1 October 2012

49 results · Feed

• Unscored —
  CVE-2012-1591

  The image module in Drupal 7.x before 7.14 does not properly check permissions when caching derivative image styles of …

  Oct 1, 2012
• Unscored —
  CVE-2012-1588

  Algorithmic complexity vulnerability in the _filter_url function in the text filtering system (modules/filter/filter.mo…

  Oct 1, 2012
• Unscored —
  CVE-2012-1590

  The forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished forum posts, which al…

  Oct 1, 2012
• Unscored —
  CVE-2012-4429

  Vino 2.28, 2.32, 3.4.2, and earlier allows remote attackers to read clipboard activity by listening on TCP port 5900.

  vino Debian
  Oct 1, 2012
• Unscored —
  CVE-2012-3500

  scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify…

  devscripts Debian
  Oct 1, 2012
• Medium —
  CVE-2012-2153

  Drupal improper access restrictions

  Drupal 7.x before 7.14 does not properly restrict access to nodes in a list when using a "contributed node access module," which allows remote authenticated users with the "Access the content overview page" permission to read all published nodes by accessing …

  drupal/drupal Packagist
  Oct 1, 2012
• Unscored —
  CVE-2012-2242

  scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .d…

  devscripts Debian
  Oct 1, 2012
• Unscored —
  CVE-2012-2240

  scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified …

  devscripts Debian
  Oct 1, 2012
• Unscored —
  CVE-2012-2241

  scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or…

  devscripts Debian
  Oct 1, 2012