Archive
22 October 2012
Vulnerabilities first published on this day (UTC), newest first.
33 results · Feed
-
Unscored —
(1) services/twitter/twitter-contact-view.c and (2) services/twitter/twitter-item-view.c in libsocialweb before 0.25.20…
-
Unscored —CVE-2011-5211 Public exploit
Cross-site scripting (XSS) vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbi…
-
Unscored —CVE-2011-5212 Public exploit
SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2012-1900 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attacker…
-
Medium —
Improper Access Control in JBoss mod_cluster
mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server, which allows remote attackers to bypass access restrictions a…
-
Unscored —
ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers t…
-
Unscored —
librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the…
-
Unscored —
services/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr when no Flickr account is set,…
-
Unscored —
ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ib_acm daemon log …
-
Unscored —
fwknop before 2.0.3 does not properly validate IP addresses, which allows remote authenticated users to cause a denial …
-
Unscored —
SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attacke…
-
Unscored —CVE-2012-4773 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack…
-
Unscored —CVE-2012-4771 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitr…
-
Unscored —
SQL injection vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2012-4231 Public exploit
Cross-site scripting (XSS) vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to inject a…
-
Unscored —
The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to cause a denial of ser…
-
Unscored —CVE-2012-4772 Public exploit
SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL c…
-
Unscored —
Buffer overflow in the run_last_args function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might …
-
Unscored —
Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" …
-
Unscored —CVE-2012-4989 Public exploit
Cross-site scripting (XSS) vulnerability in admin/plugin-index.php in OpenX 2.8.10 before revision 81823 allows remote …
-
Critical 9.8
OpenStack Object Storage (swift) Code Injection vulnerability
OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.
-
Unscored —
GNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit t…
-
Unscored —
Red Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak permissions (world-read…
-
Unscored —
user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allows remote aut…
-
Unscored —CVE-2012-5452 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the language search component in Joomla! before 3.0.1 allows remote attacke…
-
Unscored —CVE-2012-5167 Public exploit
Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in file_manager/preview_top.php in ATutor AContent before 1.2-2 all…
-
Unscored —
ATutor AContent before 1.2-1 allows remote attackers to modify arbitrary user passwords or category names via a direct …
-
Unscored —CVE-2012-5453 Public exploit
SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated…
-
Unscored —CVE-2010-4821 Public exploit
Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2012-4751 Public exploit
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x befo…
-
Unscored —
Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, r…