| adobe -- coldfusion |
Unspecified vulnerability in Adobe ColdFusion 10 before Update 5, when
Internet Information Services (IIS) is used, allows attackers to cause a
denial of service via unknown vectors. |
2012-11-20 |
7.1 |
CVE-2012-5674 |
| agilefleet -- fleetcommander |
Multiple SQL injection vulnerabilities in Agile FleetCommander and
FleetCommander Kiosk before 4.08 allow remote attackers to execute
arbitrary SQL commands via unspecified vectors. |
2012-11-18 |
7.5 |
CVE-2012-4941 |
| agilefleet -- fleetcommander |
Multiple cross-site request forgery (CSRF) vulnerabilities in Agile
FleetCommander and FleetCommander Kiosk before 4.08 allow remote
attackers to hijack the authentication of arbitrary users for requests
that modify (1) passwords, (2) accounts, or (3) permissions. |
2012-11-18 |
7.5 |
CVE-2012-4943 |
| agilefleet -- fleetcommander |
Multiple unrestricted file upload vulnerabilities in Agile
FleetCommander and FleetCommander Kiosk before 4.08 allow remote
attackers to execute arbitrary code by uploading a file via an
unspecified page. |
2012-11-18 |
7.5 |
CVE-2012-4944 |
| agilefleet -- fleetcommander |
Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote
attackers to execute arbitrary commands via unspecified vectors, related
to a "command injection" issue. |
2012-11-18 |
7.5 |
CVE-2012-4945 |
| apple -- cups |
CUPS 1.4.4, when running in certain Linux distributions such as Debian
GNU/Linux, stores the web interface administrator key in
/var/run/cups/certs/0 using certain permissions, which allows local
users in the lpadmin group to read or write arbitrary files as root by
leveraging the web interface. |
2012-11-19 |
7.2 |
CVE-2012-5519 |
| flashtux -- weechat |
Heap-based buffer overflow in WeeChat 0.3.6 through 0.3.9 allows remote
attackers to cause a denial of service (crash or hang) and possibly
execute arbitrary code via crafted IRC colors that are not properly
decoded. |
2012-11-19 |
7.5 |
CVE-2012-5854 |
| gegl -- gegl |
Multiple integer overflows in operations/external/ppm-load.c in GEGL
(Generic Graphics Library) 0.2.0 allow remote attackers to cause a
denial of service (application crash) or possibly execute arbitrary code
via a large (1) width or (2) height value in a Portable Pixel Map (ppm)
image, which triggers a heap-based buffer overflow. |
2012-11-18 |
7.5 |
CVE-2012-4433 |
| havalite -- cms |
SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and
earlier allows remote attackers to execute arbitrary SQL commands via
the postId parameter. |
2012-11-17 |
7.5 |
CVE-2012-5894 |
| ibm -- websphere_datapower_xc10_appliance |
The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and
2.1.0.0 through 2.1.0.2 does not require authentication for an
unspecified interface, which allows remote attackers to cause a denial
of service (process exit) via unknown vectors. |
2012-11-23 |
7.8 |
CVE-2012-5758 |
| ibm -- websphere_datapower_xc10_appliance |
The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and
2.1.0.0 through 2.1.0.2 allows remote authenticated users to bypass
intended administrative-role requirements and perform arbitrary JMX
operations via unspecified vectors. |
2012-11-23 |
9.0 |
CVE-2012-5759 |
| irods -- irods |
Multiple unspecified vulnerabilities in iRODS before 3.1 have unknown impact and attack vectors. |
2012-11-17 |
10.0 |
CVE-2012-5895 |
| mozilla -- firefox |
Heap-based buffer overflow in the image::RasterImage::DrawFrameTo
function in Mozilla Firefox before 17.0, Firefox ESR 10.x before
10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11,
and SeaMonkey before 2.14 allows remote attackers to execute arbitrary
code via a crafted GIF image. |
2012-11-21 |
9.3 |
CVE-2012-4202 |
| mozilla -- firefox |
The str_unescape function in the JavaScript engine in Mozilla Firefox
before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows
remote attackers to execute arbitrary code or cause a denial of service
(memory corruption and application crash) via unspecified vectors. |
2012-11-21 |
10.0 |
CVE-2012-4204 |
| mozilla -- firefox |
The Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10.x
before 10.0.11 does not properly restrict the context of HTML markup and
Cascading Style Sheets (CSS) token sequences, which allows
user-assisted remote attackers to execute arbitrary JavaScript code with
chrome privileges via a crafted stylesheet. |
2012-11-21 |
9.3 |
CVE-2012-4210 |
| mozilla -- firefox |
Use-after-free vulnerability in the XPCWrappedNative::Mark function in
Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey
before 2.14 allows remote attackers to execute arbitrary code or cause a
denial of service (heap memory corruption) via unspecified vectors. |
2012-11-21 |
10.0 |
CVE-2012-4212 |
| mozilla -- firefox |
Use-after-free vulnerability in the nsEditor::FindNextLeafNode function
in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey
before 2.14 allows remote attackers to execute arbitrary code or cause a
denial of service (heap memory corruption) via unspecified vectors. |
2012-11-21 |
10.0 |
