Skip to content
OpenAdvisories

Archive

20 November 2012

Vulnerabilities first published on this day (UTC), newest first.

12 results · Feed

  • Unscored —

    The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash)…

  • Unscored —

    Unspecified vulnerability in Adobe ColdFusion 10 before Update 5, when Internet Information Services (IIS) is used, all…

  • Unscored —

    icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.lo…

  • Unscored —
    CVE-2012-4366 Public exploit

    Belkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2, and N300 Model F7D2301v1…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 Beta and release candidates before 2.4.0 allow…

  • Unscored —

    The DTLS support in radsecproxy before 1.6.2 does not properly verify certificates when there are configuration blocks …

  • Unscored —

    cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile function calls, which allows…

  • Unscored —

    radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings tha…

  • Unscored —

    doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers …

  • Unscored —
    CVE-2012-5519 Public exploit

    CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrato…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 through 2.5 Final, as used in JBoss Operations…

  • Unscored —

    TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of…