CVE-2012-2624

Stack-based buffer overflow in Logica HotScan allows remote attackers to cause a denial of service crash via a crafted packet...

CVE-2012-2624

CVE-2012-2624 describes a stack-based buffer overflow in Logica HotScan’s TCP listener interface. The vulnerability arises from insufficient boundary checks when processing user-supplied input, allowing remote attackers to crash the service (denial of service) via a crafted packet. Affected produ...

CVE-2012-5338

CVE-2012-5338 affects JForum 2.1.9 and is an open redirect vulnerability exploitable via the returnPath parameter in the validateLogin action to jforum.page, enabling phishing by redirecting users to arbitrary sites. The connected Red Hat, Red Canary-like entries reiterate the same description. N...

Tiki Wiki PHP unserialize() Remote Code Execution (CVE-2012-0911)

A remote code execution vulnerability has been reported in Tiki Wiki...

appRain CMF Arbitrary PHP File Upload (CVE-2012-1153)

An arbitrary file upload vulnerability has been reported in appRain's Content Management Framework...

HP LeftHand Virtual SAN Appliance Hydra Login Code Execution (CVE-2012-3284)

A Code Execution vulnerability has been reported in HP LeftHand Virtual SAN Appliance...

Multiple DNS NO SUCH NAME Error Responses (CVE-2012-0006)

The Domain Name System DNS is an hierarchical distributed naming system for computers, services, or any resource connected to the Internet or a private network. When a DNS client needs to look up a name used in a program, it queries DNS servers to resolve the name. If the query names are...

Fedora 19 : icedtea-web-1.4.1-0.fc19 (2013-17026)

Updated to icedtea-web 1.4.1 New in release 1.4.1 2013-XX-YY : - Improved and cleaned Temporary internet files panel - PR1465 - java.io.FileNotFoundException while trying to download a JAR file - PR1473 - javaws should not depend on name of local file - PR854: Resizing an applet several times...

CVE-2012-4082

CVE-2012-4082 affects Cisco UCS where MCTools in the Cisco Management Controller on Fabric Interconnect allows an authenticated, local attacker to gain elevated privileges due to improper parameter input validation. The vulnerability could let an attacker inject arbitrary commands into the underl...

CVE-2012-4081

CVE-2012-4081 affects the Cisco UCS Cisco Management Controller (MCServer) via the MCTools interface. An authenticated, local attacker can trigger a denial of service (application crash) by supplying invalid parameters to MCTools, exploiting improper input validation. Cisco’s advisory (CSCtg20734...

CVE-2012-4074

The Board Management Controller BMC in the Serial over LAN SoL subsystem in Cisco Unified Computing System UCS relies on a hardcoded private key, which allows man-in-the-middle attackers to obtain sensitive information or modify the data stream by leveraging knowledge of this key, aka Bug ID...

CVE-2012-4073

The CVE-2012-4073 issue affects the Cisco Unified Computing System (UCS) KVM client, where the KVM subsystem fails to verify X.509 certificates from SSL servers. Root cause: improper certificate validation in the KVM client, enabling a man-in-the-middle attacker to intercept a KVM connection and ...

CVE-2012-4074

The CVE-2012-4074 issue affects Cisco Unified Computing System Serial over LAN (SoL) with the Board Management Controller (BMC) using a hard-coded private key. This enables unauthenticated MITM attacks on SoL connections, allowing an attacker to view or modify SoL communications. Root cause: hard...

CVE-2012-4072

The CVE-2012-4072 issue affects Cisco Unified Computing System (UCS) KVM. The root cause is a hardcoded X.509 certificate in the KVM subsystem, enabling a remote attacker to perform MITM on KVM connections, spoof SSL servers, and read keyboard/mouse events by using knowledge of the private key. E...

CVE-2012-4083

Cisco UCS Fabric Interconnect web admin interface vulnerability (CVE-2012-4083) allows an authenticated remote attacker to cause a DoS via long parameter values due to improper input validation. Affects the administrative web interface; memory corruption and session termination are reported impac...

CVE-2012-4093

CVE-2012-4093 affects Cisco Unified Computing System (UCS) Manager. The issue is due to improper input validation in the Smart Call Home contact address, allowing an authenticated, local attacker to trigger a denial of service. Exploitation requires local access and valid credentials; the impact ...

CVE-2012-2543

creationtimestamp| type| source ---|---|--- 2013-09-19 14:49:43+00:00| seen| MISP/523b0e26-4208-4c6c-aadc-03ebac1d4fa4 2025-08-31 03:13:09+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

HP LeftHand Virtual SAN Appliance hydra Ping Hostname Overflow

Added: 09/19/2013 CVE: CVE-2012-3285 BID: 57754 OSVDB: 89919 Background HP LeftHand Virtual SAN Appliance VSA software is a VMware certified SAN/storage device and virtual appliance that provides complete SAN functionality for VMware Infrastructure without external SAN hardware. Problem HP LeftHa...

HP LeftHand Virtual SAN Appliance hydra Ping Hostname Overflow

Added: 09/19/2013 CVE: CVE-2012-3285 BID: 57754 OSVDB: 89919 Background HP LeftHand Virtual SAN Appliance VSA software is a VMware certified SAN/storage device and virtual appliance that provides complete SAN functionality for VMware Infrastructure without external SAN hardware. Problem HP LeftHa...

HP LeftHand Virtual SAN Appliance hydra Ping Hostname Overflow

Added: 09/19/2013 CVE: CVE-2012-3285 BID: 57754 OSVDB: 89919 Background HP LeftHand Virtual SAN Appliance VSA software is a VMware certified SAN/storage device and virtual appliance that provides complete SAN functionality for VMware Infrastructure without external SAN hardware. Problem HP LeftHa...