2012

Bugzilla 4.1.x and 4.2.x before 4.2.2 and 4.3.x before 4.3.2 uses bug-editor privileges instead of bugmail-recipient pri

query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a deni

Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2

The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism

AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmis

AirDroid 1.0.4 beta uses the MD5 algorithm for values in the checklogin key parameter and 7bb cookie, which makes it eas

The default configuration of AirDroid 1.0.4 beta uses a four-character alphanumeric password, which makes it easier for

AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it e

Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in Admi

The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1

Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in Laun

Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.

Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto Networks Global Protect Portal, Global

Apple Xcode before 4.4 does not properly compose a designated requirement (DR) during signing of programs that lack bund

nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions a

The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap befor

runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly valida

Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application S

Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands

Cross-site request forgery (CSRF) vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to

Cross-site scripting (XSS) vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script

Buffer overflow in the Player in Remote-Anything 5.60.15 allows remote attackers to execute arbitrary code via a crafted

SQL injection vulnerability in index2.php in Uiga Personal Portal allows remote attackers to execute arbitrary SQL comma

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via

Buffer overflow in the readfile function in CPE17 Autorun Killer 1.7.1 and earlier allows physically proximate attackers

Buffer overflow in the Video Manager in Nokia PC Suite 7.1.180.64 and earlier allows remote attackers to cause a denial

Cross-site scripting (XSS) vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-

Cross-site scripting (XSS) vulnerability in the Glossify Internal Links Auto SEO module for Drupal 6.x-2.5 and earlier a

Cross-site scripting (XSS) vulnerability in the Taxonomy Grid : Catalog module for Drupal 6.x-1.6 and earlier allows rem

Cross-site request forgery (CSRF) vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote a

SQL injection vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to execute

Cross-site request forgery (CSRF) vulnerability in the Node Gallery module for Drupal 6.x-3.1 and earlier allows remote

Site Documentation (Sitedoc) module for Drupal 6.x-1.x before 6.x-1.4 does not properly check the save location when arc

The Janrain Engage (formerly RPX) module for Drupal 6.x-1.x. 6.x-2.x before 6.x-2.2, and 7.x-2.x before 7.x-2.2 stores u

Stack-based buffer overflow in the get_packet method in socket.c in dhcpcd 3.2.3 allows remote attackers to cause a deni

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi