CVEs

386,672 total · page 6699 of 7,734

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2010-5172	Pandasecurity Panda Internet Security 2010		0.00	—	0.00	Aug 25, 2012	Race condition in Panda Internet Security 2010 15.01.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space…
CVE-2010-5171	Agnitum Outpost Security Suite		0.00	—	0.00	Aug 25, 2012	Race condition in Outpost Security Suite Pro 6.7.3.3063.452.0726 and 7.0.3330.505.1221 BETA on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware…
CVE-2010-5170	Online Solutions Online Solutions Security Suite		0.00	—	0.00	Aug 25, 2012	Race condition in Online Solutions Security Suite 1.5.14905.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…
CVE-2010-5169	Online Armor Online Armor Premium	Hig	0.46	7.0	0.00	Aug 25, 2012	Race condition in Online Armor Premium 4.0.0.35 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory…
CVE-2010-5168	Symantec Norton Internet Security 2010		0.00	—	0.00	Aug 25, 2012	Race condition in Symantec Norton Internet Security 2010 17.5.0.127 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…
CVE-2010-5167	Norman Security Suite		0.00	—	0.00	Aug 25, 2012	Race condition in Norman Security Suite PRO 8.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory…
CVE-2010-5166	McAfee McAfee Total Protection		0.00	—	0.00	Aug 25, 2012	Race condition in McAfee Total Protection 2010 10.0.580 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space…
CVE-2010-5165	Malware Defender Malware Defender		0.00	—	0.00	Aug 25, 2012	Race condition in Malware Defender 2.6.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes…
CVE-2010-5164	Kingsoft Personal Firewall 9	Med	0.34	5.3	0.00	Aug 25, 2012	Race condition in KingSoft Personal Firewall 9 Plus 2009.05.07.70 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…
CVE-2010-5163	Kaspersky Lab Kaspersky Internet Security 2010		0.00	—	0.00	Aug 25, 2012	Race condition in Kaspersky Internet Security 2010 9.0.0.736 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space…
CVE-2010-5162	Gdata Totalcare 2010		0.00	—	0.00	Aug 25, 2012	Race condition in G DATA TotalCare 2010 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes…
CVE-2010-5161	F-Secure Internet Security		0.00	—	0.00	Aug 25, 2012	Race condition in F-Secure Internet Security 2010 10.00 build 246 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…
CVE-2010-5160	Eset Smart Security	Med	0.29	4.5	0.00	Aug 25, 2012	Race condition in ESET Smart Security 4.2.35.3 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory…
CVE-2010-5159	Drweb Web Security Space	Hig	0.46	7.0	0.00	Aug 25, 2012	Race condition in Dr.Web Security Space Pro 6.0.0.03100 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space…
CVE-2010-5158	Softsphere Defensewall Personal Firewall		0.00	—	0.00	Aug 25, 2012	Race condition in DefenseWall Personal Firewall 3.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory…
CVE-2010-5157	Comodo Internet Security		0.00	—	0.00	Aug 25, 2012	Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…
CVE-2010-5156	Ca Internet Security Suite 2008		0.00	—	0.00	Aug 25, 2012	Race condition in CA Internet Security Suite Plus 2010 6.0.0.272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…
CVE-2010-5155	Blink Professional		0.00	—	0.00	Aug 25, 2012	Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes…
CVE-2010-5154	Bitdefender Bitdefender Total Security 2010		0.00	—	0.00	Aug 25, 2012	Race condition in BitDefender Total Security 2010 13.0.20.347 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…
CVE-2010-5153	Avira Premium Security Suite	Med	0.35	5.3	0.01	Aug 25, 2012	Race condition in Avira Premium Security Suite 10.0.0.536 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space…
CVE-2010-5152	AVG Technologies Internet Security		0.00	—	0.00	Aug 25, 2012	Race condition in AVG Internet Security 9.0.791 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory…
CVE-2010-5151	Avast\! Internet Security		0.00	—	0.00	Aug 25, 2012	Race condition in avast! Internet Security 5.0.462 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory…
CVE-2010-5150	EQSecure 3D EQSecure Professional Edition		0.00	—	0.00	Aug 25, 2012	Race condition in 3D EQSecure Professional Edition 4.2 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space…
CVE-2012-4672	Apple Inc. Ichat Server		0.00	—	0.01	Aug 25, 2012	Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
CVE-2012-4671	Psyced Psyced		0.00	—	0.01	Aug 25, 2012	psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
CVE-2012-4670	Tigase Tigase Xmpp Server		0.00	—	0.01	Aug 25, 2012	Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.
