Design/Logic Flaw

Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == equals sign equals sign operator for comparisons, which has unspecified impact and context-dependent attack vectors...

CVE-2012-2966

Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors...

FreeBSD Ports: php5

The remote host is missing an update to the system as announced in the referenced advisory. VID bdab0acd-d4cd-11e1-8a1c-14dae9ebcf89 OpenVAS Vulnerability Test $ Description: Auto generated from VID bdab0acd-d4cd-11e1-8a1c-14dae9ebcf89 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Titan Security Data-Sharing Project Presents Big Opportunity For Change

One of the more pernicious and as-yet incurable diseases in security is the resistance to sharing data. Organizations large and small collect all sorts of information on attacks, vulnerabilities and threats and, for the most part, it simply sits in databases and is never of any use to anyone...

CVE-2012-3448

Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors...

Low: php

Issue Overview: Unspecified vulnerability in the phpstreamscandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow." Affected Packages: php Issue Correction: Run yum update php or yum update...

Mandriva Update for util-linux MDVSA-2012:083 (util-linux)

Check for the Version of util-linux OpenVAS Vulnerability Test Mandriva Update for util-linux MDVSA-2012:083 util-linux Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for util-linux MDVSA-2012:083 (util-linux)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Google Chrome OS before 21.0.1180.50 on the Cr-48 and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, have unknown impact and attack vectors...

CVE-2012-2688

CVE-2012-2688 affects PHP: Unspecified vulnerability in the _php_stream_scandir function of the stream implementation, reported for PHP before 5.3.15 and 5.4.x before 5.4.5. The issue is tied to an overflow in scandir, enabling remote attack vectors. Patched in PHP 5.3.15+ and 5.4.5+. No exploita...

CVE-2012-0801

CVE-2012-0801 affects Moodle’s lib/formslib.php. Vulnerable in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 due to improper handling of multiple form element instances. Impact is unspecified in the provided sources. Remediate by upgrading Moodle to 2.1.4 or later, or 2.2.1 or later. Exploit d...

CVE-2012-0801

lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle multiple instances of a form element, which has unspecified impact and remote attack vectors...

CVE-2011-4293

The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets CSS and JavaScript content, which allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory via unspecified...

Design/Logic Flaw

Unspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack vectors, a different vulnerability than CVE-2012-2446 and CVE-2012-2447...

CVE-2012-3802

Unspecified vulnerability in the Post Affiliate Pro PAP module for Drupal allows remote authenticated users to read the commissions of other users via unknown attack vectors...

CVE-2012-3802

Unspecified vulnerability in the Post Affiliate Pro PAP module for Drupal allows remote authenticated users to read the commissions of other users via unknown attack vectors...

CVE-2012-2821

The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote attack vectors...

CVE-2012-2821

CVE-2012-2821 affects Google Chrome/Chromium’s autofill display prior to version 20.0.1132.43. The underlying issue is in the autofill implementation where text is not properly displayed, with unspecified impact beyond the CVSS-derived metrics. Connected documents corroborate its inclusion in Chr...

CVE-2012-2821

The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote attack vectors...

OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing...