CVE-2012-6330

CVE-2012-6330 affects TWiki

Researchers Bypass Microsoft Fix It for IE Zero Day

Expect amped up pressure aimed in Microsoft’s direction for a patch for the Internet Explorer zero day that surfaced last week, now that researchers at Exodus Intelligence reported today they have developed a bypass for the Fix It that Microsoft released as a temporary mitigation. Their new explo...

CVE-2012-5977

CVE-2012-5977 affects Asterisk Open Source 1.8.x <1.8.19.1, 10.x <10.11.1, 11.x <11.1.2 and Certified Asterisk 1.8.11<1.8.11-cert10, plus Asterisk Digiumphones 10.x=1.8.19.1, 10.x >=10.11.1, or 11.x >=11.1.2 (as applicable). Exploitation details or in-the-wild status are not pro...

CVE-2012-6090

Multiple stack-based buffer overflows in the expand function in os/pl-glob.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted filename...

CVE-2012-5976

CVE-2012-5976 describes stack-consumption vulnerabilities in Asterisk Open Source where parsing of TCP-based protocols (SIP, HTTP, XMPP) could be exploited to crash the daemon. Affected: Asterisk 1.8.x before 1.8.19.1, 10.x before 10.11.1, 11.x before 11.1.2; and corresponding Certified Asterisk ...

CVE-2012-6089

CVE-2012-6089 affects SWI-Prolog: multiple stack-based buffer overflows in canoniseFileName() of os/pl-os.c allow remote denial of service or possibly arbitrary code execution. Vulnerable in SWI-Prolog before 6.2.5 and in 6.3.x before 6.3.7; remediation is upgrading to the patched versions (e.g.,...

CVE-2012-6497

The Authlogic gem for Ruby on Rails, when used with certain versions before 3.2.10, makes potentially unsafe findbyid method calls, which might allow remote attackers to conduct CVE-2012-6496 SQL injection attacks via a crafted parameter in environments that have a known secrettoken value, as...

CVE-2012-6496

SQL injection vulnerability in the Active Record component in Ruby on Rails before 3.0.18, 3.1.x before 3.1.9, and 3.2.x before 3.2.10 allows remote attackers to execute arbitrary SQL commands via a crafted request that leverages incorrect behavior of dynamic finders in applications that can use...

CVE-2012-6496

SQL injection vulnerability in the Active Record component in Ruby on Rails before 3.0.18, 3.1.x before 3.1.9, and 3.2.x before 3.2.10 allows remote attackers to execute arbitrary SQL commands via a crafted request that leverages incorrect behavior of dynamic finders in applications that can use...

Sql injection

The Authlogic gem for Ruby on Rails, when used with certain versions before 3.2.10, makes potentially unsafe findbyid method calls, which might allow remote attackers to conduct CVE-2012-6496 SQL injection attacks via a crafted parameter in environments that have a known secrettoken value, as...

CVE-2012-6497

Technical details about CVE-2012-6497 are not publicly provided in the supplied documents. Monitoring for updates is recommended as no concrete affected products, versions, root cause, or fixes are included here.

CVE-2012-6496

SQL injection vulnerability in the Active Record component in Ruby on Rails before 3.0.18, 3.1.x before 3.1.9, and 3.2.x before 3.2.10 allows remote attackers to execute arbitrary SQL commands via a crafted request that leverages incorrect behavior of dynamic finders in applications that can use...

CVE-2012-6496

CVE-2012-6496 affects the Active Record component of Ruby on Rails. It describes an SQL injection vulnerability in Rails versions prior to 3.0.18 (3.0 line), 3.1.x prior to 3.1.9, and 3.2.x prior to 3.2.10, where crafted requests can exploit the incorrect behavior of dynamic find_by_ methods with...

CVE-2012-6497

The Authlogic gem for Ruby on Rails, when used with certain versions before 3.2.10, makes potentially unsafe findbyid method calls, which might allow remote attackers to conduct CVE-2012-6496 SQL injection attacks via a crafted parameter in environments that have a known secrettoken value, as...

Ratbox IRCd Denial Of Service

!/usr/bin/python3 . . | || || | || \ / | / \ / | |/ \ / \ | || || |\ // // | \ http://www.zempirians.com / /\ /||/|| / |||| // / 00100011 01101100 01100101 01100111 01101001 01101111 01101110 Provided by: UberLame, Aph3x, Apetrick, OO -= SHADOWIRCD 6.3.3 - Running vulnerable mcapab.c =- Proof...

VLC < 2.0.5 Multiple Vulnerabilities

The version of VLC media player installed on the remote Windows host is prior to 2.0.5. It is, therefore, affected by multiple vulnerabilities: - An exploitable denial of service vulnerability exists in the SHAddToRecentDocs function in VideoLAN VLC media player before 2.0.5. Allow user-assisted...

Fedora 17 : libvirt-0.9.11.8-2.fc17 (2012-20531)

Fix conflict with NM launched dnsmasq bz 886663 - Rebased to version 0.9.11.8 - CVE-2012-3411: avoid open DNS proxy with dnsmasq bz 874702, bz 882309 - Don't ignore address for USB disks bz 861309 - Fix error with blkdeviotune bz 872582 Note that Tenable Network Security has extracted the...

Fedora Update for libvirt FEDORA-2012-20531

Check for the Version of libvirt OpenVAS Vulnerability Test Fedora Update for libvirt FEDORA-2012-20531 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for gnupg MDVSA-2013:001 (gnupg)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Internet Explorer CButton Use After Free Vulnerability

Added: 01/04/2013 CVE: CVE-2012-4792 BID: 57070 OSVDB: 88774 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem All references to DOM button objects are not properly removed when a DOM buttom object is deleted. If the stale reference...