CVEs published August 26, 2012
65 CVEs were published on August 26, 2012: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 65
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 65
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- elefant/cms
- 1
- elixir
- 1
- pyfribidi
- 1
Medium, low and unrated 65
- CVE-2012-2103The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with…
- CVE-2012-2104cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow…
- CVE-2012-2146Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for…elixir
- CVE-2012-2147munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests…
- CVE-2012-2297Multiple cross-site scripting (XSS) vulnerabilities in the Creative Commons module 6.x-1.x before 6.x-1.1 for Drupal allow remote…
- CVE-2012-4678munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of service (disk…
- CVE-2012-1175Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of…
- CVE-2012-1176Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service…pyfribidi
- CVE-2012-1177libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and…
- CVE-2012-1296Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x…elefant/cms
- CVE-2012-1921Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attackers to hijack the…
- CVE-2009-5128The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consumption and process crash) via…
- CVE-2009-5129The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent LDAP authentication outage)…
- CVE-2009-5130The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (service crash) via an…
- CVE-2009-5131The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which allows remote…
- CVE-2009-5132The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 106 and 7.x before 7.1 allow remote attackers to cause a…
- CVE-2010-5189Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote…
- CVE-2010-5190The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS…
- CVE-2010-5191Multiple cross-site request forgery (CSRF) vulnerabilities on the Blue Coat ProxyAV appliance before 3.2.6.1 allow remote attackers to…
- CVE-2010-5192Cross-site scripting (XSS) vulnerability in the Java Management Console in Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1…
- CVE-2011-5124Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows…
- CVE-2011-5125Cross-site scripting (XSS) vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to inject arbitrary web script or…
- CVE-2011-5126Blue Coat ProxySG 6.1 before SGOS 6.1.5.1 and 6.2 before SGOS 6.2.2.1 writes the secure heap to core images, which allows…
- CVE-2011-5127Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows…
- CVE-2012-3483Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by replacing a script…
Show all 65 entriesShow fewer entries
- CVE-2012-3484Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a program can be safely…
- CVE-2012-3485Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable…
- CVE-2012-3486Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a…
- CVE-2012-3487Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to…
- CVE-2012-4676The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing…
- CVE-2012-4677Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure…
- CVE-2010-5080The Security/changepassword URL action in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 passes a token as a GET parameter while…
- CVE-2010-5087SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the cross-site request forgery (CSRF) protection…
- CVE-2010-5088Multiple cross-site request forgery (CSRF) vulnerabilities in SilverStripe 2.3.x before 2.3.9 and 2.4.x before 2.4.3 allow remote…
- CVE-2010-5089SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive…
- CVE-2010-5090SilverStripe before 2.4.2 allows remote authenticated users to change administrator passwords via vectors related to admin/security.
- CVE-2010-5091The setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1 allows remote authenticated users…
- CVE-2010-5092The Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in plaintext, which allows local users to…
- CVE-2010-5093Member_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user accounts by saving…
- CVE-2010-5094The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADMIN permissions…
- CVE-2010-5095Cross-site scripting (XSS) vulnerability in SilverStripe 2.3.x before 2.3.6 allows remote attackers to inject arbitrary web script or HTML…
- CVE-2010-5187SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1, when running on servers with certain configurations, allows remote attackers to…
- CVE-2010-5188SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the (1) debug_memory parameter to…
- CVE-2012-2227Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and execute arbitrary…
- CVE-2012-4674PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID.
- CVE-2012-4675Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified…
- CVE-2009-5123The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (memory…
- CVE-2009-5124The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service…
- CVE-2009-5125Comodo Internet Security before 3.9.95478.509 allows remote attackers to bypass malware detection in an RAR archive via an unspecified…
- CVE-2009-5126The Antivirus component in Comodo Internet Security before 3.8.65951.477 allows remote attackers to cause a denial of service (application…
- CVE-2009-5127The Antivirus component in Comodo Internet Security before 3.8.64739.471 allows remote attackers to cause a denial of service (application…
- CVE-2010-5185The Antivirus component in Comodo Internet Security before 5.3.174622.1216 does not check whether X.509 certificates in signed executable…
- CVE-2010-5186The Antivirus component in Comodo Internet Security before 4.1.150349.920 allows remote attackers to cause a denial of service…
- CVE-2011-5118Multiple race conditions in Comodo Internet Security before 5.8.213334.2131 allow local users to bypass the Defense+ feature via…
- CVE-2011-5119Multiple race conditions in Comodo Internet Security before 5.8.211697.2124 allow local users to bypass the Defense+ feature via…
- CVE-2011-5120The Antivirus component in Comodo Internet Security before 5.4.189822.1355 allows remote attackers to cause a denial of service…
- CVE-2011-5121The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not properly check whether unspecified X.509 certificates…
- CVE-2011-5122The Antivirus component in Comodo Internet Security before 5.3.175888.1227 allows remote attackers to cause a denial of service…
- CVE-2011-5123The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not check whether X.509 certificates in signed executable…
- CVE-2012-2289EMC ApplicationXtender Desktop before 6.5 SP2 and ApplicationXtender Web Access .NET before 6.5 SP2 allow remote attackers to upload files…
- CVE-2012-3477SQL injection vulnerability in signup_check.php in NeoInvoice allows remote attackers to execute arbitrary SQL commands via the value…
- CVE-2012-3517Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (daemon crash) via…
- CVE-2012-3518The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name…
- CVE-2012-3519routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which…
- CVE-2012-4673SQL injection vulnerability in application/controllers/invoice.php in NeoInvoice might allow remote attackers to execute arbitrary SQL…