20289 matches found
CVE-2012-0828
Removed by vendor...
CVE-2012-0828
CVE-2012-0828: A heap-based buffer overflow in Xchat-WDK before 1499-4 (Xchat 2.8.6 on Maemo) could allow remote attackers to crash the client or execute arbitrary code via a UTF-8 line from the server containing characters outside the BMP.
CVE-2012-6277
CVE-2012-6277 concerns multiple vulnerabilities in Autonomy KeyView IDOL libraries used by IBM Notes/Domino, Symantec messaging/security products, and others. The issue arises from underlying memory-corruption flaws in KeyView IDOL, triggered by processing crafted input files, potentially enablin...
CVE-2012-0063
Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle attacks and execute arbitrary code ith the permissions of the user running tucan...
CVE-2012-0063
The CVE-2012-0063 entry concerns tucan up to version 0.3.10, where an insecure plugin update mechanism can enable remote attackers to perform man-in-the-middle attacks and execute arbitrary code with the user’s privileges. The affected component is the plugin update process; root cause is lack of...
CVE-2012-3351
CVE-2012-3351 affects LongTail Video JW Player up to and including 5.10.2295 (and older 5.9.x in some advisories). The vulnerability is a set of XSS flaws in parameters (link, logo.link, aboutlink) or nested URI schemes (javascript, asfunction, vbscript) that could be exploited when a user clicks...
CVE-2012-2599
Affected product: AlienVault OSSIM 3.1. CVE-2012-3835 describes multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to top.php or (2) time[0][0] parameter to forensics/base_qry_main.php, due to improper h...
CVE-2012-5363
The IPv6 implementation in FreeBSD and NetBSD unknown versions, year 2012 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor Solicitation messages, a different vulnerability than CVE-2011-2393...
CVE-2012-5364
The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries...
CVE-2012-5363
CVE-2012-5363 affects the IPv6 ND/Neighbor Solicitation handling in FreeBSD and NetBSD (unknown versions, year 2012 and earlier). The issue allows remote attackers to cause a denial of service by flooding the stack with ICMPv6 Neighbor Solicitation messages, as described in the CVE entry. Connect...
CVE-2012-5362
CVE-2012-5362 describes a DoS in the IPv6 stack of Microsoft Windows 7 and earlier caused by a flood of ICMPv6 Neighbor Solicitation messages. The CVE is tied to the Windows IPv6 ND implementation and allows remote attackers to exhaust CPU/resources, leading to potential system unavailability. Th...
CVE-2012-5365
The CVE-2012-5365 entry describes a denial-of-service vulnerability in the IPv6 implementation of FreeBSD and NetBSD (year 2012 and earlier). A remote attacker can overwhelm a target by sending ICMPv6 Router Advertisement packets that contain multiple Routing entries, exploiting how the IPv6 stac...
CVE-2012-5364
The CVE-2012-5364 entry documents a vulnerability in the IPv6 implementation of Microsoft Windows 7 and earlier that enables remote denial of service by flooding with ICMPv6 Router Advertisement messages carrying multiple Routing entries. Affected scope is Windows IPv6 stack (Windows 7 and earlie...
CVE-2012-5366
The CVE-2012-5366 entry describes a DoS vulnerability in the IPv6 implementation of Apple Mac OS X (unknown versions up to 2012) triggered by a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries. The affected component is the OS X IPv6 stack; the underlying root caus...
CVE-2012-2629
CVE-2012-2629 describes multiple CSRF and XSS vulnerabilities in Axous 1.1.1 and earlier. The issues allow remote attackers to hijack administrator sessions and perform actions such as adding admin accounts (CSRF via admin/administrators_add.php) or injecting script via multiple parameters (for e...
CVE-2012-6614
creationtimestamp| type| source ---|---|--- 2020-02-19 18:52:17+00:00| seen| https://t.me/cibsecurity/9935...
CVE-2012-6685
creationtimestamp| type| source ---|---|--- 2020-02-19 18:52:16+00:00| seen| https://t.me/cibsecurity/9934...
CVE-2012-0055
CVE-2012-0055 concerns OverlayFS in the Linux kernel, affected in versions before 3.0.0-16.28 (as used in Ubuntu 10.04 LTS and 11.10). The vulnerability stems from missing inode security checks in OverlayFS, enabling an attacker to bypass security restrictions and perform unauthorized actions. Th...
CVE-2012-6685
Nokogiri prior to 1.5.4 is vulnerable to XML External Entity (XXE) attacks. The issue arises in the XML parsing path (XXE) and is documented under CVE-2012-6685. Exploitation details are not provided beyond the XXE description. Affected software: Nokogiri (Ruby library). Root cause: XXE in XML pr...