Archive
4 June 2012
Vulnerabilities first published on this day (UTC), newest first.
22 results · Feed
-
Unscored —
The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user…
-
Unscored —
RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (…
-
Unscored —
Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is…
-
Unscored —
builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exp…
-
Unscored —
The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of servic…
-
Unscored —
Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a c…
-
Unscored —
SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote…
-
Unscored —
Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDom…
-
Unscored —
Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remot…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0…
-
Unscored —
Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to read (1) hashes…
-
Unscored —
The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update t…
-
Unscored —
Best Practical Solutions RT 3.8.x before 3.8.12 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code …
-
Unscored —
Best Practical Solutions RT 4.x before 4.0.6 does not properly implement the DisallowExecuteCode option, which allows r…
-
Unscored —
Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attack…
-
Unscored —
Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attacker…
-
Unscored —
SQL injection vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to inject arbitrary web …
-
Unscored —
Cross-site scripting (XSS) vulnerability in RSSOwl before 2.1.1 allows remote attackers to inject arbitrary web script …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote…
-
Unscored —
The Puella Magi Madoka Magica iP application 1.05 and earlier for Android places cleartext Twitter credentials in a log…