dotProject <= 2.1.6 Local File Include Vulnerability

dotProject is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SA-CONTRIB-2012-162 - RESTful Web Services - Cross site request forgery (CSRF)

This module enables you to expose Drupal entities as RESTful web services. It provides a machine-readable interface to exchange resources in JSON, XML and RDF. The module doesn't sufficiently verify POST requests thereby exposing a Cross Site Request Forgery vulnerability. This vulnerability is...

MS12-076: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2720184)

The remote Windows host is running a version of Microsoft Excel that is affected by the following vulnerabilities : - A heap-based buffer overflow vulnerability exists due to the way the application handles memory when opening Excel files. CVE-2012-1885 - A memory corruption vulnerability exists...

Fedora 18 : seamonkey-2.13.2-2.fc18 (2012-17841)

Update to 2.13.2 Fix CVE-2012-4194 and CVE-2012-3974 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

MS12-076: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2720184) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Excel that is affected by the following vulnerabilities : - A heap-based buffer overflow vulnerability exists due to the way the application handles memory when opening Excel files. CVE-2012-1885 - A memory corruption vulnerability exists...

CVE-2012-1896

CVE-2012-1896 affects Microsoft .NET Framework 2.0 SP2 and 3.5.1, where trust levels are not properly respected during output data construction, enabling information leakage via crafted XBAPs or partially trusted code in .NET applications. The vulnerability is described as an information-disclosu...

Low: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2012-1813

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000...

CVE-2012-1810

EOSCoreScada.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service daemon restart by sending data to TCP port 1 5050 or 2 24004...

CVE-2012-5285

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK...

CVE-2012-1813

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000...

CVE-2012-1810

EOSCoreScada.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service daemon restart by sending data to TCP port 1 5050 or 2 24004...

CVE-2012-1812

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000...

CVE-2012-5286

CVE-2012-5286 is a buffer overflow in Adobe Flash Player prior to 10.3.183.29 and 11.x prior to 11.4.402.287 on Windows/macOS, prior to 10.3.183.29 and 11.x prior to 11.2.202.243 on Linux, and prior to 11.1.111.19 (Android 2.x/3.x) and 11.1.115.20 (Android 4.x); and in Adobe AIR prior to 3.4.0.27...

CVE-2012-1812

CVE-2012-1812 affects C3-ilex EOScada; vulnerability in the EOSfailoverservice.exe component exposes cleartext data via TCP port 12000. The issue is described as data leakage through an improper access control condition, affecting EOScada versions prior to 11.0.19.2. Impact includes potential dat...

CVE-2012-5285

The CVE-2012-5285 entry describes a Buffer Overflow in Adobe Flash Player and Adobe AIR. Affected products include Adobe Flash Player pre-10.3.183.29 and 11.x pre-11.4.402.287 on Windows/macOS; pre-10.3.183.29 and 11.x pre-11.2.202.243 on Linux; pre-11.1.111.19 on Android 2.x/3.x; and pre-11.1.11...

CVE-2012-1813

CVE-2012-1813 concerns eosfailoverservice.exe in C3-ilex EOScada prior to 11.0.19.2. The vulnerability allows a remote attacker to cause a denial-of-service by sending a large amount of data to TCP port 12000, via the EOS failover service. The CVE entry specifies a DoS impact with a network attac...

CVE-2012-5673

CVE-2012-5673 affects Adobe Flash Player and Adobe AIR across multiple platforms. Affected are: Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows/Mac; before 11.2.202.243 on Linux; before 11.1.111.19 on Android 2.x/3.x; before 11.1.115.20 on Android 4.x; and Adobe AIR before...

CVE-2012-5287

CVE-2012-5287 is a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution via unspecified vectors. Affected are Flash Player on Windows/Mac (before 10.3.183.29 and 11.x before 11.4.402.287), Linux (before 11.2.202.243 in some builds), Android 2.x/3....

CVE-2012-1811

CVE-2012-1811 affects C3-ilex EOScada, specifically the EOSDataServer.exe component. Before version 11.0.19.2, this service on TCP port 24006 is vulnerable to a Resource Management Error: sending a large amount of random data can cause a denial-of-service, resulting in the application crashing an...