Archive
February 2012
Vulnerabilities first published in this month (UTC), newest first.
343 results · Feed
-
Medium —
Ejabberd DoS via malformed stanza
The mod_pubsub module (mod_pubsub.erl) in ejabberd 2.1.8 and 3.0.0-alpha-3 allows remote authenticated users to cause a denial of service (infinite loop) via a stanza with a publish tag that lacks a node attribute.
-
Unscored —CVE-2011-4614 Public exploit
PHP remote file inclusion vulnerability in Classes/Controller/AbstractController.php in the workspaces system extension…
-
Unscored —
Cross-site scripting (XSS) vulnerability in View.pm in BackupPC 3.0.0, 3.1.0, 3.2.0, 3.2.1, and possibly earlier allows…
-
Unscored —
Cross-site scripting (XSS) vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 al…
-
Unscored —
Cross-site scripting (XSS) vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier version…
-
Unscored —CVE-2012-1198 Public exploit
base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code b…
-
Unscored —CVE-2012-1199 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote atta…
-
Unscored —
Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetu…
-
Unscored —CVE-2012-1200 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Nova CMS allow remote attackers to execute arbitrary PHP code via…
-
Unscored —
Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManageme…
-
Unscored —
Integer overflow in the IDE_ACDStd.apl module for ACDSee 14.1 Build 137 allows remote attackers to execute arbitrary co…
-
Unscored —
SQL injection vulnerability in the Views module before 6.x-2.13 for Drupal allows remote attackers to execute arbitrary…
-
Unscored —
LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority.
-
Unscored —
The resolver in dnscache in Daniel J. Bernstein djbdns 1.05 overwrites cached server names and TTL values in NS records…
-
Unscored —
The resolver in PowerDNS Recursor (aka pdns_recursor) 3.3 overwrites cached server names and TTL values in NS records d…
-
Unscored —
The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing…
-
Unscored —
The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TT…
-
Unscored —
common_startup.cc in PowerDNS (aka pdns) Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attack…
-
Unscored —
Cisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 …
-
Unscored —
translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to …
-
Unscored —
Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of s…
-
Unscored —
Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service (application crash) via an empty …
-
Unscored —
Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or …
-
Unscored —
Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service o…
-
Unscored —
Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a deni…
-
Unscored —
Google Chrome before 17.0.963.56 does not properly parse H.264 data, which allows remote attackers to cause a denial of…
-
Unscored —
Unspecified vulnerability in the Native Client validator implementation in Google Chrome before 17.0.963.56 has unknown…
-
Unscored —
Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or …
-
Unscored —
Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows user-assisted remote attackers to cause a denia…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service o…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service o…
-
Unscored —
Google Chrome before 17.0.963.56 does not properly perform a cast of an unspecified variable during handling of columns…
-
Unscored —CVE-2012-0756 EPSS 14%
Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1…
-
Unscored —
Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1…
-
Medium 6.1CVE-2012-0767 Exploited
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Window…
KEV Jun 8, 2022 -
High 7.8
Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1…
KEV Jun 8, 2022 -
Unscored —
The ActiveX control in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows allows attackers to…
-
Unscored —
Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1…
-
Unscored —
Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1…
-
Unscored —
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 U…