20363 matches found
CVE-2012-5371 ruby: Murmur hash-flooding DoS flaw in ruby 1.9 (oCERT-2012-001)
Ruby aka CRuby 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains...
CVE-2012-5370 jruby: Murmur hash function collisions (oCERT-2012-001)
JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, as demonstrated by a universal...
Java JAX-WS gmbal package sandbox breach
Added: 11/23/2012 CVE: CVE-2012-5076 BID: 56054 OSVDB: 86350 Background Java API for XML Web Services JAX-WS is a technology for developing web services in Java. It is included in the Java EE 5 platform. Problem A vulnerability in JAX-WS when handling the gmbal package allows code execution outsi...
Fedora Update for xen FEDORA-2012-18242
Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2012-18242 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora 17 : kernel-3.6.7-4.fc17 (2012-18684)
CVE-2012-4461: kvm: invalid opcode oops on SETSREGS with OSXSAVE bit set Update to upstream stable release 3.6.7 Assorted other fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automaticall...
CVE-2012-2084
Cross-site scripting XSS vulnerability in the Printer, email and PDF versions module 6.x-1.x before 6.x-1.15 and 7.x-1.x before 7.x-1.0 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably the PATHINFO...
CVE-2012-2084
The CVE-2012-2084 case affects Drupal’s Printer, email and PDF versions module (6.x-1.x before 6.x-1.15; 7.x-1.x before 7.x-1.0). The root cause is insufficient escaping of URL elements when rendering content, allowing remote attackers to inject arbitrary scripts/HTML (XSS) via likely PATH_INFO v...
CVE-2012-2211
CVE-2012-2211 is a documented cross-site scripting (XSS) vulnerability in eGroupware involving the file path phpgwapi/inc/common_functions_inc.php . The issue arises in versions prior to 1.8.004.20120405 , where an attacker can craft input to the parameter menuaction used by etemplate/process_exe...
firefox, xulrunner security update
CentOS Errata and Security Advisory CESA-2012:1482 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVS...
CVE-2012-0960
Unity integration extension unity-firefox-extension before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service Firefox crash and possibly execute arbitrary code via a crafted request...
Simple Lighttpd 1.4.31 Denial Of Service
!/bin/bash simple lighttpd 1.4.31 DOS POC CVE-2012-5533 http://www.lighttpd.net/2012/11/21/1-4-32/ http://download.lighttpd.net/lighttpd/security/lighttpdsa201201.txt written by Milan Berger if $ -lt 2 then echo "usage :$0 " else echo -ne "GET / HTTP/1.1\r\nHost: pwn.ed\r\nConnection:...
dotProject 2.1.6 Cross Site Scripting / SQL Injection
dotProject version 2.1.6 suffers from cross site scripting and remote SQL injection vulnerabilities. Product: dotProject Vendor: dotproject.net Vulnerable Versions: 2.1.6 and probably prior Tested Version: 2.1.6 Vendor Notification: October 31, 2012 Vendor Patch: November 7, 2012 Public Disclosur...
lighttpd 1.4.31 - Denial of Service (PoC)
lighttpd 1.4.31 - Denial of Service PoC !/bin/bash Exploit Title: simple lighttpd 1.4.31 DOS POC Date: 11/21/2012 Exploit Author: [email protected] Vendor Homepage: http://www.lighttpd.net Software Link: http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.31.tar.gz Version: 1.4.31 Tested...
CVE-2012-5932
creationtimestamp| type| source ---|---|--- 2012-11-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22903 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/novell/netiqpumeval.rb 2025-02-06 03:13:40+00:00| seen|...
lighttpd 1.4.31 - Denial of Service (PoC)
!/bin/bash Exploit Title: simple lighttpd 1.4.31 DOS POC Date: 11/21/2012 Exploit Author: [email protected] Vendor Homepage: http://www.lighttpd.net Software Link: http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.31.tar.gz Version: 1.4.31 Tested on: Debian Linux, Gentoo Linux, Arch...
FreeBSD-SA-12:07.hostapd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-12:07.hostapd Security Advisory The FreeBSD Project Topic: Insufficient message length validation for EAP-TLS messages Category: contrib Module: wpa Announced:...
FreeBSD-SA-12:08.linux
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-12:08.linux Security Advisory The FreeBSD Project Topic: Linux compatibility layer input validation error Category: core Module: kernel Announced: 2012-11-22...
FreeBSD-SA-12:06.bind
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-12:06.bind Security Advisory The FreeBSD Project Topic: Multiple Denial of Service vulnerabilities with named8 Category: contrib Module: bind Announced: 2012-11-2...
CVE-2012-5526
CGI.pm module before 3.63 for Perl does not properly escape newlines in 1 Set-Cookie or 2 P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm...