25 August 2012

55 results · Feed

• Unscored —
  CVE-2012-0048

  OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service (game pause) by connecting to the serv…

  Aug 25, 2012
• Unscored —
  CVE-2012-4668 Public exploit

  Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbit…

  roundcube Debian
  Aug 25, 2012
• Unscored —
  CVE-2012-4667

  Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbi…

  Aug 25, 2012
• Unscored —
  CVE-2012-3501

  The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes…

  Aug 25, 2012
• Unscored —
  CVE-2012-3402

  Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote at…

  gimp Debian
  Aug 25, 2012
• Unscored —
  CVE-2012-3514

  OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions pre…

  xml-light Debian
  Aug 25, 2012
• Unscored —
  CVE-2012-3479

  lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the…

  Aug 25, 2012
• Unscored —
  CVE-2012-3403

  Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cau…

  gimp Debian
  Aug 25, 2012
• Unscored —
  CVE-2012-3508 Public exploit

  Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers …

  roundcube Debian
  Aug 25, 2012
• Unscored —
  CVE-2012-3507

  Cross-site scripting (XSS) vulnerability in program/steps/mail/func.inc in RoundCube Webmail before 0.8.0, when using t…

  Aug 25, 2012
• Critical 9.8
  CVE-2012-3503

  Katello uses hard coded credential

  The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System…

  katello RubyGems
  Aug 25, 2012
• Unscored —
  CVE-2012-3441

  The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databa…

  Aug 25, 2012
• Unscored —
  CVE-2012-3481

  Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2…

  gimp Debian
  Aug 25, 2012
• Unscored —
  CVE-2012-3416

  Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMIN…

  condor Debian
  Aug 25, 2012
• Unscored —
  CVE-2012-3480 Public exploit

  Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related fun…

  glibc Debian
  Aug 25, 2012