Archive
22 June 2012
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
Medium —CVE-2012-2661 Public exploit
Active Record vulnerable to SQL Injection via nested query parameters
The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain S…
-
Unscored —CVE-2012-2172 Public exploit
Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Stora…
-
Unscored —CVE-2012-2171 Public exploit
SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manage…
-
Unscored —CVE-2012-2179 Public exploit
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a tempora…