CVEs

347,024 total · page 5926 of 6,941

CVE	Vendor / Product	Risk	CVSS	EPSS	Published	Description
CVE-2011-4028	Xorg Xserver	0.00	—	0.00	Jul 3, 2012	The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists.
CVE-2012-3366	Bcfg2 Bcfg2	0.00	—	0.04	Jul 3, 2012	The Trigger plugin in bcfg2 1.2.x before 1.2.3 allows remote attackers with root access to the client to execute arbitrary commands via shell metacharacters in the UUID field to the server process (bcfg2-server).
CVE-2012-2746	Fedoraproject 389 Directory Server	0.00	—	0.01	Jul 3, 2012	389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password.
CVE-2012-2678	389 Directory Server 389 Directory Server	0.00	—	0.01	Jul 3, 2012	389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.
CVE-2012-2133	Linux Kernel	0.00	—	0.00	Jul 3, 2012	Use-after-free vulnerability in the Linux kernel before 3.3.6, when huge pages are enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges by interacting with a hugetlbfs filesystem, as demonstrated by a umount operation that triggers…
CVE-2012-2100	Linux Kernel	0.00	—	0.03	Jul 3, 2012	The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed…
CVE-2012-1106	Red Hat Automatic Bug Reporting Tool	0.00	—	0.00	Jul 3, 2012	The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive…
CVE-2012-0833	389 Directory Server 389 Directory Server	0.00	—	0.01	Jul 3, 2012	The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause…
CVE-2012-0045	Linux Kernel	0.00	—	0.01	Jul 3, 2012	The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) opcode, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application, as…
CVE-2011-4127	Linux Kernel	0.00	—	0.01	Jul 3, 2012	The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume.
CVE-2011-4086	Linux Kernel	0.00	—	0.00	Jul 3, 2012	The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the _Delay and _Unwritten buffer head states, which allows local users to cause a denial of service (system crash) by leveraging the presence of an ext4…
CVE-2011-2716	Busybox Busybox	0.00	—	0.02	Jul 3, 2012	The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
CVE-2011-2485	GNOME Foundation Gdkpixbuf	0.00	—	0.03	Jul 3, 2012	The gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does not properly handle certain return values, which allows remote attackers to cause a denial of service (memory consumption) via a crafted GIF image file.
CVE-2012-3826	Wireshark Wireshark	0.03	—	0.03	Jun 30, 2012	Multiple integer underflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (loop) via vectors related to the R3 dissector, a different vulnerability than CVE-2012-2392.
CVE-2012-3825	Wireshark Wireshark	0.03	—	0.03	Jun 30, 2012	Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.
CVE-2012-2394	Wireshark Wireshark	0.03	—	0.04	Jun 30, 2012	Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo…
CVE-2012-2393	Wireshark Wireshark	0.03	—	0.04	Jun 30, 2012	epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that…
CVE-2012-2392	Wireshark Wireshark	0.03	—	0.03	Jun 30, 2012	Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 802.3, and (5) LTP dissectors.
CVE-2012-2017	Microfocus Photosmart Wireless e-All-in-One	0.00	—	0.02	Jun 30, 2012	Unspecified vulnerability on HP Photosmart Wireless e-All-in-One B110, e-All-in-One D110, Plus e-All-in-One B210, eStation All-in-One C510, Ink Advantage e-All-in-One K510, and Premium Fax e-All-in-One C410 printers allows remote attackers to cause a denial of service via…
CVE-2012-2016	Microfocus System Management Homepage	0.00	—	0.01	Jun 29, 2012	Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows local users to obtain sensitive information via unknown vectors.
CVE-2012-2015	Microfocus System Management Homepage	0.00	—	0.03	Jun 29, 2012	Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote authenticated users to gain privileges and obtain sensitive information via unknown vectors.
CVE-2012-2014	Microfocus System Management Homepage	0.00	—	0.03	Jun 29, 2012	HP System Management Homepage (SMH) before 7.1.1 does not properly validate input, which allows remote authenticated users to have an unspecified impact via unknown vectors.
CVE-2012-2013	Microfocus System Management Homepage	0.00	—	0.04	Jun 29, 2012	Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial of service, or possibly obtain sensitive information or modify data, via unknown vectors.
