28554 matches found
CVE-2012-6609
Directory traversal vulnerability in agetlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...
CVE-2012-6114
The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/changelog or 2 /tmp/.git-effort...
CVE-2012-6114
The CVE-2012-6114 issue affects the git-changelog utility in git-extras 1.7.0. A local user can cause a symlink attack targeting /tmp/changelog or /tmp/.git-effort, enabling overwriting of arbitrary files. The root cause is a symlink/privilege-exacerbated file-write vulnerability in the utility’s...
CVE-2012-6448
Cross-site Scripting XSS in cPanel WebHost Manager WHM 11.34.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-6448
CVE-2012-6448 describes a Cross-site Scripting (XSS) vulnerability in cPanel WebHost Manager (WHM) 11.34.0. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Connected sources confirm the affected product/version and provide an exploit reference (Exp...
CVE-2012-1495
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the formsingleuserlogin parameter...
CVE-2012-1495
WebCalendar is affected by CVE-2012-1495: install/index.php in WebCalendar versions before 1.2.5 allows remote code execution via the form_single_user_login parameter (pre-auth). The vulnerability enables arbitrary code execution with web user privileges and has multiple public references detaili...
CVE-2012-1495
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the formsingleuserlogin parameter...
CVE-2012-1496
CVE-2012-1496 affects WebCalendar prior to 1.2.5. Multiple sources document local file inclusion (LFI) in WebCalendar, with OpenVAS also listing PHP code injection in WebCalendar 1.2.4. The common impact is arbitrary file read and potential code execution within the vulnerable web application con...
CVE-2012-6613
D-Link DSR-250N devices with firmware 1.05B73WW allow Persistent Root Access because of the admin password for the admin account...
CVE-2012-6613
CVE-2012-6613 affects D-Link DSR-250N devices with firmware 1.05B73_WW. The issue allows Persistent Root Access due to the admin password for the admin account. Attack surface is network-exposed since CVSS vectors indicate remote access with low complexity and high privileges required. The NVD en...
CVE-2012-6494
CVE-2012-6494 affects Rapid7 Nexpose (Nexpose Security Console) prior to version 5.5.4. The vulnerability is a session hijacking flaw that allows remote attackers to capture a logged-in user’s session and gain unauthorized access. Proof-of-concept and exploitation details are described in vendor ...
CVE-2012-6345
CVE-2012-6345 affects Novell ZENworks Configuration Management prior to 11.2.4 and is described as an information-disclosure vulnerability that allows obtaining sensitive trace information. The available description indicates the issue involves leakage of trace data, with CVSS metrics (up to HIGH...
CVE-2012-6344
CVE-2012-6344 impacts Novell ZENworks Configuration Management prior to 11.2.4, where input handling allows cross‑site scripting (XSS). The connected sources corroborate the issue title and product/version affected, but do not provide a detailed root cause or exploit specifics beyond the XSS desc...
CVE-2012-6451
Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability...
CVE-2012-6451
Affected products: Lorex LNC116 and LNC104 IP Cameras. Vulnerability: Remote authentication bypass due to the web interface using HTTP Basic authentication but validating credentials only on the home page; direct URL navigation bypasses login. Impact: unauthorized viewing of live video feed and p...
CVE-2012-6302
CVE-2012-6302 affects Soapbox up to version 0.3.1 and is a sandbox bypass vulnerability: it can cause a second instance of Soapbox to run inside a sandboxed Soapbox, enabling potential escalation of impact. Available sources (NVD/Red Hat) describe this as a sandbox escape vector in Soapbox 0.3.1,...
Security Bulletin: Multiple Vulnerabilities Have Been Identified In IBM Security Secret Server
Summary Multiple vulnerabilities identified on IBM Security Secret Server have been addressed in the release 10.7.000059. Vulnerability Details CVEID: CVE-2012-5662 DESCRIPTION: x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject's Common Name CN ...
