Archive
3 July 2012
Vulnerabilities first published on this day (UTC), newest first.
45 results · Feed
-
Unscored —CVE-2012-3845 Public exploit
Buffer overflow in LAN Messenger 1.2.28 and earlier allows remote attackers to cause a denial of service (crash) via a …
-
Unscored —CVE-2012-3835 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in PHP-pastebin 2.1 allows remote attackers to inject arbitrary w…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allow remote authe…
-
Unscored —
Cross-site scripting (XSS) vulnerability in vBulletin 4.1.12 allows remote attackers to inject arbitrary web script or …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in decoda/Decoda.php in Decoda before 3.2 allows remote attackers to inject ar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Joomla! 2.5.3 allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —CVE-2012-3837 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and ear…
-
Unscored —CVE-2012-3834 Public exploit
SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (O…
-
Unscored —CVE-2012-3840 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php/users/form/user_id in MyClientBase 0.12 allow remote a…
-
Unscored —CVE-2012-3830 Public exploit
Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.3 allows remote attackers t…
-
Unscored —CVE-2012-3836 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.0 allow remote attackers to inject arbitra…
-
Unscored —CVE-2012-3839 Public exploit
Multiple SQL injection vulnerabilities in application/core/MY_Model.php in MyClientBase 0.12 allow remote attackers to …
-
Unscored —CVE-2012-3831 Public exploit
Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.1 allows remote attackers t…
-
Unscored —CVE-2012-3838 Public exploit
Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/…
-
Unscored —
Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary code and conduct DLL h…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the registration page in e107, probably 1.0.1, allows remote attackers to i…
-
Unscored —
Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header.
-
Unscored —
Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (…
-
Unscored —
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon s…
-
Unscored —
Directory traversal vulnerability in the Dojo module in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF14, and 8.0, …
-
Unscored —CVE-2011-4029 Public exploit
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of ar…
-
Unscored —
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of a…
-
Unscored —
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash …
-
Unscored —
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor co…
-
Unscored —
Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers t…
-
Unscored —
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Cal…
-
Unscored —
Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain sensitive information via vec…
-
Unscored —
Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to gain privileges via unknown attack v…
-
Unscored —
proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows…
-
Unscored —
msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, whic…
-
Unscored —
The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended…
-
Unscored —
The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle th…
-
Unscored —
The gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does not properly handle cer…
-
Unscored —
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell me…
-
Unscored —CVE-2012-0045 Public exploit
The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not …
-
Unscored —
The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not …
-
Unscored —
The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the gro…
-
Unscored —
The Trigger plugin in bcfg2 1.2.x before 1.2.3 allows remote attackers with root access to the client to execute arbitr…