CVE-2013-0367

Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Partition...

Design/Logic Flaw

proxiescontroller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check permissions, which allows remote authenticated users to read consumer certificates or change arbitrary users' settings via unspecified vectors related to the "consumer UUID" of a system...

NVidia Display Driver Buffer Overflow

/ NVidia Display Driver Service Nsvr Exploit - Christmas 2012 - Bypass DEP + ASLR + /GS + CoE ============================================================= @peterwintrsmith Hey all! Here is an exploit for an interesting stack buffer overflow in the NVidia Display Driver Service. The service liste...

VMware security updates for vCSA, vCenter Server, and ESXi

a. vCenter Server Appliance directory traversal The vCenter Server Appliance vCSA contains a directory traversal vulnerability that allows an authenticated remote user to retrieve arbitrary files. Exploitation of this issue may expose sensitive information stored on the server. VMware would like ...

DEBIAN-CVE-2012-5571

A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 Elastic Compute Cloud tokens when a user's role has been removed from a tenant. An attack...

VMSA-2012-0018:VMware security updates for vCSA, vCenter Server, and ESXi

VMSA-2012-0018.2 VMware security updates for vCSA, vCenter Server, and ESXi VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0018.2 VMware Security Advisory Synopsis: VMware security updates for vCSA, vCenter Server, and ESXi VMware Security Advisory Issue date: 2012-12-20...

CVE-2012-5539

The Organic Groups OG module 7.x-1.x before 7.x-1.5 for Drupal does not properly maintain pending group memberships, which allows remote authenticated users to post to arbitrary groups by modifying their own account while a pending membership is waiting to be approved...

MySQL - Remote User Enumeration

MySQL User Account Enumeration Utility When an attacker authenticates using an incorrect password with the old authentication mechanism from mysql 4.x and below to a mysql 5.x server the mysql server will respond with a different message than Access Denied, what makes User Account Enumeration...

jsupload.cgi.pl 0.6.4 Directory Traversal

------------------------------------------------------------------------------------------------------------- Directory traversal vulnerabilities in jsupload.cgi.pl version 0.6.4 and before 29 November 2012 Sean de Regge seanderegge gmail.com...

Perl script jsupload.cgi.pl 0.6.4 Directory Traversal

jsupload.cgi.pl versions 0.6.4 and below suffer from a directory traversal vulnerability. ------------------------------------------------------------------------------------------------------------- Directory traversal vulnerabilities in jsupload.cgi.pl version 0.6.4 and before 29 November 2012...

CVE-2012-5918

razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a directory...

CVE-2012-5453

SQL injection vulnerability in user/indexinlineeditorsubmit.php in ATutor AContent 1.2-1 allows remote authenticated users to execute arbitrary SQL commands via the field parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-5167...

CVE-2012-3149

CVE-2012-3149 affects Oracle MySQL Server, specifically the MySQL Server component in MySQL 5.5.26 and earlier. The vulnerability is described as unspecified but related to the MySQL Client and allows remote authenticated users to affect confidentiality. Connected advisories confirm the issue acr...

Videosmate Organizer 4.2 Authentication Bypass / Path Disclosure

===================================================================== Vulnerable software: Videosmate Organizer V 4.2 all versions Vendor: http://videosmate.com/ Software License: Commercial Vulns: Authentication Bypass & Path Disclosure Risk: Critical Dork: intext:Powered by Videosmate Organizer...

CVE-2012-3491

src/condorschedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors...

YingZhi Python 1.9 Arbitrary Traversal / Write

YingZhi Python Programming Language for iOS Vendor: XiaoWen Huang Version 1.9. Product Websites http://sosilen.blog.163.com http://www.iphoneappstorm.com/iphone-apps/utilities/com.yingzhi.python/yingzhipython.php?id=493505744 YingZhi Description: Python Interpreter is a native python development...

CVE-2011-4961

SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote authenticated users with the EDITPERMISSIONS permission to gain administrator privileges via a TreeMultiselectField that includes admin groups when adding a user to the selected groups...

Slackware: Security Advisory (SSA:2009-290-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1649

CVE-2012-1649 affects the Drupal Cool Aid module prior to 6.x-1.9. The vulnerability is an access-control bypass that allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors. The root cause is insufficient access restriction enfor...

Mandrake Linux Security Advisory : pam (MDKSA-2000:029)

There is a problem with the pamconsole module that incorrectly identifies remote X logins for displays other than :0 for example, :1, :2, etc. as being local displays, thus giving control of the console to the remote user. Because the remote user has control of the console they are able to issue...