Archive
29 June 2012
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows local users to obtain sensitive in…
-
Unscored —
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial…
-
Unscored —
HP System Management Homepage (SMH) before 7.1.1 does not properly validate input, which allows remote authenticated us…
-
Unscored —
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote authenticated users to gain…
-
Unscored —
HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form field…
-
Unscored —
Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers t…
-
Unscored —
The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly restrict access whe…
-
Unscored —
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit…
-
Unscored —
The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete and delete_bug_thres…
-
Unscored —
bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permission of the receivi…
-
Unscored —
MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privile…
-
Unscored —
The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to…
-
Unscored —
MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers …
-
Unscored —
The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop …
-
Unscored —
The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from …
-
Unscored —
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file w…
-
Unscored —CVE-2012-2698 Public exploit
Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.…
-
Unscored —
QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certi…
-
Unscored —
The fpm exporter in Revelation 0.4.13-2 and earlier encrypts the version number but not the password when exporting a f…
-
Unscored —CVE-2012-3232 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote…
-
Unscored —
Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP2…
-
Unscored —
Buffer overflow in the Cisco WebEx Advanced Recording Format (ARF) player T27 L through SP11 EP26, T27 LB through SP21 …
-
Unscored —
Stack-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP…
-
Unscored —
Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27…
-
Unscored —
Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP2…
-
Medium —CVE-2012-2098 EPSS 13%
Uncontrolled Resource Consumption in Apache Commons Compress
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeat…