Archive
December 2012
Vulnerabilities first published in this month (UTC), newest first.
255 results · Feed
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/applicatio…
-
Unscored —
Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attac…
-
Unscored —
lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted up…
-
Unscored —
The "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly check the security token, …
-
Unscored —
Cross-site scripting (XSS) vulnerability in apps/user_webdavauth/settings.php in ownCloud 4.5.x before 4.5.2 allows rem…
-
Medium 5.9
OpenStack Keystone Insufficient token expiration
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining. NOTE: this issue exists …
-
Unscored —
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 42…
-
Unscored —
Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3,…
-
Unscored —
Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU c…
-
Unscored —CVE-2012-4991 Public exploit
Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated us…
-
Unscored —
Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of ser…
-
Unscored —
HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not pr…
-
Unscored —
HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not pr…
-
Unscored —
Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest…
-
Unscored —
Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when…
-
Unscored —
Buffer underflow in Adobe Photoshop Camera Raw before 7.3 allows attackers to execute arbitrary code via unspecified ve…
-
Unscored —
Buffer overflow in Adobe Photoshop Camera Raw before 7.3 allows attackers to execute arbitrary code via unspecified vec…
-
Unscored —
The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of servic…
-
Unscored —
Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a de…
-
Unscored —
The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs whe…
-
Unscored —
The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV gu…
-
Unscored —
The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and ear…
-
Unscored —
The restricted telnet shell on the D-Link DSL2730U router allows remote authenticated users to bypass intended command …
-
Unscored —
selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=…
-
Unscored —
Layton Helpbox 4.4.0 allows remote attackers to discover cleartext credentials for the login page by sniffing the netwo…
-
Unscored —
Layton Helpbox 4.4.0 allows remote authenticated users to change the login context and gain privileges via a modified (…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to inject arbitrary …
-
Unscored —
editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data v…
-
Unscored —
Multiple SQL injection vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to execute arbitrary SQL commands…
-
Unscored —
Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service …
-
Unscored —
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC dec…
-
Unscored —
Buffer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 an…
-
Unscored —
Google Chrome before 23.0.1271.97 does not properly restrict instantiation of the Chromoting client plug-in, which has …
-
Unscored —
Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute…
-
Unscored —
Adobe ColdFusion 9.0 through 9.0.2, and 10, allows local users to bypass intended shared-hosting sandbox permissions vi…
-
Unscored —
Integer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 a…
-
Unscored —
Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly …
-
Unscored —
Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service …
-
Unscored —CVE-2012-1537 EPSS 23%
Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Serve…