CVE-2012-3354

doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message...

CVE-2012-3354

doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message...

Medium: libproxy

Issue Overview: A buffer overflow flaw was found in the way libproxy handled the downloading of proxy auto-configuration PAC files. A malicious server hosting a PAC file or a man-in-the-middle attacker could use this flaw to cause an application using libproxy to crash or, possibly, execute...

CVE-2012-4562

Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service infinite loop or crash and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities...

CVE-2012-4523

Radsecproxy vulnerable to CVE-2012-4523: in 1.6.1 and earlier, certificate verification can bypass restrictions when configuration blocks include CA settings not related to the used verification block, enabling potential client spoofing. Root cause: improper certificate-chain verification across ...

CVE-2012-4566

The CVE-2012-4566 issue affects radsecproxy DTLS, where DTLS certificate verification can fail when multiple CA blocks exist and are unrelated to the verification chain, potentially allowing remote attackers to bypass access restrictions and spoof clients. Affected versions are radsecproxy before...

CVE-2012-3354

doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message...

Important: mysql51

Issue Overview: This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory pages, listed below. 1. April 2012: http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.htmlAppendixMSQL...

CVE-2012-3354

DokuWiki (Dokuwiki) vulnerability CVE-2012-3354 affects the dokuwiki component used in Fedora 16–18. When PHP error reporting is enabled, the prefix parameter can trigger a full path disclosure via an error message, exposing installation paths. Root cause: the sanitization of HTTP POST value for ...

Oracle AutoVue DXF Parsing Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Oracle Autovue software versions 20.1.1 and 20.2. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Oracle...

CVE-2012-5674: Undefined Security Weakness

Unspecified vulnerability in Adobe ColdFusion 10 before Update 5, when Internet Information Services IIS is used, allows attackers to cause a denial of service via unknown vectors...

CVE-2012-4510

CVE-2012-4510 affects cups-pk-helper before 0.2.3, where insecure wrapping of cupsGetFile() and cupsPutFile() enables user-assisted remote attackers to read or overwrite sensitive files via CUPS resources. Impact is partial confidentiality and integrity, with no availability impact stated. Affect...

Apple QuickTime 7.7.2 - Targa image Buffer Overflow

Apple QuickTime 7.7.2 - Targa image Buffer Overflow Application : Apple QuickTime Versions : = before 7.7.3 CVE : 2012-3755 Impact : 9.3 High References : http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html Auther : Senator of Pirates E-Mail : SenatorofPirates.teamatgmail.com...

Memory Corruption in Symantec Ghost Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Symantec Ghost Solutions Suite SGSS 2.5.1, build 11.5.1.2266 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to...

CVE-2012-5920

CVE-2012-5920 is an XSS vulnerability in Google Web Toolkit (GWT) 2.4–2.5 Final, used in JBoss Operations Network 3.1.1 and potentially other products. It stems from an incomplete fix for CVE-2012-4563 and allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Red Hat/IB...

CVE-2012-5529

The CVE-2012-5529 entry concerns Firebird, specifically the TraceManager feature in Firebird 2.5.0 and 2.5.1. When tracing is enabled, remote authenticated users can trigger a denial of service by preparing an empty dynamic SQL query, which leads to a NULL pointer dereference and a crash. Publicl...

CVE-2012-3354

doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message...

CVE-2012-4366

CVE-2012-4366 affects Belkin Surf N150 (F7D1301v1), N900 (F9K1104v1), N450 (F9K1105V2), and N300 (F7D2301v1) routers. Root cause: default WPA2-PSK passphrase is deterministically generated from eight hex digits of the WAN MAC address, making the key predictable. Impact: attacker can access the wi...

Oracle AutoVue DGN Parsing Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Oracle AutoVue software versions 20.1.1 and 20.2. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Oracle...

CVE-2012-5519

CVE-2012-5519 affects the Common UNIX Printing System (CUPS) 1.4.4 and earlier on Linux distros (e.g., Debian). The web interface stores the administrator key in /var/run/cups/certs/0 with permissions that allow lpadmin users to read/write files, enabling local privilege escalation to root via th...