5662 matches found
CVE-2012-1817
Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service daemon crash via an invalid field in a project file...
CVE-2012-1817
CVE-2012-1817 affects Emerson DeltaV/DeltaV Workstations (V9.3.1, V10.3.1, V11.3, V11.3.1) and DeltaV ProEssentials Scientific Graph 5.0.0.6. Root cause: buffer overflow from invalid fields in a project file, enabling user-assisted remote code execution or denial of service (daemon crash). Exploi...
CVE-2012-2436
Multiple cross-site scripting XSS vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via 1 an arbitrary parameter in a move or 2 minimize action to admin/adminindex.php; 3 the karmausername parameter to module.php in the karma module; 4 q1low, ...
CVE-2012-2426
The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via unspecified vectors...
CVE-2011-3114
Summary: CVE-2011-3114 is a Google Chrome vulnerability affecting the PDF functionality, where multiple buffer overflows in PDF handling can be triggered remotely. The baseline description identifies that these buffer overflows could cause a denial of service or potentially have other unspecified...
CVE-2012-2920
Cross-site scripting XSS vulnerability in the userphotooptionspage function in user-photo.php in the User Photo plugin before 0.9.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to wp-admin/options-general.php. NOTE: some of these details are...
CVE-2012-2907
Cross-site scripting XSS vulnerability in the aberdeenbreadcrumb function in template.php in the Aberdeen theme 6.x-1.x before 6.x-1.11 for Drupal, when set to append the content title to the breadcrumb, allows remote attackers to inject arbitrary web script or HTML via the content title in a...
MobileSpy Android|iPhone|W7P|sOS - Web Vulnerabilities
Exploit for hardware platform in category web applications Title: ====== MobileSpy Android|iPhone|W7P|sOS - Web Vulnerabilities Common Vulnerability Scoring System: ==================================== 7.3 Introduction: ============= Mobile Spy defines the latest in high-tech cell phone...
WordPress < 3.3.2 Multiple Vulnerabilities
According to its version number, the WordPress install hosted on the remote web server is affected by multiple vulnerabilities : - The application is affected by an unspecified vulnerability in wp-includes/js/swfupload/swfupload.swf. CVE-2012-2399 - The application is affected by an unspecified...
PHP < 5.3.13, 5.4.x < 5.4.3 Multiple Vulnerabilities - Active Check
PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.103482"...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity via unknown vectors related to Supplier Portal...
Genium CMS 2012|Q2 - Multiple Web Vulnerabilities
Document Title: =============== Genium CMS 2012|Q2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=517 Release Date: ============= 2012-05-01 Vulnerability Laboratory ID VL-ID: ==================================== 517 Commo...
FreeBSD Ports: wordpress
The remote host is missing an update to the system as announced in the referenced advisory. VID b384cc5b-8d56-11e1-8d7b-003067b2972c OpenVAS Vulnerability Test $ Description: Auto generated from VID b384cc5b-8d56-11e1-8d7b-003067b2972c Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Cross site scripting
Cross-site scripting XSS vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to inject arbitrary web script or HTML via a multibyte character set...
Integer overflow
Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service memory corruption or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an...
CVE-2012-2401
Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which the SWF content was loaded, which allows remote attackers to bypass the Same Origin Policy via crafted content...
CVE-2012-0253
Multiple cross-site scripting XSS vulnerabilities in Demand Media Pluck SiteLife before 5.0.13 allow remote attackers to inject arbitrary web script or HTML via 1 the jsonRequest parameter to Direct/Process, the 2 r or 3 cb parameter to Direct/jsonp.htm, or 4 the cb parameter to sys/jsonp.app/.ht...
phpMyAdmin Information Disclosure Vulnerability (PMASA-2012-2) - Active Check
phpMyAdmin is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft MSDN - Persistent Web Service Vulnerability
Document Title: =============== Microsoft MSDN - Persistent Web Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=450 MSRC ID1: 12152 MSRC ID2: 12228 Release Date: ============= 2012-04-07 Vulnerability Laboratory ID VL-ID:...