PT-2012-1951

Name of the Vulnerable Software and Affected Versions QIWI Wallet versions prior to 1.14.2 Description The issue allows remote attackers to read or modify financial information via a crafted application due to improper data protection. Recommendations For versions prior to 1.14.2, update to versi...

PT-2012-1952

Name of the Vulnerable Software and Affected Versions Scan to PDF Free version 2.0.4 Description The issue allows remote attackers to read or modify scanned files and a Google account via a crafted application, due to improper data protection. Recommendations For version 2.0.4, at the moment, the...

PT-2012-1948

Name of the Vulnerable Software and Affected Versions Voxofon com.voxofon versions prior to 2.5.2 Description The issue allows remote attackers to read or modify SMS information via a crafted application, due to improper data protection. Recommendations For versions prior to 2.5.2, update to...

PT-2012-1950

Name of the Vulnerable Software and Affected Versions 360 MobileSafe versions 2.0 through 2.2 Description The issue allows remote attackers to read or modify SMS messages and a contact list via a crafted application, due to improper data protection. Recommendations For versions 2.0 through 2.2,...

PT-2012-1947

Name of the Vulnerable Software and Affected Versions Limit My Call com.limited.call.view version 2.11 Description The issue allows remote attackers to read or modify call logs and a contact list via a crafted application, due to improper data protection. Recommendations For version 2.11, at the...

PT-2012-1943

Name of the Vulnerable Software and Affected Versions Ubermedia Twidroyd Legacy version 4.3.11 Description The issue allows remote attackers to read or modify Twitter information via a crafted application, due to improper data protection. Recommendations For Ubermedia Twidroyd Legacy version...

A Really Simple Chat Multiple SQL Injection Vulnerabilities

A Really Simple Chat is prone to multiple SQL injection vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-0484

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 "do not properly validate changes in certain kernel objects," which allows local users to execute arbitrary code via vectors related to...

vBulletin 1.02.x3.0 - index.php User Interface Spoofing

vBulletin 1.02.x3.0 - index.php User Interface Spoofing source: https://www.securityfocus.com/bid/10362/info A weakness has been reported to exist in the VBulletin software that may allow an attacker to spoof parts of the VBulletin interface. The issue exists due to improper validation of...

vBulletin 1.0/2.x/3.0 - 'index.php' User Interface Spoofing

source: https://www.securityfocus.com/bid/10362/info A weakness has been reported to exist in the VBulletin software that may allow an attacker to spoof parts of the VBulletin interface. The issue exists due to improper validation of user-supplied data. Remote attackers may potentially exploit th...

ICQ 2003 - Webfront Guestbook Cross-Site Scripting

ICQ 2003 - Webfront Guestbook Cross-Site Scripting source: https://www.securityfocus.com/bid/8563/info It has been reported that ICQ Webfront is prone to a cross-site scripting vulnerability in the message field of the guestbook module. This issue is caused by improper sanitization of user-suppli...