17 July 2012

99 results · Feed

• Unscored —
  CVE-2012-0276 Public exploit

  Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applica…

  Jul 17, 2012
• Unscored —
  CVE-2012-0277 Public exploit

  Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application cras…

  Jul 17, 2012
• Medium 6.5
  CVE-2012-1571

  file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Docum…

  file Debian
  Jul 17, 2012
• Unscored —
  CVE-2012-4032 Public exploit Scanner template EPSS 10%

  Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users …

  Jul 17, 2012
• Unscored —
  CVE-2012-4031 Public exploit EPSS 52%

  Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attack…

  Jul 17, 2012
• Unscored —
  CVE-2012-3241

  The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows…

  Jul 17, 2012
• Unscored —
  CVE-2012-3240

  The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges …

  Jul 17, 2012
• Unscored —
  CVE-2012-3355

  (1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.…

  rhythmbox Debian
  Jul 17, 2012
• Low —
  CVE-2012-3371

  OpenStack Nova Scheduler denial of service through scheduler_hints

  The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang) via a re…

  nova nova Debian PyPI
  Jul 17, 2012
• Unscored —
  CVE-2012-0794

  The rc4encrypt function in lib/moodlelib.php in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and…

  Jul 17, 2012
• High —
  CVE-2012-0796

  PHPMailer vulnerable to email header injection

  class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving …

  phpmailer/phpmailer Packagist
  Jul 17, 2012
• Unscored —
  CVE-2012-0792

  mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other detail…

  Jul 17, 2012
• Unscored —
  CVE-2012-0795

  Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does not validate e-mail add…

  Jul 17, 2012
• Unscored —
  CVE-2012-0798

  The self-enrolment functionality in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 allows remote authenticated users …

  Jul 17, 2012
• Unscored —
  CVE-2012-0799

  Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attacker…

  Jul 17, 2012
• Unscored —
  CVE-2012-0801

  lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle multiple instances of a f…

  Jul 17, 2012
• Unscored —
  CVE-2012-0793

  Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote attackers to v…

  Jul 17, 2012
• Medium —
  CVE-2012-0797

  Moodle Users Can Bypass Deleted Status

  The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote authenticated users to bypass the deleted status and continue using a server via a token.

  moodle/moodle Packagist
  Jul 17, 2012
• Unscored —
  CVE-2012-0800

  The form-autocompletion functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 makes it…

  Jul 17, 2012