cve.nowby Sazabi

CVEs published October 10, 2012

40 CVEs were published on October 10, 2012: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 40
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 40
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 40

CVE-2012-2286Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 before SP3 P3 allows remote attackers to obtain…UnratedOct 10, 2012
CVE-2012-4467The (1) do_siocgstamp and (2) do_siocgstampns functions in net/socket.c in the Linux kernel before 3.5.4 use an incorrect argument order…UnratedOct 10, 2012
CVE-2012-5166ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote…UnratedOct 10, 2012
CVE-2009-5067Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a ..UnratedOct 10, 2012
CVE-2012-3040Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to…UnratedOct 10, 2012
CVE-2012-3504The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on…UnratedOct 10, 2012
CVE-2012-4430The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote…UnratedOct 10, 2012
CVE-2012-4445Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in…UnratedOct 10, 2012
CVE-2012-4454openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a…UnratedOct 10, 2012
CVE-2012-4455openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1)…UnratedOct 10, 2012
CVE-2012-4463Midnight Commander (mc) 4.8.5 does not properly handle the (1) MC_EXT_SELECTED or (2) MC_EXT_ONLYTAGGED environment variables when…UnratedOct 10, 2012
CVE-2012-4465Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a…UnratedOct 10, 2012
CVE-2012-4899WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to discover…UnratedOct 10, 2012
CVE-2012-5355welcome.py in xdiagnose before 2.5.2ubuntu0.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file…UnratedOct 10, 2012
CVE-2012-5356The apt-add-repository tool in Ubuntu Software Properties 0.75.x before 0.75.10.3, 0.80.x before 0.80.9.2, 0.81.x before 0.81.13.5, 0.82.x…UnratedOct 10, 2012
CVE-2012-3982Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird…UnratedOct 10, 2012
CVE-2012-3983Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before…UnratedOct 10, 2012
CVE-2012-3984Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page…UnratedOct 10, 2012
CVE-2012-3985Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy…UnratedOct 10, 2012
CVE-2012-3986Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey…UnratedOct 10, 2012
CVE-2012-3987Mozilla Firefox before 16.0 on Android assigns chrome privileges to Reader Mode pages, which allows user-assisted remote attackers to…UnratedOct 10, 2012
CVE-2012-3988Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x…UnratedOct 10, 2012
CVE-2012-3989Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable…UnratedOct 10, 2012
CVE-2012-3990Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8…UnratedOct 10, 2012
CVE-2012-3991Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey…UnratedOct 10, 2012

Show all 40 entriesShow fewer entries