Skip to content
OpenAdvisories

Archive

June 2012

Vulnerabilities first published in this month (UTC), newest first.

405 results · Feed

  • Unscored —

    Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigati…

  • Unscored —

    Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed …

  • Unscored —

    Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier …

  • Unscored —

    Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrar…

  • Unscored —

    Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via a web page that co…

  • Unscored —

    Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application hang) via JavaS…

  • Unscored —

    Opera before 12.00 Beta allows remote attackers to cause a denial of service (application hang) via an absolutely posit…

  • Unscored —

    Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted WebGL cont…

  • Unscored —

    Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cro…

  • Unscored —

    Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application crash) via a cr…

  • Unscored —

    Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double…

  • Unscored —

    Opera before 12.00 Beta allows remote attackers to cause a denial of service (memory consumption or application hang) v…

  • Unscored —

    Unspecified vulnerability in Opera before 12.00 on Mac OS X has unknown impact and attack vectors, related to a "modera…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the SIP implementation on the Cisco SPA8000 and SPA8800 before 6.1.11, SPA2…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in HP Web Jetadmin 8.x allow remote attackers to inject arbitrary w…

  • Unscored —

    The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows re…

  • Unscored —

    The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authen…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in AutoFORM PDM Archive before 6.920 allow remote authenticated use…

  • Unscored —

    AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which all…

  • Unscored —

    Poul-Henning Kamp md5crypt has insufficient algorithmic complexity and a consequently short runtime, which makes it eas…

  • Unscored —

    The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of se…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the …

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bradford Network Sentry b…

  • Unscored —

    The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote att…

  • Unscored —

    The tunnels implementation in the Linux kernel before 2.6.34, when tunnel functionality is configured as a module, allo…

  • Unscored —

    net/ipv4/ip_gre.c in the Linux kernel before 2.6.34, when ip_gre is configured as a module, allows remote attackers to …

  • Unscored —

    The ip_expire function in net/ipv4/ip_fragment.c in the Linux kernel before 2.6.39 does not properly construct ICMP_TIM…

  • Unscored —

    Integer overflow in the sys_oabi_semtimedop function in arch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 2.…

  • Unscored —

    The ext4_fill_super function in fs/ext4/super.c in the Linux kernel before 2.6.39 does not properly initialize a certai…

  • Unscored —

    Integer signedness error in the osf_sysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4…

  • Unscored —

    Integer signedness error in the osf_getdomainname function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.…

  • Unscored —

    The osf_getsysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform do…

  • Unscored —

    kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending task…

  • Unscored —

    Integer overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to c…

  • Unscored —

    The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory al…

  • Unscored —
    CVE-2011-2183 Public exploit

    Race condition in the scan_get_next_rmap_item function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel Sam…

  • Unscored —

    The osf_wait4 function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform uses an…

  • Unscored —

    fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which all…

  • Unscored —

    Integer overflow in the i915_gem_execbuffer2 function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rende…

  • Unscored —

    Integer overflow in the i915_gem_do_execbuffer function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Ren…