name': '[struts-issues] 20200903 [jira] [Commented] (WW-5055) Fix for security vulnerability CVE-2012-1592 identified in the National Vulnerability Database', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r593ebb2f4c95b064e6901fd273eff256c493db952bdb484395948ffc%40%3Cissues.struts.apache.org%3E'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1592?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1593 mean in the context of cybersecurity?

[Assistant] CVE-2012-1593


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1593.

[Assistant] epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed packet.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1593?

[Assistant] {'name': '18758', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18758'}, {'name': '48986', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48986'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2012-04.html'}, {'name': '[oss-security] 20120328 Re: CVE Request: Multiple wireshark security flaws resolved in 1.4.12 and 1.6.6', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/28/13'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6823'}, {'name': 'openSUSE-SU-2012:0558', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2012-04/msg00060.html'}, {'name': 'FEDORA-2012-5243', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078770.html'}, {'name': '48548', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48548'}, {'name': 'FEDORA-2012-5256', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078769.html'}, {'name': 'oval:org.mitre.oval:def:14991', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14991'}, {'name': '1026874', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026874'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=40962'}, {'name': 'wireshark-ansia-dos(74361)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74361'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1593?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1594 mean in the context of cybersecurity?

[Assistant] CVE-2012-1594


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1594.

[Assistant] epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1594?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2012-05.html'}, {'name': '[oss-security] 20120328 Re: CVE Request: Multiple wireshark security flaws resolved in 1.4.12 and 1.6.6', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/28/13'}, {'name': 'wireshark-ieee-dos(74362)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74362'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6809'}, {'name': 'oval:org.mitre.oval:def:15244', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15244'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=40967'}, {'name': 'FEDORA-2012-5243', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078770.html'}, {'name': '52738', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52738'}, {'name': '48548', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48548'}, {'name': '1026874', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026874'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1594?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1595 mean in the context of cybersecurity?

[Assistant] CVE-2012-1595


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1595.

[Assistant] The pcap_process_pseudo_header function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a WTAP_ENCAP_ERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size, related to the pcap and pcap-ng file parsers.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1595?

[Assistant] {'name': '52737', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52737'}, {'name': '48986', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48986'}, {'name': 'oval:org.mitre.oval:def:15548', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15548'}, {'name': '[oss-security] 20120328 Re: CVE Request: Multiple wireshark security flaws resolved in 1.4.12 and 1.6.6', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/28/13'}, {'name': '48947', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48947'}, {'name': 'openSUSE-SU-2012:0558', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2012-04/msg00060.html'}, {'name': 'FEDORA-2012-5243', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078770.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2012-06.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/news/20120327.html'}, {'name': '48548', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48548'}, {'name': 'wireshark-pcap-dos(74364)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74364'}, {'name': 'FEDORA-2012-5256', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078769.html'}, {'name': '1026874', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026874'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6804'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=41008'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1595?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1596 mean in the context of cybersecurity?

[Assistant] CVE-2012-1596


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1596.

[Assistant] The mp2t_process_fragmented_payload function in epan/dissectors/packet-mp2t.c in the MP2T dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a packet containing an invalid pointer value that triggers an incorrect memory-allocation attempt.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1596?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2012-07.html'}, {'name': '48986', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48986'}, {'name': '[oss-security] 20120328 Re: CVE Request: Multiple wireshark security flaws resolved in 1.4.12 and 1.6.6', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/28/13'}, {'name': 'wireshark-mp2t-dos(74363)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74363'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6833'}, {'name': 'openSUSE-SU-2012:0558', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2012-04/msg00060.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=41001'}, {'name': 'FEDORA-2012-5243', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078770.html'}, {'name': '52736', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52736'}, {'name': '48548', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48548'}, {'name': 'FEDORA-2012-5256', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078769.html'}, {'name': '1026874', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026874'}, {'name': 'oval:org.mitre.oval:def:15194', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15194'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1596?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1597 mean in the context of cybersecurity?

[Assistant] CVE-2012-1597


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1597.

[Assistant] Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1597?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ezsystems/ezjscore/commit/58854564c7b8672090c25c4b1677d08620d870f2'}, {'name': '[oss-security] 20120511 CVE-2012-1597: XSS in eZ Publish', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/05/11/6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://share.ez.no/community-project/security-advisories/ezsa-2012-006-xss-exploit-on-ezjscore-run-command-when-using-firefox'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1597?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1598 mean in the context of cybersecurity?

[Assistant] CVE-2012-1598


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1598.

[Assistant] Joomla! 1.5.x before 1.5.26 has unspecified impact and attack vectors related to "insufficient randomness" and a "password reset vulnerability."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1598?

[Assistant] {'name': '[oss-security] 20120827 Re: CVE request: joomla before 1.5.26 password change', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/08/27/6'}, {'name': '[oss-security] 20120328 Re: CVE-request: Joomla 20120305 / 20120306', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/29/5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://developer.joomla.org/security/news/396-20120305-core-password-change.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1598?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1599 mean in the context of cybersecurity?

