Archive
March 2012
Vulnerabilities first published in this month (UTC), newest first.
403 results · Feed
-
Unscored —
compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ../ (dot dot slash) sequ…
-
Unscored —
@Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information…
-
Unscored —
CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attack…
-
Unscored —
Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php in @Mail WebMail Client…
-
Unscored —
@Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to execute arbitrary code via an e-mail …
-
Unscored —
gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted wit…
-
Unscored —
The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other p…
-
Unscored —
Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.20 allows remote attackers to inject arbitra…
-
Unscored —
Directory traversal vulnerability in Apache Wicket 1.4.x before 1.4.20 and 1.5.x before 1.5.5 allows remote attackers t…
-
Unscored —
Google Chrome before 17.0.963.83 does not properly restrict the extension web request API, which allows remote attacker…
-
Unscored —
Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magi…
-
Unscored —
The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allow…
-
Unscored —
The WebGL implementation in Google Chrome before 17.0.963.83 does not properly handle CANVAS elements, which allows rem…
-
Unscored —
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 all…
-
High 8.8
Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chr…
-
Unscored —
The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extensi…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service o…
-
Unscored —
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 all…
-
Unscored —
Google V8, as used in Google Chrome before 17.0.963.83, allows remote attackers to cause a denial of service via vector…
-
Unscored —
Use-after-free vulnerability in Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the DEP and ASL…
-
Unscored —
Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmwar…
-
Unscored —
The web management interface on the LG-Nortel ELO GS24M switch allows remote attackers to bypass authentication, and co…
-
Unscored —
AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 does not properly perform cookie authentication, which allows remo…
-
Unscored —
The Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 ta…
-
Unscored —
Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.…
-
Unscored —
Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXP_ClientDriver.ph…
-
Unscored —
Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware befo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Tivoli Endpoint Manager (TEM) 8 before 8.2 patch 3 allows remote attack…
-
Unscored —
Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a cr…
-
Unscored —
CA ARCserve Backup r12.0 through SP2, r12.5 before SP2, r15 through SP1, and r16 before SP1 on Windows allows remote at…
-
Unscored —
The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before…
-
Unscored —CVE-2012-1427 EPSS 87%
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 all…
-
Unscored —CVE-2012-1434 EPSS 59%
The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus…
-
Unscored —CVE-2012-1422 EPSS 93%
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, and Rising…
-
Unscored —CVE-2012-1452 EPSS 88%
The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Quic…
-
Unscored —CVE-2012-1436 EPSS 93%
The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17…
-
Unscored —CVE-2012-1463 EPSS 94%
The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00…
-
Unscored —CVE-2012-1433 EPSS 93%
The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17…