Approved changes feed: RSS · Atom

cpe:2.3:a:trevor_mckay:cumin:0.1.4369-1:*:*:*:*:*:*:*

part: a version: 0.1.4369-1 update: *

VendorTrevor Mckay (17c427b1-e553-572b-b367-7d85998b85f6)
ProductCumin (bc068616-4c22-5711-a80a-90e0920ce0a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3459 vulnerable 2026-06-08 05:02:09.995081 Details available
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to modify Condor attributes and possibly gain privileges via crafted additional parameters in an HTTP POST request, which triggers a job attribute change request to Condor.
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-08-06T20:05:12.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2735 vulnerable 2026-06-08 05:02:05.900253 Details available
Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie.
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-08-06T19:42:32.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2734 vulnerable 2026-06-08 05:02:05.899470 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to hijack the authentication of arbitrary users for requests that execute commands via unspecified vectors.
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-08-06T19:42:32.457Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2685 vulnerable 2026-06-08 05:02:05.438700 Details available
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to cause a denial of service (memory consumption) via a large size in an image request.
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-08-06T19:42:31.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2684 vulnerable 2026-06-08 05:02:05.437832 Details available
Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to execute arbitrary SQL commands via the (1) agent or (2) object id.
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-08-06T19:42:31.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2683 vulnerable 2026-06-08 05:02:05.437055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2681 vulnerable 2026-06-08 05:02:05.433980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2680 vulnerable 2026-06-08 05:02:05.424274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.