CVE-2012-4019

Tokyo BBS (Come on Girls Interface) CGI Tokyo BBS is affected by an XSS in tokyo_bbs.cgi, enabling remote attackers to inject arbitrary script/HTML via the error page vector. Affected product: Tokyo BBS provided by Come on Girls Interface; vulnerability details and patches are documented by JVN e...

Layton Helpbox 4.4.0 SQL Injection

Layton Helpbox 4.4.0 Multiple SQL Injection Points by Joseph Sheridan Summary Layton Technologies Helpbox product version 4.4.0 is vulnerable to multiple SQL injection vulnerabilities. CVE number: CVE-2012-4971 Impact: High Vendor homepage: http://www.laytontechnology.com Vendor notified:...

Layton Helpbox 4.4.0 Cross Site Scripting

Layton Helpbox 4.4.0 Reflected Cross-Site Scripting by Joseph Sheridan Summary Layton Technologies Helpbox product version 4.4.0 is vulnerable to a reflected cross-site scripting vulnerability. CVE number: CVE-2012-4972 Impact: Medium Vendor homepage: http://www.laytontechnology.com Vendor...

CVE-2012-4196

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack that defeats...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS / 12.10 : exim4 vulnerability (USN-1618-1)

It was discovered that Exim incorrectly handled DKIM DNS decoding. This flaw could allow a remote attacker to execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically...

Layton Helpbox 4.4.0 Authorization Bypass

Layton Helpbox 4.4.0 Authorisation Bypass Vulnerability by Joseph Sheridan Summary Layton Technologies Helpbox product version 4.4.0 is vulnerable to an authorisation bypass vulnerability. CVE number: CVE-2012-4975 Impact: Medium Vendor homepage: http://www.laytontechnology.com Vendor notified:...

Ubuntu: Security Advisory (USN-1616-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco WebEx WRF Player Multiple Buffer Overflows (cisco-sa-20121010-webex)

The version of Cisco WebEx WRF Player installed on the remote host has multiple buffer overflow vulnerabilities. A remote attacker could exploit these issues by tricking a user into opening a malicious WRF file, resulting in arbitrary code execution. C Tenable Network Security, Inc...

Mutiny < 4.5-1.12 Unspecified Network Interface Menu Remote Command Injection

The remote web server hosts a version of Mutiny earlier than 4.5-1.12. It is, therefore, reportedly affected by a command injection vulnerability that could allow an authenticated attacker to execute arbitrary commands via the network interface menu. Note that Nessus has not tested for this issue...

Ubuntu Update for python3.1 USN-1616-1

Ubuntu Update for Linux kernel vulnerabilities USN-1616-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16161.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for python3.1 USN-1616-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net Th...

Layton Helpbox 4.4.0 Login Bypass

Layton Helpbox 4.4.0 Login Bypass Vulnerability by Joseph Sheridan Summary Layton Technologies Helpbox product version 4.4.0 is vulnerable to a login bypass vulnerability. CVE number: CVE-2012-4974 Impact: High Vendor homepage: http://www.laytontechnology.com Vendor notified: 10/09/2012 Vendor...

Symantec Ghost Solution Suite Backup File Handling Memory Corruption (SYM12-016)

The Symantec Ghost Solution Suite install on the remote Windows host is earlier than build 11.5.1.2620. As such, it is potentially affected by a memory corruption vulnerability when parsing specially crafted '.gho' files. By exploiting this flaw, a remote attacker could execute arbitrary code on...

CVE-2011-5231

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-0023. Reason: This candidate is a duplicate of CVE-2012-0023. Notes: All CVE users should reference CVE-2012-0023 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2011-5232

CVE-2011-5232 is rejected/not used; this candidate is a duplicate of CVE-2012-0025.

CVE-2011-5231

CVE-2011-5231 is a duplicate of CVE-2012-0023. The connected data confirms VLC media player contains a double-free vulnerability in the TiVo demuxer get_chunk_header function (modules/demux/ty.c) affecting VLC 0.9.0–1.1.12, enabling potential remote code execution or crash via crafted TiVo files....

CVE-2012-3937

CVE-2012-3937 describes a buffer overflow in the Cisco WebEx Recording Format (WRF) Player for versions T27 before LD SP32 EP10 and T28 before T28.4, allowing remote code execution via a crafted WRF file. The issue affects the WebEx WRF Player used to play back recordings; exploitation would occu...

CVE-2012-3941

CVE-2012-3941 concerns the Cisco WebEx Recording Format (WRF) Player. The advisory and CVE records describe heap/buffer overflow vulnerabilities in the WRF Player, exploitable via a crafted WRF file to achieve remote code execution. Affected versions include WebEx WRF Player on T27 prior to LD SP...

CVE-2012-3938

The CVE-2012-3938 entry concerns a buffer overflow in the Cisco WebEx Recording Format (WRF) Player. The affected versions are WRF Player T27 before LD SP32 EP10 and T28 before T28.4, vulnerable when handling crafted WRF files, enabling a remote attacker to execute arbitrary code. Connected docum...

CVE-2012-3940

CVE-2012-3940 refers to buffer overflow vulnerabilities in the Cisco WebEx Recording Format (WRF) Player. The affected components are WebEx WRF Player versions used to play WRF recordings, with T27 prior to LD SP32 EP10 and T28 prior to T28.4 vulnerable to remote code execution via a crafted WRF ...

CVE-2012-3936

CVE-2012-3936 refers to a buffer overflow in the Cisco WebEx Recording Format (WRF) Player. The vulnerability affects WebEx WRF Player versions T27 before LD SP32 EP10 and T28 before T28.4, allowing a remote attacker to execute arbitrary code by convincing a user to open a crafted WRF file. The i...