Skip to content
OpenAdvisories

Archive

26 July 2012

Vulnerabilities first published on this day (UTC), newest first.

16 results · Feed

  • Unscored —

    Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in Adm…

  • Unscored —
    CVE-2011-2657 Public exploit EPSS 48%

    Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in Lau…

  • Unscored —

    The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP…

  • Unscored —

    AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmi…

  • Unscored —

    The default configuration of AirDroid 1.0.4 beta uses a four-character alphanumeric password, which makes it easier for…

  • Unscored —

    AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it …

  • Unscored —

    The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism…

  • Unscored —

    AirDroid 1.0.4 beta uses the MD5 algorithm for values in the checklogin key parameter and 7bb cookie, which makes it ea…

  • Unscored —

    nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions …

  • Unscored —

    The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap befo…

  • Unscored —

    runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly valid…

  • Unscored —

    Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto Networks Global Protect Portal, Globa…

  • Unscored —

    Apple Xcode before 4.4 does not properly compose a designated requirement (DR) during signing of programs that lack bun…

  • Unscored —

    Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application …

  • Unscored —

    Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlie…