Skip to content
OpenAdvisories

Archive

9 July 2012

Vulnerabilities first published on this day (UTC), newest first.

10 results · Feed

  • Unscored —
    CVE-2012-1493 Public exploit EPSS 63%

    F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, …

  • Unscored —

    Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2,…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before …

  • Medium —
    CVE-2012-2138 Public exploit EPSS 14%

    Apache Sling POST Servlets Denial of Service Vulnerability

    The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite…

  • Unscored —

    The Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of service (device hang) via ne…

  • Unscored —
    CVE-2012-3859 Public exploit

    Unspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack vectors, a different vulne…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in accountmgr/adminupdate.php in the WebAdmin Portal in Netsweeper allo…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in tools/local_lookup.php in the WebAdmin Portal in Netsweeper allows remote a…

  • Unscored —

    channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3…

  • High 7.4

    The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private…