Skip to content
OpenAdvisories

Archive

28 November 2012

Vulnerabilities first published on this day (UTC), newest first.

14 results · Feed

  • Unscored —

    Google CityHash computes hash values without properly restricting the ability to trigger hash collisions predictably, w…

  • Unscored —

    Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without…

  • Unscored —

    Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability …

  • Medium —

    JRuby denial of service via Hash Collision

    JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table…

  • Unscored —

    Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which al…

  • Unscored —

    Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the abil…

  • Unscored —

    The Samsung printer firmware before 20121031 has a hardcoded read-write SNMP community, which makes it easier for remot…

  • Unscored —

    Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service (application crash) via a respon…

  • Unscored —

    Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the IN…

  • Unscored —

    Google Chrome before 23.0.1271.91 on Mac OS X does not properly mitigate improper rendering behavior in the Intel GPU d…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service …

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service …

  • Unscored —

    Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of service (out-of-bounds…

  • Unscored —

    Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used i…