CVE-2012-4669	Isode M Link		0.00	—	0.01	Aug 25, 2012	M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
CVE-2012-3525	Jabber Jabberd		0.00	—	0.02	Aug 25, 2012	s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.
CVE-2012-4668	Roundcube Webmail		0.00	—	0.04	Aug 25, 2012	Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email.
CVE-2012-4667	Darold Squidclamav		0.00	—	0.02	Aug 25, 2012	Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) virus, (3) source, or (4) user parameter to (a) clwarn.cgi, (b) clwarn.cgi.de_DE, (c) clwarn.cgi.en_EN, (d)…
CVE-2012-3514	Nicolas Cannasse Ocaml XML Light Library		0.00	—	0.01	Aug 25, 2012	OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via unspecified vectors.
CVE-2012-3508	Roundcube Webmail		0.00	—	0.04	Aug 25, 2012	Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers to inject arbitrary web script or HTML by using "javascript:" in an href attribute in the body of an HTML-formatted email.
CVE-2012-3507	Roundcube Webmail		0.00	—	0.02	Aug 25, 2012	Cross-site scripting (XSS) vulnerability in program/steps/mail/func.inc in RoundCube Webmail before 0.8.0, when using the Larry skin, allows remote attackers to inject arbitrary web script or HTML via the email message subject.
CVE-2012-3503	Theforeman Katello	Cri	0.57	9.8	0.03	Aug 25, 2012	The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System Engine web…
CVE-2012-3501	SquidClamav SquidClamav		0.00	—	0.03	Aug 25, 2012	The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call, which allows remote attackers to cause a denial of service (daemon crash) via a URL with certain characters, as…
CVE-2012-3481	GIMP Gimp		0.00	—	0.05	Aug 25, 2012	Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted height and len…
CVE-2012-3480	GNU Glibc		0.03	—	0.01	Aug 25, 2012	Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary…
CVE-2012-3479	GNU Emacs		0.00	—	0.04	Aug 25, 2012	lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote attackers to execute arbitrary Emacs Lisp code via a crafted file.
CVE-2012-3441	Icinga Icinga		0.00	—	0.02	Aug 25, 2012	The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.
CVE-2012-3416	Condor Project Condor		0.00	—	0.05	Aug 25, 2012	Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
CVE-2012-3403	GIMP Gimp		0.00	—	0.05	Aug 25, 2012	Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which triggers an "invalid free."
CVE-2012-3402	GIMP Gimp		0.00	—	0.04	Aug 25, 2012	Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted channels header value in a PSD image file, which triggers a heap-based…
CVE-2012-0048	OpenTTD Openttd		0.00	—	0.03	Aug 25, 2012	OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service (game pause) by connecting to the server and not finishing the (1) authorization phase or (2) map download, aka a "slow read" attack.
CVE-2012-2990	MarkAny ContentSAFER		0.00	—	0.04	Aug 24, 2012	The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before 2.3.2.12074_13_13, does not properly implement unspecified methods, which allows remote attackers to download an arbitrary program onto a…
CVE-2012-2984	Websense Content Gateway		0.03	—	0.02	Aug 24, 2012	Multiple cross-site scripting (XSS) vulnerabilities in monitor/m_overview.ink in Websense Content Gateway before 7.7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) item parameter.
CVE-2012-0713	IBM Db2		0.00	—	0.01	Aug 24, 2012	Unspecified vulnerability in the XML feature in IBM DB2 9.7 before FP6 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary XML files via unknown vectors.
CVE-2011-5117	Sophos Safeguard Easy Device Encryption Client		0.00	—	0.00	Aug 24, 2012	Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate…
CVE-2011-5116	Setseed Setseed CMS		0.03	—	0.01	Aug 23, 2012	SQL injection vulnerability in setseed-hub in SetSeed CMS 5.8.20, 5.11.2, and earlier allows remote attackers to execute arbitrary SQL commands via the loggedInUser cookie.
CVE-2011-5115	Dlguard Dlguard		0.00	—	0.01	Aug 23, 2012	Cross-site scripting (XSS) vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the searchCart parameter to index.php.
CVE-2011-5114	Barraguard Barracuda Link Balancer Series Firmware		0.00	—	0.01	Aug 23, 2012	Multiple cross-site scripting (XSS) vulnerabilities in the Authoritative DNS - DNS Zones page in Barracuda Link Balancer 330 Firmware 1.3.2.005 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) zoneid or (2) scope parameter.

