Archive
May 2012
Vulnerabilities first published in this month (UTC), newest first.
425 results · Feed
-
Unscored —CVE-2012-2914 Public exploit
Cross-site scripting (XSS) vulnerability in captchademo.php in Unijimpe Captcha allows remote attackers to inject arbit…
-
Unscored —CVE-2012-2906 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in artpublic/recommandation/index.php in Artiphp CMS 5.5.0 Neo (r42…
-
Unscored —CVE-2012-2913 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to…
-
Unscored —CVE-2012-2917 Public exploit
Cross-site scripting (XSS) vulnerability in the Share and Follow plugin 1.80.3 for WordPress allows remote attackers to…
-
Unscored —
Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execu…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Take Control module 6.x-2.x before 6.x-2.2 for Drupal allows rem…
-
Unscored —
latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T opti…
-
Unscored —
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to b…
-
Unscored —
src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary l…
-
Unscored —
The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharact…
-
Unscored —
Integer overflow in the dhcpv6_get_option function in gdhcp/client.c in ConnMan before 0.85 allows remote attackers to …
-
Unscored —
Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause …
-
Medium —
Drupal Open Redirect
Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.
-
Unscored —
The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium …
-
Unscored —
sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netm…
-
Unscored —
RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data…
-
Unscored —
Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attacke…
-
Unscored —
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, whic…
-
Unscored —
The Linux kernel before 2.6.37 does not properly implement a certain clock-update optimization, which allows local user…
-
Unscored —
The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Of…
-
Unscored —
Integer overflow in the perf_event_interrupt function in arch/powerpc/kernel/perf_event.c in the Linux kernel before 2.…
-
Unscored —
The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of servi…
-
Unscored —
Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allo…
-
Unscored —
The net subsystem in the Linux kernel before 3.1 does not properly restrict use of the IFF_TX_SKB_SHARING flag, which a…
-
Unscored —
The m_stop function in fs/proc/task_mmu.c in the Linux kernel before 2.6.39 allows local users to cause a denial of ser…
-
Unscored —
The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO featur…
-
Unscored —
Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local us…
-
Unscored —
The kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to cause a denial of serv…
-
Unscored —
Integer overflow in the drm_mode_dirtyfb_ioctl function in drivers/gpu/drm/drm_crtc.c in the Direct Rendering Manager (…
-
Unscored —
The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a de…
-
Unscored —
The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of ser…
-
Unscored —
The mem_cgroup_usage_unregister_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly h…
-
Unscored —
The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of service (NULL pointer…
-
Unscored —
The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get an…
-
Unscored —
The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service (host OS crash) by …
-
Unscored —
The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the u…
-
Unscored —
The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots…
-
Unscored —
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users t…
-
Unscored —
Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of …
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a…