Skip to content
OpenAdvisories

Archive

5 October 2012

Vulnerabilities first published on this day (UTC), newest first.

12 results · Feed

  • Unscored —

    SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x bef…

  • Unscored —

    Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restrict…

  • Unscored —

    Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effe…

  • Unscored —

    Monkey HTTP Daemon 0.9.3 might allow local users to overwrite arbitrary files via a symlink attack on a PID file, as de…

  • Unscored —

    Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain priv…

  • Unscored —

    Monkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI scripts, which might al…

  • Unscored —

    Directory traversal vulnerability in VMware CapacityIQ 1.5.x allows remote attackers to read arbitrary files via unspec…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the server in VMware vCenter Operations (aka vCOps) before 5.0.x allows rem…

  • Unscored —

    Google SketchUp before 8.0.14346 (aka 8 Maintenance 3) allows user-assisted remote attackers to execute arbitrary code …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Final Beta Laboratory MyWebSearch before 1.23 allows remote attackers to in…

  • Unscored —

    Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF…

  • Unscored —

    Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF…