Skip to content
OpenAdvisories

Archive

9 October 2012

Vulnerabilities first published on this day (UTC), newest first.

← September 2012 2012 / October /9 November 2012 →
  1. 149
  2. 24
  3. 312
  4. 425
  5. 512
  6. 614
  7. 710
  8. 850
  9. 963
  10. 1040
  11. 1112
  12. 125
  13. 13 
  14. 14 
  15. 15 
  16. 1667
  17. 1767
  18. 183
  19. 19 
  20. 206
  21. 21 
  22. 2233
  23. 236
  24. 244
  25. 2531
  26. 264
  27. 27 
  28. 281
  29. 299
  30. 301
  31. 3125
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2012-4418

    Apache Axis2 Vulnerable to XML Signature wrapping attack

    Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."

    org.apache.axis2:axis2 Maven
  • Medium —
    CVE-2012-5351

    Improper Authentication in Apache Axis2

    Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack," a different vulnerability than CVE-2012-4418.

    org.apache.axis2:axis2 Maven
  • Medium —
    CVE-2012-4457

    OpenStack Keystone Token authorization for a user in a disabled tenant is allowed

    OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-3 does not properly handle authorization tokens for disabled tenants, which allows remote authenticated users to access the tenant's resources by requesting a token for the tenant.

    keystone keystone Debian PyPI