11 November 2012

19 results · Feed

• Unscored —
  CVE-2012-4564 EPSS 14%

  ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a den…

  tiff Debian
  Nov 11, 2012
• Unscored —
  CVE-2012-4554 Public exploit EPSS 16%

  The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE …

  Nov 11, 2012
• Unscored —
  CVE-2012-4504

  Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote server…

  Nov 11, 2012
• Unscored —
  CVE-2012-4540

  Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x be…

  icedtea-web Debian
  Nov 11, 2012
• Unscored —
  CVE-2012-4515 Public exploit

  Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is…

  Nov 11, 2012
• Unscored —
  CVE-2012-4734

  Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote attackers to conduct a "confused deputy" …

  request-tracker4 Debian
  Nov 11, 2012
• Unscored —
  CVE-2012-4513 Public exploit EPSS 13%

  khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) …

  Nov 11, 2012
• Medium —
  CVE-2012-4573

  OpenStack Glance arbitrary deletion of non-protected images

  The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.

  glance glance Debian PyPI
  Nov 11, 2012
• Unscored —
  CVE-2012-4553

  Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execu…

  Nov 11, 2012
• Unscored —
  CVE-2012-4732

  Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.…

  request-tracker4 Debian
  Nov 11, 2012
• Unscored —
  CVE-2012-4730

  Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote authenticated users with ModifySelf or Ad…

  request-tracker4 Debian
  Nov 11, 2012
• Unscored —
  CVE-2012-4884

  Argument injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote attac…

  request-tracker4 Debian
  Nov 11, 2012
• Unscored —
  CVE-2012-4548

  Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users …

  Nov 11, 2012
• Unscored —
  CVE-2012-4514 Public exploit

  rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NU…

  Nov 11, 2012
• Unscored —
  CVE-2012-4731

  FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authentica…

  request-tracker4 Debian
  Nov 11, 2012
• Unscored —
  CVE-2012-4505

  Heap-based buffer overflow in the px_pac_reload function in lib/pac.c in libproxy 0.2.x and 0.3.x allows remote servers…

  libproxy Debian
  Nov 11, 2012
• Unscored —
  CVE-2012-3523

  The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-…

  inn2 Debian
  Nov 11, 2012
• Medium —
  CVE-2012-5482

  OpenStack Glance arbitrary deletion of non-protected images

  The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-457…

  glance glance Debian PyPI
  Nov 11, 2012
• Unscored —
  CVE-2012-5827

  Joomla! 2.5.x before 2.5.8 and 3.0.x before 3.0.2 allows remote attackers to conduct clickjacking attacks via unspecifi…

  Nov 11, 2012