Cool PDF Reader 3.0.2.256 - Buffer Overflow

Exploit Title: Cool PDF Reader 3.0.2.256 buffer overflow Vulnerability Disclosed to US-CERT by Chris Gabriel: 11-20-2012 Emailed vendor: 12-4-2012 Francis Provencher discovered vulnerability and reported to Secunia: 12-19-2012 Vulnerability Discovery: Francis Provencher Protek Research Lab's...

Unbreakable Enterprise kernel security update

2.6.39-300.28.1 - kmod: make requestmodule killable Oleg Nesterov Orabug: 16286305 CVE-2012-4398 - kmod: introduce callmodprobe helper Oleg Nesterov Orabug: 16286305 CVE-2012-4398 - usermodehelper: implement UMHKILLABLE Oleg Nesterov Orabug: 16286305 CVE-2012-4398 - usermodehelper: introduce...

CVE-2012-2292

The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 does not restrict access to the Archer application, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2012-3282

HP LeftHand Virtual SAN Appliance (hydra) before version 10.0 is affected by CVE-2012-3282. The hydra service allows remote code execution from unauthenticated remote attackers via the management interface (the vulnerability is associated with ZDI-CAN-1468). Evidence across connected docs also no...

CVE-2012-3284

HP LeftHand Virtual SAN Appliance Hydra SNMP Remote Code Execution (CVE-2012-3284) affects hydra service prior to version 10.0. The vulnerability exists in the SNMP processing path (snmp.module!OnSet) listening on TCP 13838, allowing unauthenticated remote code execution with root privileges by s...

CVE-2012-3285

HP LeftHand Virtual SAN Appliance hydra service (LHNModParam) on TCP port 13838 is affected by a stack buffer overflow in versions prior to 10.0. This allows a remote attacker to execute arbitrary code as root due to insufficient input length validation for the hostname during a Ping request. Rem...

CVE-2012-3279

HP NNMi affects NNMi v8.x and v9.0x/v9.1x/v9.20 across HP-UX, Linux, Solaris and Windows. The flaw is remote XSS via unspecified vectors allowing injection of arbitrary web script/HTML; CVSS 2.0 base 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N). Remediation per HP security bulletin: upgrade to v9.0x/v9.1x/v...

CVE-2012-5186

CVE-2012-5186 describes a cross-site scripting (XSS) vulnerability in FLUGELz netmania myu-s and PHP WeblogSystem . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially executing in a user’s browser. Affected products include myu-s and PHP ...

CVE-2012-1064

CVE-2012-1064 affects EMC RSA Archer GRC 5.x and SmartSuite Framework 4.x; multiple XSS vulnerabilities allowed remote attackers to inject arbitrary script/HTML via unspecified vectors in affected RSA Archer components. The ESA advisory notes fixes in RSA Archer GRC 5.3 and 5.2SP1 (upgrade to 5.3...

CVE-2012-2294

CVE-2012-2294 affects EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x earlier than 5.2SP1. The issue is a clickjacking vulnerability exposed via crafted web pages, allowing remote attackers to entice user actions in a legitimate session. The NVD entry lists a CVSSv2 base score of 6...

CVE-2012-2292

The CVE-2012-2292 issue affects RSA Archer products: EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x prior to 5.2SP1. Root cause: a misconfigured Silverlight cross-domain policy that does not restrict access to the Archer application, allowing remote attackers to bypass the Same Or...

CVE-2012-2292

The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 does not restrict access to the Archer application, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2012-3283

HP LeftHand Virtual SAN Appliance Hydra before version 10.0 is affected by CVE-2012-3283, a remote code execution flaw in the hydra service (hel.module) that listens on TCP port 13838. The root cause is improper length validation of diag request parameters, leading to arbitrary code execution wit...

CVE-2012-5187

Weathernews Touch for Android (ver. 2.3.2 and earlier) stores location information in the system log file. The root cause is that an application with read permission for system log files can access logged location data. Affected product: Weathernews Touch for Android. Impact: potential disclosure...

CVE-2012-3281

HP XP P9000 Command View Advanced Edition’s Device Manager prior to version 7.4.0-00 is vulnerable to remote Denial of Service via unknown vectors. The HP security bulletin confirms CVE-2012-3281 with a CVSS v2 base score of 7.8 (HIGH) and states only affected software is HP XP P9000 Command View...

VMWare OVF Tools Format String

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'VMWare OVF Tools...

Lorex LNC116 / LNC104 IP Camera Authentication Bypass Vulnerability

Lorex LNC116 and LNC104 IP cameras only perform basic authentication on the main login page. If you perform direct browsing to any other interface, you are not forcibly authenticated. Product: Lorex LNC116 and LNC104 IP Cameras Vendor: LOREX Technology Inc. Vulnerability Type: Authentication Bypa...

Unbreakable Enterprise kernel security update

2.6.32-300.39.4 - exec: do not leave bprm-interp on stack Kees Cook Orabug: 16286741 CVE-2012-4530 - exec: use -ELOOP for max recursion depth Kees Cook Orabug: 16286741 CVE-2012-4530 2.6.32-300.39.3 - Xen: Fix stack corruption in xenfailsafecallback for 32bit PVOPS guests. Frediano Ziglio Orabug:...

CVE-2012-3569

creationtimestamp| type| source ---|---|--- 2013-02-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24460 2013-02-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24461 2018-05-29 15:50:33+00:00| seen|...

libupnp Multiple Buffer Overflow Vulnerabilities (TCP)

Updates are available. Please see the references for more information. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...