Archive
August 2012
Vulnerabilities first published in this month (UTC), newest first.
735 results · Feed
-
High 7.5
PyFriBidi Buffer overflow in the fribidi_utf8_to_unicode function
Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application crash) via a 4-byte utf-8 sequence.
-
Unscored —
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to ob…
-
Medium —
Elefant CMS Multiple XSS Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body parameter to …
-
Unscored —
Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to inject arbitra…
-
Unscored —
Blue Coat ProxySG 6.1 before SGOS 6.1.5.1 and 6.2 before SGOS 6.2.2.1 writes the secure heap to core images, which allo…
-
Unscored —
Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3…
-
Unscored —
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 a…
-
Unscored —
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control t…
-
Unscored —
The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary fil…
-
Unscored —CVE-2012-3485 Public exploit
Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname …
-
Unscored —
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifie…
-
Unscored —CVE-2012-3483 Public exploit
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by …
-
Unscored —
Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a progra…
-
Unscored —
Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a sp…
-
Unscored —
Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 al…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Java Management Console in Blue Coat ProxySG before SGOS 4.3.4.1, 5.x b…
-
Unscored —
The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities on the Blue Coat ProxyAV appliance before 3.2.6.1 allow remo…
-
Unscored —
The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 106 and 7.x before 7.1 allow remote a…
-
Unscored —
The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (service c…
-
Unscored —
The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent LDAP auth…
-
Unscored —
The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consumption and…
-
Unscored —
The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which …
-
Unscored —
Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —
PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID.
-
Unscored —CVE-2012-2227 Public exploit
Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and exe…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in SilverStripe 2.3.x before 2.3.9 and 2.4.x before 2.4.3 al…
-
Unscored —
SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the (1) debug_memory parame…
-
Unscored —
The Security/changepassword URL action in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 passes a token as a G…
-
Unscored —
The setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1 allows remote aut…
-
Unscored —
The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require AD…
-
Unscored —
SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1, when running on servers with certain configurations, allows rem…
-
Unscored —
SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to ob…
-
Unscored —
SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the cross-site request forger…
-
Unscored —
SilverStripe before 2.4.2 allows remote authenticated users to change administrator passwords via vectors related to ad…
-
Unscored —
Cross-site scripting (XSS) vulnerability in SilverStripe 2.3.x before 2.3.6 allows remote attackers to inject arbitrary…
-
Unscored —
Member_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user acc…
-
Unscored —
The Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in plaintext, which allows …
-
Unscored —
The Antivirus component in Comodo Internet Security before 5.4.189822.1355 allows remote attackers to cause a denial of…