SA-CONTRIB-2012-047 - Ubercart Views - Information disclosure

CVE: CVE-2012-2074 Ubercart Views provides Views integration for the Ubercart shopping cart module, and includes default views that contain a critical information disclosure bug. In some versions, these views are disabled by default, but still disclose information if you enable them. Versions...

CVE-2012-1572

OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space...

CVE-2012-1465

Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of service application crash via a long URL in an HTTP request. NOTE: some of these details are obtained from third party information...

Stack overflow

Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of service application crash via a long URL in an HTTP request. NOTE: some of these details are obtained from third party information...

CVE-2012-1783

Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service crash via a long string in a GET request without an HTTP version number...

CVE-2012-1389

Unspecified vulnerability in the Di Long Weibo com.icekirin.weibos application 1.9.9 for Android has unknown impact and attack vectors...

CVE-2012-1389

Unspecified vulnerability in the Di Long Weibo com.icekirin.weibos application 1.9.9 for Android has unknown impact and attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the Di Long Weibo com.icekirin.weibos application 1.9.9 for Android has unknown impact and attack vectors...

CVE-2012-1389

Unspecified vulnerability in the Di Long Weibo com.icekirin.weibos application 1.9.9 for Android has unknown impact and attack vectors...

CVE-2012-1389

Technical details about CVE-2012-1389 are not publicly available in the provided documents. Monitor for updates from official sources; no confirmed affected products, impact, vectors, or remediation are disclosed here.

kernel: xfs: potential buffer overflow in xfs_readlink()

Buffer overflow in the xfsreadlink function in fs/xfs/xfsvnodeops.c in XFS in the Linux kernel 2.6, when CONFIGXFSDEBUG is disabled, allows local users to cause a denial of service memory corruption and crash and possibly execute arbitrary code via an XFS image containing a symbolic link with a...

Netmechanica NetDecision HTTP Server Denial Of Service

Exploit for windows platform in category dos / poc Title : Netmechanica NetDecision HTTP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netmechanica.com Advisory : http://secpod.org/blog/?p=484...

NetDecision 4.5.1 HTTP Server Buffer Overflow

This module exploits a vulnerability found in NetDecision's HTTP service located in C:\Program Files\NetDecision\Bin\HttpSvr.exe. By supplying a long string of data to the URL, an overflow may occur if the data gets handled by HTTP Server's active window. In other words, in order to gain remote...

kernel: xfs: potential buffer overflow in xfs_readlink()

Buffer overflow in the xfsreadlink function in fs/xfs/xfsvnodeops.c in XFS in the Linux kernel 2.6, when CONFIGXFSDEBUG is disabled, allows local users to cause a denial of service memory corruption and crash and possibly execute arbitrary code via an XFS image containing a symbolic link with a...

CVE-2011-4526

Buffer overflow in an ActiveX control in Advantech/BroadWin WebAccess before 7.0 might allow remote attackers to execute arbitrary code via a long string value in unspecified parameters...

Buffer overflow

Buffer overflow in the GetDriverSettings function in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a long realm field, a different vulnerability than CVE-2011-3173...

CVE-2011-4524

Buffer overflow in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via a long string value in unspecified parameters...

CVE-2011-4187

Buffer overflow in the GetDriverSettings function in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a long realm field, a different vulnerability than CVE-2011-3173...

CVE-2011-3450

CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows remote attackers to execute arbitrary code or cause a denial of service memory consumption and application crash via a long URL...

Session fixation

CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows remote attackers to execute arbitrary code or cause a denial of service memory consumption and application crash via a long URL...