CVE-2012-5141

Google Chrome before 23.0.1271.97 does not properly restrict instantiation of the Chromoting client plug-in, which has unspecified impact and attack vectors...

CVE-2012-4974

The CVE-2012-4974 entry concerns Layton Helpbox 4.4.0. Affected component: login/session handling via several cookies (loggedinenduser, loggedinendusername, loggedinuserusergroup, loggedinuser, loggedinusername). Root cause: an attacker with authenticated access can modify these cookies to alter ...

CVE-2012-4972

Layton Helpbox 4.4.0 is affected by cross-site scripting (XSS) vulnerabilities. Exploitable via writesolutionuser.asp (parameters: sys_solution_id, sys_requesttype_id, sys_problem_desc, sys_solution_desc, sys_problemsummary, usr_Action_testing, usr_Escalation, usr_Additional_Resources) and delete...

CVE-2012-5678

CVE-2012-5678 concerns Adobe Flash Player (and related AIR components) with multiple memory-corruption and code-execution vulnerabilities across Windows, Mac, Linux and Android platforms. Affected versions include Flash Player before 10.3.183.48 / 11.x before 11.5.502.135 on Windows, Mac, Linux; ...

CVE-2012-4977

CVE-2012-4977 affects Layton Helpbox 4.4.0. The vulnerability allows remote attackers to obtain cleartext credentials from the login page by sniffing unencrypted network traffic. Root cause is unencrypted login handling. Impact is exposure of credentials during authentication. No remediation deta...

CVE-2012-4976

Layton Helpbox 4.4.0 is affected by CVE-2012-4976. The vulnerable page is selectawasset.asp, where the querystring element=sys_asset_id is not properly sanitized during error-page construction, leading to disclosure of ODBC database credentials in cleartext. This credential exposure can allow an ...

CVE-2012-5142

Removed by vendor...

CVE-2012-4786

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted TrueType Font TTF...

CVE-2012-4787

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that 1 was not properly initialized or 2 is deleted, aka "Improper Ref Counting Use After Free Vulnerability."...

CVE-2012-4786

CVE-2012-4786 affects Windows kernel-mode drivers handling TrueType/OpenType font parsing. The advisory set shows remote code execution via crafted TTF/OTF files affecting Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8, Server 2012, and RT. Root cause...

CVE-2012-4958

creationtimestamp| type| source ---|---|--- 2012-12-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23323 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/novellfilereporterfsfuifileaccess.rb 2025-02-06...

CVE-2012-2556

CVE-2012-2556 : OpenType Font (OTF) parsing vulnerability in Windows kernel‑mode drivers allows remote code execution via a crafted font file. Affected: Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8, Server 2012, Windows RT. Root cause: improper hand...

CVE-2012-4781

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "InjectHTMLStream Use After Free Vulnerability."...

CVE-2012-2539

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted RTF data, aka "Word RTF 'listoverridecount' Remote...

Smartphone Pentest Framework 0.1.3 / 0.1.4 Command Injection

Smartphone Pentest Framework SPF versions 0.1.3 and 0.1.4 suffer from an OS command injection vulnerability. Product: Smartphone Pentest Framework SPF Vendor: Bulb Security LLC Vulnerable Versions: 0.1.3, 0.1.4 and probably prior Tested Versions: 0.1.3, 0.1.4 Vendor Notification: November 19, 201...

MS Exchange Server Remote Code Execution Vulnerabilities (2784126)

This host is missing a critical security update according to Microsoft Bulletin MS12-080. OpenVAS Vulnerability Test $Id: secpodms12-080.nasl 5346 2017-02-19 08:43:11Z cfi $ MS Exchange Server Remote Code Execution Vulnerabilities 2784126 Authors: Rachana Shetty Copyright: Copyright c 2012 SecPod...

[SECURITY] [DSA 2585-1] bogofilter security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2585-1 [email protected] http://www.debian.org/security/ December 11, 2012 http://www.debian.org/security/faq -...

Microsoft Windows File Handling Component Remote Code Execution Vulnerability (2758857)

This host is missing a critical security update according to Microsoft Bulletin MS12-081. OpenVAS Vulnerability Test $Id: secpodms12-081.nasl 5351 2017-02-20 08:03:12Z mwiegand $ Microsoft Windows File Handling Component Remote Code Execution Vulnerability 2758857 Authors: Sharath S Copyright:...

Fedora 18 : freeipa-3.1.0-1.fc18 (2012-20123)

Update to upstream 3.1.0. Addresses CVE-2012-5631, improper cookie handling. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Flash Player <= 10.3.183.43 / 11.5.502.110 Multiple Vulnerabilities (APSB12-27)

According to its version, the instance of Flash Player installed on the remote Windows host is 11.x equal to or earlier than 11.5.502.110, or 10.x equal to or earlier than 10.3.183.43. It is, therefore, potentially affected by multiple vulnerabilities : - An unspecified error exists that can allo...