CVE-2012-5180

The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application...

CVE-2012-5584

The Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node permissions, which allows remote attackers to read a node's headers by accessing a table of contents block...

CVE-2012-5591

Cross-site scripting XSS vulnerability in the Zero Point module 6.x-1.x before 6.x-1.18 and 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the path aliases...

CVE-2012-5183

The Loctouch application 3.4.6 and earlier for Android allows attackers to obtain sensitive information about logged locations via a crafted application that leverages read permission for system log files...

CVE-2012-5584

The CVE-2012-5584 entry relates to the Drupal Table of Contents module (6.x-3.x) prior to 6.x-3.8. The vulnerability is due to improper permission checks when displaying the table of contents block, allowing remote attackers to read a node’s headers. Affected component: tableofcontents 6.x-3.x be...

CVE-2012-5182

Loctouch for Android (3.4.6 and earlier) is vulnerable due to improper handling of implicit intents, enabling a crafted Android application to access sensitive logged location information. Affected product is Loctouch for Android; the root cause is implicit-intent handling. Impact, as described i...

CVE-2012-5591

CVE-2012-5591 is an XSS vulnerability in the Drupal Zero Point contributed module. The issue occurs in zeropoint 6.x-1.x before 6.x-1.18 and 7.x-1.x before 7.x-1.4, where path aliases are not properly escaped, allowing remote attackers to inject arbitrary JavaScript/HTML via crafted URLs. Impact ...

CVE-2012-5180

The CVE-2012-5180 issue affects Opera Mini for Android versions prior to 7.5 and Opera Mobile for Android versions prior to 12.1. The vulnerability arises from improper handling/implementation of the WebView class, enabling information disclosure when a user runs a crafted malicious Android appli...

CVE-2012-5180

The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application...

CVE-2012-5179

The CVE-2012-5179 entry concerns Boat Browser and Boat Browser Mini on Android, where the WebView implementation is faulty. The WebView class is not properly implemented, allowing a crafted Android application to cause disclosure of sensitive information managed by the affected product. Affected ...

CVE-2012-5590

The CVE-2012-5590 issue affects the Drupal Webmail Plus contributed module. The vulnerability is a SQL injection caused by insufficient sanitization of user input used in a database query, allowing remote attackers to execute arbitrary SQL commands. Affected: all Webmail Plus module versions. Imp...

CVE-2012-5587

CVE-2012-5587 is a Cross-site Scripting (XSS) vulnerability in the Drupal Email Field contributed module (6.x-1.x) prior to 6.x-1.3. The issue allows remote attackers to inject arbitrary web script or HTML via the mailto link output, affecting Drupal 6.x sites using that module. Core Drupal is no...

CVE-2012-5588

The CVE-2012-5588 entry concerns the Drupal Email Field module (6.x-1.x) before 6.x-1.3. When used with a field-permission module and the contact field formatter set to full or teaser, it fails to properly check permissions, potentially allowing remote attackers to email the stored address throug...

CVE-2012-5586

The Drupal Services module (versions 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3) is affected. Remote authenticated users who have the "access user profiles" permission can disclose arbitrary users’ email addresses via the user index method and the path to the user resource. This is caused ...

CVE-2012-5585

Affected software: Drupal Mixpanel contributed module (6.x-1.x) prior to 6.x-1.1. Vulnerability: Cross-site scripting (XSS) due to insufficient escaping of the Mixpanel token when injecting the tracking Javascript. Prereq/impact: Requires a user with the “access administration pages” permission; ...

CVE-2012-5183

CVE-2012-5183 affects the Android app Loctouch (3.4.6 and earlier). The issue arises from an information-management vulnerability where apps with permission to read system log files can access location information logged by Loctouch, exposing non-public data. The root cause is the app’s handling ...

CVE-2012-5589

The CVE-2012-5589 entry concerns the Drupal MultiLink module (versions 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7) which does not properly enforce node-access checks when generating in-content links. This allows remote authenticated users with text-editing permissions to read arbitrary nod...

[SECURITY] [DSA 2590-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2590-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 26, 2012 http://www.debian.org/security/faq -...

Fedora Update for squid FEDORA-2012-20537

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for kernel RHSA-2012:1580-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...