20363 matches found
CVE-2012-4945
CVE-2012-4945 affects Agile FleetCommander and FleetCommander Kiosk prior to 4.08. The vulnerability is described as a command injection flaw that could allow a remote attacker to execute arbitrary commands via unspecified vectors. Public sources (NVD/PRION/Cert) corroborate multiple web-facing v...
CVE-2012-4941
CVE-2012-4941 covers multiple SQL injection vulnerabilities in Agile FleetCommander and FleetCommander Kiosk prior to 4.08, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected are Agile FleetCommander and FleetCommander Kiosk versions before 4.08; vendor ...
CVE-2012-4944
CVE-2012-4944 affects Agile FleetCommander and FleetCommander Kiosk prior to 4.08. The flaw is undelimited/unrestricted file uploads on an unspecified page, enabling a remote attacker to upload arbitrary files and execute code. Impact is remote, unauthenticated access with the potential to compro...
CVE-2012-4945
Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection" issue...
CVE-2012-4575
The adddatabase function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service daemon outage via a long database name in a request...
CVE-2012-4959
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. dot dot in a FILE element of an FSFUI record...
CVE-2012-4575
The adddatabase function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service daemon outage via a long database name in a request...
CVE-2012-4956
CVE-2012-4956 affects Novell File Reporter 1.0.2; NFRAgent.exe suffers a heap-based buffer overflow triggered by a large number of VOL elements in an SRS record, enabling remote code execution. Public references in connected documents confirm related exploit activity: CIRCL sightings point to a M...
CVE-2012-4958
CVE-2012-4958: In Novell File Reporter NFRAgent.exe 1.0.2, a directory traversal allows remote attackers to read arbitrary files by sending a crafted FSF/CMD request containing .. in a FILE element of an FSFUI record. This is described as a lack of proper authorization on certain FSF/CMD requests...
CVE-2012-4575
CVE-2012-4575 affects the PostgreSQL PgBouncer pooler (version 1.5.2) where the add_database function in objects.c can be triggered by a long database name to cause a denial of service (daemon outage) over the network. The issue is documented across multiple feeds (NVD, OSV, OpenVAS, MSRC, etc.) ...
Samsung Kies Arbitrary Command Execution (CVE-2012-3807)
An arbitrary command execution vulnerability has been reported in Samsung Kies. The vulnerability is due to insufficient validation of incoming requests. A remote attacker can exploit this vulnerability by enticing a target user to visit a specially crafted web page using an affected version of...
Apple Safari WebKit CSS Title Memory Corruption (CVE-2012-3684)
A memory corruption vulnerability has been reported in WebKit, a component of Apple Safari. The vulnerability is due to improper handling of a CSS style for a title element. A remote attacker can exploit this issue by enticing a target user to open a specially crafted file. Successful exploitatio...
Oracle Database O5Logon Protocol Information Disclosure (CVE-2012-3137)
An information disclosure vulnerability has been discovered in the Oracle authentication protocol O5Logon. The vulnerability is due to an error in the authentication protocol. A remote attacker can exploit this vulnerability by sending a specially crafted Connect request to an Oracle Database...
Trend Micro Control Manager ad hoc query Module SQL Injection (CVE-2012-2998)
An SQL injection vulnerability has been reported in Trend Micro Control Manager...
Multiple vulnerabilities in BabyGekko
Advisory ID: HTB23122 Product: BabyGekko Vendor: babygekko.com Vulnerable Versions: 1.2.2e and probably prior Tested Version: 1.2.2e Vendor Notification: October 24, 2012 Vendor Patch: November 4, 2012 Public Disclosure: November 14, 2012 Vulnerability Type: SQL Injection CWE-89, PHP File Inclusi...
XSS vulnerability in web applications with swfupload: Dotclear, XenForo, InstantCMS, AionWeb, Dolphin
Hello 3APA3A! I will draw your attention to XSS vulnerability in other web applications with swfupload. Earlier I've wrote about swfupload in WordPress CVE-2012-3414 and that this hole is available in many web applications. In previous letter I've wrote the information about different versions of...
[USN-1632-1] Django vulnerability
========================================================================== Ubuntu Security Notice USN-1632-1 November 15, 2012 python-django vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...
CVE-2012-5914
Multiple cross-site scripting XSS vulnerabilities in the sedimport function in system/functions.php in Neocrome Seditio build 160 and 161 allow remote attackers to inject arbitrary web script or HTML via the 1 newmsg or 2 rtext parameter. NOTE: some of these details are obtained from third party...
CVE-2012-5916
Neocrome Seditio build 161 allows remote attackers to obtain sensitive information via a direct request to 1 docs/new/seditio-createnew-160.sql, 2 docs/upgrade/seditoconverttoutf8.optional.sql, or 3 system/install/install.parser.sql...