|
297921
|
- |
|
cisco
|
unified_meetingplace
|
SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939.
|
CWE-89
SQL Injection
|
CVE-2012-0337
|
2024-11-21 10:34 |
2012-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297922
|
- |
|
cisco
|
adaptive_security_appliance_software
5500_series_adaptive_security_appliance
|
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote …
|
CWE-287
Improper Authentication
|
CVE-2012-0335
|
2024-11-21 10:34 |
2012-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297923
|
- |
|
cisco
|
small_business_ip_phone_firmware
small_business_ip_phone
|
Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML doc…
|
CWE-287
Improper Authentication
|
CVE-2012-0333
|
2024-11-21 10:34 |
2012-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297924
|
- |
|
quest
|
toad_for_data_analysts
|
Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse f…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-0279
|
2024-11-21 10:34 |
2012-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297925
|
- |
|
justsystems
|
just_school
shuriken
shuriken_pro
ichitaro
ichitaro_viewer
just_frontier
rekishimail_sengokubusho_no_missho
rekishimail_bakumatsushishi_no_missho
just_jump
oreplug
ichit…
|
Buffer overflow in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-0269
|
2024-11-21 10:34 |
2012-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297926
|
- |
|
debian
|
apache2
|
The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when mod_php or mod_rivet is used, provides exa…
|
NVD-CWE-Other
|
CVE-2012-0216
|
2024-11-21 10:34 |
2012-04-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297927
|
- |
|
emc
|
data_protection_advisor
|
Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (infinite loop) via a negative 64-bit value…
|
CWE-189
Numeric Errors
|
CVE-2012-0407
|
2024-11-21 10:34 |
2012-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297928
|
- |
|
emc
|
data_protection_advisor
|
The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemo…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-0406
|
2024-11-21 10:34 |
2012-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297929
|
- |
|
hp
|
openvms
|
Unspecified vulnerability in HP OpenVMS 7.3-2 on the Alpha platform, 8.3 and 8.4 on the Alpha and IA64 platforms, and 8.3-1h1 on the IA64 platform allows local users to cause a denial of service via …
|
NVD-CWE-noinfo
|
CVE-2012-0134
|
2024-11-21 10:34 |
2012-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297930
|
- |
|
demandmedia
|
pluck_sitelife
|
Multiple cross-site scripting (XSS) vulnerabilities in Demand Media Pluck SiteLife before 5.0.13 allow remote attackers to inject arbitrary web script or HTML via (1) the jsonRequest parameter to Dir…
|
CWE-79
Cross-site Scripting
|
CVE-2012-0253
|
2024-11-21 10:34 |
2012-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
