|
293621
|
- |
|
php
|
php
|
The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to…
|
CWE-399
Resource Management Errors
|
CVE-2012-0781
|
2024-11-21 10:35 |
2012-01-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293622
|
- |
|
whmcs
|
whmcompletesolution
|
submitticket.php in WHMCompleteSolution (WHMCS) 5.03 allows remote attackers to inject arbitrary code into a subject field via crafted ticket data, a different vulnerability than CVE-2011-5061. NOTE:…
|
CWE-94
Code Injection
|
CVE-2012-0693
|
2024-11-21 10:35 |
2012-01-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293623
|
- |
|
hp
|
storageworks_p2000_g3_msa
|
HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perform administrative tasks via unspecified vectors, a different vulnerability than C…
|
CWE-22
Path Traversal
|
CVE-2012-0697
|
2024-11-21 10:35 |
2012-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293624
|
- |
|
ibm
|
cognos_executive_viewer cognos_tm1
|
Multiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via unspecified request…
|
CWE-79
Cross-site Scripting
|
CVE-2012-0696
|
2024-11-21 10:35 |
2012-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293625
|
- |
|
google acer samsung
|
chrome_os ac700_chromebook cr-48_chromebook series_5_chromebook
|
Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.27 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.
|
NVD-CWE-noinfo
|
CVE-2012-0695
|
2024-11-21 10:35 |
2012-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293626
|
8.1 |
HIGH
Network
|
tucaneando
|
tucan
|
Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle attacks and execute arbitrary code ith the permissions of the user running tucan.
|
NVD-CWE-noinfo
|
CVE-2012-0063
|
2024-11-21 10:34 |
2020-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293627
|
7.8 |
HIGH
Local
|
linux canonical
|
linux_kernel ubuntu_linux
|
OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unau…
|
CWE-862
Missing Authorization
|
CVE-2012-0055
|
2024-11-21 10:34 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293628
|
5.3 |
MEDIUM
Network
|
mirc
|
mirc
|
mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.
|
CWE-200
Information Exposure
|
CVE-2011-5282
|
2024-11-21 10:34 |
2020-01-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293629
|
7.5 |
HIGH
Network
|
spamdyke
|
spamdyke
|
spamdyke prior to 4.2.1: STARTTLS reveals plaintext
|
CWE-74
Injection
|
CVE-2012-0070
|
2024-11-21 10:34 |
2020-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293630
|
6.4 |
MEDIUM
Adjacent
|
cisco
|
ironport_web_security_appliance
|
Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks
|
CWE-20
Improper Input Validation
|
CVE-2012-0334
|
2024-11-21 10:34 |
2020-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|