20289 matches found
CVE-2012-2323
CVE-2012-2323 is a reservation duplicate of CVE-2012-2214 and is not an active vulnerability entry.
Cross-Site Scripting (XSS)
Moodle is susceptible to cross-site scripting XSS attacks. The attacks are possible because the idnumber field used in the administration of cohorts is not properly escaped. The artifact is due to incorrect fix for CVE-2012-2365...
CVE-2017-11343
Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...
Input validation
Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...
openSUSE: Security Advisory for clamav (openSUSE-SU-2017:1797-1)
The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : clamav (openSUSE-2017-779)
This update for clamav fixes the following security issue : - CVE-2012-6706: Fixed an arbitrary memory write in VMSFDELTA filter in libclamunrar bsc1045490 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...
SUSE SLES11 Security Update : unrar (SUSE-SU-2017:1760-1)
This update for unrar fixes the following issues : - CVE-2012-6706: decoding malicious RAR files could have lead to memory corruption or code execution. bsc1045315. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable h...
SUSE SLED12 / SLES12 Security Update : unrar (SUSE-SU-2017:1745-1)
This update for unrar fixes the following issues : - CVE-2012-6706: decoding malicious RAR files could have lead to memory corruption or code execution. bsc1045315. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable h...
SUSE-SU-2017:1745-1 Security update for unrar
This update for unrar fixes the following issues: - CVE-2012-6706: decoding malicious RAR files could have lead to memory corruption or code execution. bsc1045315...
SUSE SLED12 / SLES12 Security Update : clamav (SUSE-SU-2017:1716-1)
This update for clamav fixes the following issues: Security issue fixed : - CVE-2012-6706: Fixed an arbitrary memory write in VMSFDELTA filter in libclamunrar bsc1045490 Non security issues fixed : - Provide and obsolete clamav-nodb to trigger its removal in openSUSE Leap. bsc1040662 Note that...
F5 Networks BIG-IP : Grep vulnerability (K69662152)
Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow. CVE-2012-5667 C Tenable Network Security, Inc. The descriptive text and package checks in this...
CVE-2012-5010
CVE-2012-5010 affects Cisco ASA devices (multiple models: 5515-X, 5510, 5555-X, 5512-X, 5520, 5505, 5525-X, 5540, 5585-X, 5580, 5545-X) with various software lineages (8.2–9.4.x). Root cause: ASA does not check the source of ARP requests or GARP packets for addresses NAT-translated under unspecif...
CVE-2012-5010
ASA 5515-X Adaptive Security Appliance Adaptive Security Appliance ASA Software 9.4.x before 9.4.1 Interim, 9.2.x before 9.2.4 Interim, ASA 5510 Adaptive Security Appliance Adaptive Security Appliance ASA Software 8.4.x before 8.4.7 Interim, 8.2.x before 8.2.5 Interim, 9.1.x before 9.1.6 Interim,...
CVE-2012-6706
CVE-2012-6706 is a VMSF_DELTA memory corruption in unrar <5.5.5 (used in Sophos Anti-Virus Threat Detection Engine
CVE-2012-6705
CPE/affected software: Jamroom (prior to 4.2.7). Vulnerability: Cross-Site Scripting (XSS) via the Status Update field. Root cause / vector: inputs in the Status Update field are susceptible to script/HTML injection. Impact (as stated): XSS exists in Jamroom before 4.2.7; detailed exploit scenari...