27 January 2012

20 results · Feed

• Medium 6.5
  CVE-2012-0814

  The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing auth…

  openssh Debian
  Jan 27, 2012
• Unscored —
  CVE-2011-1162

  The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the…

  Jan 27, 2012
• Unscored —
  CVE-2011-4608

  mod_cluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbit…

  Jan 27, 2012
• Unscored —
  CVE-2011-4132

  The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows loc…

  Jan 27, 2012
• Medium —
  CVE-2011-4314

  OpenID4Java does not verify that Attribute Exchange (AX) information is signed

  message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, …

  org.openid4java:openid4java openid4java Debian Maven
  Jan 27, 2012
• Unscored —
  CVE-2011-4330

  Stack-based buffer overflow in the hfs_mac2asc function in fs/hfs/trans.c in the Linux kernel 2.6 allows local users to…

  Jan 27, 2012
• Unscored —
  CVE-2011-4622

  The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle …

  Jan 27, 2012
• Unscored —
  CVE-2011-4077

  Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_D…

  Jan 27, 2012
• Unscored —
  CVE-2011-4325

  The NFS implementation in Linux kernel before 2.6.31-rc6 calls certain functions without properly initializing certain …

  Jan 27, 2012
• Unscored —
  CVE-2011-4110

  The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial o…

  Jan 27, 2012
• Unscored —
  CVE-2011-3874 EPSS 11%

  Stack-based buffer overflow in libsysutils in Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6 allows user-assisted …

  Jan 27, 2012
• Unscored —
  CVE-2011-3626

  Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 …

  Jan 27, 2012
• Unscored —
  CVE-2011-2203

  The hfs_find_init function in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer derefe…

  Jan 27, 2012
• Unscored —
  CVE-2012-0029

  Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and po…

  xen Debian
  Jan 27, 2012
• Unscored —
  CVE-2012-0056 Public exploit EPSS 11%

  The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions whe…

  Jan 27, 2012
• Unscored —
  CVE-2011-4354

  crypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain cir…

  openssl Debian
  Jan 27, 2012
• Unscored —
  CVE-2011-4143

  EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive information about envi…

  Jan 27, 2012
• Unscored —
  CVE-2012-0807

  Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature …

  Jan 27, 2012
• Unscored —
  CVE-2012-0806

  Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via vectors i…

  bip Debian
  Jan 27, 2012
• Unscored —
  CVE-2012-0395

  Buffer overflow in the server in EMC NetWorker 7.5.x and 7.6.x before 7.6.3 SP1 Cumulative Release build 851 allows rem…

  Jan 27, 2012