20362 matches found
CVE-2012-5692
Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board aka IPB or IP.Board 3.1.x through 3.3.x has unknown impact and remote attack vectors...
CVE-2012-5692
CVE-2012-5692 corresponds to a PHP unserialize vulnerability in Invision Power Board (IP.Board) <= 3.3.4 affecting the file admin/sources/base/core.php. The flaw allows attacker-controlled data (notably from cookies) to trigger unsafe/unserialize calls, enabling remote code execution via the _...
CVE-2012-4547
AWStats is affected by cross-site scripting in the awredir.pl component (affecting
CVE-2012-4934
TomatoCart 1.1.7 (and possibly other versions) with the PayPal Express Checkout module in sandbox mode contains a design/logic flaw that may allow an attacker who is authenticated to bypass payment requirements by manipulating the PayPal redirect URL from PayPal back to TomatoCart. The result can...
SA-CONTRIB-2012-159 - Password policy - Information leakage of hashed passwords
This module provides a way to specify a certain level of password complexity aka. "password hardening" for user passwords on a system by defining a password policy. The Password policy module allows administrators to request users to enter a new password that does not match any of the previous X...
Scientific Linux Security Update : java-1.6.0-sun on SL5.x i386/x86_64 (20121018) (ROBOT)
As a reminder, the openjdk Java environment is available in Scientific Linux 5. Updates for openjdk are released in a similar manner to other security updates. Scientific Linux 6 does not bundle the closed source Java environment. All running instances of Sun/Oracle Java must be restarted for the...
Axigen Arbitrary File Read and Delete
This module exploits a directory traversal vulnerability in the WebAdmin interface of Axigen, which allows an authenticated user to read and delete arbitrary files with SYSTEM privileges. The vulnerability is known to work on Windows platforms. This module has been tested successfully on Axigen...
CVE-2012-4940
creationtimestamp| type| source ---|---|--- 2012-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37996 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/axigenfileaccess.rb 2025-02-06 03:13:40+00:00| seen|...
Mozilla SeaMonkey 2.13.x < 2.13.2 Multiple Vulnerabilities
Binary data 801317.prm...
Konqueror 4.7.3 Memory Corruption
Konqueror version 4.7.3 suffers from a number of memory corruption vulnerabilities. Author: Tim Brown URL: / Product: Konqueror 4.7.3 Vendor: KDE Risk: Medium Summary The Konqueror web browser is vulnerable to a number of memory corruption vulnerabilities. This advisory comes in 4 related parts: ...
Konqueror 4.7.3 Memory Corruption
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20121010 Date: 10th October 2012 Author: Tim Brown URL: / Product: Konqueror 4.7.3 Vendor: KDE Risk: Medium Summary The Konqueror web browser is vulnerable to a number of memory corruption vulnerabilities. This...
Ubuntu Update for ruby1.8 USN-1603-2
Ubuntu Update for Linux kernel vulnerabilities USN-1603-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN16032.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ruby1.8 USN-1603-2 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...
SeaMonkey < 2.13.2 Multiple Vulnerabilities
Binary data 6613.prm...
Fedora 17 : Django-1.4.2-1.fc17 (2012-16440)
Security releases issued - Host header poisoning Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
RHEL 6 : kdelibs (RHSA-2012:1418)
Updated kdelibs packages that fix two security issues are now available for Red Hat Enterprise Linux 6 FasTrack. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...
SolarWinds Orion IPAM web interface reflected xss vulnerability
Overview SolarWinds Orion IPAM web interface contains a reflected cross-site scripting vulnerability. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'SolarWinds Orion IPAM web interface contains a reflected cross-site scripting vulnerability. ...
Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20121029)
Note: None of the issues in this advisory can be exploited by a specially crafted HTML mail message as JavaScript is disabled by default for mail messages. They could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed. After installing the...
CentOS 6 : kdelibs (CESA-2012:1418)
Updated kdelibs packages that fix two security issues are now available for Red Hat Enterprise Linux 6 FasTrack. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...
Fedora 16 : exim-4.76-4.fc16.2 (2012-17085)
This update protect DKIM DNS decoding from remote exploit, CVE-2012-5671. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...