Archive
21 December 2012
Vulnerabilities first published on this day (UTC), newest first.
20 results · Feed
-
Unscored —
VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents, which allows remote a…
-
Unscored —
Directory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 and 5.1 before Patch 1 …
-
Medium —
Concrete5 Vulnerable to Cross-Site Scripting (XSS)
Cross-site scripting (XSS) vulnerability in concrete5 Japanese 5.5.1 through 5.5.2.1 and concrete5 English 5.5.0 through 5.6.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
-
Unscored —CVE-2012-0957 Public exploit
The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive …
-
Unscored —
Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive informatio…
-
Unscored —
The tcp_illinois_info function in net/ipv4/tcp_illinois.c in the Linux kernel before 3.4.19, when the net.ipv4.tcp_cong…
-
Unscored —
Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x bef…
-
Unscored —
The ip6_frag_queue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypas…
-
Unscored —
The web interface on (1) Foscam and (2) Wansview IP cameras allows remote attackers to bypass authentication, and perfo…
-
Unscored —
Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x bef…
-
Unscored —
The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of…
-
Unscored —
The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a den…
-
Unscored —
libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which…
-
Unscored —
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x b…
-
Unscored —
Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space Server before 10.0 Update …
-
Unscored —
The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 befor…
-
Unscored —
Unspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11.1.1.4 and 11.1.2.1.10…
-
Unscored —
Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, …
-
Unscored —
Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a…
-
Unscored —CVE-2010-2387 Public exploit
vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the …