Approved changes feed: RSS · Atom

cpe:2.3:a:dell:crowbar:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductCrowbar (c227d30a-e4a4-51d8-8a7a-6bf1295f2bb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3551 vulnerable 2026-06-08 05:02:10.616931 Details available
Cross-site scripting (XSS) vulnerability in crowbar_framework/app/views/support/index.html.haml in the Crowbar barclamp in Crowbar, possibly 1.4 and earlier, allows remote attackers to inject arbitrary web script or HTML via the file parameter to /utils.
Published: 2012-09-05T23:00:00.000Z
Updated: 2024-09-17T00:41:24.152Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3537 vulnerable 2026-06-08 05:02:10.581843 Details available
The Crowbar Ohai plugin (chef/cookbooks/ohai/files/default/plugins/crowbar.rb) in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands via vectors related to "insecure handling of tmp files" and predictable file names.
Published: 2012-09-05T23:00:00.000Z
Updated: 2024-08-06T20:13:50.120Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.