[Assistant] CVE-2012-1599


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1599.

[Assistant] Joomla! 1.5.x before 1.5.26 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end information" via unknown vectors.  NOTE: this might be a duplicate of CVE-2012-1611.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1599?

[Assistant] {'name': '[oss-security] 20120328 Re: CVE-request: Joomla 20120305 / 20120306', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/29/5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://developer.joomla.org/security/news/397-20120306-core-information-disclosure.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1599?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1600 mean in the context of cybersecurity?

[Assistant] CVE-2012-1600


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1600.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a function.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1600?

[Assistant] {'name': '52761', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52761'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.postgresql.org/message-id/4F6B447C.6080204%40dalibo.com'}, {'name': 'openSUSE-SU-2012:0493', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html'}, {'name': '[oss-security] 20120328 Re: CVE request: phppgadmin before 5.0.4 XSS', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/29/6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/phppgadmin/phppgadmin/commit/74174ad639664b52cc1609ede0af8bc403e98a00'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/phppgadmin/phppgadmin/commit/e92a003624609a445c4cf57c9c3d1fcef0eae47c#diff-0'}, {'name': '[oss-security] 20120330 Re: CVE request: phppgadmin before 5.0.4 XSS', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/7'}, {'name': '48574', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48574'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/p/phppgadmin/mailman/message/28783470/'}, {'name': 'phppgadmin-function-xss(74440)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74440'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=808439'}, {'name': '[oss-security] 20120328 CVE request: phppgadmin before 5.0.4 XSS', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/28/11'}, {'name': '80870', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80870'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1600?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1601 mean in the context of cybersecurity?

[Assistant] CVE-2012-1601


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1601.

[Assistant] The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of service (NULL pointer dereference and host OS crash) by making a KVM_CREATE_IRQCHIP ioctl call after a virtual CPU already exists.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1601?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/9c895160d25a76c21b65bad141b08e8d4f99afef'}, {'name': 'SUSE-SU-2012:1679', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html'}, {'name': 'DSA-2469', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2469'}, {'name': '[oss-security] 20120329 Re: CVE request -- kernel: kvm: irqchip_in_kernel() and vcpu->arch.apic inconsistency', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/1'}, {'name': 'RHSA-2012:0571', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0571.html'}, {'name': '1026897', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026897'}, {'name': 'openSUSE-SU-2013:0925', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html'}, {'name': '49928', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49928'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=808199'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.6'}, {'name': 'RHSA-2012:0676', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0676.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1601?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1602 mean in the context of cybersecurity?

[Assistant] CVE-2012-1602


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1602.

[Assistant] user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1602?

[Assistant] {'name': '[oss-security] 20120329 Re: CVE-request: NextBBS 0.6.0 waraxe-2012-SA#080', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/2'}, {'name': '80626', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80626'}, {'name': '52728', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52728'}, {'name': '20120327 [waraxe-2012-SA#080] - Multiple Vulnerabilities in NextBBS 0.6.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-03/0135.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/advisory-80.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/111250/NextBBS-0.6.0-Authentication-Bypass-SQL-Injection-XSS.html'}, {'name': '[oss-security] 20120329 CVE-request: NextBBS 0.6.0 waraxe-2012-SA#080', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/29/8'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1602?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1603 mean in the context of cybersecurity?

[Assistant] CVE-2012-1603


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1603.

[Assistant] Multiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to execute arbitrary SQL commands via the (1) curstr parameter in the findUsers function, (2) id parameter in the isIdAvailable function, or (3) username parameter in the getGreetings function.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1603?

[Assistant] {'name': '[oss-security] 20120329 Re: CVE-request: NextBBS 0.6.0 waraxe-2012-SA#080', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/2'}, {'name': '52728', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52728'}, {'name': '20120327 [waraxe-2012-SA#080] - Multiple Vulnerabilities in NextBBS 0.6.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-03/0135.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/advisory-80.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/111250/NextBBS-0.6.0-Authentication-Bypass-SQL-Injection-XSS.html'}, {'name': '[oss-security] 20120329 CVE-request: NextBBS 0.6.0 waraxe-2012-SA#080', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/29/8'}, {'name': '80637', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80637'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1603?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1604 mean in the context of cybersecurity?

[Assistant] CVE-2012-1604


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1604.

[Assistant] Cross-site scripting (XSS) vulnerability in NextBBS 0.6 allows remote attackers to inject arbitrary web script or HTML via the do parameter to index.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1604?

[Assistant] {'name': '[oss-security] 20120329 Re: CVE-request: NextBBS 0.6.0 waraxe-2012-SA#080', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/2'}, {'name': '52728', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52728'}, {'name': '20120327 [waraxe-2012-SA#080] - Multiple Vulnerabilities in NextBBS 0.6.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-03/0135.html'}, {'name': '80627', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80627'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/advisory-80.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/111250/NextBBS-0.6.0-Authentication-Bypass-SQL-Injection-XSS.html'}, {'name': '[oss-security] 20120329 CVE-request: NextBBS 0.6.0 waraxe-2012-SA#080', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/29/8'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1604?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1605 mean in the context of cybersecurity?

