|
263101
|
- |
|
apple
|
mac_os_x
mac_os_x_server
|
Buffer underflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-0660
|
2012-05-30 12:42 |
2012-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263102
|
- |
|
apple
|
mac_os_x
mac_os_x_server
|
Integer overflow in the Security Framework in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via…
|
CWE-189
Numeric Errors
|
CVE-2012-0662
|
2012-05-30 12:42 |
2012-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263103
|
- |
|
apple
|
mac_os_x
mac_os_x_server
|
Time Machine in Apple Mac OS X before 10.7.4 does not require continued use of SRP-based authentication after this authentication method is first used, which allows remote attackers to read Time Caps…
|
CWE-287
Improper Authentication
|
CVE-2012-0675
|
2012-05-30 12:42 |
2012-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263104
|
- |
|
cisco
|
unified_meetingplace
|
The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate direc…
|
CWE-200
Information Exposure
|
CVE-2011-4232
|
2012-05-30 12:40 |
2012-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263105
|
- |
|
pligg
|
pligg_cms
|
Directory traversal vulnerability in the captcha module in Pligg CMS before 1.2.2 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the captcha para…
|
CWE-22
Path Traversal
|
CVE-2012-2435
|
2012-05-29 13:00 |
2012-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263106
|
- |
|
zen-cart
|
zen_cart
|
Cross-site scripting (XSS) vulnerability in zc_install/includes/modules/pages/database_setup/header_php.php in Zen Cart 1.5.0 and earlier, when the software is being installed, allows remote attacker…
|
CWE-79
Cross-site Scripting
|
CVE-2012-1413
|
2012-05-28 13:00 |
2012-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263107
|
- |
|
oscommerce
|
online_merchant
|
Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Setup/Application/Install/RPC/DBCheck.php in OSCommerce Online Merchant 3.0.2, when the software is being installed, allows remote …
|
CWE-79
Cross-site Scripting
|
CVE-2012-1792
|
2012-05-28 13:00 |
2012-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263108
|
- |
|
measuresoft
|
scadapro_client
scadapro_server
|
Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain privileges via a Trojan horse DLL in the current working di…
|
NVD-CWE-Other
|
CVE-2012-1824
|
2012-05-28 13:00 |
2012-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263109
|
- |
|
sitracker
|
support_incident_tracker
|
Cross-site scripting (XSS) vulnerability in Support Incident Tracker (SiT!) 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is…
|
CWE-79
Cross-site Scripting
|
CVE-2012-2235
|
2012-05-28 13:00 |
2012-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263110
|
- |
|
xarrow
|
xarrow
|
The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors.
|
CWE-399
Resource Management Errors
|
CVE-2012-2426
|
2012-05-28 13:00 |
2012-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
