CVEs published in December 2012
251 vulnerabilities, 43 critical, 2 exploited.
- belkin n900 wireless router The WPA2 implementation on the Belkin N900 F9K1104v1 router establishes a WPS PIN based on 6... 3.3 Low
- vbulletin Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote... 5.8 Medium
- cerberusftp ftp server Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in... 4.3 Medium
- samsung samsungdive The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices... 3.3 Low
- lookout The Missing Device feature in Lookout allows physically proximate attackers to provide arbitrary... 3.3 Low
- avg antivirus The Anti-theft service in AVG AntiVirus for Android allows physically proximate attackers to... 3.3 Low
- samsung samsungdive The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices... 2.9 Low
- fail2ban server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag... 7.5 High
- i-gen oplynx I-GEN opLYNX Central Authentication Bypass 7.5
- canonical ubuntu linux, debian linux, google android +1 more +3 more Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes... 5.9 Medium
- linux kernel The netlink_sendmsg function in net/netlink/af_netlink.c in the Linux kernel before 3.5.5 does... 7.8 High
- gnu glibc, canonical ubuntu linux, debian linux +2 more iconvdata/ibm930.c in GNU C Library (aka glibc) before 2.16 allows context-dependent attackers to... 5.0 Medium
- apache tomcat Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions 5.0 Medium
- microsoft internet explorer, ie +1 more Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers... 8.8 High
- mediawiki rssreader Cross-site scripting (XSS) vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki... 4.3 Medium
- moinmo moinmoin MoinMoin Multiple vulnerable to directory traversal 6.0 Medium
- moinmo moinmoin MoinMoin Cross-site scripting (XSS) vulnerability 4.3 Medium
- moinmo moinmoin MoinMoin Multiple unrestricted file upload vulnerabilities 6.0 Medium
- moinmo moinmoin MoinMoin Directory Traversal vulnerability 6.4 Medium
- 1password Cross-site scripting (XSS) vulnerability in the Troubleshooting Reporting System feature in... 4.3 Medium
- cisco unified ip phone, skinny client control protocol software, unified ip phone 7906g +2 more The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Phone 7900 series devices (aka TNP... 6.8 Medium
- simple invoices invoices Multiple cross-site scripting (XSS) vulnerabilities in SimpleInvoices before stable-2012-1... 4.3 Medium
- fedoraproject fedora, opensuse, trustwave modsecurity +2 more The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to... 5.0 Medium
- openconstructor project openconstructor Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated... 6.5 Medium
- openconstructor project openconstructor Multiple cross-site scripting (XSS) vulnerabilities in Open Constructor 3.12.0 allow remote... 4.3 Medium
- openconstructor project openconstructor Cross-site scripting (XSS) vulnerability in data/hybrid/i_hybrid.php in Open Constructor 3.12.0... 3.5 Low
- openconstructor project openconstructor Multiple cross-site scripting (XSS) vulnerabilities in objects/createobject.php in Open... 3.5 Low
- ibm rational policy tester, security appscan +1 more IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not... 5.8 Medium
- ibm rational policy tester, security appscan +1 more IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not... 5.8 Medium
- elinks The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12... 5.1 Medium
- sensiolabs symfony Symfony Access Control Vulnerability 6.8 Medium
- sensiolabs symfony Symfony Allows URI Restrictions Bypass Via Double-Encoded String 6.4 Medium
- wordpress WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout... 2.6 Low
- linux kernel The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel... 4.9 Medium
- linux kernel The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel... 2.1 Low
- citrix xendesktop Citrix XenDesktop Virtual Desktop Agent (VDA) 5.6.x before 5.6.200, when making changes to the... 5.0 Medium
- openstack folsom, grizzly, red hat openstack folsom for rhel 6 +3 more +5 more Openstack nova: information leak in libvirt lvm-backed instances 6.5 Medium
- openstack keystone tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud ... 2.1 Low
- citrix xenapp The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to... 9.3 High
- sebastian heinlein aptdaemon, canonical ubuntu linux +1 more Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a... 4.3 Medium
- debian apt, advanced package tool +1 more Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16... 2.1 Low
- ps project management team unity-firefox-extension content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the... 4.3 Medium
- ca identityminder Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6... 10.0 High
- ca identityminder Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6... 10.0 High
- emc data protection advisor Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor (DPA) 5.6 through... 5.0 Medium
- ibm tivoli netview Unspecified vulnerability in IBM Tivoli NetView 1.4, 5.1 through 5.4, and 6.1 on z/OS allows... 7.2 High
- ibm rational automation framework IBM Rational Automation Framework (RAF) 3.x through 3.0.0.5 allows remote attackers to bypass... 7.5 High
- catalin florian radut zeropoint Cross-site scripting (XSS) vulnerability in the Zero Point module 6.x-1.x before 6.x-1.18 and 7.x... 4.3 Medium
- scripthead webmail plus SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to... 7.5 High
- netgenius multilink The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not... 3.5 Low
- Show olderLoading…