CVE-2012-4213 |
| mozilla -- firefox |
Use-after-free vulnerability in the nsTextEditorState::PrepareEditor
function in Mozilla Firefox before 17.0, Firefox ESR 10.x before
10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11,
and SeaMonkey before 2.14 allows remote attackers to execute arbitrary
code or cause a denial of service (heap memory corruption) via
unspecified vectors, a different vulnerability than CVE-2012-5840. |
2012-11-21 |
10.0 |
CVE-2012-4214 |
| mozilla -- firefox |
Use-after-free vulnerability in the
nsPlaintextEditor::FireClipboardEvent function in Mozilla Firefox before
17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0,
Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows
remote attackers to execute arbitrary code or cause a denial of service
(heap memory corruption) via unspecified vectors. |
2012-11-21 |
10.0 |
CVE-2012-4215 |
| mozilla -- firefox |
Use-after-free vulnerability in the gfxFont::GetFontEntry function in
Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11,
Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and
SeaMonkey before 2.14 allows remote attackers to execute arbitrary code
or cause a denial of service (heap memory corruption) via unspecified
vectors. |
2012-11-21 |
10.0 |
CVE-2012-4216 |
| mozilla -- firefox |
Use-after-free vulnerability in the nsViewManager::ProcessPendingUpdates
function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and
SeaMonkey before 2.14 allows remote attackers to execute arbitrary code
or cause a denial of service (heap memory corruption) via unspecified
vectors. |
2012-11-21 |
10.0 |
CVE-2012-4217 |
| mozilla -- firefox |
Use-after-free vulnerability in the
BuildTextRunsScanner::BreakSink::SetBreaks function in Mozilla Firefox
before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows
remote attackers to execute arbitrary code or cause a denial of service
(heap memory corruption) via unspecified vectors. |
2012-11-21 |
10.0 |
CVE-2012-4218 |
| mozilla -- firefox |
The texImage2D implementation in the WebGL subsystem in Mozilla Firefox
before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0,
Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not
properly interact with Mesa drivers, which allows remote attackers to
execute arbitrary code or cause a denial of service (memory corruption
and application crash) via function calls involving certain values of
the level parameter. |
2012-11-21 |
10.0 |
CVE-2012-5833 |
| mozilla -- firefox |
Integer overflow in the WebGL subsystem in Mozilla Firefox before 17.0,
Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird
ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote
attackers to execute arbitrary code or cause a denial of service
(invalid write operation) via crafted data. |
2012-11-21 |
10.0 |
CVE-2012-5835 |
| mozilla -- firefox |
Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey
before 2.14 allow remote attackers to execute arbitrary code or cause a
denial of service (application crash) via vectors involving the setting
of Cascading Style Sheets (CSS) properties in conjunction with SVG text. |
2012-11-21 |
10.0 |
CVE-2012-5836 |
| mozilla -- firefox |
The copyTexImage2D implementation in the WebGL subsystem in Mozilla
Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14
allows remote attackers to execute arbitrary code or cause a denial of
service (memory corruption and application crash) via large image
dimensions. |
2012-11-21 |
10.0 |
CVE-2012-5838 |
| mozilla -- firefox |
Heap-based buffer overflow in the
gfxShapedWord::CompressedGlyph::IsClusterStart function in Mozilla
Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before
17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14
allows remote attackers to execute arbitrary code via unspecified
vectors. |
2012-11-21 |
10.0 |
CVE-2012-5839 |
| mozilla -- firefox |
Use-after-free vulnerability in the nsTextEditorState::PrepareEditor
function in Mozilla Firefox before 17.0, Firefox ESR 10.x before
10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11,
and SeaMonkey before 2.14 allows remote attackers to execute arbitrary
code or cause a denial of service (heap memory corruption) via
unspecified vectors, a different vulnerability than CVE-2012-4214. |
2012-11-21 |
10.0 |
CVE-2012-5840 |
| mozilla -- firefox |
Multiple unspecified vulnerabilities in the browser engine in Mozilla
Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before
17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14
allow remote attackers to cause a denial of service (memory corruption
and application crash) or possibly execute arbitrary code via unknown
vectors. |
2012-11-21 |
10.0 |
CVE-2012-5842 |
| mozilla -- firefox |
Multiple unspecified vulnerabilities in the browser engine in Mozilla
Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14
allow remote attackers to cause a denial of service (memory corruption
and application crash) or possibly execute arbitrary code via unknown
vectors. |
2012-11-21 |
10.0 |
CVE-2012-5843 |
| munin-monitoring -- munin |
