Archive
January 2012
Vulnerabilities first published in this month (UTC), newest first.
314 results · Feed
-
Unscored —
Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows remote attackers to affect availability via un…
-
Unscored —
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affe…
-
Unscored —
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated use…
-
Unscored —
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affe…
-
Unscored —
Unspecified vulnerability in the Oracle Forms component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to…
-
Unscored —
PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to ca…
-
Unscored —CVE-2012-0031 Public exploit
scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon …
-
Unscored —
The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer derefer…
-
Unscored —
Unspecified vulnerability in the Render method in the ExportHTML.ocx ActiveX control in ExportHTML.dll in IBM SPSS Dime…
-
Unscored —
Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5…
-
Unscored —
Multiple unspecified vulnerabilities in the (1) PrintFile and (2) SaveDoc methods in the VsVIEW6 ActiveX control in VsV…
-
Unscored —
The png_handle_cHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote att…
-
Unscored —CVE-2010-5082 EPSS 15%
Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Serv…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install compone…
-
Unscored —
The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Serv…
-
Unscored —
The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresse…
-
Unscored —
The SibRaRecoverableSiXaResource class in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 allows remote at…
-
Unscored —
Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbit…
-
Unscored —
The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a…
-
Medium —
Authentication Bypass in Apache Tomcat
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intende…
-
Medium —
Use of Hard-coded Cryptographic Key in Apache Tomcat
DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote a…
-
Medium —
Improper Authentication in Apache Tomcat
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availa…
-
Medium —
Improper Authentication in Apache Tomcat
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=au…
-
High 7.5
GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values without restricting the ability to …
-
Unscored —
functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code exec…
-
Unscored —
submitticket.php in WHMCompleteSolution (WHMCS) 5.03 allows remote attackers to inject arbitrary code into a subject fi…
-
Unscored —
The par_mktmpdir function in the PAR module before 1.003 for Perl creates temporary files in a directory with a predict…
-
Unscored —
The par_mktmpdir function in the PAR::Packer module before 1.012 for Perl creates temporary files in a directory with a…
-
Unscored —
Wibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions before 4.40 allows remote attackers to caus…
-
Unscored —
Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute ar…
-
Unscored —
Buffer overflow in the Error function in super.c in Super 3.30.0 might allow local users to execute arbitrary code via …
-
Unscored —
Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl befo…
-
Unscored —
Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions fo…
-
Unscored —
Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote …
-
Unscored —
Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication …
-
Unscored —
Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote atta…
-
Unscored —
HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perfor…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos TM1 before 9.5 FP1 allow…
-
Unscored —
CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6…