Skip to content
OpenAdvisories

Archive

4 January 2013

Vulnerabilities first published on this day (UTC), newest first.

← December 2012 2013 / January /4 February 2013 →
  1. 16
  2. 214
  3. 316
  4. 422
  5. 54
  6. 6 
  7. 7 
  8. 81
  9. 915
  10. 1028
  11. 118
  12. 128
  13. 1329
  14. 141
  15. 1524
  16. 16 
  17. 1793
  18. 1811
  19. 194
  20. 20 
  21. 2110
  22. 2210
  23. 231
  24. 2444
  25. 253
  26. 265
  27. 2720
  28. 281
  29. 2918
  30. 301
  31. 3142
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2012-4574

    Pulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file

    A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the `pulp.conf` configuration file. This information disclosure could enable unauthorized …

    Red Hat CloudForms Tools for RHEL 5 CloudForms for RHEL 6 RHUI for RHEL 6
  • Medium —
    CVE-2012-6497

    Authlogic Information Exposure vulnerability

    The Authlogic gem for Ruby on Rails, when used with certain versions before 3.2.10, makes potentially unsafe find_by_id method calls, which might allow remote attackers to conduct CVE-2012-6496 SQL injection attacks via a crafted parameter in environments tha…

    rails authlogic Debian RubyGems