Archive
21 June 2012
Vulnerabilities first published on this day (UTC), newest first.
37 results · Feed
-
Unscored —
The br_multicast_add_group function in net/bridge/br_multicast.c in the Linux kernel before 2.6.38, when a certain Ethe…
-
Unscored —
The ima_lsm_rule_init function in security/integrity/ima/ima_policy.c in the Linux kernel before 2.6.37, when the Linux…
-
Unscored —
The Reliable Datagram Sockets (RDS) subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map…
-
Unscored —CVE-2011-1021 Public exploit
drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by…
-
Unscored —
The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a cer…
-
Unscored —
The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a cert…
-
Unscored —CVE-2011-1479 Public exploit
Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a deni…
-
Unscored —
Multiple array index errors in sound/oss/opl3.c in the Linux kernel before 2.6.39 allow local users to cause a denial o…
-
Unscored —
Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows …
-
Unscored —
The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer,…
-
Unscored —
The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a cer…
-
Unscored —
Integer underflow in the Open Sound System (OSS) subsystem in the Linux kernel before 2.6.39 on unspecified non-x86 pla…
-
Unscored —
The encode_share_access function in fs/nfs/nfs4xdr.c in the Linux kernel before 2.6.29 allows local users to cause a de…
-
Unscored —
The ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain data-length values are …
-
Unscored —
The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT…
-
Unscored —
The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec sys…
-
Unscored —
fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID…
-
Unscored —
Buffer overflow in the fuse_do_ioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to…
-
Unscored —CVE-2010-4250 Public exploit
Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows …
-
Unscored —
The orinoco_ioctl_set_auth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel before 2.6.37 does not p…
-
Unscored —CVE-2012-3791 Public exploit
Multiple SQL injection vulnerabilities in Simple Web Content Management System 1.1 allow remote attackers to execute ar…
-
Unscored —
qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypas…
-
Unscored —
The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a dev…
-
Unscored —
Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest us…
-
Unscored —
Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU…
-
Unscored —
Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial …
-
Unscored —
The virtio_queue_notify in qemu-kvm 0.14.0 and earlier does not properly validate the virtqueue number, which allows gu…
-
Unscored —
libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted config…
-
Unscored —
The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when t…
-
Unscored —
Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.…
-
Unscored —CVE-2012-1149 EPSS 14%
Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice b…
-
Unscored —
Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allow…
-
Unscored —
SQL injection vulnerability in the Counter module for Drupal allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Comment Moderation module 6.x-1.x before 6.x-1.1 for Drupal allo…
-
Unscored —CVE-2012-2149 EPSS 14%
The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (O…
-
Medium —
OpenStack Compute (Nova) Improper Input Validation
The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remo…