Archive
December 2012
Vulnerabilities first published in this month (UTC), newest first.
255 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Zero Point module 6.x-1.x before 6.x-1.18 and 7.x-1.x before 7.x-1.4 fo…
-
Unscored —
The Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node permissions, which allows r…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Email Field module 6.x-1.x before 6.x-1.3 for Drupal allows remote atta…
-
Unscored —
The Loctouch application 3.4.6 and earlier for Android allows attackers to obtain sensitive information about logged lo…
-
Unscored —
The Boat Browser application before 4.2 and Boat Browser Mini application before 3.9 for Android do not properly implem…
-
Unscored —
The Services module 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with…
-
Unscored —
SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact fi…
-
Unscored —
The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents, which allows attacker…
-
Unscored —
The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement th…
-
Unscored —
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote a…
-
Unscored —
Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remot…
-
Unscored —
dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated user…
-
Unscored —
Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 allows r…
-
Unscored —
Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an …
-
Unscored —
The D-Link DCS-932L camera with firmware 1.02 allows remote attackers to discover the password via a UDP broadcast pack…
-
Unscored —CVE-2012-5931 Public exploit
Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User …
-
Unscored —CVE-2012-5930 Public exploit
The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 does …
-
Unscored —
Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manag…
-
Unscored —
Siemens RuggedCom Rugged Operating System (ROS) before 3.12, ROX I OS through 1.14.5, ROX II OS through 2.3.0, and Rugg…
-
High 7.8
Carlo Gavazzi EOS Box SQL Injection
The Carlo Gavazzi EOS-Box does not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication, attackers can leak information from the device. This could allow the attacker to compro…
-
Critical 10.0
Carlo Gavazzi EOS Box Hard-Coded Credentials
The Carlo Gavazzi EOS-Box stores hard-coded passwords in the PHP file of the device. By using the hard-coded passwords, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.
-
Unscored —
VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents, which allows remote a…
-
Unscored —
Directory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 and 5.1 before Patch 1 …
-
Medium —
Concrete5 Vulnerable to Cross-Site Scripting (XSS)
Cross-site scripting (XSS) vulnerability in concrete5 Japanese 5.5.1 through 5.5.2.1 and concrete5 English 5.5.0 through 5.6.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
-
Unscored —CVE-2012-0957 Public exploit
The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive …
-
Unscored —
Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive informatio…
-
Unscored —
The tcp_illinois_info function in net/ipv4/tcp_illinois.c in the Linux kernel before 3.4.19, when the net.ipv4.tcp_cong…
-
Unscored —
Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x bef…
-
Unscored —
The ip6_frag_queue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypas…
-
Unscored —
The web interface on (1) Foscam and (2) Wansview IP cameras allows remote attackers to bypass authentication, and perfo…
-
Unscored —
Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x bef…
-
Unscored —
The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of…
-
Unscored —
The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a den…
-
Unscored —
libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which…
-
Unscored —
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x b…
-
Unscored —
Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space Server before 10.0 Update …
-
Unscored —
The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 befor…
-
Unscored —
Unspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11.1.1.4 and 11.1.2.1.10…
-
Unscored —
Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, …