Skip to content
OpenAdvisories

Archive

4 June 2012

Vulnerabilities first published on this day (UTC), newest first.

22 results · Feed

  • Unscored —

    The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user…

  • Unscored —

    RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (…

  • Unscored —

    Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is…

  • Unscored —

    builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exp…

  • Unscored —

    The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of servic…

  • Unscored —

    Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a c…

  • Unscored —

    SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote…

  • Unscored —

    Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDom…

  • Unscored —

    Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remot…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0…

  • Unscored —

    Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to read (1) hashes…

  • Unscored —

    The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update t…

  • Unscored —

    Best Practical Solutions RT 3.8.x before 3.8.12 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code …

  • Unscored —

    Best Practical Solutions RT 4.x before 4.0.6 does not properly implement the DisallowExecuteCode option, which allows r…

  • Unscored —

    Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attack…

  • Unscored —

    Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attacker…

  • Unscored —

    SQL injection vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to inject arbitrary web …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in RSSOwl before 2.1.1 allows remote attackers to inject arbitrary web script …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote…

  • Unscored —

    The Puella Magi Madoka Magica iP application 1.05 and earlier for Android places cleartext Twitter credentials in a log…