25 July 2012

113 results · Feed

• Unscored —
  CVE-2012-3678

  WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of serv…

  Jul 25, 2012
• Unscored —
  CVE-2012-3611

  WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of serv…

  qtwebkit-source Ubuntu
  Jul 25, 2012
• Unscored —
  CVE-2012-0680

  Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows r…

  Jul 25, 2012
• Unscored —
  CVE-2012-0678

  Cross-site scripting (XSS) vulnerability in Apple Safari before 6.0 allows remote attackers to inject arbitrary web scr…

  Jul 25, 2012
• Unscored —
  CVE-2012-0679

  Apple Safari before 6.0 allows remote attackers to read arbitrary files via a feed:// URL.

  Jul 25, 2012
• Unscored —
  CVE-2012-4053

  Cross-site request forgery (CSRF) vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attack…

  Jul 25, 2012
• Unscored —
  CVE-2012-3694

  WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote atta…

  Jul 25, 2012
• Unscored —
  CVE-2012-3695

  Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitra…

  Jul 25, 2012
• Unscored —
  CVE-2012-3697

  WebKit in Apple Safari before 6.0 does not properly handle file: URLs, which allows remote attackers to bypass intended…

  Jul 25, 2012
• Unscored —
  CVE-2012-3691

  WebKit in Apple Safari before 6.0 does not properly handle Cascading Style Sheets (CSS) property values, which allows r…

  Jul 25, 2012
• Unscored —
  CVE-2012-3690

  WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote atta…

  Jul 25, 2012
• Unscored —
  CVE-2012-3650

  WebKit in Apple Safari before 6.0 accesses uninitialized memory locations during the rendering of SVG images, which all…

  Jul 25, 2012
• Unscored —
  CVE-2012-3693

  Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names i…

  Jul 25, 2012
• Unscored —
  CVE-2012-3696

  CRLF injection vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrary HTTP head…

  Jul 25, 2012
• Unscored —
  CVE-2012-3689

  WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote atta…

  Jul 25, 2012
• Unscored —
  CVE-2012-2673

  Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_ma…

  libgc Debian
  Jul 25, 2012
• Unscored —
  CVE-2012-2676

  Multiple integer overflows in the (1) malloc and (2) calloc functions in Hoard before 3.9 make it easier for context-de…

  Jul 25, 2012
• Unscored —
  CVE-2012-2760 Public exploit

  mod_auth_openid before 0.7 for Apache uses world-readable permissions for /tmp/mod_auth_openid.db, which allows local u…

  libapache2-mod-auth-openid Debian
  Jul 25, 2012
• Unscored —
  CVE-2012-2677

  Integer overflow in the ordered_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for con…

  mysql ceph Azure Linux
  Jul 25, 2012
• Unscored —
  CVE-2012-2674

  Multiple integer overflows in the (1) chk_malloc, (2) leak_malloc, and (3) leak_memalign functions in libc/bionic/mallo…

  Jul 25, 2012
• Unscored —
  CVE-2012-2675

  Multiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions in nedmalloc (nedmalloc…

  Jul 25, 2012
• Unscored —
  CVE-2006-7252

  Integer overflow in the calloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD makes it…

  Jul 25, 2012
• Unscored —
  CVE-2005-4895

  Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent atta…

  google-perftools Debian
  Jul 25, 2012
• Unscored —
  CVE-2007-6754

  The ipalloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD does not properly allocate …

  Jul 25, 2012
• Unscored —
  CVE-2012-3954

  Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers …

  isc-dhcp Debian
  Jul 25, 2012
• Unscored —
  CVE-2012-3868

  Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause…

  Jul 25, 2012
• Unscored —
  CVE-2012-3570

  Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a deni…

  isc-dhcp Debian
  Jul 25, 2012
• Unscored —
  CVE-2012-3817 EPSS 24%

  ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV befo…

  bind9 Debian
  Jul 25, 2012
• Unscored —
  CVE-2012-3571 Public exploit EPSS 13%

  ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infini…

  isc-dhcp Debian
  Jul 25, 2012
• Unscored —
  CVE-2012-2646

  The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do …

  Jul 25, 2012
• Unscored —
  CVE-2012-2196

  IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read ar…

  Jul 25, 2012
• Unscored —
  CVE-2012-2194

  Directory traversal vulnerability in the SQLJ.DB2_INSTALL_JAR stored procedure in IBM DB2 9.1 before FP12, 9.5 through …

  Jul 25, 2012
• Unscored —
  CVE-2012-2197

  Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.…

  Jul 25, 2012