Archive
June 2012
Vulnerabilities first published in this month (UTC), newest first.
405 results · Feed
-
Unscored —
The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a cer…
-
Unscored —
The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a cert…
-
Unscored —CVE-2011-1479 Public exploit
Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a deni…
-
Unscored —
Multiple array index errors in sound/oss/opl3.c in the Linux kernel before 2.6.39 allow local users to cause a denial o…
-
Unscored —
Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows …
-
Unscored —
The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer,…
-
Unscored —
The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a cer…
-
Unscored —
Integer underflow in the Open Sound System (OSS) subsystem in the Linux kernel before 2.6.39 on unspecified non-x86 pla…
-
Unscored —
The encode_share_access function in fs/nfs/nfs4xdr.c in the Linux kernel before 2.6.29 allows local users to cause a de…
-
Unscored —
The ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain data-length values are …
-
Unscored —
The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT…
-
Unscored —
The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec sys…
-
Unscored —
fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID…
-
Unscored —
Buffer overflow in the fuse_do_ioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to…
-
Unscored —CVE-2010-4250 Public exploit
Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows …
-
Unscored —
The orinoco_ioctl_set_auth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel before 2.6.37 does not p…
-
Unscored —CVE-2012-3791 Public exploit
Multiple SQL injection vulnerabilities in Simple Web Content Management System 1.1 allow remote attackers to execute ar…
-
Unscored —
qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypas…
-
Unscored —
The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a dev…
-
Unscored —
Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest us…
-
Unscored —
Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU…
-
Unscored —
Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial …
-
Unscored —
The virtio_queue_notify in qemu-kvm 0.14.0 and earlier does not properly validate the virtqueue number, which allows gu…
-
Unscored —
libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted config…
-
Unscored —
The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when t…
-
Unscored —
Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.…
-
Unscored —CVE-2012-1149 EPSS 14%
Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice b…
-
Unscored —
Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allow…
-
Unscored —
SQL injection vulnerability in the Counter module for Drupal allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Comment Moderation module 6.x-1.x before 6.x-1.1 for Drupal allo…
-
Unscored —CVE-2012-2149 EPSS 14%
The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (O…
-
Medium —
OpenStack Compute (Nova) Improper Input Validation
The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remo…
-
Unscored —
Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 650…
-
Unscored —
Cisco Application Control Engine (ACE) before A4(2.3) and A5 before A5(1.1), when multicontext mode is enabled, does no…
-
Unscored —
The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR…
-
Unscored —
A certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility…
-
Unscored —
The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure D…
-
Unscored —
The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR…
-
Unscored —
The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public p…