CVEs published in November 2012
447 vulnerabilities, 76 critical, 1 exploited.
- libssh Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows... 7.5 High
- python keyring Python Keyring does not securely initialize encryption cipher 2.1 Low
- libssh Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of... 7.5 High
- libssh The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign,... 5.0 Medium
- libssh Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of... 7.5 High
- libssh Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2)... 6.8 Medium
- ps project management team libunity-webapps Use-after-free vulnerability in libunity-webapps before 2.4.1 allows remote attackers to cause a... 7.5 High
- david alkire drag \& drop gallery SQL injection vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote... 7.5 High
- david alkire drag \& drop gallery Cross-site request forgery (CSRF) vulnerability in the Drag & Drop Gallery module 6.x for Drupal... 6.8 Medium
- david alkire drag \& drop gallery Unspecified vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote... 5.0 Medium
- david alkire drag \& drop gallery Cross-site scripting (XSS) vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows... 4.3 Medium
- security questions project questions The Security Questions module for Drupal 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.1 does... 5.0 Medium
- colorbox node dennis blake Multiple cross-site scripting (XSS) vulnerabilities in the Colorbox Node module 7.x-2.x before 7... 4.3 Medium
- christian johansson restrict node page view The Restrict node page view module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated... 3.5 Low
- david alkire drag \& drop gallery Unrestricted file upload vulnerability in upload.php in the Drag & Drop Gallery module 6.x-1.5... 5.1 Medium
- dominique clause search autocomplete The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict... 5.0 Medium
- philip ludlam listhandler The Listhandler module 6.x-1.x before 6.x-1.1 for Drupal does not properly check permissions when... 7.5 High
- simon rycroft hashcash Cross-site scripting (XSS) vulnerability in the Hashcash module 6.x-2.x before 6.x-2.6 and 7.x-2... 2.6 Low
- privatemsg project privatemsg Cross-site scripting (XSS) vulnerability in the Privatemsg module 7.x-1.x before 7.x-1.3 for... 4.3 Medium
- apache tomcat, opensuse +1 more Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage)... 5.0 Medium
- ibm websphere portal Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere... 5.0 Medium
- kyocera ah-k3001v, ah-k3002v, xw300k +3 more +5 more The KYOCERA AH-K3001V, AH-K3002V, WX300K, WX310K, WX320K, and WX320KR devices allow remote... 7.8 High
- google android drivers/gpu/msm/kgsl.c in the Qualcomm Innovation Center (QuIC) Graphics KGSL kernel-mode driver... 4.3 Medium
- google android Integer overflow in diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka... 6.8 Medium
- google android diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode... 6.8 Medium
- apache http server The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node... 5.0 Medium
- sgi performance co-pilot The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow... 2.1 Low
- ibm tivoli endpoint manager Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1... 5.0 Medium
- hp integrated lights-out 3 firmware, integrated lights-out 4 firmware +1 more Unspecified vulnerability on the HP Integrated Lights-Out 3 (aka iLO3) with firmware before 1.50... 9.3 High
- google cityhash Google CityHash computes hash values without properly restricting the ability to trigger hash... 5.0 Medium
- oracle jdk, openjdk, jre +2 more Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly... 5.0 Medium
- rubinius Rubinius computes hash values without properly restricting the ability to trigger hash collisions... 5.0 Medium
- ruby-lang ruby Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without... 5.0 Medium
- jruby JRuby denial of service via Hash Collision 5.0 Medium
- oracle jdk, openjdk, jre +2 more Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39,... 5.0 Medium
- google chrome, opensuse +1 more Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable... 6.8 Medium
- google chrome, opensuse +1 more Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to... 7.5 High
- google chrome, xmlsoft libxml2, apple iphone os +2 more Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0... 6.8 Medium
- google chrome, opensuse +1 more Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to... 7.5 High
- google chrome, opensuse +1 more Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service ... 5.0 Medium
- google chrome Google Chrome before 23.0.1271.91 on Mac OS X does not properly mitigate improper rendering... 7.5 High
- google chrome, opensuse +1 more Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of... 5.0 Medium
- samsung printer firmware The Samsung printer firmware before 20121031 has a hardcoded read-write SNMP community, which... 7.5 High
- pizzashack rssh Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled,... 4.4 Medium
- pizzashack rssh rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows... 4.4 Medium
- emc it operations intelligence EMC Smarts Network Configuration Manager (NCM) before 9.1 uses a hardcoded encryption key for the... 2.1 Low
- emc it operations intelligence The default configuration of EMC Smarts Network Configuration Manager (NCM) before 9.1 does not... 9.3 High
- emc rsa adaptive authentication on-premise Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Adaptive Authentication On-Premise... 4.3 Medium
- mikrotik routeros The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a... 6.4 Medium
- opensolution quick.cart Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via (1) a... 5.0 Medium
- Show olderLoading…