Skip to content
OpenAdvisories

Archive

13 June 2012

Vulnerabilities first published on this day (UTC), newest first.

32 results · Feed

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the SIP implementation on the Cisco SPA8000 and SPA8800 before 6.1.11, SPA2…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in HP Web Jetadmin 8.x allow remote attackers to inject arbitrary w…

  • Unscored —

    The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows re…

  • Unscored —

    The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authen…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in AutoFORM PDM Archive before 6.920 allow remote authenticated use…

  • Unscored —

    AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which all…

  • Unscored —

    Poul-Henning Kamp md5crypt has insufficient algorithmic complexity and a consequently short runtime, which makes it eas…

  • Unscored —

    The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of se…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the …

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bradford Network Sentry b…

  • Unscored —

    The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote att…

  • Unscored —

    The tunnels implementation in the Linux kernel before 2.6.34, when tunnel functionality is configured as a module, allo…

  • Unscored —

    net/ipv4/ip_gre.c in the Linux kernel before 2.6.34, when ip_gre is configured as a module, allows remote attackers to …

  • Unscored —

    The ip_expire function in net/ipv4/ip_fragment.c in the Linux kernel before 2.6.39 does not properly construct ICMP_TIM…

  • Unscored —

    Integer overflow in the sys_oabi_semtimedop function in arch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 2.…

  • Unscored —

    The ext4_fill_super function in fs/ext4/super.c in the Linux kernel before 2.6.39 does not properly initialize a certai…

  • Unscored —

    Integer signedness error in the osf_sysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4…

  • Unscored —

    Integer signedness error in the osf_getdomainname function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.…

  • Unscored —

    The osf_getsysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform do…

  • Unscored —

    kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending task…

  • Unscored —

    Integer overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to c…

  • Unscored —

    The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory al…

  • Unscored —
    CVE-2011-2183 Public exploit

    Race condition in the scan_get_next_rmap_item function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel Sam…

  • Unscored —

    The osf_wait4 function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform uses an…

  • Unscored —

    fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which all…

  • Unscored —

    Integer overflow in the i915_gem_execbuffer2 function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rende…

  • Unscored —

    Integer overflow in the i915_gem_do_execbuffer function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Ren…

  • Unscored —

    The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 …

  • Unscored —

    The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access t…

  • Unscored —

    Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service (memory co…

  • High 8.8
    CVE-2012-1889 Exploited Public exploit EPSS 84%

    Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacke…

    KEV Jun 8, 2022
  • Unscored —

    CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to …