[Assistant] CVE-2012-1605


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1605.

[Assistant] The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request argument."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1605?

[Assistant] {'name': '[oss-security] 20120329 Re: CVE request: TYPO3-CORE-SA-2012-001', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/4'}, {'name': '80759', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80759'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/'}, {'name': '52771', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52771'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1605?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1606 mean in the context of cybersecurity?

[Assistant] CVE-2012-1606


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1606.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1606?

[Assistant] {'name': '48647', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48647'}, {'name': '48622', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48622'}, {'name': '[oss-security] 20120329 Re: CVE request: TYPO3-CORE-SA-2012-001', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/'}, {'name': '80760', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80760'}, {'name': 'DSA-2445', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2445'}, {'name': '52771', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52771'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1606?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1607 mean in the context of cybersecurity?

[Assistant] CVE-2012-1607


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1607.

[Assistant] The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1607?

[Assistant] {'name': '48647', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48647'}, {'name': '48622', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48622'}, {'name': '[oss-security] 20120329 Re: CVE request: TYPO3-CORE-SA-2012-001', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/4'}, {'name': '80761', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80761'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/'}, {'name': 'DSA-2445', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2445'}, {'name': '52771', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52771'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1607?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1608 mean in the context of cybersecurity?

[Assistant] CVE-2012-1608


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1608.

[Assistant] The t3lib_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and inject arbitrary web script or HTML via non printable characters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1608?

[Assistant] {'name': '48647', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48647'}, {'name': '[oss-security] 20120329 Re: CVE request: TYPO3-CORE-SA-2012-001', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/'}, {'name': 'DSA-2445', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2445'}, {'name': '80762', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80762'}, {'name': '52771', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52771'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1608?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1609 mean in the context of cybersecurity?

[Assistant] CVE-2012-1609


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1609.

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1609?

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1609?

[Assistant] REJECTED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1610 mean in the context of cybersecurity?

[Assistant] CVE-2012-1610


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1610.

[Assistant] Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service (out-of-bounds read) via a large component count for certain EXIF tags in a JPEG image.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0259.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1610?

[Assistant] {'name': '55035', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55035'}, {'name': 'openSUSE-SU-2012:0692', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html'}, {'name': '[oss-security] 20120404 CVE-2012-1610 assignment notification: ImageMagick insufficient patch  for CVE-2012-0259', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/04/6'}, {'name': '49043', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49043'}, {'name': 'DSA-2462', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2462'}, {'name': '81024', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/81024'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259'}, {'name': '52898', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52898'}, {'name': 'USN-1435-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://ubuntu.com/usn/usn-1435-1'}, {'name': '48974', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48974'}, {'name': '49317', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49317'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629'}, {'name': 'imagemagick-getexifproperty-dos(74660)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74660'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1610?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1611 mean in the context of cybersecurity?

[Assistant] CVE-2012-1611


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1611.

[Assistant] Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end" information via unknown attack vectors.  NOTE: this might be a duplicate of CVE-2012-1599.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1611?

[Assistant] {'name': '[oss-security] 20120403 Re: CVE-request: Joomla 2012-04 398-20120307 399-20120308', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/03/5'}, {'name': '[oss-security] 20120403 CVE-request: Joomla 2012-04 398-20120307 399-20120308', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/03/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://developer.joomla.org/security/news/398-20120307-core-information-disclosure.html'}, {'name': '48683', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48683'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1611?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1612 mean in the context of cybersecurity?

[Assistant] CVE-2012-1612


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1612.

[Assistant] Cross-site scripting (XSS) vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1612?

[Assistant] {'name': '[oss-security] 20120403 Re: CVE-request: Joomla 2012-04 398-20120307 399-20120308', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/03/5'}, {'name': '52859', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52859'}, {'name': '80880', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80880'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://developer.joomla.org/security/news/399-20120308-core-xss-vulnerability.html'}, {'name': '[oss-security] 20120403 CVE-request: Joomla 2012-04 398-20120307 399-20120308', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/03/3'}, {'name': '48683', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48683'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1612?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1613 mean in the context of cybersecurity?

[Assistant] CVE-2012-1613


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1613.

[Assistant] Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1613?

[Assistant] {'name': '20120329 [waraxe-2012-SA#081] - Multiple Vulnerabilities in Coppermine 1.5.18', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/advisory-81.html'}, {'name': '80731', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80731'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html'}, {'name': '18680', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18680'}, {'name': '48643', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48643'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354'}, {'name': '52818', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52818'}, {'name': '[oss-security] 20120330 Re: CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html'}, {'name': '[oss-security] 20120403 Re: CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/03/6'}, {'name': '[oss-security] 20120330 CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/5'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1613?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1614 mean in the context of cybersecurity?

[Assistant] CVE-2012-1614