CVEs published in August 2012
741 vulnerabilities, 105 critical, 3 exploited.
- linux kernelnet/ipv6/netfilter/nf_conntrack_reasm.c in the Linux kernel before 2.6.34, when the...7.8 High
- fenrir-inc sleipnir mobileCross-site scripting (XSS) vulnerability in the Sleipnir Mobile application 2.2.0 and earlier and...4.3 Medium
- fenrir-inc sleipnir mobileThe Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2...6.8 Medium
- redhat enterprise linux, todd miller sudo +1 moreA certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users...5.6 Medium
- rubyonrails rails, ruby on rails +1 moreactionpack Improper Authentication vulnerability5.0 Medium
- hp arcsight connector appliance, arcsight logger appliance, arcsight connector appliance firmware +1 more +3 moreCross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector...4.3 Medium
- ibm global security kit, rational directory server, tivoli directory server +2 moreIBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server,...7.5 High
- ibm global security kit, rational directory server, tivoli directory server +2 moreIBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server,...5.0 Medium
- novell suse audit log keeperThe SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world...2.1 Low
- opscode chefchef-server-api/app/controllers/clients.rb in Chef Server in Chef before 0.9.20, and 0.10.x...6.5 Medium
- opscode chefchef-server-api/app/controllers/cookbooks.rb in Chef Server in Chef before 0.9.18, and 0.10.x...5.5 Medium
- pidgincipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in...2.1 Low
- opscode chefChef Improper Access Control vulnerability6.5 Medium
- symantec web gatewaySQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0...7.5 High
- redhat libvirtThe virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain*...3.5 Low
- graphicsmagickThe Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper...4.3 Medium
- imagemagickThe Magick_png_malloc function in coders/png.c in ImageMagick 6.7.8 and earlier does not use the...4.3 Medium
- martin nagy bind-dyndb-ldapThe dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier...5.0 Medium
- redhat icedtea-webThe IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL...7.5 High
- redhat icedtea-webThe getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an...6.8 Medium
- gnu automakeThe "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world...4.4 Medium
- ubi uplay pcThe web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute...10.0 High
- extplorereXtplorer 2.1.0b6 uses world writable permissions for the /var/lib/extplorer/ftp_tmp directory,...3.6 Low
- debian logollogol 1.5.0 uses world writable permissions for the /var/lib/logol/results directory, which...3.6 Low
- gnome screensavergnome-screensaver 3.4.x before 3.4.4 and 3.5.x before 3.5.4, when multiple screens are used, only...3.3 Low
- openvswitchOpen vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca...3.6 Low
- kde pimThe HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6...4.3 Medium
- qemuThe bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function,...4.4 Medium
- naver nhn japan naver lineThe NHN Japan NAVER LINE application before 2.5.5 for Android does not properly handle implicit...5.0 Medium
- goodiware goodreaderCross-site scripting (XSS) vulnerability in the GoodReader app 3.16 and earlier for iOS on the...4.3 Medium
- canonical php5, debian linux, canonical ubuntu linux +1 more +3 moreThe Debian php_crypt_revamped.patch patch for PHP 5.3.x, as used in the php5 package before 5.3.3...4.3 Medium
- hp network node manager iMultiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x...4.3 Medium
- ganglia ganglia-webUnspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute...7.5 High
- cisco iosCisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified...4.3 Medium
- cisco nexus 5000, nx-os +1 moreThe igmp_snoop_orib_fill_source_update function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco...5.0 Medium
- cisco ios, aironet 1040, aironet 1140 +16 more +18 moreCisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of...7.8 High
- cisco wide area application servicesCisco Wide Area Application Services (WAAS) appliances with software 4.4, 5.0, and 5.1 include a...5.0 Medium
- cisco emergency responderCisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU...5.0 Medium
- cisco iosCisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated...3.5 Low
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name...4.0 Medium
- cisco anyconnect secure mobility clientThe IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not...5.8 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication...4.0 Medium
- cisco ip communicatorCisco IP Communicator 8.6 allows man-in-the-middle attackers to modify the Certificate Trust List...5.0 Medium
- cisco 5500 series adaptive security appliance, adaptive security appliance software +1 moreMemory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2...4.0 Medium
- cisco 5500 series adaptive security appliance, adaptive security appliance software +1 moreCisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP...7.8 High
- cisco nexus 7000, nx-os, nexus 7000 10-slot +2 more +4 moreCisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability (HA)...7.8 High
- cisco carrier routing systemCisco Carrier Routing System (CRS) 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL...5.8 Medium
- cisco mds 9000 nx-osThe Fibre Channel over IP (FCIP) implementation in Cisco MDS NX-OS 4.2 and 5.2 on MDS 9000 series...5.0 Medium
- cisco unified computing system infrastructure and unified computing system softwareThe Fabric Interconnect component in Cisco Unified Computing System (UCS) 2.0 allows remote...5.0 Medium
- cisco catalyst 3560, ios, catalyst 3560-e +6 more +8 moreCisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated...6.3 Medium
- Show moreLoading…