CVEs published in December 2012
251 vulnerabilities, 43 critical, 2 exploited.
- epiqo emailThe Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module...2.6 Low
- epiqo emailCross-site scripting (XSS) vulnerability in the Email Field module 6.x-1.x before 6.x-1.3 for...4.3 Medium
- marc ingram servicesThe Services module 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3 for Drupal allows remote...2.1 Low
- mixpanel project mixpanelCross-site scripting (XSS) vulnerability in the Mixpanel module 6.x-1.x before 6.x-1.1 in Drupal...2.1 Low
- m2osw tableofcontentsThe Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node...4.3 Medium
- naver loctouchThe Loctouch application 3.4.6 and earlier for Android allows attackers to obtain sensitive...2.6 Low
- naver loctouchThe Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents,...4.3 Medium
- opera mini, mobile +1 moreThe Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not...4.3 Medium
- boatmob boat browser, boat browser mini +1 moreThe Boat Browser application before 4.2 and Boat Browser Mini application before 3.9 for Android...2.1 Low
- microfocus edirectoryStack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8...10.0 High
- microfocus edirectoryUnspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2...6.4 Medium
- microfocus edirectorydhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows...4.0 Medium
- microfocus edirectoryCross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x...4.3 Medium
- microfocus privileged user managerEval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ...10.0 High
- microfocus privileged user managerDirectory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in...5.5 Medium
- microfocus privileged user managerThe pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x...6.4 Medium
- dlink dcs-932l, dcs-932l firmware +1 moreThe D-Link DCS-932L camera with firmware 1.02 allows remote attackers to discover the password...3.3 Low
- novell iprintUnspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute...10.0 High
- carlo gavazzi automation eos-box, carlosgavazzi eos-box photovoltaic monitoring system, eos-box photovoltaic monitoring system firmware +2 moreCarlo Gavazzi EOS Box Hard-Coded Credentials10.0
- carlo gavazzi automation eos-box, carlosgavazzi eos-box photovoltaic monitoring system, eos-box photovoltaic monitoring system firmware +2 moreCarlo Gavazzi EOS Box SQL Injection7.8
- siemens ros, rox i os, rox ii os +1 more +3 moreSiemens RuggedCom Rugged Operating System (ROS) before 3.12, ROX I OS through 1.14.5, ROX II OS...4.3 Medium
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents,...4.0 Medium
- vmware vcenter server applianceDirectory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2...4.0 Medium
- concrete5Concrete5 Vulnerable to Cross-Site Scripting (XSS)4.3 Medium
- ibm tivoli storage manager for space managementUnspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before...6.4 Medium
- ibm tivoli storage manager for space managementUnspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before...7.2 High
- foscam h.264 hi3510\/11\/12 ip cameraThe web interface on (1) Foscam and (2) Wansview IP cameras allows remote attackers to bypass...10.0 High
- fetchmailFetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM...5.8 Medium
- oracle essbase server, hyperion interactive reporting, integration services server +1 more +3 moreBuffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting...6.8 Medium
- oracle hyperion financial managementUnspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11...10.0 High
- oracle glassfish web space server10.0Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space...10.0 High
- x x.org x11, xfree86 +1 moreThe ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through...3.6 Low
- mysqlBuffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x...7.5 High
- perlThe bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent...4.3 Medium
- gnome display managervicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug...1.9 Low
- linux kernelRace condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to...1.9 Low
- adobe shockwave playerAdobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of...9.3 High
- adobe shockwave playerAdobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a...9.3 High
- ibm http server, websphere application server +1 moreUnspecified vulnerability in the IBM HTTP Server component 5.3 in IBM WebSphere Application...10.0 High
- ibm rational clearquestThe Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before...5.0 Medium
- squid-cache squidMultiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3...5.0 Medium
- ovirt sanlockThe setup_logging function in log.h in SANLock uses world-writable permissions for /var/log...3.6 Low
- phpmyadminThe Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass...7.5 High
- ibm power 5, power 5 system firmware +1 moreThe Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not...7.9 High
- ibm rational clearquestThe OSLC interface in the Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2...4.3 Medium
- jboss ironjacamarUser confusion in IronJacamar4.3 Medium
- cisco 2000 wireless lan controller, 2100 wireless lan controller, 2500 wireless lan controller +6 more +8 moreCross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless...4.3 Medium
- cisco 2000 wireless lan controller, 2100 wireless lan controller, 2500 wireless lan controller +6 more +8 moreMultiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC)...6.8 Medium
- cisco 2000 wireless lan controller, 2100 wireless lan controller, 2500 wireless lan controller +6 more +8 morescreens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7...6.3 Medium
- vmware viewMultiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View...5.0 Medium
- Show moreLoading…