CVEs published in December 2012
251 vulnerabilities, 43 critical, 2 exploited.
- wiresharkepan/dissectors/packet-usb.c in the USB dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x...5.0 Medium
- wiresharkWireshark 1.8.x before 1.8.4 allows remote attackers to obtain sensitive hostname information by...5.0 Medium
- forescout counteractThe Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized...4.3 Medium
- forescout counteractMultiple cross-site scripting (XSS) vulnerabilities on the Forescout CounterACT NAC device before...4.3 Medium
- forescout counteractOpen redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0...5.8 Medium
- ibm rational developer for system zThe Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not...2.1 Low
- emc rsa netwitness informerThe web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to...4.3 Medium
- emc rsa netwitness informerCross-site request forgery (CSRF) vulnerability in the web interface in EMC RSA NetWitness...6.8 Medium
- symantec messaging gatewayMultiple directory traversal vulnerabilities in the management console in Symantec Messaging...5.0 Medium
- ibm websphere message brokerIBM WebSphere Message Broker 6.1 before 6.1.0.11, 7.0 before 7.0.0.5, and 8.0 before 8.0.0.2 has...6.9 Medium
- freeftpdfreeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a...10.0 High
- freesshdfreeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a...9.3 High
- ssh tectia serverThe SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through...9.3 High
- google chrome, opensuse +1 moreGoogle Chrome before 23.0.1271.95 does not properly handle file paths, which has unspecified...10.0 High
- google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 23.0.1271.95 allows remote attackers to...10.0 High
- google chrome, chrome os +1 moreHeap-based buffer overflow in the WebGL subsystem in Google Chrome OS before 23.0.1271.94 allows...7.5 High
- daniel honrade om maximenuThe OM Maximenu module 6.x-1.43 and earlier for Drupal, when the "Title has PHP" option is...4.6 Medium
- cmsmadesimple cms made simpleDirectory traversal vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple ...3.5 Low
- samsung kies airSamsung Kies Air 2.1.207051 and 2.1.210161 allows remote attackers to cause a denial of service ...5.0 Medium
- samsung kies airSamsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which...4.3 Medium
- basic webmail project webmail, jason flatt basic webmail +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Basic webmail module 6.x-1.x before 6...4.3 Medium
- chaos tool suite project ctoolsCross-site scripting (XSS) vulnerability in the page manager node view task in the Chaos tool...2.6 Low
- user read-only project readonlyThe User Read-Only module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, does not...3.6 Low
- restful web services project web servicesMultiple cross-site request forgery (CSRF) vulnerabilities in the RESTful Web Services (RESTWS)...6.8 Medium
- coleman watts webform civicrmThe default configuration for the Webform CiviCRM Integration module 7.x-3.x before 7.x-3.2 has ...5.0 Medium
- daniel honrade om maximenuMultiple cross-site scripting (XSS) vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x...2.1 Low
- erikwebb password policyThe Password policy module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.3 for Drupal allows...5.0 Medium
- thinkshout mailchimpMultiple cross-site scripting (XSS) vulnerabilities in the MailChimp module 7.x-2.x before 7.x-2...4.3 Medium
- carlos carvalhar time spentSQL injection vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote...7.5 High
- carlos carvalhar time spentCross-site request forgery (CSRF) vulnerability in the Time Spent module 6.x and 7.x for Drupal...6.8 Medium
- carlos carvalhar time spentCross-site scripting (XSS) vulnerability in the Time Spent module 6.x and 7.x for Drupal allows...4.3 Medium
- thomas seidl search apiMultiple cross-site request forgery (CSRF) vulnerabilities in the Search API module 7.x-1.x...6.8 Medium
- rob loach sharethisMultiple cross-site scripting (XSS) vulnerabilities in the ShareThis module 7.x-2.x before 7.x-2...2.1 Low
- thinkshout mandrillThe Mandrill module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to obtain...4.0 Medium
- feeds project feedsThe Feeds module 7.x-2.x before 7.x-2.0-alpha6 for Drupal, when a field is mapped to the node's...4.3 Medium
- pedro cambra commerce extra panesCross-site request forgery (CSRF) vulnerability in the Commerce Extra Panes module 7.x-1.x before...6.8 Medium
- twitter pull project pullCross-site scripting (XSS) vulnerability in the Twitter Pull module 6.x-1.x before 6.x-1.3 and 7...4.3 Medium
- tekritisoftware hostipMultiple cross-site scripting (XSS) vulnerabilities in the Hostip module 6.x-2.x before 6.x-2.2...4.3 Medium
- organic groups project groupsThe Organic Groups (OG) module 7.x-1.x before 7.x-1.5 for Drupal does not properly maintain...3.5 Low
- nathan haug filefield sourcesCross-site scripting (XSS) vulnerability in the FileField Sources module 6.x-1.x before 6.x-1.6...2.1 Low
- simplenews scheduler project schedulerThe Simplenews Scheduler module 6.x-2.x before 6.x-2.4 for Drupal allows remote authenticated...6.0 Medium
- flashtux weechatThe hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote...7.5 High
- cmsmadesimple cms made simpleCross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS...6.8 Medium
- orangehrmMultiple SQL injection vulnerabilities in OrangeHRM 2.7.1 RC 1 allow remote authenticated...6.0 Medium
- joomla joomla\!Joomla! 1.5.x before 1.5.26 does not properly check permissions, which allows attackers to obtain...5.0 Medium
- joomla joomla\!Joomla! 1.5.x before 1.5.26 has unspecified impact and attack vectors related to "insufficient...7.5 High
- mariadb, oracle mysql, redhat enterprise linux desktop +4 more +6 moreOracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other...4.0 Medium
- mariadb, oracle mysql, canonical ubuntu linux +3 more +5 moreHeap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB...6.5 Medium
- mariadb, oracle mysql +1 moreStack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions...6.5 Medium
- mariadb, oracle mysql +1 moreOracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66,...5.0 Medium
- Show moreLoading…