CVE-2012-5762

CVE-2012-5762 affects IBM Netezza WebAdmin (versions 6.0.5, 6.0.8 and 7.0 before P2). The vulnerability is an XSS allowing remote authenticated users to inject arbitrary script/HTML via MHTML protocol vectors. IBM’s bulletin for this family notes multiple issues and lists CVE-2012-5762 among them...

CVE-2012-5761

Cross-site scripting XSS vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-5941

Cross-site scripting XSS vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors...

IBM Java ProxyUtil Sandbox Breach (CVE-2012-4820)

A sandbox breach vulnerability exists in IBM Java. The vulnerability is due to an access control failure in the "com.ibm.rmi.util.ProxyUtil" package. A remote attacker can exploit this vulnerability by enticing the target user to open a crafted web page...

Foswiki MAKETEXT 1.1.7 / 1.0.10 Code Execution Vulnerability

This advisory alerts you of a potential security issue with your Foswiki installation. A vulnerability has been reported against the core Perl module CPAN:Locale::Maketext, which Foswiki uses to provide translations when UserInterfaceInternationalization is enabled in the configuration. Because o...

BigAnt Server 2 SCH And DUPF Buffer Overflow Vulnerability

This Metasploit module exploits a stack buffer overflow in BigAnt Server 2.97 SP7. The vulnerability is due to the dangerous usage of strcpy while handling errors. This module uses a combination of SCH and DUPF request to trigger the vulnerability, and has been tested successfully against version...

BigAnt Server 2 SCH And DUPF Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'BigAnt Server 2 SCH And DUPF Buffer...

CVE-2012-6550

creationtimestamp| type| source ---|---|--- 2013-02-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38329...

CentOS 5 : jakarta-commons-httpclient (CESA-2013:0270)

Updated jakarta-commons-httpclient packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detaile...

Asterisk Multiple Vulnerabilities (AST-2012-014 / AST-2012-015)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by the following vulnerabilities : - A stack-based buffer overflow error exists related to SIP, HTTP and XMPP handling over TCP. Note that in the case of 'Certified Asterisk', SI...

Plixer Scrutinizer NetFlow and sFlow Analyzer HTTP Authentication Bypass (CVE-2012-2626)

An authentication bypass vulnerability has been reported in Plixer Scrutinizer NetFlow and sFlow Analyzer...

Microsoft DirectPlay Office File Handling Invalid Memory Free (MS12-082; CVE-2012-1537)

An invalid memory free vulnerability exists in Microsoft DirectPlay...

CVE-2012-6274

creationtimestamp| type| source ---|---|--- 2013-02-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24528 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/bigantserverdupfupload.rb 2025-02-06 03:13:41+00:00...

CVE-2012-6275

creationtimestamp| type| source ---|---|--- 2013-02-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24527 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/bigantserverschdupfbof.rb 2025-02-06 03:13:41+00:00...

Oracle Application Express (Apex) CVE-2012-1708

An unspecified vulnerability in versions 4.0 and 4.1 of the Application Express Apex component of the Oracle Database Server allows remote attackers to affect integrity via unpublished vectors. --------------------------------------------------------------------------------- c Recx Ltd 2009-2012...

RHEL 5 / 6 : jakarta-commons-httpclient (RHSA-2013:0270)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0270 advisory. The Jakarta Commons HttpClient component can be used to build HTTP-aware client applications such as web browsers and web service clients. The...

BigAnt Server 2.97 - SCH / DUPF Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'BigAnt Server 2 SCH And DUPF Buffer...

CVE-2012-6354

CVE-2012-6354 affects IBM SAN Volume Controller and Storwize family (V7000, V3500, V3700, and Flex System V7000) where the management GUI on the IP interface allows an unauthenticated user to obtain superuser access. The issue is exploitable by someone with access to the system’s management IP in...

Vulnerability in VMware OVF Tool Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting VMware OVF Tool software version 2.1 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor,...

PHP apache_request_headers Function Buffer Overflow (CVE-2012-2329)

A buffer overflow was reported in the apacherequestheaders function in PHP. The vulnerability is due to the insecure handling of the HTTP headers. An attacker can exploit this issue by sending a specially crafted HTTP request to the target server. Successful exploitation may allow the attacker to...