CVE-2012-1823

The PHP programming language interpreter (specifically the sapi/cgi/cgi_main.c component) is vulnerable to remote code execution when configured as a CGI script (php-cgi). The root cause is the improper parsing and filtering of query strings that lack an equals sign (=) character. This allows a r...

CVE-2011-3045

An integer signedness error exists in the png_inflate function within pngrutil.c of the libpng library (versions before 1.4.10beta01 ). This vulnerability affects products including Google Chrome (before 17.0.963.83 ) and syslinux (versions less than 6.04-11 ). Remote attackers can exploit this b...

CVE-2012-4406

OpenStack Swift prior to 1.7.0 is vulnerable: it uses the pickle loads function to serialize/deserialize metadata in memcached, enabling remote code execution via a crafted pickle object. Public advisories (RHSA-2012:1379) note that a fix exists but is not enabled by default; remediation involves...

CVE-2012-0037

The CVE-2012-0037 issue affects Redland Raptor (libraptor) and is triggered when parsing RDF/XML with an XXE declaration. The vulnerability allows user-assisted remote attackers to read arbitrary files via crafted RDF documents, as observed in libraptor versions used by OpenOffice/LibreOffice lin...