Archive
26 August 2012
Vulnerabilities first published on this day (UTC), newest first.
65 results · Feed
-
Unscored —
munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of s…
-
Unscored —
The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary …
-
Unscored —
munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via …
-
High 7.5
Elixir can leak information due to weak use of crypto
Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for context-dependent users to obtain sensitive information and decrypt the database.
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Creative Commons module 6.x-1.x before 6.x-1.1 for Drupal al…
-
Unscored —CVE-2012-2104 Public exploit
cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might…
-
Unscored —CVE-2012-1921 Public exploit
Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attacke…
-
High 7.5
PyFriBidi Buffer overflow in the fribidi_utf8_to_unicode function
Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application crash) via a 4-byte utf-8 sequence.
-
Unscored —
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to ob…
-
Medium —
Elefant CMS Multiple XSS Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body parameter to …
-
Unscored —
Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to inject arbitra…
-
Unscored —
Blue Coat ProxySG 6.1 before SGOS 6.1.5.1 and 6.2 before SGOS 6.2.2.1 writes the secure heap to core images, which allo…
-
Unscored —
Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3…
-
Unscored —
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 a…
-
Unscored —
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control t…
-
Unscored —
The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary fil…
-
Unscored —CVE-2012-3485 Public exploit
Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname …
-
Unscored —
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifie…
-
Unscored —CVE-2012-3483 Public exploit
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by …
-
Unscored —
Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a progra…
-
Unscored —
Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a sp…
-
Unscored —
Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 al…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Java Management Console in Blue Coat ProxySG before SGOS 4.3.4.1, 5.x b…
-
Unscored —
The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities on the Blue Coat ProxyAV appliance before 3.2.6.1 allow remo…
-
Unscored —
The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 106 and 7.x before 7.1 allow remote a…
-
Unscored —
The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (service c…
-
Unscored —
The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent LDAP auth…
-
Unscored —
The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consumption and…
-
Unscored —
The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which …
-
Unscored —
Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —
PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID.
-
Unscored —CVE-2012-2227 Public exploit
Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and exe…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in SilverStripe 2.3.x before 2.3.9 and 2.4.x before 2.4.3 al…
-
Unscored —
SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the (1) debug_memory parame…
-
Unscored —
The Security/changepassword URL action in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 passes a token as a G…
-
Unscored —
The setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1 allows remote aut…
-
Unscored —
The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require AD…
-
Unscored —
SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1, when running on servers with certain configurations, allows rem…