|
261161
|
- |
|
ps_project_management_team
|
unity-firefox-extension
|
content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtai…
|
NVD-CWE-Other
|
CVE-2012-0958
|
2013-01-11 14:00 |
2012-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261162
|
- |
|
jboss
|
ironjacamar
|
The IronJacamar container before 1.0.12.Final for JBoss Application Server, when allow-multiple-users is enabled in conjunction with a security domain, does not use the credentials supplied in a getC…
|
CWE-255
Credentials Management
|
CVE-2012-3428
|
2013-01-8 14:04 |
2012-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261163
|
- |
|
hp
|
color_laserjet_cm3530
color_laserjet_cm60xx
color_laserjet_cp3525
color_laserjet_cp4xxx
color_laserjet_cp6015
laserjet_p3015
laserjet_p4xxx
|
Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Color LaserJet CM60xx with firmware before 52.210.9, Color LaserJet CP3525 with firmware before…
|
CWE-79
Cross-site Scripting
|
CVE-2012-3272
|
2013-01-8 14:03 |
2012-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261164
|
- |
|
novell
|
iprint
|
Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version action.
|
NVD-CWE-noinfo
|
CVE-2012-0411
|
2013-01-8 14:00 |
2012-12-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261165
|
- |
|
oracle
|
hyperion_financial_management
|
Unspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11.1.1.4 and 11.1.2.1.104 allows remote attackers to execute arbitrary code via unknown vectors.
|
NVD-CWE-noinfo
|
CVE-2012-1714
|
2013-01-8 14:00 |
2012-12-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261166
|
- |
|
oracle
|
hyperion_interactive_reporting
essbase_server
hyperion_production_reporting_server
integration_services_server
|
Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, Essbase Server 11.1.2.1 and 11.1.2.2, Production Reporting Server 11.1.2.1 and 1…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-3133
|
2013-01-8 14:00 |
2012-12-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261167
|
- |
|
opera
|
opera_mini
opera_mobile
|
The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a cr…
|
CWE-200
Information Exposure
|
CVE-2012-5180
|
2013-01-8 14:00 |
2012-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261168
|
- |
|
naver
|
loctouch
|
The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents, which allows attackers to obtain sensitive information about logged locations via a crafted applicati…
|
CWE-200
Information Exposure
|
CVE-2012-5182
|
2013-01-8 14:00 |
2012-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261169
|
- |
|
naver
|
loctouch
|
The Loctouch application 3.4.6 and earlier for Android allows attackers to obtain sensitive information about logged locations via a crafted application that leverages read permission for system log …
|
CWE-200
Information Exposure
|
CVE-2012-5183
|
2013-01-8 14:00 |
2012-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261170
|
- |
|
m2osw
|
tableofcontents
|
The Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node permissions, which allows remote attackers to read a node's headers by accessing a table of contents block.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-5584
|
2013-01-8 14:00 |
2012-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
