Archive
13 June 2012
Vulnerabilities first published on this day (UTC), newest first.
32 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in the SIP implementation on the Cisco SPA8000 and SPA8800 before 6.1.11, SPA2…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in HP Web Jetadmin 8.x allow remote attackers to inject arbitrary w…
-
Unscored —
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows re…
-
Unscored —
The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authen…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in AutoFORM PDM Archive before 6.920 allow remote authenticated use…
-
Unscored —
AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which all…
-
Unscored —
Poul-Henning Kamp md5crypt has insufficient algorithmic complexity and a consequently short runtime, which makes it eas…
-
Unscored —
The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of se…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bradford Network Sentry b…
-
Unscored —
The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote att…
-
Unscored —
The tunnels implementation in the Linux kernel before 2.6.34, when tunnel functionality is configured as a module, allo…
-
Unscored —
net/ipv4/ip_gre.c in the Linux kernel before 2.6.34, when ip_gre is configured as a module, allows remote attackers to …
-
Unscored —
The ip_expire function in net/ipv4/ip_fragment.c in the Linux kernel before 2.6.39 does not properly construct ICMP_TIM…
-
Unscored —
Integer overflow in the sys_oabi_semtimedop function in arch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 2.…
-
Unscored —
The ext4_fill_super function in fs/ext4/super.c in the Linux kernel before 2.6.39 does not properly initialize a certai…
-
Unscored —
Integer signedness error in the osf_sysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4…
-
Unscored —
Integer signedness error in the osf_getdomainname function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.…
-
Unscored —
The osf_getsysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform do…
-
Unscored —
kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending task…
-
Unscored —
Integer overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to c…
-
Unscored —
The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory al…
-
Unscored —CVE-2011-2183 Public exploit
Race condition in the scan_get_next_rmap_item function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel Sam…
-
Unscored —
The osf_wait4 function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform uses an…
-
Unscored —
fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which all…
-
Unscored —
Integer overflow in the i915_gem_execbuffer2 function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rende…
-
Unscored —
Integer overflow in the i915_gem_do_execbuffer function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Ren…
-
Unscored —
The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 …
-
Unscored —
The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access t…
-
Unscored —
Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service (memory co…
-
High 8.8
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacke…
KEV Jun 8, 2022 -
Unscored —
CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to …