Archive
February 2012
Vulnerabilities first published in this month (UTC), newest first.
343 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in the management interface on the Cisco IronPort Encryption Appliance with so…
-
Unscored —
Buffer overflow in IvanView 1.2.15 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a c…
-
Unscored —
Heap-based buffer overflow in Xjp2.dll in the JPEG2000 plug-in in XnView 1.98.5 allows remote attackers to execute arbi…
-
Unscored —
Directory traversal vulnerability in Mathopd 1.4.x and 1.5.x before 1.5p7, when configured with the * construct for mas…
-
Unscored —CVE-2012-1049 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attacker…
-
Low —CVE-2011-4340 Public exploit
Symphony CMS vulnerable to Cross-site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) the profile parameter to extensions/profi…
-
Unscored —CVE-2011-4341 Public exploit
Multiple SQL injection vulnerabilities in symphony/content/content.publish.php in Symphony CMS 2.2.3 and possibly other…
-
Unscored —CVE-2012-1047 Public exploit
Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 …
-
Unscored —CVE-2012-1048 Public exploit
Cross-site scripting (XSS) vulnerability in communityplusplus/www/administrator.php in eFront Community++ edition 3.6.1…
-
Unscored —CVE-2012-0834 Public exploit
Cross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attacke…
-
Unscored —
Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 a…
-
Unscored —
PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing o…
-
Unscored —
ZenSysSrv.exe in Ing. Punzenberger COPA-DATA zenon 6.51 SP0 allows remote attackers to cause a denial of service (servi…
-
Unscored —
Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and ot…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean…
-
Unscored —
zenAdminSrv.exe in Ing. Punzenberger COPA-DATA zenon 6.51 SP0 allows remote attackers to cause a denial of service (dae…
-
Unscored —
tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in TM1 Web in IBM Cognos TM1 9.5.2 FP1 allows remote attackers to inject arbit…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service o…
-
Unscored —
Unspecified vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (app…
-
Unscored —
Google Chrome before 17.0.963.46 does not prevent monitoring of the clipboard after a paste event, which has unspecifie…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service o…
-
Unscored —
Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) or possibly h…
-
Unscored —
Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remot…
-
Unscored —
Google Chrome before 17.0.963.46 does not properly handle PDF FAX images, which allows remote attackers to cause a deni…
-
Unscored —
Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial o…
-
Unscored —
Google Chrome before 17.0.963.46 does not properly check signatures, which allows remote attackers to cause a denial of…
-
Unscored —
Google Chrome before 17.0.963.46 does not properly perform path clipping, which allows remote attackers to cause a deni…
-
Unscored —
Google Chrome before 17.0.963.46 does not properly perform casts of variables during handling of a column span, which a…
-
Unscored —
Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via vectors t…
-
Unscored —
Race condition in Google Chrome before 17.0.963.46 allows remote attackers to execute arbitrary code via vectors that t…
-
Unscored —
The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which migh…
-
Unscored —
Use-after-free vulnerability in the garbage-collection functionality in Google Chrome before 17.0.963.46 allows remote …
-
Unscored —
Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows user-assisted remote attackers to cause a denia…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service o…
-
Unscored —
Buffer overflow in the locale implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a den…
-
Unscored —
The shader translator implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of s…
-
Unscored —
libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service (out-of-boun…
-
Unscored —
The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3 and 7.0 before ESD# 7 do…
-
Unscored —
AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability t…