28002 matches found
K15746: Linux kernel vulnerability CVE-2012-4542
Security Advisory Description Description block/scsiioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SGIO ioctl call that leverages overlapping...
K15417: OpenSSL vulnerability CVE-2012-0050
Security Advisory Description Description OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service crash via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix f...
K15095307: BDF parsing vulnerability CVE-2012-5669
Security Advisory Description The bdfparseglyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read...
CVE-2012-10008
creationtimestamp| type| source ---|---|--- 2023-02-20 12:15:44+00:00| seen| https://t.me/cibsecurity/58516...
CVE-2012-10008
The CVE-2012-10008 vulnerability affects uakfdotb oneapp and is described as a critical SQL injection vulnerability that can be triggered remotely. The affected component/processing is not fully specified in the initial document, and there is no versioning information for affected releases. A pat...
CVE-2012-10007
creationtimestamp| type| source ---|---|--- 2023-02-19 18:15:04+00:00| seen| https://t.me/cibsecurity/58510...
CVE-2012-10007 madgicweb BuddyStream Plugin ShareBox.php cross site scripting
A vulnerability was found in madgicweb BuddyStream Plugin up to 3.2.7 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file ShareBox.php. The manipulation of the argument content/link/shares leads to cross site scripting. The...
CVE-2012-10007
The CVE concerns madgicweb BuddyStream Plugin for WordPress, affecting versions up to 3.2.7. The flaw originates from an unknown function in ShareBox.php, where manipulation of the content/link/shares parameter enables cross-site scripting. It can be exploited remotely. The issue is mitigated by ...
Citrix Workspace App installation fails on Windows Server 2012 R2
Citrix Workspace App CWA version 2109 and above will fail to install on Windows Server 2012 R2 Systems with the error "Unable to install the following prerequisites. Install them manually and then try to install Citrix workspace App again.” Microsoft Edge Webview2 Runtime: Error Code: -2147219198...
SUSE CVE-2011-5372
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-5372. Reason: This candidate is a duplicate of CVE-2012-5372. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2012-5372 instead of this candidate. All references and descriptions in this candidate have been...
SUSE CVE-2012-0057
PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension...
SUSE CVE-2012-0086
Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web, a different vulnerability than CVE-2012-0095 and CVE-2012-0108...
SUSE CVE-2012-0090
Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0092...
SUSE CVE-2012-0120
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0485, and CVE-2012-0492...
SUSE CVE-2012-0392
The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method...
SUSE CVE-2012-0390
The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related...
SUSE CVE-2012-0415
unknown...
SUSE CVE-2012-0420
zypp-refresh-wrapper in SUSE Zypper before 1.3.20 and 1.6.x before 1.6.166 allows local users to create files in arbitrary directories, or possibly have unspecified other impact, via a pathname in the ZYPPLOCKFILEROOT environment variable...