22 July 2012

18 results · Feed

• Unscored —
  CVE-2011-3149

  The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not…

  pam Debian
  Jul 22, 2012
• Unscored —
  CVE-2011-3148

  Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1…

  pam Debian
  Jul 22, 2012
• Unscored —
  CVE-2011-3464

  Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote a…

  Jul 22, 2012
• Unscored —
  CVE-2011-2199

  Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitr…

  tftp-hpa Debian
  Jul 22, 2012
• Unscored —
  CVE-2012-4045

  Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbi…

  Jul 22, 2012
• Unscored —
  CVE-2012-3384

  Cross-site request forgery (CSRF) vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to …

  wordpress Debian
  Jul 22, 2012
• Unscored —
  CVE-2012-3383

  The map_meta_cap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when the multisite feature i…

  wordpress Debian
  Jul 22, 2012
• Unscored —
  CVE-2012-3385

  WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows …

  wordpress Debian
  Jul 22, 2012
• Unscored —
  CVE-2012-2737

  The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does …

  accountsservice Debian
  Jul 22, 2012
• Unscored —
  CVE-2012-2113

  Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (app…

  tiff Debian
  Jul 22, 2012
• Unscored —
  CVE-2012-2088

  Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote …

  tiff Debian
  Jul 22, 2012
• Unscored —
  CVE-2012-3357

  The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly handle log messages when a…

  Jul 22, 2012
• Unscored —
  CVE-2012-3356

  The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authoriz…

  Jul 22, 2012
• Medium —
  CVE-2012-3361

  OpenStack Nova Arbitrary file injection/corruption through directory traversal issues

  virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image.

  nova nova Debian PyPI
  Jul 22, 2012
• Medium —
  CVE-2012-3360

  OpenStack Nova Directory traversal vulnerability

  Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote authenticated users to write arbitrary files to the disk image via a .. (dot dot) in …

  nova nova Debian PyPI
  Jul 22, 2012
• Unscored —
  CVE-2012-2738 Public exploit EPSS 11%

  The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (l…

  vte vte Debian Alpine
  Jul 22, 2012
• Unscored —
  CVE-2012-2751

  ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request …

  modsecurity-apache Debian
  Jul 22, 2012
• Unscored —
  CVE-2009-5031

  ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attack…

  Jul 22, 2012