Archive
27 June 2012
Vulnerabilities first published on this day (UTC), newest first.
63 results · Feed
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow rem…
-
Unscored —
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easi…
-
Unscored —
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which …
-
Unscored —
Cross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web scri…
-
Unscored —
The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before…
-
Unscored —
Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote…
-
Unscored —
Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 a…
-
Unscored —CVE-2012-3816 Public exploit
WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Req…
-
Unscored —
The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local use…
-
Unscored —
The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Mobile Tools module 6.x-2.x before 6.x-2.3 for Drupal allow …
-
Low —
Puppet allows local users to overwrite arbitrary files via a symlink attack
telnet.rb in Puppet 2.7.x before 2.7.13 and Puppet Enterprise (PE) 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows local users to overwrite arbitrary files via a symlink attack on the NET::Telnet connection log (/tmp/out.log).
-
Unscored —
Unspecified vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote authenticated users to read t…
-
Unscored —
The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service …
-
Unscored —
The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incor…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service …
-
Unscored —
Use-after-free vulnerability in the UI in Google Chrome before 20.0.1132.43 on Mac OS X allows attackers to cause a den…
-
Unscored —
Google Chrome before 20.0.1132.43 allows remote attackers to obtain potentially sensitive information from a fragment i…
-
Unscored —
Integer overflow in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly …
-
Unscored —
Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service …
-
Unscored —
Google Chrome before 20.0.1132.43 does not properly implement texture conversion, which allows remote attackers to caus…
-
Unscored —
Multiple integer overflows in the PDF functionality in Google Chrome before 20.0.1132.43 allow remote attackers to caus…
-
Unscored —
The PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (out-of…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service …
-
Unscored —
The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain …
-
Unscored —
The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified …
-
Unscored —
Google Chrome before 20.0.1132.43 on Windows does not properly isolate sandboxed processes, which might allow remote at…
-
Unscored —CVE-2012-2764 Public exploit
Untrusted search path vulnerability in Google Chrome before 20.0.1132.43 on Windows might allow local users to gain pri…
-
Unscored —
The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle u…
-
Unscored —
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 20.0.1132.43 al…
-
Unscored —
The image-codec implementation in the PDF functionality in Google Chrome before 20.0.1132.43 does not initialize an uns…
-
Unscored —
Google Chrome before 20.0.1132.43 does not properly set array values, which allows remote attackers to cause a denial o…
-
Unscored —
Google Chrome before 20.0.1132.43 does not properly implement SVG filters, which allows remote attackers to cause a den…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service …
-
Unscored —
Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux…
-
Unscored —
Buffer overflow in the JS API in the PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in og.js in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal, …
-
Unscored —
The Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when creating a local user account, allows attackers to obta…