|
292081
|
8.8 |
HIGH
Network
|
cipherdyne
|
fwknop
|
fwknop before 2.0.3 allow remote authenticated users to cause a denial of service (server crash) or possibly execute arbitrary code.
|
CWE-276
Incorrect Default Permissions
|
CVE-2012-4434
|
2024-11-21 10:42 |
2020-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292082
|
6.1 |
MEDIUM
Network
|
zend fedoraproject redhat
|
zend_framework fedora enterprise_linux
|
Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1) Debug, (2) Feed\Pub…
|
CWE-79
Cross-site Scripting
|
CVE-2012-4451
|
2024-11-21 10:42 |
2020-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292083
|
7.5 |
HIGH
Network
|
oracle
|
jdk
|
An information disclosure flaw was found in the way the Java Virtual Machine (JVM) implementation of Java SE 7 as provided by OpenJDK 7 incorrectly initialized integer arrays after memory allocation …
|
CWE-200
Information Exposure
|
CVE-2012-4420
|
2024-11-21 10:42 |
2019-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292084
|
7.8 |
HIGH
Local
|
ovirt fedoraproject
|
mom fedora
|
mom creates world-writable pid files in /var/run
|
CWE-269
Improper Privilege Management
|
CVE-2012-4480
|
2024-11-21 10:42 |
2019-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292085
|
7.5 |
HIGH
Network
|
openslp debian fedoraproject canonical
|
openslp debian_linux fedora ubuntu_linux
|
openslp: SLPIntersectStringList()' Function has a DoS vulnerability
|
CWE-125
Out-of-bounds Read
|
CVE-2012-4428
|
2024-11-21 10:42 |
2019-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292086
|
6.1 |
MEDIUM
Network
|
jenkins
|
jenkins
|
Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin.
|
CWE-79
Cross-site Scripting
|
CVE-2012-4441
|
2024-11-21 10:42 |
2019-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292087
|
6.1 |
MEDIUM
Network
|
jenkins
|
jenkins
|
Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin.
|
CWE-79
Cross-site Scripting
|
CVE-2012-4440
|
2024-11-21 10:42 |
2019-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292088
|
6.1 |
MEDIUM
Network
|
jenkins
|
jenkins
|
Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins.
|
CWE-79
Cross-site Scripting
|
CVE-2012-4439
|
2024-11-21 10:42 |
2019-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292089
|
8.8 |
HIGH
Network
|
jenkins
|
jenkins
|
Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code.
|
CWE-20
Improper Input Validation
|
CVE-2012-4438
|
2024-11-21 10:42 |
2019-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292090
|
6.5 |
MEDIUM
Network
|
trilexnet debian
|
letodms debian_linux
|
letodms 3.3.6 has CSRF via change password
|
CWE-352
Origin Validation Error
|
CVE-2012-4385
|
2024-11-21 10:42 |
2019-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|