CVE-2012-4563

CVE-2012-4563 is an XSS vulnerability in Google Web Toolkit (GWT) 2.4 Beta and release candidates prior to 2.4.0. An attacker could inject arbitrary script/HTML via unspecified vectors. The issue is noted as an incomplete fix in related advisories, and the recommended remediation is to upgrade to...

CVE-2012-4523

Radsecproxy vulnerable to CVE-2012-4523: in 1.6.1 and earlier, certificate verification can bypass restrictions when configuration blocks include CA settings not related to the used verification block, enabling potential client spoofing. Root cause: improper certificate-chain verification across ...

CVE-2012-4566

The CVE-2012-4566 issue affects radsecproxy DTLS, where DTLS certificate verification can fail when multiple CA blocks exist and are unrelated to the verification chain, potentially allowing remote attackers to bypass access restrictions and spoof clients. Affected versions are radsecproxy before...

CVE-2012-5854

Heap-based buffer overflow in WeeChat 0.3.6 through 0.3.9 allows remote attackers to cause a denial of service crash or hang and possibly execute arbitrary code via crafted IRC colors that are not properly decoded...

CVE-2012-4233

LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org OOo, allows remote attackers to cause a denial of service NULL pointer dereference via a crafted 1 odt file to vcllo.dll, 2 ODG Drawing document file to svxcorelo.dll, 3 PolyPolygon record in a .wmf Window Meta File file...

CVE-2012-4233

LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org OOo, allows remote attackers to cause a denial of service NULL pointer dereference via a crafted 1 odt file to vcllo.dll, 2 ODG Drawing document file to svxcorelo.dll, 3 PolyPolygon record in a .wmf Window Meta File file...

CVE-2012-4423

CVE-2012-4423 affects libvirt; the virNetServerProgramDispatchCall path allows remote DoS via an RPC number equal to an event or a value in a gap of the RPC dispatch table. The vulnerability is present in libvirt prior to 0.10.2; remediation is to upgrade to libvirt 0.10.2 or newer (as reflected ...

CVE-2012-5918

CVE-2012-5918 affects razorCMS 1.2, where remote authenticated users can access administrator directories and files by creating and deleting a directory, indicating a directory traversal / improper path handling vulnerability. The connected records corroborate the same description; no explicit mi...

CVE-2012-4541

Cross-site scripting XSS vulnerability in Piwik before 1.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4423

The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and segmentation fault via an RPC call with 1 an event as the RPC number or 2 an RPC number whose value is in a "gap" in the RPC dispatch table...

CVE-2012-4541

CVE-2012-4541: Piwik (pre-1.9) contains a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. Connected sources confirm the issue and give the same description across multiple feeds; no concrete exploit details, affected vers...

CVE-2012-5854

WeeChat is affected by two CVEs: CVE-2012-5854 (heap-based buffer overflow when decoding IRC colors) and CVE-2012-5534 (shell expansions in hook_process). These vulnerabilities were fixed by patches/upgrades to WeeChat 0.3.9.2+; advisories across Gentoo, Mandriva, openSUSE, Fedora, and others ref...

CVE-2012-5519

CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface...

CVE-2012-4959

creationtimestamp| type| source ---|---|--- 2012-11-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22787 2012-12-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23323 2018-05-29 15:50:33+00:00| seen|...

Fedora 17 : kdelibs-4.9.2-11.fc17 (2012-17385)

CVE-2012-4515 - Fix crash when trying to reuse a frame with a null part Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Update for ruby FEDORA-2012-18017

Check for the Version of ruby OpenVAS Vulnerability Test Fedora Update for ruby FEDORA-2012-18017 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Microsoft IE CFormElement释放后重用远程代码执行漏洞（MS12-071）

BUGTRAQ ID: 56420 CVE ID: CVE-2012-1538 Microsoft Internet Explorer是微软公司推出的一款网页浏览器，使用相当广泛。 IE 9 "CFormElement"类访问错误初始化或删除的对象时存在远程代码执行漏洞，攻击者可利用此漏洞访问已经释放的内存，导致执行任意代码，破坏内存。 0 Microsoft Internet Explorer 9.x 临时解决方法： 设置互联网和内联网安全区域为“高”，以阻止这些区域内的ActiveX控件和脚本。 配置IE，在运行活动脚本时提示，或者直接禁用。 厂商补丁： Microsoft...

Microsoft IIS FTP服务远程命令注入漏洞（MS12-073)

BUGTRAQ ID: 56440 CVE ID: CVE-2012-2532 Internet Information Services（IIS，互联网信息服务）是由微软公司提供的基于运行Microsoft Windows的互联网基本服务。 Microsoft IIS FTP服务在与加密通讯渠道协商时，存在信息泄露漏洞。通过某些FTP命令可泄露某些信息。 0 Microsoft IIS 7.x 临时解决方法： 如果已经启用了IIS的"Operational"日志，则在分配给应用池自定义账户之前，请禁用...

Microsoft .NET Framework远程权限提升漏洞（MS12-074)

BUGTRAQ ID: 56464 CVE ID: CVE-2012-4777 .NET就是微软的用来实现XML，Web Services，SOA（面向服务的体系结构service-oriented architecture）和敏捷性的技术。.NET Framework是微软开发的软件框架，主要运行在Microsoft Windows上。 Microsoft .NET Framework 4、4.5的代码优化功能在反射实现中没有正确执行对象权限，通过特制的XAML浏览器应用或特制的.NET Framework应用，可允许远程攻击者执行任意代码。 0 Microsoft .NET...

IBM WebSphere Application Server 远程权限提升漏洞(CVE-2012-4850)

Bugtraq ID:56460 CVE ID:CVE-2012-4850 IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。 IBM WebSphere Application Server 8.5 Liberty Profile 8.5.0.1之前版本，在使用JAX-RS时，由于不正确校验请求，允许远程攻击者利用漏洞获得高权限。 0 IBM WebSphere Application Server 8.5 用户可参考如下厂商提供的安全公告获得补丁信息：...