CVE-2012-1495

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the formsingleuserlogin parameter...

CVE-2012-1495

WebCalendar is affected by CVE-2012-1495: install/index.php in WebCalendar versions before 1.2.5 allows remote code execution via the form_single_user_login parameter (pre-auth). The vulnerability enables arbitrary code execution with web user privileges and has multiple public references detaili...

CVE-2012-1495

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the formsingleuserlogin parameter...

CVE-2012-1496

CVE-2012-1496 affects WebCalendar prior to 1.2.5. Multiple sources document local file inclusion (LFI) in WebCalendar, with OpenVAS also listing PHP code injection in WebCalendar 1.2.4. The common impact is arbitrary file read and potential code execution within the vulnerable web application con...

CVE-2012-6613

CVE-2012-6613 affects D-Link DSR-250N devices with firmware 1.05B73_WW. The issue allows Persistent Root Access due to the admin password for the admin account. Attack surface is network-exposed since CVSS vectors indicate remote access with low complexity and high privileges required. The NVD en...

CVE-2012-6613

D-Link DSR-250N devices with firmware 1.05B73WW allow Persistent Root Access because of the admin password for the admin account...

CVE-2012-6494

CVE-2012-6494 affects Rapid7 Nexpose (Nexpose Security Console) prior to version 5.5.4. The vulnerability is a session hijacking flaw that allows remote attackers to capture a logged-in user’s session and gain unauthorized access. Proof-of-concept and exploitation details are described in vendor ...

CVE-2012-6345

CVE-2012-6345 affects Novell ZENworks Configuration Management prior to 11.2.4 and is described as an information-disclosure vulnerability that allows obtaining sensitive trace information. The available description indicates the issue involves leakage of trace data, with CVSS metrics (up to HIGH...

CVE-2012-6344

CVE-2012-6344 impacts Novell ZENworks Configuration Management prior to 11.2.4, where input handling allows cross‑site scripting (XSS). The connected sources corroborate the issue title and product/version affected, but do not provide a detailed root cause or exploit specifics beyond the XSS desc...

CVE-2012-6451

Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability...

CVE-2012-6451

Affected products: Lorex LNC116 and LNC104 IP Cameras. Vulnerability: Remote authentication bypass due to the web interface using HTTP Basic authentication but validating credentials only on the home page; direct URL navigation bypasses login. Impact: unauthorized viewing of live video feed and p...

CVE-2012-6302

CVE-2012-6302 affects Soapbox up to version 0.3.1 and is a sandbox bypass vulnerability: it can cause a second instance of Soapbox to run inside a sandboxed Soapbox, enabling potential escalation of impact. Available sources (NVD/Red Hat) describe this as a sandbox escape vector in Soapbox 0.3.1,...

Security Bulletin: Multiple Vulnerabilities Have Been Identified In IBM Security Secret Server

Summary Multiple vulnerabilities identified on IBM Security Secret Server have been addressed in the release 10.7.000059. Vulnerability Details CVEID: CVE-2012-5662 DESCRIPTION: x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject's Common Name CN ...

CVE-2012-5340

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lexnumber function via a corrupt PDF file...

CVE-2012-5389

NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows remote attackers to cause a denial of service application crash via a crafted HTTP request...

UBUNTU-CVE-2012-5340

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lexnumber function via a corrupt PDF file...

CVE-2012-6649

The CVE-2012-6649 affects WordPress WP GPX Maps Plugin 1.1.21 and is caused by an improper/unrestricted file upload, enabling remote attackers to execute arbitrary PHP code on the server. Impact: remote code execution with web‑server context; vulnerability is tied to the wp-gpx-maps plugin. Remed...

CVE-2012-6663

CVE-2012-6663 affects General Electric D20ME/D20M RTUs. The available connected documentation confirms a vulnerability where device configurations are accessible via TFTP and reveal plaintext usernames and passwords due to improper configuration. The exploitation path is evidenced by the Metasplo...

CVE-2012-4606

Citrix XenServer is affected by a Local Privilege Escalation vulnerability (CVE-2012-4606) in multiple releases: 4.1, 6.0, 5.6 SP2, 5.6 FP1, 5.6, 5.5, 5.0, and 5.0 Update 3. The flaw enables local users with access to a guest OS to gain elevated privileges on the host. Exploitation details or exa...

CVE-2012-5340

CVE-2012-5340 affects SumatraPDF 2.1.1 and MuPDF 1.0, where a vulnerability in the lex_number() function can cause a Integer Overflow when processing a crafted PDF. The issue is confirmed across multiple sources (NVD/OSV Debian/Ubuntu/CVE records) and is triggered by corrupt PDF files. Exploitati...