Archive
June 2012
Vulnerabilities first published in this month (UTC), newest first.
405 results · Feed
-
Unscored —CVE-2012-3825 Public exploit
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a de…
-
Unscored —CVE-2012-3826 Public exploit
Multiple integer underflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a d…
-
Unscored —CVE-2012-2394 Public exploit
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data …
-
Unscored —CVE-2012-2393 Public exploit
epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 doe…
-
Unscored —
Unspecified vulnerability on HP Photosmart Wireless e-All-in-One B110, e-All-in-One D110, Plus e-All-in-One B210, eStat…
-
Unscored —CVE-2012-2392 Public exploit
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loo…
-
Unscored —
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows local users to obtain sensitive in…
-
Unscored —
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial…
-
Unscored —
HP System Management Homepage (SMH) before 7.1.1 does not properly validate input, which allows remote authenticated us…
-
Unscored —
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote authenticated users to gain…
-
Unscored —
HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form field…
-
Unscored —
Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers t…
-
Unscored —
The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly restrict access whe…
-
Unscored —
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit…
-
Unscored —
The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete and delete_bug_thres…
-
Unscored —
bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permission of the receivi…
-
Unscored —
MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privile…
-
Unscored —
The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to…
-
Unscored —
MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers …
-
Unscored —
The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop …
-
Unscored —
The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from …
-
Unscored —
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file w…
-
Unscored —CVE-2012-2698 Public exploit
Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.…
-
Unscored —
QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certi…
-
Unscored —
The fpm exporter in Revelation 0.4.13-2 and earlier encrypts the version number but not the password when exporting a f…
-
Unscored —CVE-2012-3232 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote…
-
Unscored —
Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP2…
-
Unscored —
Buffer overflow in the Cisco WebEx Advanced Recording Format (ARF) player T27 L through SP11 EP26, T27 LB through SP21 …
-
Unscored —
Stack-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP…
-
Unscored —
Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27…
-
Unscored —
Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP2…
-
Medium —CVE-2012-2098 EPSS 13%
Uncontrolled Resource Consumption in Apache Commons Compress
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeat…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow rem…
-
Unscored —
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easi…
-
Unscored —
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which …
-
Unscored —
Cross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web scri…
-
Unscored —
The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before…
-
Unscored —
Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote…
-
Unscored —
Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 a…
-
Unscored —CVE-2012-3816 Public exploit
WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Req…