Archive
November 2012
Vulnerabilities first published in this month (UTC), newest first.
436 results · Feed
-
Unscored —
Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in ch…
-
Unscored —
Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibl…
-
Unscored —
The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_sessio…
-
High 7.5
Python Keyring does not securely initialize encryption cipher
Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack.
-
Unscored —
Unspecified vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to bypass access res…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attacker…
-
Unscored —
The Restrict node page view module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "view a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to in…
-
Unscored —
The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin …
-
Unscored —CVE-2012-4562 EPSS 13%
Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Colorbox Node module 7.x-2.x before 7.x-2.2 for Drupal allow…
-
Unscored —
Use-after-free vulnerability in libunity-webapps before 2.4.1 allows remote attackers to cause a denial of service (mem…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Privatemsg module 7.x-1.x before 7.x-1.3 for Drupal allows remote attac…
-
Unscored —
SQL injection vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to execute arbitra…
-
Unscored —
Unrestricted file upload vulnerability in upload.php in the Drag & Drop Gallery module 6.x-1.5 and earlier for Drupal a…
-
Unscored —
The Security Questions module for Drupal 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.1 does not properly restrict a…
-
Unscored —
The Listhandler module 6.x-1.x before 6.x-1.1 for Drupal does not properly check permissions when importing emails, whi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Hashcash module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.2 for D…
-
Unscored —
Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause …
-
Unscored —
Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2…
-
Unscored —CVE-2012-4557 EPSS 17%
The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon …
-
Unscored —
Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP reque…
-
Unscored —
Integer overflow in diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver …
-
Unscored —CVE-2012-4220 Public exploit
diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 thro…
-
Unscored —
drivers/gpu/msm/kgsl.c in the Qualcomm Innovation Center (QuIC) Graphics KGSL kernel-mode driver for Android 2.3 throug…
-
Unscored —
The KYOCERA AH-K3001V, AH-K3002V, WX300K, WX310K, WX320K, and WX320KR devices allow remote attackers to cause a denial …
-
Unscored —
Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1-TIV-TEMRC821-IF0002 all…
-
Unscored —
Unspecified vulnerability on the HP Integrated Lights-Out 3 (aka iLO3) with firmware before 1.50 and Integrated Lights-…
-
Unscored —
The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite a…
-
Unscored —
Google CityHash computes hash values without properly restricting the ability to trigger hash collisions predictably, w…
-
Unscored —
Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without…
-
Unscored —
Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability …
-
Medium —
JRuby denial of service via Hash Collision
JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table…
-
Unscored —
Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which al…
-
Unscored —
Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the abil…
-
Unscored —
The Samsung printer firmware before 20121031 has a hardcoded read-write SNMP community, which makes it easier for remot…
-
Unscored —
Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service (application crash) via a respon…
-
Unscored —
Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the IN…
-
Unscored —
Google Chrome before 23.0.1271.91 on Mac OS X does not properly mitigate improper rendering behavior in the Intel GPU d…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service …