30 November 2012

26 results · Feed

• Unscored —
  CVE-2012-4559

  Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in ch…

  libssh Debian
  Nov 30, 2012
• Unscored —
  CVE-2012-4560

  Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibl…

  libssh Debian
  Nov 30, 2012
• Unscored —
  CVE-2012-4561

  The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_sessio…

  libssh Debian
  Nov 30, 2012
• High 7.5
  CVE-2012-4571

  Python Keyring does not securely initialize encryption cipher

  Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack.

  keyring python-keyring Debian PyPI
  Nov 30, 2012
• Unscored —
  CVE-2012-4477

  Unspecified vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to bypass access res…

  Nov 30, 2012
• Unscored —
  CVE-2012-4478

  Cross-site request forgery (CSRF) vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attacker…

  Nov 30, 2012
• Unscored —
  CVE-2012-4473

  The Restrict node page view module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "view a…

  Nov 30, 2012
• Unscored —
  CVE-2012-4476

  Cross-site scripting (XSS) vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to in…

  Nov 30, 2012
• Unscored —
  CVE-2012-4471

  The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin …

  Nov 30, 2012
• Unscored —
  CVE-2012-4562 EPSS 13%

  Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or…

  libssh Debian
  Nov 30, 2012
• Unscored —
  CVE-2012-4474

  Multiple cross-site scripting (XSS) vulnerabilities in the Colorbox Node module 7.x-2.x before 7.x-2.2 for Drupal allow…

  Nov 30, 2012
• Unscored —
  CVE-2012-4551

  Use-after-free vulnerability in libunity-webapps before 2.4.1 allows remote attackers to cause a denial of service (mem…

  Nov 30, 2012
• Unscored —
  CVE-2012-4468

  Cross-site scripting (XSS) vulnerability in the Privatemsg module 7.x-1.x before 7.x-1.3 for Drupal allows remote attac…

  Nov 30, 2012
• Unscored —
  CVE-2012-4479

  SQL injection vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to execute arbitra…

  Nov 30, 2012
• Unscored —
  CVE-2012-4472

  Unrestricted file upload vulnerability in upload.php in the Drag & Drop Gallery module 6.x-1.5 and earlier for Drupal a…

  Nov 30, 2012
• Unscored —
  CVE-2012-4475

  The Security Questions module for Drupal 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.1 does not properly restrict a…

  Web / CMS
  Nov 30, 2012
• Unscored —
  CVE-2012-4470

  The Listhandler module 6.x-1.x before 6.x-1.1 for Drupal does not properly check permissions when importing emails, whi…

  Nov 30, 2012
• Unscored —
  CVE-2012-4469

  Cross-site scripting (XSS) vulnerability in the Hashcash module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.2 for D…

  Nov 30, 2012
• Unscored —
  CVE-2012-6063

  Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause …

  libssh Debian
  Nov 30, 2012
• Unscored —
  CVE-2012-4834

  Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2…

  Nov 30, 2012
• Unscored —
  CVE-2012-4557 EPSS 17%

  The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon …

  apache2 Debian
  Nov 30, 2012
• Unscored —
  CVE-2012-5568

  Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP reque…

  Nov 30, 2012
• Unscored —
  CVE-2012-4221

  Integer overflow in diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver …

  Nov 30, 2012
• Unscored —
  CVE-2012-4220 Public exploit

  diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 thro…

  Nov 30, 2012
• Unscored —
  CVE-2012-4222

  drivers/gpu/msm/kgsl.c in the Qualcomm Innovation Center (QuIC) Graphics KGSL kernel-mode driver for Android 2.3 throug…

  Nov 30, 2012
• Unscored —
  CVE-2012-5174

  The KYOCERA AH-K3001V, AH-K3002V, WX300K, WX310K, WX320K, and WX320KR devices allow remote attackers to cause a denial …

  Nov 30, 2012