CVE-2012-5961

CVE-2012-5961 affects the Portable SDK for UPnP Devices (libupnp) 1.3.1, where a stack-based buffer overflow in unique_service_name() in ssdp/ssdp_server.c allows remote attackers to execute arbitrary code via a long UDN in a UDP packet. Connected advisories show multiple vendor updates (e.g., op...

CVE-2012-5963

CVE-2012-5963 is a stack-based buffer overflow in the unique_service_name() function of the SSDP parser (libupnp portable SDK for UPnP Devices). The initial entry cites a vulnerability in UPnP devices’ UDP UDN field (no ::) in version 1.3.1. Connected advisories note multiple buffer-overflow issu...

CVE-2012-5958

Removed by vendor...

CVE-2012-5958

CVE-2012-5958 is a stack-based buffer overflow in the unique_service_name() function of the SSDP parser in the Portable SDK for UPnP Devices (libupnp). It allows remote attackers to execute arbitrary code via crafted SSDP/UPnP traffic before version 1.6.18. Public advisories note the vulnerabilit...

CVE-2012-5962

CVE-2012-5962 is a stack-based buffer overflow in the unique_service_name function of the UPnP Portable SDK (libupnp) used by many devices. The overflow occurs in the SSDP parser when processing a long DeviceType/urn in UDP traffic, enabling potential remote code execution. Public advisories (ope...

Important: Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1 update

Red Hat OpenShift Enterprise 1.1 is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in t...

Moderate: Red Hat Security Advisory: mysql security update

Updated mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Important: Red Hat Security Advisory: mingw32-libxml2 security update

Updated mingw32-libxml2 packages that fix several security issues are now available for Red Hat Enterprise Linux 6. This advisory also contains information about future updates for the mingw32 packages, as well as the deprecation of the packages with the release of Red Hat Enterprise Linux 6.4. T...

CVE-2012-4819

This CVE (CVE-2012-4819) is an XSS vulnerability in IBM InfoSphere Information Server web interfaces (InfoSphere Business Glossary, DataStage Operation Console, Administration, Reporting and Repository Management Web Console) affecting InfoSphere Information Server versions 8.1, 8.5 (before FP3) ...

CVE-2012-0702

CVE-2012-0702 affects IBM InfoSphere Information Server (ISF) where authorization checks in ISF are not performed correctly, allowing remote authenticated users to escalate privileges. Affected products/versions include ISF in IBM InfoSphere Information Server 8.1, 8.5 (before FP3), and 8.7. The ...

CVE-2012-6350

CVE-2012-6350 is an XSS vulnerability in the Web component of IBM Cognos TM1, impacting versions before 9.5.2 FP3 and 10.1 before 10.1 FP1. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Documents consistently cite a Web component XSS in Cognos TM...

CVE-2012-0205

CVE-2012-0205 affects IBM InfoSphere Information Server MWB (Metadata Workbench) versions 8.1–8.7. The root cause is unrestricted access to the troubleshooting feature, enabling remote authenticated users to bypass access restrictions or cause a workbench outage (deny service). Affected products ...

CVE-2012-0204

CVE-2012-0204 describes an untrusted search path (DLL preloading) vulnerability in IBM InfoSphere Information Server Import Export Manager. The root cause is a Trojan horse DLL in the current working directory enabling local privilege escalation when the Import Export Manager is installed on IBM ...

CVE-2012-0203

CVE-2012-0203 is an XSS vulnerability in IBM InfoSphere Information Server’s Metadata Workbench (MWB) affecting MWB 8.1–8.7 and IBM InfoSphere Information Server 8.1, 8.5 (pre-FP3), and 8.7. The issue arises in MWB and could allow remote injection of script/HTML via unspecified vectors. Reported ...

CVE-2012-0700

CVE-2012-0700 affects IBM InfoSphere Information Server FastTrack client (InfoSphere Server 8.1, 8.5 before FP3, and 8.7). Root cause: insecure local storage of credentials allowing bypass of access restrictions by local users via unspecified vectors. Exploitation status not detailed in the provi...

CVE-2012-6029

CVE-2012-6029 affects Cisco NAC Appliance 4.9.2 and earlier. The vulnerability is a set of cross-site scripting flaws in the web-authentication flow, exploitable by an unauthenticated, remote attacker who persuades a user to follow a malicious URL. Specifically, XSS can be triggered via parameter...

CVE-2012-0705

CVE-2012-0705 affects IBM InfoSphere Information Server Import Export Manager (in the MBB/bridges component) across 8.1, 8.5 (pre-FP3), 8.7 and 9.1. Root cause: lack of input validation on unspecified data, enabling remote authenticated users to execute arbitrary commands via unknown vectors. Doc...

CVE-2012-0703

IBM InfoSphere Information Server CVE-2012-0703 is an open redirect vulnerability in the Information Services Framework (ISF) used by IBM InfoSphere Information Server. The issue affects versioned ISF/Web components in 8.1, 8.5 before FP3, and 8.7, enabling remote attackers to redirect users to a...

USN-1713-1: Squid vulnerabilities

It was discovered that squid's cachemgr.cgi was vulnerable to excessive resource use. A remote attacker could exploit this flaw to perform a denial of service attack on the server and other hosted services. CVE-2012-5643 It was discovered that the patch for CVE-2012-5643 was incorrect. A remote...

CVE-2012-6522

CVE-2012-6522 describes a directory traversal vulnerability in w-CMS 2.01 . The issue resides in the getContent function of codes/wcms.php , where an attacker can cause the system to read arbitrary files by supplying a ".." path segment in the p parameter. The vulnerability is triggered remotely ...