CVE-2012-5973: Improper Control of Generation of Code

CA XCOM Data Transport r11.0 and r11.5 on UNIX and Linux allows remote attackers to execute arbitrary commands via a crafted request...

PT-2012-6214

Name of the Vulnerable Software and Affected Versions CA XCOM Data Transport versions r11.0 through r11.5 Description The issue allows remote attackers to execute arbitrary commands via a crafted request. Recommendations For CA XCOM Data Transport versions r11.0 through r11.5, update to a version...

Novell File Reporter FSFUI File Upload (CVE-2012-4959)

A file upload vulnerability has been reported in Novell File Reporter. The vulnerability is due to lack of authorization on certain requests. A remote attacker can exploit this issue by sending a specially crafted request to the target. Successful exploitation could result in arbitrary files bein...

CVE-2012-5859

Samsung Kies Air 2.1.207051 and 2.1.210161 allows remote attackers to cause a denial of service crash via a crafted request to www/apps/KiesAir/jws/ssd.php...

Websense Proxy - Filter Bypass

Websense Proxy - Filter Bypass Websense Proxy Filter Bypass 1. Advisory Information Date published: 2012-11-25 Vendors contacted: Websense Release mode: Coordinated release Vendor was notified 2. Vulnerability Information Class: Filter Bypass Remotely Exploitable: Yes 3. Software Description...

CVE-2012-0960

Unity integration extension unity-firefox-extension before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service Firefox crash and possibly execute arbitrary code via a crafted request...

Cross site request forgery (csrf)

Unity integration extension unity-firefox-extension before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service Firefox crash and possibly execute arbitrary code via a crafted request...

CVE-2012-0960

Unity integration extension unity-firefox-extension before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service Firefox crash and possibly execute arbitrary code via a crafted request...

PT-2012-2976

Name of the Vulnerable Software and Affected Versions Unity integration extension unity-firefox-extension versions prior to 2.4.1 Description The issue is related to improper handling of callbacks, which can be exploited by remote attackers to cause a denial of service, resulting in a Firefox...

CVE-2012-0960

Unity integration extension unity-firefox-extension before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service Firefox crash and possibly execute arbitrary code via a crafted request...

VMware vSphere Hypervisor Vulnerability

Core Security - Corelabs Advisory 1. Advisory Information Title: VMware vSphere Hypervisor Vulnerability Advisory ID: CORE-2012-0710 Advisory URL: Date published: 2012-11-15 Date of last update: 2012-11-16 Vendors contacted: VMware Release mode: Coordinated release 2. Vulnerability Information...

CVE-2012-4847

IBM Cognos Business Intelligence BI 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service CPU consumption via a crafted request containing a zero-valued byte...

Design/Logic Flaw

The proxy server in IBM WebSphere Application Server 7.0 before 7.0.0.27, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, and WebSphere Virtual Enterprise, allows remote attackers to cause a denial of service daemon outage via a crafted request...

CVE-2012-3330

The proxy server in IBM WebSphere Application Server 7.0 before 7.0.0.27, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, and WebSphere Virtual Enterprise, allows remote attackers to cause a denial of service daemon outage via a crafted request...

CVE-2012-3330: Undefined Security Weakness

The proxy server in IBM WebSphere Application Server 7.0 before 7.0.0.27, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, and WebSphere Virtual Enterprise, allows remote attackers to cause a denial of service daemon outage via a crafted request...

PT-2012-5607

Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4 and 8.4.1 Description The issue allows remote authenticated users to cause a denial of service, specifically CPU consumption, by sending a crafted request that contains a zero-valued byte...

Cross site request forgery (csrf)

The Java servlets in the management console in IBM Tivoli Federated Identity Manager TFIM through 6.2.2 and Tivoli Federated Identity Manager Business Gateway TFIMBG before 6.2.2 do not require authentication for all resource downloads, which allows remote attackers to bypass intended J2EE securi...

Debian Security Advisory DSA 2564-1 (tinyproxy)

The remote host is missing an update to tinyproxy announced via advisory DSA 2564-1. OpenVAS Vulnerability Test $Id: deb25641.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2564-1 tinyproxy Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2564-1 : tinyproxy - denial of service

gpernot discovered that Tinyproxy, a HTTP proxy, is vulnerable to a denial of service by remote attackers by sending crafted request headers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

[SECURITY] [DSA 2564-1] tinyproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2564-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 23, 2012 http://www.debian.org/security/faq -...