CVE-2012-2012	Microfocus System Management Homepage	0.00	—	0.05	Jun 29, 2012	HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
CVE-2012-2698	MediaWiki Mediawiki	0.00	—	0.05	Jun 29, 2012	Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.17.5, 1.18.x before 1.18.4, and 1.19.x before 1.19.1 allows remote attackers to inject arbitrary web script or HTML via the uselang parameter to…
CVE-2012-2690	Libguestfs Libguestfs	0.00	—	0.00	Jun 29, 2012	virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
CVE-2012-2664	Red Hat Sos	0.00	—	0.01	Jun 29, 2012	The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or…
CVE-2012-2385	Keith Winstein Mosh	0.00	—	0.11	Jun 29, 2012	The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.
CVE-2012-2098	Apache Commons Compress	0.00	—	0.13	Jun 29, 2012	Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.
CVE-2012-1164	OpenLDAP Openldap	0.00	—	0.04	Jun 29, 2012	slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.
CVE-2012-1123	Mantisbt Mantisbt	0.00	—	0.04	Jun 29, 2012	The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password.
CVE-2012-1122	Mantisbt Mantisbt	0.00	—	0.02	Jun 29, 2012	bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permission of the receiving project when moving a bug report, which allows remote authenticated users with the report_bug_threshold and move_bug_threshold privileges for a project to…
CVE-2012-1121	Mantisbt Mantisbt	0.00	—	0.02	Jun 29, 2012	MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories.
CVE-2012-1120	Mantisbt Mantisbt	0.00	—	0.02	Jun 29, 2012	The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete and delete_bug_threshold permissions, which allows remote authenticated users with read and write SOAP API privileges to delete arbitrary bug reports and bug notes.
CVE-2012-1119	Mantisbt Mantisbt	0.00	—	0.04	Jun 29, 2012	MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection.
CVE-2012-1118	Mantisbt Mantisbt	0.00	—	0.03	Jun 29, 2012	The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly restrict access when the private_bug_view_threshold is set to an array, which allows remote attackers to bypass intended restrictions and perform certain operations on private bug…
CVE-2012-0813	Wicd Wicd	0.00	—	0.00	Jun 29, 2012	Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information.
CVE-2010-5076	Qt Qt	0.00	—	0.01	Jun 29, 2012	QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
CVE-2012-3818	Mikel Olasagasti Revelation	0.00	—	0.00	Jun 29, 2012	The fpm exporter in Revelation 0.4.13-2 and earlier encrypts the version number but not the password when exporting a file, which might allow local users to obtain sensitive information.
CVE-2012-3232	Web@all web@all	0.03	—	0.01	Jun 29, 2012	Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote attackers to inject arbitrary web script or HTML via the _text[title] parameter.
CVE-2012-3057	Cisco Systems, Inc. Webex Recording Format Player	0.00	—	0.03	Jun 29, 2012	Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted size field in…
CVE-2012-3056	Cisco Systems, Inc. Webex Recording Format Player	0.00	—	0.03	Jun 29, 2012	Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2012-3055	Cisco Systems, Inc. Webex Recording Format Player	0.00	—	0.03	Jun 29, 2012	Stack-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted DHT chunk in a…
CVE-2012-3054	Cisco Systems, Inc. Webex Recording Format Player	0.00	—	0.04	Jun 29, 2012	Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted WRF file, aka…
CVE-2012-3053	Cisco Systems, Inc. Webex Advanced Recording Format Player	0.00	—	0.03	Jun 29, 2012	Buffer overflow in the Cisco WebEx Advanced Recording Format (ARF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted ARF file, aka Bug…
CVE-2012-3231	Web@all web@all	0.00	—	0.02	Jun 27, 2012	Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding a file to…
CVE-2012-2743	Mikel Olasagasti Revelation	0.00	—	0.01	Jun 27, 2012	Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
CVE-2012-2742	Mikel Olasagasti Revelation	0.00	—	0.02	Jun 27, 2012	Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack.
CVE-2012-3816	Winradius Winradius	0.04	—	0.08	Jun 27, 2012	WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Request packet.
CVE-2012-3815	Sielcosistemi Winlog Pro	0.07	—	0.44	Jun 27, 2012	Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824. NOTE: some of these details are obtained from third party information.

CVE-2011-4028Jul 3, 2012
Xorg
Xserver
risk 0.00cvss —epss 0.00
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists.
CVE-2012-3366Jul 3, 2012
Bcfg2
Bcfg2
risk 0.00cvss —epss 0.04
The Trigger plugin in bcfg2 1.2.x before 1.2.3 allows remote attackers with root access to the client to execute arbitrary commands via shell metacharacters in the UUID field to the server process (bcfg2-server).
