CVEs published in November 2012
447 vulnerabilities, 76 critical, 1 exploited.
- redhat resteasyExposure of Sensitive Information to an Unauthorized Actor in RESTEasy5.0 Medium
- redhat jboss enterprise application platform, jboss enterprise brms platform, jboss enterprise portal platform +2 more +4 moreThe (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss...7.5 High
- redhat jboss enterprise application platform, jboss enterprise brms platform, jboss enterprise portal platform +1 more +3 moreThe servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA...6.8 Medium
- redhat jboss enterprise portal platform, jboss enterprise brms platform, jboss enterprise soa platform +2 moreCross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss...6.0 Medium
- redhat jboss enterprise portal platformThe W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss...5.0 Medium
- jrubyCross-site Scripting in in JRuby4.3 Medium
- sinapsi esolar, esolar duo, esolar light +4 more +6 moreSinapsi eSolar Improper Authentication9.4
- sinapsi esolar, esolar duo, esolar light +4 more +6 moreSinapsi eSolar OS Command Injection10.0
- sinapsi esolar, esolar duo, esolar light +4 more +6 moreSinapsi eSolar Hard-Coded Password10.0
- sinapsi esolar, esolar duo, esolar light +4 more +6 moreSinapsi eSolar SQL Injection7.8
- ibm websphere datapower xc10 applianceThe IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2...9.0 High
- ibm websphere datapower xc10 applianceThe IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2...7.8 High
- ibm websphere datapower xc10 applianceThe IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2,...4.3 Medium
- bigaceSession fixation vulnerability in BIGACE before 2.7.8 allows remote attackers to hijack web...6.8 Medium
- trustedcomputinggroup trouserstcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash...5.0 Medium
- xen, debian linux, fedoraproject fedora +4 more +6 moreXen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service...2.9 Low
- xen, debian linux, opensuse +2 moreThe do_mmu_update function in arch/x86/mm.c in Xen 3.2.x through 4.4.x does not properly manage...7.1 High
- xen, debian linux, opensuse +2 more +4 moreThe acceleration support for the "REP MOVS" instruction in Xen 4.4.x, 3.2.x, and earlier lacks...4.9 Medium
- xen, debian linux, opensuse +2 moreThe compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x, when running on...4.7 Medium
- xen, debian linux, opensuse +2 morearch/x86/x86_emulate/x86_emulate.c in Xen 3.2.1 through 4.4.x does not properly check privileges,...1.9 Low
- xen, debian linux, opensuse +2 moreThe do_mmu_update function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict...5.4 Medium
- xenThe x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 3.3.x through 4.4.x does...3.3 Low
- xen, debian linux, fedoraproject fedora +1 more +3 moreThe x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not...5.8 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreRace condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of...6.1 Medium
- xenXen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows...2.7 Low
- xen, opensuse +1 moreThe Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause...4.7 Medium
- xenThe (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange...4.7 Medium
- xenThe guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly...4.7 Medium
- xenThe XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address,...6.9 Medium
- xenStack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1...4.7 Medium
- xenXen 4.x, when downgrading the grant table version, does not properly remove the status page from...4.7 Medium
- ntpMultiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to...7.5 High
- ntputil/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it...7.5 High
- ntpThe config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured,...7.5 High
- egroupwareCross-site scripting (XSS) vulnerability in phpgwapi/inc/common_functions_inc.php in eGroupware...4.3 Medium
- joao ventura printCross-site scripting (XSS) vulnerability in the Printer, email and PDF versions module 6.x-1.x...4.3 Medium
- xenXen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest...2.1 Low
- xenXen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p...2.1 Low
- xenThe (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest...2.1 Low
- xenXen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause...1.9 Low
- mcryptStack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to...6.8 Medium
- mcryptMultiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted...6.8 Medium
- mcryptStack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and...6.8 Medium
- munin-monitoring muninmunin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote...9.3 High
- munin-monitoring muninMunin before 2.0.6 stores plugin state files that run as root in the same group-writable...7.2 High
- mozilla firefox, seamonkey, thunderbird +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0,...9.3 High
- mozilla firefox, seamonkey, thunderbird +11 more +13 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0,...9.3 High
- mozilla firefox, seamonkey, thunderbird +10 more +12 moreMozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0,...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +10 more +12 moreUse-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox...9.3 High
- mozilla firefox, seamonkey, thunderbird +10 more +12 moreHeap-based buffer overflow in the gfxShapedWord::CompressedGlyph::IsClusterStart function in...9.3 High
- Show moreLoading…