Skip to content
OpenAdvisories

Archive

24 November 2012

Vulnerabilities first published on this day (UTC), newest first.

13 results · Feed

  • Unscored —

    Remote Login Service (RLS) 1.0.0 does not properly clear account information when switching users, which might allow ph…

  • Unscored —

    Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, whic…

  • Unscored —

    The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows contex…

  • Unscored —

    The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running o…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4, and other vers…

  • Unscored —

    Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by…

  • Unscored —

    Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connecti…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in group/members.php in Mahara 1.5.x before 1.5.7 and 1.6.x before 1.6.2 allow…

  • Unscored —

    Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbi…

  • Unscored —

    Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary progra…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to…

  • Unscored —
    CVE-2012-5533 Public exploit EPSS 12%

    The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial …