18 December 2012

18 results · Feed

• Unscored —
  CVE-2012-4348

  The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endp…

  Dec 18, 2012
• Unscored —
  CVE-2012-4350

  Multiple unquoted Windows search path vulnerabilities in the (1) Manager and (2) Agent components in Symantec Enterpris…

  Dec 18, 2012
• Unscored —
  CVE-2012-4691

  Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denia…

  Dec 18, 2012
• Medium 6.1
  CVE-2012-4898

  Tropos Wireless Mesh Routers Insufficient Entropy

  Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source of entropy for SSH keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key fro…

  Tropos Mesh OS
  Dec 18, 2012
• Unscored —
  CVE-2012-4693

  Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Ps…

  Dec 18, 2012
• Unscored —
  CVE-2012-5609

  Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to exe…

  Dec 18, 2012
• Unscored —
  CVE-2012-5606

  Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow remote attackers to inject…

  Dec 18, 2012
• Medium 5.4
  CVE-2012-5571

  Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling

  A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) tokens when a user's role h…

  Red Hat Red Hat OpenStack Platform 13 (Queens) Red Hat OpenStack Platform 16.2 Red Hat OpenStack Platform 18.0 Debian PyPI
  Dec 18, 2012
• Unscored —
  CVE-2012-5468

  Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers …

  bogofilter Debian
  Dec 18, 2012
• Unscored —
  CVE-2012-5610

  Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote …

  Dec 18, 2012
• Unscored —
  CVE-2012-5622

  Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/applicatio…

  Dec 18, 2012
• Unscored —
  CVE-2012-5576

  Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attac…

  gimp Debian
  Dec 18, 2012
• Unscored —
  CVE-2012-5574

  lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted up…

  Dec 18, 2012
• Unscored —
  CVE-2012-5607

  The "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly check the security token, …

  Dec 18, 2012
• Unscored —
  CVE-2012-5608

  Cross-site scripting (XSS) vulnerability in apps/user_webdavauth/settings.php in ownCloud 4.5.x before 4.5.2 allows rem…

  Dec 18, 2012
• Medium 5.9
  CVE-2012-5563

  OpenStack Keystone Insufficient token expiration

  OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining. NOTE: this issue exists …

  keystone PyPI
  Dec 18, 2012
• Unscored —
  CVE-2012-6422 Public exploit EPSS 15%

  The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 42…

  Dec 18, 2012
• Unscored —
  CVE-2012-5195

  Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3,…

  perl Debian
  Dec 18, 2012