MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service (application crash) by sending a specially crafted request.

An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to change any issue to "New".

Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories.

Lintian before 2.5.12 allows remote attackers to gather information about the "host" system using crafted symlinks.

ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions.

nova: _base images permissions should not be world readable

OpenStack nova base images permissions are world readable

accountsservice: local encrypted password disclosure when changing password

An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a local users obtain encrypted passwords.

cloud-init: insecure transmission of EC2 instance data can lead to root privilege escalation

An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data.

tuned: insecure permissions of tuned.pid

tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.

Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."

gnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync function

cups: 'Listen localhost:631' option not honoured correctly on IPv6-enabled systems when systemd used for CUPS socket activation

cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert.

Python keyring lib before 0.10 created keyring files with world-readable permissions.

(ospf6d): Assertion failure when removing routes (retrieving information which route to remove)

quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal

OpenStack: Quantum /etc/quantum/quantum.conf secret password and token exposure

Within the RHOS Essex Preview (2012.2) of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the admin password and token value.

OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure

The file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2012.1.1) is world readable and exposes the secret key value.

FreeBSD: Input Validation Flaw allows local users to gain elevated privileges

openslp: out-of-bounds read in SLPIntersectStringList() can cause DoS

openslp: SLPIntersectStringList()' Function has a DoS vulnerability

letodms 3.3.6 has CSRF via change password