Skip to content
OpenAdvisories

Archive

26 December 2012

Vulnerabilities first published on this day (UTC), newest first.

← November 2012 2012 / December /26 January 2013 →
  1. 1 
  2. 2 
  3. 338
  4. 46
  5. 524
  6. 67
  7. 7 
  8. 85
  9. 9 
  10. 102
  11. 114
  12. 1226
  13. 1315
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1818
  19. 1918
  20. 2010
  21. 2120
  22. 22 
  23. 233
  24. 245
  25. 254
  26. 2624
  27. 275
  28. 2810
  29. 29 
  30. 301
  31. 3110
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2012-0958

    content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an AP…

  • Unscored —
    CVE-2012-0961

    Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7…

    apt Debian
  • Unscored —
    CVE-2012-0962

    Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows …

  • Unscored —
    CVE-2012-6314

    Citrix XenDesktop Virtual Desktop Agent (VDA) 5.6.x before 5.6.200, when making changes to the server-side policy that …

  • Medium 6.5
    CVE-2012-5625

    Openstack nova: information leak in libvirt lvm-backed instances

    OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading t…

    Red Hat Red Hat OpenStack Platform 16.2 Red Hat OpenStack Platform 18.0 Red Hat OpenStack Platform 17.1 PyPI
  • Unscored —
    CVE-2012-5483

    tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is config…

  • Unscored —
    CVE-2012-5161

    The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2012-4616

    Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor (DPA) 5.6 through SP1, 5.7 through SP1, …

  • Unscored —
    CVE-2012-6298

    Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attack…

  • Unscored —
    CVE-2012-6299

    Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attack…

  • Unscored —
    CVE-2012-4816

    IBM Rational Automation Framework (RAF) 3.x through 3.0.0.5 allows remote attackers to bypass intended Env Gen Wizard (…

  • Unscored —
    CVE-2012-5951

    Unspecified vulnerability in IBM Tivoli NetView 1.4, 5.1 through 5.4, and 6.1 on z/OS allows local users to gain privil…

  • Unscored —
    CVE-2012-5585

    Cross-site scripting (XSS) vulnerability in the Mixpanel module 6.x-1.x before 6.x-1.1 in Drupal allows remote authenti…

  • Unscored —
    CVE-2012-5589

    The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not properly check node permissi…

  • Unscored —
    CVE-2012-5591

    Cross-site scripting (XSS) vulnerability in the Zero Point module 6.x-1.x before 6.x-1.18 and 7.x-1.x before 7.x-1.4 fo…

  • Unscored —
    CVE-2012-5584

    The Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node permissions, which allows r…

  • Unscored —
    CVE-2012-5587

    Cross-site scripting (XSS) vulnerability in the Email Field module 6.x-1.x before 6.x-1.3 for Drupal allows remote atta…

  • Unscored —
    CVE-2012-5183

    The Loctouch application 3.4.6 and earlier for Android allows attackers to obtain sensitive information about logged lo…

  • Unscored —
    CVE-2012-5179

    The Boat Browser application before 4.2 and Boat Browser Mini application before 3.9 for Android do not properly implem…

  • Unscored —
    CVE-2012-5586

    The Services module 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with…

  • Unscored —
    CVE-2012-5590

    SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL comm…

    Web / CMS
  • Unscored —
    CVE-2012-5588

    The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact fi…

  • Unscored —
    CVE-2012-5182

    The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents, which allows attacker…

  • Unscored —
    CVE-2012-5180

    The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement th…