CVE-2012-2746Jul 3, 2012
Fedoraproject
389 Directory Server
risk 0.00cvss —epss 0.01
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password.
CVE-2012-2678Jul 3, 2012
389 Directory Server
389 Directory Server
risk 0.00cvss —epss 0.01
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.
CVE-2012-2133Jul 3, 2012
Linux
Kernel
risk 0.00cvss —epss 0.00
Use-after-free vulnerability in the Linux kernel before 3.3.6, when huge pages are enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges by interacting with a hugetlbfs filesystem, as demonstrated by a umount operation that triggers…
CVE-2012-2100Jul 3, 2012
Linux
Kernel
risk 0.00cvss —epss 0.03
The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed…
CVE-2012-1106Jul 3, 2012
Red Hat
Automatic Bug Reporting Tool
risk 0.00cvss —epss 0.00
The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive…
CVE-2012-0833Jul 3, 2012
389 Directory Server
389 Directory Server
risk 0.00cvss —epss 0.01
The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause…
CVE-2012-0045Jul 3, 2012
Linux
Kernel
risk 0.00cvss —epss 0.01
The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) opcode, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application, as…
CVE-2011-4127Jul 3, 2012
Linux
Kernel
risk 0.00cvss —epss 0.01
The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume.
CVE-2011-4086Jul 3, 2012
Linux
Kernel
risk 0.00cvss —epss 0.00
The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the _Delay and _Unwritten buffer head states, which allows local users to cause a denial of service (system crash) by leveraging the presence of an ext4…
CVE-2011-2716Jul 3, 2012
Busybox
Busybox
risk 0.00cvss —epss 0.02
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
CVE-2011-2485Jul 3, 2012
GNOME Foundation
Gdkpixbuf
risk 0.00cvss —epss 0.03
The gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does not properly handle certain return values, which allows remote attackers to cause a denial of service (memory consumption) via a crafted GIF image file.
CVE-2012-3826Jun 30, 2012
Wireshark
Wireshark
risk 0.03cvss —epss 0.03
Multiple integer underflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (loop) via vectors related to the R3 dissector, a different vulnerability than CVE-2012-2392.
CVE-2012-3825Jun 30, 2012
Wireshark
Wireshark
risk 0.03cvss —epss 0.03
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.
CVE-2012-2394Jun 30, 2012
Wireshark
Wireshark
risk 0.03cvss —epss 0.04
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo…
CVE-2012-2393Jun 30, 2012
Wireshark
Wireshark
risk 0.03cvss —epss 0.04
epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that…
CVE-2012-2392Jun 30, 2012
Wireshark
Wireshark
risk 0.03cvss —epss 0.03
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 802.3, and (5) LTP dissectors.
CVE-2012-2017Jun 30, 2012
Microfocus
Photosmart Wireless e-All-in-One
risk 0.00cvss —epss 0.02
Unspecified vulnerability on HP Photosmart Wireless e-All-in-One B110, e-All-in-One D110, Plus e-All-in-One B210, eStation All-in-One C510, Ink Advantage e-All-in-One K510, and Premium Fax e-All-in-One C410 printers allows remote attackers to cause a denial of service via…
CVE-2012-2016Jun 29, 2012
Microfocus
System Management Homepage
risk 0.00cvss —epss 0.01
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows local users to obtain sensitive information via unknown vectors.
CVE-2012-2015Jun 29, 2012
Microfocus
System Management Homepage
risk 0.00cvss —epss 0.03
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote authenticated users to gain privileges and obtain sensitive information via unknown vectors.
CVE-2012-2014Jun 29, 2012
Microfocus
System Management Homepage
risk 0.00cvss —epss 0.03
HP System Management Homepage (SMH) before 7.1.1 does not properly validate input, which allows remote authenticated users to have an unspecified impact via unknown vectors.
CVE-2012-2013Jun 29, 2012
Microfocus
System Management Homepage
risk 0.00cvss —epss 0.04
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial of service, or possibly obtain sensitive information or modify data, via unknown vectors.
