|
295901
|
- |
|
s9y
|
serendipity
|
SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php.
|
CWE-89
SQL Injection
|
CVE-2012-2762
|
2024-11-21 10:39 |
2012-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295902
|
- |
|
sensiolabs
|
symfony
|
Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hijack web sessions via vectors related to the regenerate metho…
|
NVD-CWE-Other
|
CVE-2012-2667
|
2024-11-21 10:39 |
2012-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295903
|
- |
|
bandainamcogames
|
madomagi-ip_android
|
The Puella Magi Madoka Magica iP application 1.05 and earlier for Android places cleartext Twitter credentials in a log file, which allows remote attackers to obtain sensitive information via a craft…
|
CWE-255
Credentials Management
|
CVE-2012-2630
|
2024-11-21 10:39 |
2012-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295904
|
- |
|
networkupstools
|
nut
|
Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-2944
|
2024-11-21 10:39 |
2012-06-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295905
|
- |
|
vmware
|
vma
|
Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
|
NVD-CWE-Other
|
CVE-2012-2752
|
2024-11-21 10:39 |
2012-06-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295906
|
- |
|
cisco
|
ios_xr
asr_9000_rsp440_router
crs_performance_route_processor
|
Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet, aka Bug IDs CSCty94…
|
CWE-20
Improper Input Validation
|
CVE-2012-2488
|
2024-11-21 10:39 |
2012-05-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295907
|
- |
|
captcha
|
cryptographp
|
CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter.
|
NVD-CWE-Other
|
CVE-2012-2943
|
2024-11-21 10:39 |
2012-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295908
|
- |
|
haproxy
|
haproxy
|
Buffer overflow in the trash buffer in the header capture functionality in HAProxy before 1.4.21, when global.tune.bufsize is set to a value greater than the default and header rewriting is enabled, …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-2942
|
2024-11-21 10:39 |
2012-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295909
|
- |
|
yandex
|
yandex.server_2010
|
Cross-site scripting (XSS) vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows remote attackers to inject arbitrary web script or HTML via the text parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2012-2941
|
2024-11-21 10:39 |
2012-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295910
|
- |
|
mediachance
|
real-draw_pro
|
MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted (1) PNG, (2) WMF, (3) PSD, (4) TGA, (5) TTF, (6) BMP, (7) TIFF, or (8) PCX file.
|
CWE-20
Improper Input Validation
|
CVE-2012-2940
|
2024-11-21 10:39 |
2012-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
