CVE-2012-3940

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72958...

CVE-2012-3938

The CVE-2012-3938 entry concerns a buffer overflow in the Cisco WebEx Recording Format (WRF) Player. The affected versions are WRF Player T27 before LD SP32 EP10 and T28 before T28.4, vulnerable when handling crafted WRF files, enabling a remote attacker to execute arbitrary code. Connected docum...

CVE-2012-5672

Microsoft Excel Viewer aka Xlview.exe and Excel in Microsoft Office 2007 aka Office 12 allow remote attackers to cause a denial of service read access violation and application crash via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data...

CVE-2012-5339

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.5.x before 3.5.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted name of 1 an event, 2 a procedure, or 3 a trigger...

CVE-2012-5339

CVE-2012-5339 concerns phpMyAdmin 3.5.x before 3.5.3, with multiple XSS flaws that allow remote authenticated users to inject arbitrary script via crafted names of (1) an event, (2) a procedure, or (3) a trigger. The affected product/version is phpMyAdmin 3.5.x prior to 3.5.3; advisories indicate...

CVE-2012-5368

CVE-2012-5368 affects phpMyAdmin 3.5.x before 3.5.3. An underlying root cause is that the JavaScript code loaded from phpmyadmin.net over non-SSL sessions can be modified in transit, enabling cross-site scripting (XSS) via MITM. Exploitation details are not provided in the documents. The practica...

CVE-2012-5672

CVE-2012-5672 affects Microsoft Excel Viewer (Xlview.exe) and Excel in Office 2007. A crafted .xls spreadsheet can trigger a read access violation, causing an application crash (denial of service). The description and connected sources consistently describe the issue as a DoS via a malformed Exce...

Oracle GlassFish / Java System Application Server CORBA ORB Subcomponent DoS Vulnerability (Oct 2012)

Oracle GlassFish / Java System Application Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

IBM Db2 SQL/PSM Stored Procedure Debugging Buffer Overflow Vulnerability - Linux

IBM Db2 is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...

Bitweaver 2.8.1 Cross Site Scripting / Local File Inclusion

Trustwave SpiderLabs Security Advisory TWSL2012-016: Multiple Vulnerabilities in Bitweaver Published: 10/23/2012 Version: 1.0 Vendor: Bitweaver http://www.bitweaver.org/ Product: Bitweaver Version affected: 2.8.1 and earlier versions Product description: Bitweaver is a free and open source web...

Security fix for the ALT Linux 6 package pidgin version 2.10.6-alt1.M60P.1

Oct. 25, 2012 Gleb Fotengauer-Malinovskiy 2.10.6-alt1.M60P.1 - 2.10.6 - p6 security update fix CVE-2012-3374...

Oracle GlassFish/Java System Application Server CORBA ORB Subcomponent DoS Vulnerability

This host is running Oracle GlassFish/Java System Application Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodoracleglassfishnsjascorbaorbcompdosvuln.nasl 5963 2017-04-18 09:02:14Z teissa $ Oracle GlassFish/Java System Application Server CORBA ORB...

Fedora 18 : dokuwiki-0-0.14.20121013.fc18 (2012-16550)

upgrade to latest upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...

Security Advisory - SNMP vulnerability on Huawei multiple products

In some of Huawei products as affected products list below, there are MIBs which support the query of the local user account and password. However, the security authentication protection for SNMP V1 and V2 is not enough, which leads to the risk that the user account and password can be disclosed...

IBM DB2 9.7 < Fix Pack 7 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior to Fix Pack 7. It is, therefore, affected by one or more of the following issues : - An error exists related to the stored procedure 'SQLJ.DB2INSTALLJAR' that can allow 'JAR' files to be overwritten. Not...

Cross site scripting

Cross-site scripting XSS vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wlcmsodevelopername parameter in a save action to wp-admin/admin.php, a related issue to CVE-2012-53...

USN-1616-1: Python 3.1 vulnerabilities

It was discovered that Python would prepend an empty string to sys.path under certain circumstances. A local attacker with write access to the current working directory could exploit this to execute arbitrary code. This issue only affected Ubuntu 10.04 LTS. CVE-2008-5983 It was discovered that th...

CVE-2012-5388

CVE-2012-5388 is an XSS vulnerability in the White Label CMS plugin for WordPress (wlcms-plugin.php) version 1.5. It allows remote authenticated administrators to inject arbitrary web script or HTML via the wlcms_o_developer_name parameter during a save action to wp-admin/admin.php. This is relat...

CVE-2012-5302

CVE-2012-5302 affects TIBCO Formvine Server in versions 3.1.x and 3.2.x prior to 3.2.1, where improper access control could let remote attackers access or modify information via unspecified vectors. The TIBCO advisory confirms the issue and recommends upgrading Formvine to version 3.2.1 or newer ...

CVE-2012-5387

The CVE-2012-5387 entry refers to a CSRF vulnerability in the White Label CMS WordPress plugin (wlcms-plugin.php) before version 1.5.1. The underlying flaw allows remote attackers to hijack administrator authentication by submitting a request to wp-admin/admin.php with the wlcms_o_developer_name ...