Archive
June 2012
Vulnerabilities first published in this month (UTC), newest first.
51 results · Clear filters · Feed
-
Unscored —CVE-2012-3825 Public exploit
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a de…
-
Unscored —CVE-2012-3826 Public exploit
Multiple integer underflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a d…
-
Unscored —CVE-2012-2394 Public exploit
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data …
-
Unscored —CVE-2012-2393 Public exploit
epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 doe…
-
Unscored —CVE-2012-2392 Public exploit
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loo…
-
Unscored —
The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop …
-
Unscored —CVE-2012-2698 Public exploit
Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.…
-
Unscored —CVE-2012-3232 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote…
-
Unscored —
Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote…
-
Unscored —
Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 a…
-
Unscored —CVE-2012-3816 Public exploit
WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Req…
-
Unscored —CVE-2012-2764 Public exploit
Untrusted search path vulnerability in Google Chrome before 20.0.1132.43 on Windows might allow local users to gain pri…
-
Unscored —
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befo…
-
Unscored —
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows r…
-
Unscored —
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not…
-
Unscored —
Integer overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 a…
-
Unscored —
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows r…
-
Unscored —
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows r…
-
Unscored —
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows r…
-
Medium —CVE-2012-2661 Public exploit
Active Record vulnerable to SQL Injection via nested query parameters
The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain S…
-
Unscored —CVE-2012-2172 Public exploit
Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Stora…
-
Unscored —CVE-2012-2171 Public exploit
SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manage…
-
Unscored —CVE-2012-2179 Public exploit
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a tempora…
-
Unscored —CVE-2011-1021 Public exploit
drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by…
-
Unscored —CVE-2011-1479 Public exploit
Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a deni…
-
Unscored —CVE-2010-4250 Public exploit
Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows …
-
Unscored —CVE-2012-3791 Public exploit
Multiple SQL injection vulnerabilities in Simple Web Content Management System 1.1 allow remote attackers to execute ar…
-
Unscored —
The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted…
-
Unscored —
Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x bef…
-
Unscored —
Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attack…
-
Unscored —
hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attacke…
-
Unscored —
Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) t…
-
Unscored —
Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPres…
-
Unscored —CVE-2012-3578 Public exploit
Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPres…
-
Unscored —
OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL…
-
Critical 9.8
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 u…
KEV Mar 3, 2022 -
Unscored —
Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause …
-
Unscored —
Unrestricted file upload vulnerability in includes/doajaxfileupload.php in the MM Forms Community plugin 2.2.5 and 2.2.…
-
Unscored —
Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows r…
-
Unscored —
Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attack…