Design/Logic Flaw

Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors...

PT-2012-2419

Name of the Vulnerable Software and Affected Versions Invensys Wonderware Information Server versions 4.0 SP1 through 4.5 Description The issue is related to the improper implementation of client controls, allowing remote attackers to bypass intended access restrictions. The exact vectors used fo...

CVE-2012-0228: Undefined Security Weakness

Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors...

CVE-2012-0384

Summary: CVE-2012-0384 maps to a Cisco IOS/IOS XE authentication bypass vulnerability where, if AAA authorization is enabled and the HTTP/HTTPS server is active, a remote, authenticated user can bypass access restrictions and execute commands at the user’s authorization level. Affected software i...

CVE-2011-3054

The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allows remote attackers to bypass intended access restrictions via unspecified vectors...

CVE-2011-3054: Improper Privilege Management

The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allows remote attackers to bypass intended access restrictions via unspecified vectors...

Mozilla Products Multiple Vulnerabilities - 01 - (Mar 2012) - Windows

Mozilla Firefox/Thunderbird/Seamonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Remote Desktop Protocol (RDP) insecurely deallocates memory

Overview The Microsoft Remote Desktop Protocol RDP service contains a double-free vulnerability that could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Microsoft Remote Desktop Protocol RDP provides a remote graphical interface to...

CVE-2012-0322

The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly restrict access, which allows remote attackers to read arbitrary files via vectors involving an unspecified function...

CVE-2012-0322

The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly restrict access, which allows remote attackers to read arbitrary files via vectors involving an unspecified function...

PT-2012-2498

Name of the Vulnerable Software and Affected Versions EStrongs ES File Explorer versions 1.6.0.2 through 1.6.1.1 Description The issue allows remote attackers to read arbitrary files due to improper access restriction. This is achieved via vectors involving an unspecified function. Recommendation...

rivettracker <=1.03 Multiple SQL injection

Exploit for php platform in category web applications Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contai...

Apache Tomcat 7.0.x < 7.0.22 Multiple Vulnerabilities

Binary data 800605.prm...

CVE-2012-0756

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability tha...

Design/Logic Flaw

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability tha...

CVE-2012-0755: Undefined Security Weakness

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability tha...

PT-2012-2350 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2, R2, and R2 SP1 Microsoft Windows 7 Gold and SP1 on 64-bit platforms Description: The issue arises from the Ancillary...

PT-2012-2240 · Microsoft · Silverlight +1

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP2, 3.5.1, and 4 Silverlight versions 4 through 4.1.10110 Description: A remote code execution issue exists due to improper restriction of access to memory associated with unmanaged objects. This allows...

PT-2012-1989 · WordPress +1 · Wordpress +1

Name of the Vulnerable Software and Affected Versions: WordPress versions 3.3.1 and earlier Description: The installation component in WordPress does not ensure that the specified MySQL database service is appropriate, allowing remote attackers to configure an arbitrary database via the dbhost an...

CVE-2011-4608: Undefined Security Weakness

modcluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sessions, and steal credentials by registering from ...