Fedora 18 : drupal7-context-3.0-0.3.beta6.fc18 (2013-0170)

Update to beta6 addressing CVE-2012-5655 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Design/Logic Flaw

Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NU...

Webmin show.cgi Command Execution (CVE-2012-2982)

A command execution vulnerability has been reported in Webmin...

Dell SonicWALL Scrutinizer SQL Injection (CVE-2012-2962)

An SQL injection vulnerability has been reported in Dell SonicWALL Scrutinizer...

VideoLAN VLC Media Player PNG Code Execution (CVE-2012-5470)

A buffer overread vulnerability has been reported in VideoLAN VLC Media Player...

Nagios3 - 'history.cgi' Remote Command Execution

!/usr/bin/python CVE-2012-6096 - Nagios history.cgi Remote Command Execution =========================================================== Another year, another reincarnation of classic and trivial bugs to exploit. This time we attack Nagios.. or more specifically, one of its CGI scripts. 1 The...

CVE-2012-6096

creationtimestamp| type| source ---|---|--- 2013-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24084 2013-01-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24159 2018-05-29 15:50:33+00:00| seen|...

Apple QuickTime ActiveX Control Clear Method Use-After-Free (CVE-2012-3754)

A use-after-free vulnerability has been reported in Apple QuickTime's ActiveX control...

Nagios history.cgi Remote Command Execution Vulnerability

Exploit for multiple platform in category remote exploits !/usr/bin/python CVE-2012-6096 - Nagios history.cgi Remote Command Execution =========================================================== Another year, another reincarnation of classic and trivial bugs to exploit. This time we attack Nagios...

CVE-2012-6499

Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirectto parameter...

CVE-2012-6501

The KillProcess method in the HP PKI ActiveX control HPPKI.ocx before 1.2.0.1 allows remote attackers to cause a denial of service kill process via the partial or full name of a process...

CVE-2012-6501

The CVE-2012-6501 entry describes a DoS vulnerability in the HP PKI ActiveX control (HPPKI.ocx). The KillProcess method, in HPPKI.ocx versions prior to 1.2.0.1, can be abused by remote attackers to terminate processes by name (partial or full), potentially impacting availability. Sources in the c...

CVE-2012-5874

CVE-2012-5874 affects Elite Bulletin Board prior to 2.1.22. The vulnerability stems from insufficient sanitization of user-supplied data in URI parameters in the functions update_whosonline_reg and update_whosonline_guest (includes/user_function.php). This allows remote attackers to induce SQL in...

CVE-2012-0722

CVE-2012-0722: this CVE entry is rejected; refer to CVE-2013-0722.

CVE-2012-2251

rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a 1 "-e" or 2 "--" command line option...

CVE-2012-2251

rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a 1 "-e" or 2 "--" command line option...

CVE-2012-2251

Removed by vendor...

CVE-2012-2251

CVE-2012-2251 affects rssh 2.3.2 (used by Debian, Fedora and others) where, with rsync enabled, local users can bypass restricted shell via the "-e" or "--" options. The issue, per sources, yields partial confidentiality/integrity/availability impact. Fedora addressed this with rssh 2.3.4-1.fc18 ...

quota security and bug fix update

1:3.13-8.0.1 - Add ocfs2 support Orabug: 14208111 1:3.13-8 - Fix CVE-2012-3417 incorrect use of tcpwrappers Resolves: 841448 1:3.13-7 - Fix parsing numeric arguments of setquota Resolves: 831520 1:3.13-6 - Do not use real domains in warnquota example Resolves: 680429 - Use /proc/mounts for...

CVE-2012-4821

CVE-2012-4821 is one of several IBM JRE/Java SDK vulnerabilities (CVE-2012-4820/4821/4822/4823) affecting IBM products (e.g., WebSphere Real Time, Tivoli Monitoring, Tivoli Storage Productivity Center, and related IBM runtimes). The root cause is insecure use of Java reflection APIs (getDeclaredM...