2 February 2012

34 results · Feed

• Unscored —
  CVE-2011-3446

  Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which al…

  Feb 2, 2012
• Unscored —
  CVE-2011-3452

  Internet Sharing in Apple Mac OS X before 10.7.3 does not preserve the Wi-Fi configuration across software updates, whi…

  Feb 2, 2012
• Unscored —
  CVE-2011-3447

  CFNetwork in Apple Mac OS X 10.7.x before 10.7.3 does not properly construct request headers during parsing of URLs, wh…

  Feb 2, 2012
• Unscored —
  CVE-2011-3458

  QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remot…

  Feb 2, 2012
• Unscored —
  CVE-2011-3449

  Use-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary c…

  Feb 2, 2012
• Unscored —
  CVE-2011-3448

  Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary co…

  Feb 2, 2012
• Unscored —
  CVE-2011-3457

  The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language (aka GLSL) …

  Feb 2, 2012
• Unscored —
  CVE-2011-3462

  Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Cap…

  Feb 2, 2012
• Unscored —
  CVE-2011-3463

  WebDAV Sharing in Apple Mac OS X 10.7.x before 10.7.3 does not properly perform authentication, which allows local user…

  Feb 2, 2012
• Unscored —
  CVE-2011-3459

  Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or caus…

  Feb 2, 2012
• Unscored —
  CVE-2011-3453

  Integer overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or caus…

  Feb 2, 2012
• Unscored —
  CVE-2011-3460

  Buffer overflow in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause…

  Feb 2, 2012
• Unscored —
  CVE-2011-3450

  CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows r…

  Feb 2, 2012
• Unscored —
  CVE-2011-3444

  Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted c…

  Feb 2, 2012
• Unscored —
  CVE-2012-0440

  Cross-site request forgery (CSRF) vulnerability in jsonrpc.cgi in Bugzilla 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.…

  Feb 2, 2012
• Unscored —
  CVE-2012-0448

  Bugzilla 2.x and 3.x before 3.4.14, 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x bef…

  Feb 2, 2012
• Unscored —
  CVE-2011-2393

  The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD, NetBSD, and possibly other BSD-based …

  Feb 2, 2012
• Unscored —
  CVE-2012-0977

  Stack-based buffer overflow in jp2_x.dll in LuraWave JP2 ActiveX Control 2.1.5.5 and other versions before 2.1.5.11 all…

  Feb 2, 2012
• Unscored —
  CVE-2012-0983 Public exploit

  SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the…

  Feb 2, 2012
• Unscored —
  CVE-2012-0976

  Cross-site scripting (XSS) vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with…

  Feb 2, 2012
• Unscored —
  CVE-2012-0979

  Cross-site scripting (XSS) vulnerability in TWiki allows remote attackers to inject arbitrary web script or HTML via th…

  Feb 2, 2012
• Unscored —
  CVE-2012-0978

  Stack-based buffer overflow in npjp2.dll in LuraWave JP2 Browser Plug-In 1.1.1.11 and other versions before 2.1.1.11 al…

  Feb 2, 2012
• Unscored —
  CVE-2012-0975

  Cross-site scripting (XSS) vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and earlier allows remote at…

  Feb 2, 2012
• Unscored —
  CVE-2012-0980 Public exploit

  SQL injection vulnerability in download.php in phux Download Manager allows remote attackers to execute arbitrary SQL c…

  Feb 2, 2012
• Unscored —
  CVE-2012-0982 Public exploit

  SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attack…

  Feb 2, 2012
• Unscored —
  CVE-2012-0981 Public exploit

  Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image fi…

  Feb 2, 2012
• Unscored —
  CVE-2010-4562 EPSS 14%

  Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a h…

  Feb 2, 2012
• Unscored —
  CVE-2010-4563

  The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sendi…

  linux Debian
  Feb 2, 2012
• Unscored —
  CVE-2011-1573

  net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consid…

  Feb 2, 2012
• Unscored —
  CVE-2011-4144

  Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 bef…

  Feb 2, 2012
• Unscored —
  CVE-2011-4194

  Buffer overflow in Novell iPrint Server in Novell Open Enterprise Server 2 (OES2) through SP3 on Linux allows remote at…

  Feb 2, 2012
• Unscored —
  CVE-2011-2525

  The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc funct…

  Feb 2, 2012
• Unscored —
  CVE-2011-4790

  Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitra…

  Feb 2, 2012
• Unscored —
  CVE-2012-0057

  PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a …

  Feb 2, 2012