20296 matches found
Novell iPrint Client < 5.82 Remote Code Execution
The version of Novell iPrint Client installed on the remote host is earlier than 5.82. Such versions are affected by an unspecified remote code execution vulnerability that can be triggered via an 'op-client- interface-version' action. C Tenable Network Security, Inc. include"compat.inc"; if...
RealPlayer - '.RealMedia' File Handling Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'RealPlayer...
CVE-2012-0958
content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage...
CVE-2012-0961
Apt 0.8.16exp5ubuntu13.x before 0.8.16exp5ubuntu13.6, 0.8.16exp12ubuntu10.x before 0.8.16exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.9.7.5ubuntu5.2, as used in Ubuntu, uses world-readable permissions for /var/log/apt/term.log, which allows local users to obtain sensitive shell information by...
CVE-2012-5625
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when libvirt with LVM-backed ephemeral storage is used, did not wipe PV content before reallocation to a new instance. This allowed reading memory from the previous LV and potential exposure of sensitive data. Remediation is to upgrade ...
CVE-2012-0961
Apt 0.8.16exp5ubuntu13.x before 0.8.16exp5ubuntu13.6, 0.8.16exp12ubuntu10.x before 0.8.16exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.9.7.5ubuntu5.2, as used in Ubuntu, uses world-readable permissions for /var/log/apt/term.log, which allows local users to obtain sensitive shell information by...
CVE-2012-0962
CVE-2012-0962 concerns Aptdaemon 0.43 on Ubuntu 11.10 and 12.04 LTS, where importing PPA GPG keys from a keyserver used short IDs, enabling a man‑in‑the‑middle attack to install arbitrary PPA keys. The Red Hat and NVD records repeat this description. Impact: attacker could influence which reposit...
CVE-2012-5161
CVE-2012-5161 affects Citrix XenApp 6.5 and 6.5 Feature Pack 1, via the XML Service interface. The vulnerability allows an unauthenticated, remote attacker to execute arbitrary code on the XenApp server by sending a crafted packet to the XML service interface. Exploitation details are not disclos...
CVE-2012-0958
content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage...
CVE-2012-6314
Citrix XenDesktop Virtual Desktop Agent VDA 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device...
CVE-2012-0961
CVE-2012-0961 affects apt in Ubuntu, where the package versions listed (0.8.16~exp5ubuntu13.x up to 0.9.7.5ubuntu5.x) expose world-readable permissions on /var/log/apt/term.log. This permits local users to read sensitive shell information from the log and is a local information-disclosure issue. ...
CVE-2012-0958
CVE-2012-0958 affects the unity-firefox-extension (Firefox extension) version 2.4.1. The issue in content/unity-api.js exposes the toDataURL function, allowing a crafted page to bypass the Same Origin Policy and potentially obtain sensitive information from the user. The vulnerability is document...
CVE-2012-6314
CVE-2012-6314 affects Citrix XenDesktop Virtual Desktop Agent (VDA) 5.6.x prior to 5.6.200. The issue is that server‑side USB redirection policy changes are not propagated to the VDA, allowing authenticated users to retain access to USB devices even after policy disables USB redirection. The vuln...
CVE-2012-6299
CA IdentityMinder (formerly Identity Manager) versions affected: r12.0 CR16 and earlier, r12.5 SP1 through SP14, and r12.6 GA. The CVE-2012-6299 vulnerability allows remote attackers to bypass access restrictions (elevated access) via unknown vectors due to insufficient access controls. Patches a...
CVE-2012-4616
CVE-2012-4616 affects EMC Data Protection Advisor (DPA) Web UI. A directory traversal vulnerability in the DPA Web UI enables remote attackers to copy/read arbitrary files from the server. Affected products/versions include DPA 5.6 (SP1), 5.7 (SP1), and 5.8 (SP1–SP4). The root cause is a Web UI d...
CVE-2012-6298
CA IdentityMinder (r12.0 through CR16, r12.5 before SP15, and r12.6 GA) contains an unspecified vulnerability that could allow a remote attacker to execute arbitrary commands or modify data via unknown vectors. The issue is documented in the CA Security Notice CA20121220-01 and is addressed by pa...
CVE-2012-5951
CVE-2012-5951 affects IBM Tivoli NetView for z/OS (NetView vXrX in v5.1–5.4 and v6.1; 1.4) and enables local privilege escalation by abusing USS security level. Exploitation details in connected docs show: locate cnmeunix at /usr/lpp/netview/vXrX/bin/cnmeunix (vXrX ≥5.1 and ≤5.4 or =6.1) and run ...
CVE-2012-4816
CVE-2012-4816 affects IBM Rational Automation Framework (RAF) 3.0 and later. An attacker can bypass the Environment Wizard access controls by visiting context roots via the RAF web UI on port 8080, bypassing the intended restrictions. The IBM Security Bulletin (E103076C...) confirms the vulnerabi...