CVE-2010-5172Aug 25, 2012
Pandasecurity
Panda Internet Security 2010
risk 0.00cvss —epss 0.00
Race condition in Panda Internet Security 2010 15.01.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space…
CVE-2010-5171Aug 25, 2012
Agnitum
Outpost Security Suite
risk 0.00cvss —epss 0.00
Race condition in Outpost Security Suite Pro 6.7.3.3063.452.0726 and 7.0.3330.505.1221 BETA on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware…
CVE-2010-5170Aug 25, 2012
Online Solutions
Online Solutions Security Suite
risk 0.00cvss —epss 0.00
Race condition in Online Solutions Security Suite 1.5.14905.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…
CVE-2010-5169HigAug 25, 2012
Online Armor
Online Armor Premium
risk 0.46cvss 7.0epss 0.00
Race condition in Online Armor Premium 4.0.0.35 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory…
CVE-2010-5168Aug 25, 2012
Symantec
Norton Internet Security 2010
risk 0.00cvss —epss 0.00
Race condition in Symantec Norton Internet Security 2010 17.5.0.127 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…
CVE-2010-5167Aug 25, 2012
Norman
Security Suite
risk 0.00cvss —epss 0.00
Race condition in Norman Security Suite PRO 8.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory…
CVE-2010-5166Aug 25, 2012
McAfee
McAfee Total Protection
risk 0.00cvss —epss 0.00
Race condition in McAfee Total Protection 2010 10.0.580 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space…
CVE-2010-5165Aug 25, 2012
Malware Defender
Malware Defender
risk 0.00cvss —epss 0.00
Race condition in Malware Defender 2.6.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes…
CVE-2010-5164MedAug 25, 2012
Kingsoft
Personal Firewall 9
risk 0.34cvss 5.3epss 0.00
Race condition in KingSoft Personal Firewall 9 Plus 2009.05.07.70 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…
CVE-2010-5163Aug 25, 2012
Kaspersky Lab
Kaspersky Internet Security 2010
risk 0.00cvss —epss 0.00
Race condition in Kaspersky Internet Security 2010 9.0.0.736 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space…
CVE-2010-5162Aug 25, 2012
Gdata
Totalcare 2010
risk 0.00cvss —epss 0.00
Race condition in G DATA TotalCare 2010 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes…
CVE-2010-5161Aug 25, 2012
F-Secure
Internet Security
risk 0.00cvss —epss 0.00
Race condition in F-Secure Internet Security 2010 10.00 build 246 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…
CVE-2010-5160MedAug 25, 2012
Eset
Smart Security
risk 0.29cvss 4.5epss 0.00
Race condition in ESET Smart Security 4.2.35.3 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory…
CVE-2010-5159HigAug 25, 2012
Drweb
Web Security Space
risk 0.46cvss 7.0epss 0.00
Race condition in Dr.Web Security Space Pro 6.0.0.03100 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space…
CVE-2010-5158Aug 25, 2012
Softsphere
Defensewall Personal Firewall
risk 0.00cvss —epss 0.00
Race condition in DefenseWall Personal Firewall 3.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory…
CVE-2010-5157Aug 25, 2012
Comodo
Internet Security
risk 0.00cvss —epss 0.00
Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…
CVE-2010-5156Aug 25, 2012
Ca
Internet Security Suite 2008
risk 0.00cvss —epss 0.00
Race condition in CA Internet Security Suite Plus 2010 6.0.0.272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…
CVE-2010-5155Aug 25, 2012
Blink
Professional
risk 0.00cvss —epss 0.00
Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes…
CVE-2010-5154Aug 25, 2012
Bitdefender
Bitdefender Total Security 2010
risk 0.00cvss —epss 0.00
Race condition in BitDefender Total Security 2010 13.0.20.347 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…
CVE-2010-5153MedAug 25, 2012
Avira
Premium Security Suite
risk 0.35cvss 5.3epss 0.01
Race condition in Avira Premium Security Suite 10.0.0.536 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space…
CVE-2010-5152Aug 25, 2012
AVG Technologies
Internet Security
risk 0.00cvss —epss 0.00
Race condition in AVG Internet Security 9.0.791 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory…
CVE-2010-5151Aug 25, 2012
Avast\!
Internet Security
risk 0.00cvss —epss 0.00
Race condition in avast! Internet Security 5.0.462 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory…
CVE-2010-5150Aug 25, 2012
EQSecure
3D EQSecure Professional Edition
risk 0.00cvss —epss 0.00
Race condition in 3D EQSecure Professional Edition 4.2 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space…
CVE-2012-4672Aug 25, 2012
Apple Inc.
Ichat Server
risk 0.00cvss —epss 0.01
Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
CVE-2012-4671Aug 25, 2012
Psyced
Psyced
risk 0.00cvss —epss 0.01
psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
CVE-2012-4670Aug 25, 2012
Tigase
Tigase Xmpp Server
risk 0.00cvss —epss 0.01
Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.
