21 November 2012

45 results · Feed

• Unscored —
  CVE-2012-4527

  Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of serv…

  mcrypt Debian
  Nov 21, 2012
• Unscored —
  CVE-2012-4536

  The (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest OS administrators to c…

  xen Debian
  Nov 21, 2012
• Unscored —
  CVE-2012-4535

  Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (…

  xen Debian
  Nov 21, 2012
• Unscored —
  CVE-2012-4537

  Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p…

  xen Debian
  Nov 21, 2012
• Unscored —
  CVE-2012-4539

  Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to c…

  xen Debian
  Nov 21, 2012
• Unscored —
  CVE-2012-4426

  Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause …

  mcrypt Debian
  Nov 21, 2012
• Unscored —
  CVE-2012-4409 Public exploit EPSS 15%

  Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted…

  mcrypt Debian
  Nov 21, 2012
• Unscored —
  CVE-2012-3512

  Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins,…

  munin Debian
  Nov 21, 2012
• Unscored —
  CVE-2012-3513

  munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new c…

  munin Debian
  Nov 21, 2012
• Unscored —
  CVE-2012-5526

  CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might …

  perl libcgi-pm-perl Debian
  Nov 21, 2012
• Unscored —
  CVE-2012-4207

  The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbir…

  Nov 21, 2012
• Unscored —
  CVE-2012-4204

  The str_unescape function in the JavaScript engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonk…

  Nov 21, 2012
• Unscored —
  CVE-2012-4216

  Use-after-free vulnerability in the gfxFont::GetFontEntry function in Mozilla Firefox before 17.0, Firefox ESR 10.x bef…

  Nov 21, 2012
• Unscored —
  CVE-2012-4212

  Use-after-free vulnerability in the XPCWrappedNative::Mark function in Mozilla Firefox before 17.0, Thunderbird before …

  Nov 21, 2012
• Unscored —
  CVE-2012-4208

  The XrayWrapper implementation in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 does …

  Nov 21, 2012
• Unscored —
  CVE-2012-4210

  The Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 does not properly restrict the c…

  Nov 21, 2012
• Unscored —
  CVE-2012-4209

  Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0…

  Nov 21, 2012
• Unscored —
  CVE-2012-4214

  Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox E…

  Nov 21, 2012
• Unscored —
  CVE-2012-4202 EPSS 11%

  Heap-based buffer overflow in the image::RasterImage::DrawFrameTo function in Mozilla Firefox before 17.0, Firefox ESR …

  Nov 21, 2012
• Unscored —
  CVE-2012-4206

  Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11…

  Nov 21, 2012
• Unscored —
  CVE-2012-4205

  Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather tha…

  Nov 21, 2012
• Unscored —
  CVE-2012-4217

  Use-after-free vulnerability in the nsViewManager::ProcessPendingUpdates function in Mozilla Firefox before 17.0, Thund…

  Nov 21, 2012
• Unscored —
  CVE-2012-4203

  The New Tab page in Mozilla Firefox before 17.0 uses a privileged context for execution of JavaScript code by bookmarkl…

  Nov 21, 2012
• Unscored —
  CVE-2012-4201

  The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17…

  Nov 21, 2012
• Unscored —
  CVE-2012-4215

  Use-after-free vulnerability in the nsPlaintextEditor::FireClipboardEvent function in Mozilla Firefox before 17.0, Fire…

  Nov 21, 2012
• Unscored —
  CVE-2012-4218

  Use-after-free vulnerability in the BuildTextRunsScanner::BreakSink::SetBreaks function in Mozilla Firefox before 17.0,…

  Nov 21, 2012
• Unscored —
  CVE-2012-4213

  Use-after-free vulnerability in the nsEditor::FindNextLeafNode function in Mozilla Firefox before 17.0, Thunderbird bef…

  Nov 21, 2012
• Unscored —
  CVE-2012-5479

  The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticat…

  Nov 21, 2012
• Unscored —
  CVE-2012-5839

  Heap-based buffer overflow in the gfxShapedWord::CompressedGlyph::IsClusterStart function in Mozilla Firefox before 17.…

  Nov 21, 2012
• Unscored —
  CVE-2012-5843

  Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and…

  Nov 21, 2012
• Unscored —
  CVE-2012-5838

  The copyTexImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Thunderbird before 17.0, and S…

  Nov 21, 2012
• Unscored —
  CVE-2012-5841

  Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0…

  Nov 21, 2012
• Unscored —
  CVE-2012-5836

  Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allow remote attackers to execute arbit…

  Nov 21, 2012
• Unscored —
  CVE-2012-5835

  Integer overflow in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird be…

  Nov 21, 2012
• Unscored —
  CVE-2012-5840

  Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox E…

  Nov 21, 2012
• Unscored —
  CVE-2012-5837

  The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assi…

  Nov 21, 2012
• Unscored —
  CVE-2012-5473

  The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote aut…

  Nov 21, 2012
• Unscored —
  CVE-2012-5842

  Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0…

  Nov 21, 2012
• Unscored —
  CVE-2012-5830

  Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, …

  Nov 21, 2012
• Unscored —
  CVE-2012-5481

  Moodle 2.3.x before 2.3.3 allows remote authenticated users to bypass the moodle/role:manage capability requirement and…

  Nov 21, 2012