20 December 2012

10 results · Feed

• Unscored —
  CVE-2012-4839

  The OSLC interface in the Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before …

  Dec 20, 2012
• Unscored —
  CVE-2012-4856

  The Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not ensure that firewall code …

  Dec 20, 2012
• Unscored —
  CVE-2012-6270

  Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a Shockwave Player 10.4.0.…

  Dec 20, 2012
• Unscored —
  CVE-2012-6271

  Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via…

  Dec 20, 2012
• Medium —
  CVE-2012-3428

  User confusion in IronJacamar

  The IronJacamar container before 1.0.12.Final for JBoss Application Server, when allow-multiple-users is enabled in conjunction with a security domain, does not use the credentials supplied in a getConnection function call, which allows remote attackers to ob…

  org.jboss.ironjacamar:ironjacamar-jdbc Maven
  Dec 20, 2012
• Unscored —
  CVE-2012-5638

  The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows l…

  sanlock Debian
  Dec 20, 2012
• Unscored —
  CVE-2012-5765

  The Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote …

  Dec 20, 2012
• Unscored —
  CVE-2012-5955

  Unspecified vulnerability in the IBM HTTP Server component 5.3 in IBM WebSphere Application Server (WAS) for z/OS allow…

  Dec 20, 2012
• Unscored —
  CVE-2012-5469 Public exploit EPSS 24%

  The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain p…

  Dec 20, 2012
• Unscored —
  CVE-2012-5643 EPSS 23%

  Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and …

  squid Debian
  Dec 20, 2012