Archive
December 2012
Vulnerabilities first published in this month (UTC), newest first.
36 results · Clear filters · Feed
-
High 8.8
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary co…
KEV Jul 23, 2024 -
Unscored —
The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver a…
-
Unscored —CVE-2012-4932 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attacke…
-
Unscored —CVE-2012-3873 Public exploit
Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated users to execute arbitrary…
-
Unscored —CVE-2012-3872 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Open Constructor 3.12.0 allow remote attackers to inject arbitra…
-
Unscored —
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote a…
-
Unscored —CVE-2012-5931 Public exploit
Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User …
-
Unscored —CVE-2012-5930 Public exploit
The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 does …
-
Unscored —
Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manag…
-
Unscored —CVE-2012-0957 Public exploit
The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive …
-
Unscored —CVE-2010-2387 Public exploit
vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the …
-
Unscored —
The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain p…
-
Medium —CVE-2012-4431 Public exploit
Cross-Site Request Forgery in Apache Tomcat
org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier.
-
Unscored —CVE-2012-6007 Public exploit
Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) de…
-
Unscored —
Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attacker…
-
Unscored —CVE-2012-5992 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software…
-
Unscored —CVE-2012-5991 Public exploit
screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote …
-
Unscored —CVE-2012-5967 Public exploit
SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remot…
-
Unscored —
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 42…
-
Unscored —CVE-2012-4991 Public exploit
Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated us…
-
Unscored —CVE-2012-6313 Public exploit
simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain se…
-
Unscored —CVE-2012-6312 Public exploit
Cross-site scripting (XSS) vulnerability in the Video Lead Form plugin for WordPress allows remote attackers to inject …
-
Unscored —CVE-2012-6301 Public exploit
The Browser application in Android 4.0.3 allows remote attackers to cause a denial of service (application crash) via a…
-
Unscored —
Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (…
-
Medium —CVE-2011-2732 Public exploit
Improper Control of Generation of Code in Spring Security
CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-re…
-
Unscored —CVE-2012-4982 Public exploit
Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers t…
-
Unscored —
Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow …
-
Unscored —
freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demon…
-
Unscored —
The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through …
-
Unscored —CVE-2012-5367 Public exploit
Multiple SQL injection vulnerabilities in OrangeHRM 2.7.1 RC 1 allow remote authenticated administrators to execute arb…
-
Unscored —CVE-2012-5858 Public exploit
Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-…
-
Unscored —
Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.5…
-
Unscored —
Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote …
-
Unscored —
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other ve…
-
Unscored —
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly o…
-
Unscored —
MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign th…