CVE-2012-4669Aug 25, 2012
Isode
M Link
risk 0.00cvss —epss 0.01
M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
CVE-2012-3525Aug 25, 2012
Jabber
Jabberd
risk 0.00cvss —epss 0.02
s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.
CVE-2012-4668Aug 25, 2012
Roundcube
Webmail
risk 0.00cvss —epss 0.04
Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email.
CVE-2012-4667Aug 25, 2012
Darold
Squidclamav
risk 0.00cvss —epss 0.02
Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) virus, (3) source, or (4) user parameter to (a) clwarn.cgi, (b) clwarn.cgi.de_DE, (c) clwarn.cgi.en_EN, (d)…
CVE-2012-3514Aug 25, 2012
Nicolas Cannasse
Ocaml XML Light Library
risk 0.00cvss —epss 0.01
OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via unspecified vectors.
CVE-2012-3508Aug 25, 2012
Roundcube
Webmail
risk 0.00cvss —epss 0.04
Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers to inject arbitrary web script or HTML by using "javascript:" in an href attribute in the body of an HTML-formatted email.
CVE-2012-3507Aug 25, 2012
Roundcube
Webmail
risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in program/steps/mail/func.inc in RoundCube Webmail before 0.8.0, when using the Larry skin, allows remote attackers to inject arbitrary web script or HTML via the email message subject.
CVE-2012-3503CriAug 25, 2012
Theforeman
Katello
risk 0.57cvss 9.8epss 0.03
The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System Engine web…
CVE-2012-3501Aug 25, 2012
SquidClamav
SquidClamav
risk 0.00cvss —epss 0.03
The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call, which allows remote attackers to cause a denial of service (daemon crash) via a URL with certain characters, as…
CVE-2012-3481Aug 25, 2012
GIMP
Gimp
risk 0.00cvss —epss 0.05
Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted height and len…
CVE-2012-3480Aug 25, 2012
GNU
Glibc
risk 0.03cvss —epss 0.01
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary…
CVE-2012-3479Aug 25, 2012
GNU
Emacs
risk 0.00cvss —epss 0.04
lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote attackers to execute arbitrary Emacs Lisp code via a crafted file.
CVE-2012-3441Aug 25, 2012
Icinga
Icinga
risk 0.00cvss —epss 0.02
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.
CVE-2012-3416Aug 25, 2012
Condor Project
Condor
risk 0.00cvss —epss 0.05
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
CVE-2012-3403Aug 25, 2012
GIMP
Gimp
risk 0.00cvss —epss 0.05
Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which triggers an "invalid free."
CVE-2012-3402Aug 25, 2012
GIMP
Gimp
risk 0.00cvss —epss 0.04
Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted channels header value in a PSD image file, which triggers a heap-based…
CVE-2012-0048Aug 25, 2012
OpenTTD
Openttd
risk 0.00cvss —epss 0.03
OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service (game pause) by connecting to the server and not finishing the (1) authorization phase or (2) map download, aka a "slow read" attack.
CVE-2012-2990Aug 24, 2012
MarkAny
ContentSAFER
risk 0.00cvss —epss 0.04
The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before 2.3.2.12074_13_13, does not properly implement unspecified methods, which allows remote attackers to download an arbitrary program onto a…
CVE-2012-2984Aug 24, 2012
Websense
Content Gateway
risk 0.03cvss —epss 0.02
Multiple cross-site scripting (XSS) vulnerabilities in monitor/m_overview.ink in Websense Content Gateway before 7.7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) item parameter.
CVE-2012-0713Aug 24, 2012
IBM
Db2
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the XML feature in IBM DB2 9.7 before FP6 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary XML files via unknown vectors.
CVE-2011-5117Aug 24, 2012
Sophos
Safeguard Easy Device Encryption Client
risk 0.00cvss —epss 0.00
Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate…
CVE-2011-5116Aug 23, 2012
Setseed
Setseed CMS
risk 0.03cvss —epss 0.01
SQL injection vulnerability in setseed-hub in SetSeed CMS 5.8.20, 5.11.2, and earlier allows remote attackers to execute arbitrary SQL commands via the loggedInUser cookie.
CVE-2011-5115Aug 23, 2012
Dlguard
Dlguard
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the searchCart parameter to index.php.
CVE-2011-5114Aug 23, 2012
Barraguard
Barracuda Link Balancer Series Firmware
risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in the Authoritative DNS - DNS Zones page in Barracuda Link Balancer 330 Firmware 1.3.2.005 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) zoneid or (2) scope parameter.