CVE-2012-4729

Wing FTP Server prior to 4.1.1 is vulnerable to an authenticated denial-of-service caused by parsing two ZIP commands, leading to daemon crash. Affected: Wing FTP Server versions before 4.1.1. Root cause: vulnerability arises during processing of multiple ZIP commands. Mitigation: upgrade to vers...

CVE-2012-5470

libpngplugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service application crash via a crafted PNG file...

Layton Helpbox 4.4.0 SQL Injection

Layton Helpbox 4.4.0 Multiple SQL Injection Points by Joseph Sheridan Summary Layton Technologies Helpbox product version 4.4.0 is vulnerable to multiple SQL injection vulnerabilities. CVE number: CVE-2012-4971 Impact: High Vendor homepage: http://www.laytontechnology.com Vendor notified:...

Layton Helpbox 4.4.0 Cross Site Scripting

Layton Helpbox 4.4.0 Reflected Cross-Site Scripting by Joseph Sheridan Summary Layton Technologies Helpbox product version 4.4.0 is vulnerable to a reflected cross-site scripting vulnerability. CVE number: CVE-2012-4972 Impact: Medium Vendor homepage: http://www.laytontechnology.com Vendor...

Layton Helpbox 4.4.0 Login Bypass

Layton Helpbox 4.4.0 Login Bypass Vulnerability by Joseph Sheridan Summary Layton Technologies Helpbox product version 4.4.0 is vulnerable to a login bypass vulnerability. CVE number: CVE-2012-4974 Impact: High Vendor homepage: http://www.laytontechnology.com Vendor notified: 10/09/2012 Vendor...

CVE-2012-4196

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack that defeats...

Cisco WebEx WRF Player Multiple Buffer Overflows (cisco-sa-20121010-webex)

The version of Cisco WebEx WRF Player installed on the remote host has multiple buffer overflow vulnerabilities. A remote attacker could exploit these issues by tricking a user into opening a malicious WRF file, resulting in arbitrary code execution. C Tenable Network Security, Inc...

Mutiny < 4.5-1.12 Unspecified Network Interface Menu Remote Command Injection

The remote web server hosts a version of Mutiny earlier than 4.5-1.12. It is, therefore, reportedly affected by a command injection vulnerability that could allow an authenticated attacker to execute arbitrary commands via the network interface menu. Note that Nessus has not tested for this issue...

Layton Helpbox 4.4.0 Authorization Bypass

Layton Helpbox 4.4.0 Authorisation Bypass Vulnerability by Joseph Sheridan Summary Layton Technologies Helpbox product version 4.4.0 is vulnerable to an authorisation bypass vulnerability. CVE number: CVE-2012-4975 Impact: Medium Vendor homepage: http://www.laytontechnology.com Vendor notified:...

Ubuntu Update for python3.1 USN-1616-1

Ubuntu Update for Linux kernel vulnerabilities USN-1616-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16161.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for python3.1 USN-1616-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net Th...

Symantec Ghost Solution Suite Backup File Handling Memory Corruption (SYM12-016)

The Symantec Ghost Solution Suite install on the remote Windows host is earlier than build 11.5.1.2620. As such, it is potentially affected by a memory corruption vulnerability when parsing specially crafted '.gho' files. By exploiting this flaw, a remote attacker could execute arbitrary code on...

Ubuntu: Security Advisory (USN-1616-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS / 12.10 : exim4 vulnerability (USN-1618-1)

It was discovered that Exim incorrectly handled DKIM DNS decoding. This flaw could allow a remote attacker to execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically...

CVE-2011-5231

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-0023. Reason: This candidate is a duplicate of CVE-2012-0023. Notes: All CVE users should reference CVE-2012-0023 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2011-5231

CVE-2011-5231 is a duplicate of CVE-2012-0023. The connected data confirms VLC media player contains a double-free vulnerability in the TiVo demuxer get_chunk_header function (modules/demux/ty.c) affecting VLC 0.9.0–1.1.12, enabling potential remote code execution or crash via crafted TiVo files....

CVE-2011-5232

CVE-2011-5232 is rejected/not used; this candidate is a duplicate of CVE-2012-0025.

CVE-2012-3936

CVE-2012-3936 refers to a buffer overflow in the Cisco WebEx Recording Format (WRF) Player. The vulnerability affects WebEx WRF Player versions T27 before LD SP32 EP10 and T28 before T28.4, allowing a remote attacker to execute arbitrary code by convincing a user to open a crafted WRF file. The i...

CVE-2012-3940

CVE-2012-3940 refers to buffer overflow vulnerabilities in the Cisco WebEx Recording Format (WRF) Player. The affected components are WebEx WRF Player versions used to play WRF recordings, with T27 prior to LD SP32 EP10 and T28 prior to T28.4 vulnerable to remote code execution via a crafted WRF ...

CVE-2012-3937

CVE-2012-3937 describes a buffer overflow in the Cisco WebEx Recording Format (WRF) Player for versions T27 before LD SP32 EP10 and T28 before T28.4, allowing remote code execution via a crafted WRF file. The issue affects the WebEx WRF Player used to play back recordings; exploitation would occu...

CVE-2012-3939

CVE-2012-3939 affects Cisco WebEx Recording Format (WRF) Player prior to LD SP32 EP10 for T27 and before T28.4 for T28. The issue is a memory corruption caused by buffer overflows in atas32.dll when processing crafted WRF files, enabling remote code execution (or memory corruption/DoS) if a user ...