CVE-2012-6032

Technical details for CVE-2012-6032 are not present in the provided connected documents. Public information about affected components, root cause, impact or fixes is not available here; monitor for updates.

CVE-2012-6034

The 1 tmemcsavegetnextpage and 2 tmemcsavegetnextinv functions and the 3 TMEMCSAVEGETPOOLUUID sub-operation in the Transcendent Memory TMEM in Xen 4.0, 4.1, and 4.2 "do not check incoming guest output buffer pointers," which allows local guest OS users to cause a denial of service memory corrupti...

CVE-2012-6034

CVE-2012-6034 affects Xen TMEM (Transcendent Memory) in Xen 4.0–4.2. The vulnerable code paths are tmemc_save_get_next_page, tmemc_save_get_next_inv, and the TMEMC_SAVE_GET_POOL_UUID sub-operation, which fail to validate incoming guest output buffer pointers. This can allow a local guest OS user ...

CVE-2012-5703

The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service host daemon crash via an invalid value in a 1 RetrieveProp or 2 RetrievePropEx SOAP request...

Cross site request forgery (csrf)

The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service host daemon crash via an invalid value in a 1 RetrieveProp or 2 RetrievePropEx SOAP request...

VMware Security Update Fixes DoS, Other Vulnerabilities

Virtualization software maker VMware shipped a security update for its vSphere API yesterday that resolved a denial of service vulnerability in ESX and ESXi, as well as adding a number of open source security updates to the ESX Service Console. The patch affects the following releases: VMware ESX...

Cross site scripting

Cross-site scripting XSS vulnerability in Bugzilla 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as demonstrated by the Version...

CVE-2012-2625

The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service memory consumption via a large 1 bzip2 or 2 lzma compressed kernel image...

BestPlay v4.1 (.mp3) Crash PoC

Exploit for windows platform in category local exploits Exploit Title: BestPlay v4.1 .mp3 Crash PoC Version: 4.1 Date: 2012-10-18 Software Link: http://www.procesualitatea.ro/bestplay/ Author: LolzSec Tested on: Windows XP SP3 Greeting To : Da'One !/usr/bin/python file="Crash.mp3" crash="\x41"...

ViArt Shop 4.1 RCE (Linux)

Remote command execution vulnerability in ViArt Shop payments/sipsresponse.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

ViArt Shop Evaluation 4.1 - Multiple Remote File Inclusions

Exploit Title: ViArt Shop Evaluation v4.1 Multiple Remote File Inclusion Vulnerability Date: 26/9/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.viart.com/ Software Link: http://www.viart.com/downloads/viartshop-4.1.zip Versio...

ViArt Shop Enterprise 4.1 Arbitrary Command Execution / XSS Vulnerabilities

Exploit for php platform in category web applications ?php / ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability Vendor: ViArt Software Product web page: http://www.viart.com Affected version: 4.1, 4.0.8, 4.0.5 Summary: Viart Shop is a PHP based e-commerce suite, aiming to provide...

Cross site scripting

Cross-site scripting XSS vulnerability in list.php in PHPB2B 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action...

CVE-2012-5099

CVE-2012-5099 : A cross-site scripting (XSS) vulnerability exists in list.php for PHPB2B 4.1 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML through the q parameter in a search action. The connected documents confirm the affected software and the vulnerable pa...

CVE-2012-4747

Bugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to read 1 template aka .tmpl files, 2 other custom...

Code injection

Auth/Verify/LDAP.pm in Bugzilla 2.x and 3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 does not restrict the characters in a username, which might allow remote attackers to inject data into an LDAP directory via a crafted login attempt...

CVE-2012-3433

Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service domain 0 VCPU hang and kernel panic by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown...

CVE-2012-1968

Bugzilla 4.1.x and 4.2.x before 4.2.2 and 4.3.x before 4.3.2 uses bug-editor privileges instead of bugmail-recipient privileges during construction of HTML bugmail documents, which allows remote attackers to obtain sensitive description information by reading the tooltip portions of an HTML e-mai...

CVE-2012-1968

Bugzilla 4.1.x and 4.2.x before 4.2.2 and 4.3.x before 4.3.2 uses bug-editor privileges instead of bugmail-recipient privileges during construction of HTML bugmail documents, which allows remote attackers to obtain sensitive description information by reading the tooltip portions of an HTML e-mai...

CVE-2012-1969

The getattachmentlink function in Template.pm in Bugzilla 2.x and 3.x before 3.6.10, 3.7.x and 4.0.x before 4.0.7, 4.1.x and 4.2.x before 4.2.2, and 4.3.x before 4.3.2 does not check whether an attachment is private before presenting the attachment description within a public comment, which allow...