Munin before 2.0.6 stores plugin state files that run as root in the
same group-writable directory as non-root plugins, which allows local
users to execute arbitrary code by replacing a state file, as
demonstrated using the smart_ plugin. |
2012-11-21 |
7.2 |
CVE-2012-3512 |
| munin-monitoring -- munin |
munin-cgi-graph in Munin before 2.0.6, when running as a CGI module
under Apache, allows remote attackers to load new configurations and
create files in arbitrary directories via the logdir command. |
2012-11-21 |
9.3 |
CVE-2012-3513 |
| mybb -- mybb |
SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka
MyBulletinBoard) 1.6.6 allows remote attackers to execute arbitrary SQL
commands via the conditions[usergroup][] parameter in a search action
to admin/index.php. |
2012-11-17 |
7.5 |
CVE-2012-5909 |
| novell -- file_reporter |
Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2
allows remote attackers to execute arbitrary code via a large number of
VOL elements in an SRS record. |
2012-11-18 |
10.0 |
CVE-2012-4956 |
| novell -- file_reporter |
Absolute path traversal vulnerability in NFRAgent.exe in Novell File
Reporter 1.0.2 allows remote attackers to read arbitrary files via a
/FSF/CMD request with a full pathname in a PATH element of an SRS
record. |
2012-11-18 |
7.8 |
CVE-2012-4957 |
| novell -- file_reporter |
Directory traversal vulnerability in NFRAgent.exe in Novell File
Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126
/FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI
record. |
2012-11-18 |
7.8 |
CVE-2012-4958 |
| novell -- file_reporter |
Directory traversal vulnerability in NFRAgent.exe in Novell File
Reporter 1.0.2 allows remote attackers to upload and execute files via a
130 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI
record. |
2012-11-18 |
10.0 |
CVE-2012-4959 |
| nvidia -- unix_graphic_driver |
NVIDIA UNIX graphics driver before 295.71 and before 304.32 allows local
users to write to arbitrary physical memory locations and gain
privileges by modifying the VGA window using /dev/nvidia0. |
2012-11-19 |
7.2 |
CVE-2012-4225 |
| pico -- picopublisher |
Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote
attackers to execute arbitrary SQL commands via the id parameter to (1)
page.php or (2) single.php. |
2012-11-17 |
7.5 |
CVE-2012-5912 |
| quest -- intrust |
The Annotation Objects Extension ActiveX control in AnnotateX.dll in
Quest InTrust 10.4.0.853 and earlier does not properly implement the Add
method, which allows remote attackers to execute arbitrary code via a
memory address in the first argument, related to an "uninitialized
pointer." |
2012-11-17 |
10.0 |
CVE-2012-5896 |
| samedia -- landshop |
Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow
remote attackers to execute arbitrary SQL commands via the (1) OB_ID
parameter in a single action to admin/action/objects.php, (2) AREA_ID
parameter in a single action to admin/action/areas.php, or (3) start
parameter in a show action to admin/action/pdf.php. |
2012-11-17 |
7.5 |
CVE-2012-5900 |
| sinapsitech -- esolar_duo_photovoltaic_system_monitor |
Multiple SQL injection vulnerabilities on the Sinapsi eSolar Light
Photovoltaic System Monitor (aka Schneider Electric Ezylog photovoltaic
SCADA management server), Sinapsi eSolar, and Sinapsi eSolar DUO with
firmware before 2.0.2870_2.2.12 allow remote attackers to execute
arbitrary SQL commands via (1) the inverterselect parameter in a primo
action to dettagliinverter.php or (2) the lingua parameter to
changelanguagesession.php. |
2012-11-23 |
7.5 |
CVE-2012-5861 |
| sinapsitech -- esolar_duo_photovoltaic_system_monitor |
login.php on the Sinapsi eSolar Light Photovoltaic System Monitor (aka
Schneider Electric Ezylog photovoltaic SCADA management server), Sinapsi
eSolar, and Sinapsi eSolar DUO with firmware before 2.0.2870_2.2.12
establishes multiple hardcoded accounts, which makes it easier for
remote attackers to obtain administrative access by leveraging a (1)
cleartext password or (2) password hash contained in this script, as
demonstrated by a password of astridservice or 36e44c9b64. |
2012-11-23 |
10.0 |
CVE-2012-5862 |
| sinapsitech -- esolar_duo_photovoltaic_system_monitor |
ping.php on the Sinapsi eSolar Light Photovoltaic System Monitor (aka
Schneider Electric Ezylog photovoltaic SCADA management server), Sinapsi
eSolar, and Sinapsi eSolar DUO with firmware before 2.0.2870_2.2.12
allows remote attackers to execute arbitrary commands via shell
metacharacters in the ip_dominio parameter. |
2012-11-23 |
10.0 |
CVE-2012-5863 |
| sinapsitech -- esolar_duo_photovoltaic_system_monitor |
The management web pages on the Sinapsi eSolar Light Photovoltaic System
Monitor (aka Schneider Electric Ezylog photovoltaic SCADA management
server), Sinapsi eSolar, and Sinapsi eSolar DUO with firmware before
2.0.2870_2.2.12 do not require authentication, which allows remote
attackers to obtain administrative access via a direct request, as
demonstrated by a request to ping.php. |
2012-11-23 |
10.0 |
CVE-2012-5864 |