CVE-2012-2012Jun 29, 2012
Microfocus
System Management Homepage
risk 0.00cvss —epss 0.05
HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
CVE-2012-2698Jun 29, 2012
MediaWiki
Mediawiki
risk 0.00cvss —epss 0.05
Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.17.5, 1.18.x before 1.18.4, and 1.19.x before 1.19.1 allows remote attackers to inject arbitrary web script or HTML via the uselang parameter to…
CVE-2012-2690Jun 29, 2012
Libguestfs
Libguestfs
risk 0.00cvss —epss 0.00
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
CVE-2012-2664Jun 29, 2012
Red Hat
Sos
risk 0.00cvss —epss 0.01
The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or…
CVE-2012-2385Jun 29, 2012
Keith Winstein
Mosh
risk 0.00cvss —epss 0.11
The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.
CVE-2012-2098Jun 29, 2012
Apache
Commons Compress
risk 0.00cvss —epss 0.13
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.
CVE-2012-1164Jun 29, 2012
OpenLDAP
Openldap
risk 0.00cvss —epss 0.04
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.
CVE-2012-1123Jun 29, 2012
Mantisbt
Mantisbt
risk 0.00cvss —epss 0.04
The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password.
CVE-2012-1122Jun 29, 2012
Mantisbt
Mantisbt
risk 0.00cvss —epss 0.02
bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permission of the receiving project when moving a bug report, which allows remote authenticated users with the report_bug_threshold and move_bug_threshold privileges for a project to…
CVE-2012-1121Jun 29, 2012
Mantisbt
Mantisbt
risk 0.00cvss —epss 0.02
MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories.
CVE-2012-1120Jun 29, 2012
Mantisbt
Mantisbt
risk 0.00cvss —epss 0.02
The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete and delete_bug_threshold permissions, which allows remote authenticated users with read and write SOAP API privileges to delete arbitrary bug reports and bug notes.
CVE-2012-1119Jun 29, 2012
Mantisbt
Mantisbt
risk 0.00cvss —epss 0.04
MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection.
CVE-2012-1118Jun 29, 2012
Mantisbt
Mantisbt
risk 0.00cvss —epss 0.03
The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly restrict access when the private_bug_view_threshold is set to an array, which allows remote attackers to bypass intended restrictions and perform certain operations on private bug…
CVE-2012-0813Jun 29, 2012
Wicd
Wicd
risk 0.00cvss —epss 0.00
Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information.
CVE-2010-5076Jun 29, 2012
Qt
Qt
risk 0.00cvss —epss 0.01
QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
CVE-2012-3818Jun 29, 2012
Mikel Olasagasti
Revelation
risk 0.00cvss —epss 0.00
The fpm exporter in Revelation 0.4.13-2 and earlier encrypts the version number but not the password when exporting a file, which might allow local users to obtain sensitive information.
CVE-2012-3232Jun 29, 2012
Web@all
web@all
risk 0.03cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote attackers to inject arbitrary web script or HTML via the _text[title] parameter.
CVE-2012-3057Jun 29, 2012
Cisco Systems, Inc.
Webex Recording Format Player
risk 0.00cvss —epss 0.03
Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted size field in…
CVE-2012-3056Jun 29, 2012
Cisco Systems, Inc.
Webex Recording Format Player
risk 0.00cvss —epss 0.03
Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2012-3055Jun 29, 2012
Cisco Systems, Inc.
Webex Recording Format Player
risk 0.00cvss —epss 0.03
Stack-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted DHT chunk in a…
CVE-2012-3054Jun 29, 2012
Cisco Systems, Inc.
Webex Recording Format Player
risk 0.00cvss —epss 0.04
Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted WRF file, aka…
CVE-2012-3053Jun 29, 2012
Cisco Systems, Inc.
Webex Advanced Recording Format Player
risk 0.00cvss —epss 0.03
Buffer overflow in the Cisco WebEx Advanced Recording Format (ARF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted ARF file, aka Bug…
CVE-2012-3231Jun 27, 2012
Web@all
web@all
risk 0.00cvss —epss 0.02
Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding a file to…
CVE-2012-2743Jun 27, 2012
Mikel Olasagasti
Revelation
risk 0.00cvss —epss 0.01
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
CVE-2012-2742Jun 27, 2012
Mikel Olasagasti
Revelation
risk 0.00cvss —epss 0.02
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack.
CVE-2012-3816Jun 27, 2012
Winradius
Winradius
risk 0.04cvss —epss 0.08
WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Request packet.
CVE-2012-3815Jun 27, 2012
Sielcosistemi
Winlog Pro
risk 0.07cvss —epss 0.44
Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824. NOTE: some of these details are obtained from third party information.