CVE-2012-4987

CVE-2012-4987 affects RealNetworks RealPlayer (reported in multiple feeds) with a stack-based buffer overflow in the Watch Folders feature. The vulnerability arises from processing long pathnames in crafted ZIP files, enabling user-assisted remote code execution on affected Windows hosts. Affecte...

Invision Power Board <= 3.3.4 "unserialize()" PHP Code Execution

No description provided by source. ?php / ---------------------------------------------------------------- Invision Power Board = 3.3.4 "unserialize" PHP Code Execution ---------------------------------------------------------------- author..............: Egidio Romano aka EgiX...

CVE-2012-3748

CVE-2012-3748 is a WebKit/JavaScriptCore memory corruption vulnerability in Apple Safari and WebKit-based components. The root cause is a race condition leading to heap memory corruption via JSArray::sort, enabling remote code execution or a crash when processing malicious JavaScript arrays. Affe...

CVE-2012-3749

CVE-2012-3749 affects Apple’s kernel components (iOS before 6.0.1; OS X/macOS kernel) by returning OSBundleMachOHeaders that reveal kernel addresses, aiding ASLR bypass. The documented remediation is to unslide the addresses before returning them. Connected sources confirm the kernel information ...

CVE-2012-3750

Apple iOS vulnerability CVE-2012-3750 affects the Passcode Lock feature prior to iOS 6.0.1, where a state management issue could allow a physically proximate attacker with device access to bypass the passcode and view Passbook passes. The issue is localized to the lock state handling and is mitig...

CVE-2012-0025

Double free vulnerability in the FreeAllMemory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 for IrfanView, allows remote attackers to cause a denial of service crash via a crafted FPX image...

CVE-2012-0025

The CVE-2012-0025 entry describes a double-free vulnerability in libfpx’s Free_All_Memory function (jpeg/dectile.c) used by FlashPix PlugIn 4.2.2.0 with IrfanView. A crafted FPX image could cause a remote DoS (crash). Affected: libfpx prior to 1.3.1-1; remediation per the Gentoo GLSA advises upgr...

CVE-2012-4493

Cross-site scripting XSS vulnerability in the administrative interface in the Better Revisions module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer better revisions" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4498

The CVE-2012-4498 issue affects Drupal's Activism module (6.x-2.x) prior to 6.x-2.1. The root cause is improper access control that fails to restrict the Campaign content type, potentially allowing remote attackers to bypass access restrictions and cause other unspecified impact. Remediation per ...

CVE-2012-4493

Cross-site scripting XSS vulnerability in the administrative interface in the Better Revisions module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer better revisions" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4487

The CVE concerns Drupal’s Subuser module, prior to version 6.x-1.8. The vulnerability arises from insufficient checking of the "switch subuser" permission, enabling remote authenticated parent users to change their role by switching to a subuser they created. Practical impact is a potential privi...

CVE-2012-4493

The CVE-2012-4493 entry affects the Drupal Better Revisions module (7.x-1.x) up to version 7.x-1.1, where the administrative interface is vulnerable to Cross-Site Scripting (XSS). The vulnerability allows remote authenticated users who possess the "administer better revisions" permission to injec...

CVE-2012-4497

The CVE-2012-4497 entry describes a Cross-site Scripting (XSS) vulnerability in the Drupal module Elegant Theme, specifically within the "3 slide gallery" in the 7.x-1.x line before 7.x-1.1. Affected component: Elegant Theme module (Drupal 7.x-1.x, prior to 7.x-1.1) where the slide URL is the vec...

CVE-2012-4497

Cross-site scripting XSS vulnerability in the "3 slide gallery" in the Elegant Theme module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via a slide URL...

CVE-2012-4486

Cross-site request forgery CSRF vulnerability in the Subuser module before 6.x-1.8 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that switch the user to a subuser via unspecified vectors...

CVE-2012-4498

The Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the "Campaign" content type, which might allow remote attackers to bypass access restrictions and possibly have other unspecified impact...

CVE-2012-5416

CVE-2012-5416 affects Cisco Unified MeetingPlace Web Conferencing prior to 7.1MR1 Patch 1, 8.0 prior to 8.0MR1 Patch 1, and 8.5 prior to 8.5MR3. The issue is a buffer overflow leading to a denial of service (daemon hang) when processing unspecified parameters in a POST request. CVSSv2 base score ...

CVE-2012-5417

CVE-2012-5417 affects Cisco Prime Data Center Network Manager (DCNM) up to version 6.1(1). The issue is improper access restriction on JBoss MainDeployer functionality, enabling remote attackers to execute arbitrary commands via JBoss Application Server RMI services (Bug CSCtz44924). The NVD note...

Splunk 4.3.x Denial Of Service

Splunk version 4.3.x suffers from a denial of service hash table vulnerability. Vendors: Splunk Inc., http://www.splunk.com Product: Splunk 4.3.x + possibly earlier versions Vulnerability: Unauth. remote denial of service against splunkweb Tracking IDs: CVE-2012-1150 SPL-53249 Vendor communicatio...

RedHat Update for kdelibs RHSA-2012:1416-01

Check for the Version of kdelibs OpenVAS Vulnerability Test RedHat Update for kdelibs RHSA-2012:1416-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...