|
295751
|
- |
|
tibco
|
activematrix_service_grid activematrix_service_bus activematrix_businessworks_service_engine silver_fabric_activematrix_service_grid_distribution activematrix_bpm businessevents act…
|
TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Ser…
|
CWE-200
Information Exposure
|
CVE-2012-0687
|
2024-11-21 10:35 |
2012-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295752
|
- |
|
openssl
|
openssl
|
The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for conte…
|
CWE-310
Cryptographic Issues
|
CVE-2012-0884
|
2024-11-21 10:35 |
2012-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295753
|
- |
|
apple
|
safari
|
WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorizatio…
|
CWE-200
Information Exposure
|
CVE-2012-0647
|
2024-11-21 10:35 |
2012-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295754
|
- |
|
apple
|
safari
|
WebKit in Apple Safari before 5.1.4 does not properly implement "From third parties and advertisers" cookie blocking, which makes it easier for remote web servers to track users via a cookie.
|
CWE-200
Information Exposure
|
CVE-2012-0640
|
2024-11-21 10:35 |
2012-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295755
|
- |
|
apple
|
safari
|
The Internationalized Domain Name (IDN) feature in Apple Safari before 5.1.4 on Windows does not properly restrict the characters in URLs, which allows remote attackers to spoof a domain name via uns…
|
CWE-20
Improper Input Validation
|
CVE-2012-0584
|
2024-11-21 10:35 |
2012-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295756
|
- |
|
apple
|
itunes webkit
|
WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-0648
|
2024-11-21 10:35 |
2012-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295757
|
- |
|
apple
|
iphone_os
|
Format string vulnerability in VPN in Apple iOS before 5.1 allows remote attackers to execute arbitrary code via a crafted racoon configuration file.
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2012-0646
|
2024-11-21 10:35 |
2012-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295758
|
- |
|
apple
|
iphone_os
|
Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that for…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-0645
|
2024-11-21 10:35 |
2012-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295759
|
- |
|
apple
|
iphone_os
|
Race condition in the Passcode Lock feature in Apple iOS before 5.1 allows physically proximate attackers to bypass intended passcode requirements via a slide-to-dial gesture.
|
CWE-362
Race Condition
|
CVE-2012-0644
|
2024-11-21 10:35 |
2012-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295760
|
- |
|
apple
|
iphone_os
|
The kernel in Apple iOS before 5.1 does not properly handle debug system calls, which allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a crafted program.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-0643
|
2024-11-21 10:35 |
2012-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|