Skip to content
OpenAdvisories

Archive

22 June 2012

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium —
    CVE-2012-2661 Public exploit

    Active Record vulnerable to SQL Injection via nested query parameters

    The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain S…

  • Unscored —
    CVE-2012-2172 Public exploit

    Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Stora…

  • Unscored —
    CVE-2012-2171 Public exploit

    SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manage…

  • Unscored —
    CVE-2012-2179 Public exploit

    libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a tempora…