259851
|
- |
|
drupal
|
drupal
|
The forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished forum posts, which allows remote authenticated users to obtain sensitive information such as the post…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-1590
|
2013-12-13 13:58 |
2012-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259852
|
- |
|
drupal
|
drupal
|
The image module in Drupal 7.x before 7.14 does not properly check permissions when caching derivative image styles of private images, which allows remote attackers to read private image styles.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-1591
|
2013-12-13 13:58 |
2012-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259853
|
- |
|
powerdns
|
powerdns_recursor
|
The resolver in PowerDNS Recursor (aka pdns_recursor) 3.3 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote att…
|
NVD-CWE-Other
|
CVE-2012-1193
|
2013-12-13 13:57 |
2012-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259854
|
- |
|
duckcorp
|
bip
|
Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via vectors involving a series of TCP connections that triggers use of many open file descrip…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-0806
|
2013-12-13 13:56 |
2012-01-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259855
|
- |
|
dokuwiki
|
dokuwiki
|
DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/tpl/i…
|
CWE-200
Information Exposure
|
CVE-2011-3727
|
2013-12-13 13:52 |
2011-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259856
|
- |
|
iain
|
gypsy
|
gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwise restricted files via unspecified vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-0523
|
2013-12-13 13:46 |
2012-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259857
|
- |
|
iain
|
gypsy
|
Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecified vectors related to the sprintf function.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2011-0524
|
2013-12-13 13:46 |
2012-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259858
|
- |
|
adobe
|
shockwave_player
|
Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-5334
|
2013-12-13 03:44 |
2013-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259859
|
- |
|
adobe
|
shockwave_player
|
Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-5333
|
2013-12-13 03:43 |
2013-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259860
|
- |
|
siemens
|
comos
|
Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database privileges via unspecified vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-6840
|
2013-12-13 02:11 |
2013-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|