|
289311
|
- |
|
owncloud
|
owncloud
|
Cross-site scripting (XSS) vulnerability in apps/user_webdavauth/settings.php in ownCloud 4.5.x before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via arbitrary POST paramete…
|
CWE-79
Cross-site Scripting
|
CVE-2012-5608
|
2024-11-21 10:44 |
2012-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289312
|
- |
|
owncloud
|
owncloud
|
The "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly check the security token, which allows remote attackers to change an accounts password via unspecified vec…
|
CWE-255
Credentials Management
|
CVE-2012-5607
|
2024-11-21 10:44 |
2012-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289313
|
- |
|
owncloud
|
owncloud
|
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) file name to apps/files_versions/js/ve…
|
CWE-79
Cross-site Scripting
|
CVE-2012-5606
|
2024-11-21 10:44 |
2012-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289314
|
- |
|
gimp
|
gimp
|
Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code vi…
|
CWE-787
Out-of-bounds Write
|
CVE-2012-5576
|
2024-11-21 10:44 |
2012-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289315
|
- |
|
sensiolabs
|
symfony
|
lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-5574
|
2024-11-21 10:44 |
2012-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289316
|
- |
|
openstack
|
folsom
|
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating…
|
CWE-255
Credentials Management
|
CVE-2012-5563
|
2024-11-21 10:44 |
2012-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289317
|
- |
|
bogofilter_project
|
bogofilter
|
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-5468
|
2024-11-21 10:44 |
2012-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289318
|
- |
|
perl
|
perl
|
Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-5195
|
2024-11-21 10:44 |
2012-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289319
|
- |
|
xen
|
xen
|
The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a crafted GFN that triggers a buffer over-read.
|
NVD-CWE-noinfo
|
CVE-2012-5525
|
2024-11-21 10:44 |
2012-12-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289320
|
- |
|
xen
|
xen
|
The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop an…
|
NVD-CWE-noinfo
|
CVE-2012-5515
|
2024-11-21 10:44 |
2012-12-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|