Skip to content
OpenAdvisories

Archive

31 August 2012

Vulnerabilities first published on this day (UTC), newest first.

58 results · Feed

  • Unscored —

    The SPDY implementation in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service (appl…

  • Unscored —

    libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might …

  • Unscored —

    Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly ha…

  • Unscored —

    Google Chrome before 21.0.1180.89 does not properly load URLs, which allows remote attackers to cause a denial of servi…

  • Unscored —

    Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a den…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote…

  • Unscored —

    The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbit…

  • Unscored —

    Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local us…

  • Unscored —

    rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables …

  • Unscored —

    The register_application function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number ge…

  • Unscored —

    The Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary Java methods, an…

  • Unscored —
    CVE-2012-4600 Public exploit

    Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x befo…

  • Unscored —

    channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 be…

  • Unscored —

    The WebView class in the Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbit…

  • Unscored —
    CVE-2012-4170 Public exploit EPSS 11%

    Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a craft…

  • Unscored —

    Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7…

  • Unscored —

    Buffer overflow in the SQLDriverConnect function in unixODBC 2.0.10, 2.3.1, and earlier allows local users to cause a d…

  • Unscored —

    Buffer overflow in the SQLDriverConnect function in unixODBC 2.3.1 allows local users to cause a denial of service (cra…