Archive
August 2012
Vulnerabilities first published in this month (UTC), newest first.
735 results · Feed
-
Unscored —
The SPDY implementation in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service (appl…
-
Unscored —
libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might …
-
Unscored —
Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly ha…
-
Unscored —
Google Chrome before 21.0.1180.89 does not properly load URLs, which allows remote attackers to cause a denial of servi…
-
Unscored —
Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a den…
-
Unscored —
Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote…
-
Unscored —
The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbit…
-
Unscored —
Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local us…
-
Unscored —
rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables …
-
Unscored —
The register_application function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number ge…
-
Unscored —
The Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary Java methods, an…
-
Unscored —CVE-2012-4600 Public exploit
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x befo…
-
Unscored —
channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 be…
-
Unscored —
The WebView class in the Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbit…
-
Unscored —
Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a craft…
-
Unscored —
Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7…
-
Unscored —
Buffer overflow in the SQLDriverConnect function in unixODBC 2.0.10, 2.3.1, and earlier allows local users to cause a d…
-
Unscored —
Buffer overflow in the SQLDriverConnect function in unixODBC 2.3.1 allows local users to cause a denial of service (cra…
-
Unscored —
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and…
-
Unscored —
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allo…
-
Unscored —
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allo…
-
Unscored —
The sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequen…
-
Unscored —CVE-2011-5135 Public exploit
Multiple SQL injection vulnerabilities in the save_connection function in lib/lib.iotask.php in the iotask module in Do…
-
Unscored —
showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files …
-
Unscored —
Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or…
-
Unscored —
dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack th…
-
Unscored —
Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avat…
-
Unscored —CVE-2011-5129 Public exploit
Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and …
-
Unscored —
Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joo…
-
Unscored —
IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Fu…
-
Unscored —
The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 al…
-
Unscored —
Opera before 11.60 allows remote attackers to spoof the address bar via unspecified homograph characters, a different v…
-
Unscored —
Multiple unspecified vulnerabilities in HP Intelligent Management Center (IMC) before 5.0 E0101P05 allow remote attacke…
-
Unscored —
Multiple unspecified vulnerabilities in HP iNode Management Center before iNode PC 5.1 E0304 allow remote attackers to …
-
Unscored —
event.c in acpid (aka acpid2) before 2.0.11 does not have an appropriate umask setting during execution of event-handle…
-
Unscored —CVE-2011-2777 Public exploit
samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows …
-
Unscored —
The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is ena…
-
Unscored —
IBM WebSphere MQ 7.1, when an SVRCONN channel is used, allows remote attackers to bypass the security-configuration set…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlie…