|
258441
|
- |
|
rssowl
|
rssowl
|
Cross-site scripting (XSS) vulnerability in RSSOwl before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a feed, a different vulnerability than CVE-2006-4760.
|
CWE-79
Cross-site Scripting
|
CVE-2012-1252
|
2012-06-5 13:00 |
2012-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258442
|
- |
|
cogentdatahub
|
cogent_datahub
|
Multiple stack-based buffer overflows in the DH_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrar…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2011-3493
|
2012-06-4 13:00 |
2011-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258443
|
- |
|
typo3
|
typo3
|
The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values dur…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-3714
|
2012-06-1 12:33 |
2010-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258444
|
- |
|
php-collab
|
phpcollab
|
phpCollab 2.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by topics/noti_newt…
|
CWE-200
Information Exposure
|
CVE-2011-3772
|
2012-05-31 13:00 |
2011-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258445
|
- |
|
idevspot
|
phphostbot
|
PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/create_ac…
|
CWE-200
Information Exposure
|
CVE-2011-3779
|
2012-05-31 13:00 |
2011-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258446
|
- |
|
roundup-tracker
|
roundup
|
Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the template argument to the /issue program.
|
CWE-79
Cross-site Scripting
|
CVE-2010-2491
|
2012-05-31 13:00 |
2010-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258447
|
- |
|
cisco
|
ios
unified_communications_manager
|
Memory leak in Cisco IOS 12.4 and 15.0 through 15.2, and Cisco Unified Communications Manager (CUCM) 7.x, allows remote attackers to cause a denial of service (memory consumption) via a crafted respo…
|
CWE-399
Resource Management Errors
|
CVE-2011-4019
|
2012-05-30 13:00 |
2012-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258448
|
- |
|
apple
|
mac_os_x
mac_os_x_server
|
Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspeci…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-0657
|
2012-05-30 12:42 |
2012-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258449
|
- |
|
apple
|
mac_os_x
mac_os_x_server
|
Buffer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted audio sample tables in a mo…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-0658
|
2012-05-30 12:42 |
2012-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258450
|
- |
|
apple
|
mac_os_x
mac_os_x_server
|
Integer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG file.
|
CWE-189
Numeric Errors
|
CVE-2012-0659
|
2012-05-30 12:42 |
2012-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
