Security Vulnerabilities Published In December 2012

2012 : January February March April May June July August September October November December

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2009-2899	200		+Info	2012-12-05	2012-12-24	2.1	None	Local	Low	Not required	Partial	None	None
The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments.
2	CVE-2010-2387	255		+Priv	2012-12-21	2017-08-17	1.9	None	Local	Medium	Not required	Partial	None	None
vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.
3	CVE-2011-2728			DoS	2012-12-21	2013-01-29	4.3	None	Remote	Medium	Not required	None	None	Partial
The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.
4	CVE-2011-2730	16		+Info	2012-12-05	2017-08-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a (1) name attribute in a (a) spring:hasBindErrors tag; (2) path attribute in a (b) spring:bind or (c) spring:nestedpath tag; (3) arguments, (4) code, (5) text, (6) var, (7) scope, or (8) message attribute in a (d) spring:message or (e) spring:theme tag; or (9) var, (10) scope, or (11) value attribute in a (f) spring:transform tag, aka "Expression Language Injection."
5	CVE-2011-2731	362		+Priv	2012-12-05	2013-10-24	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread.
6	CVE-2011-2732	94		Http R.Spl.	2012-12-05	2012-12-06	4.3	None	Remote	Medium	Not required	None	Partial	None
CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter.
7	CVE-2011-3131	399		DoS	2012-12-13	2012-12-13	4.6	None	Local	Low	???	None	None	Complete
Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.
8	CVE-2011-5251	20			2012-12-31	2013-01-03	5.8	None	Remote	Medium	Not required	Partial	Partial	None
Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter in a lostpw action.
9	CVE-2012-0218			DoS	2012-12-03	2013-10-11	1.9	None	Local	Medium	Not required	None	None	Partial
Xen 3.4, 4.0, and 4.1, when the guest OS has not registered a handler for a syscall or sysenter instruction, does not properly clear a flag for exception injection when injecting a General Protection Fault, which allows local PV guest OS users to cause a denial of service (guest crash) by later triggering an exception that would normally be handled within Xen.
10	CVE-2012-0411			Exec Code	2012-12-24	2013-01-08	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version action.
11	CVE-2012-0428	79		XSS	2012-12-25	2021-04-13	4.3	None	Remote	Medium	Not required	None	Partial	None
Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
12	CVE-2012-0429			DoS	2012-12-25	2021-04-13	4.0	None	Remote	Low	???	None	None	Partial
dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request.
13	CVE-2012-0430			Bypass	2012-12-25	2021-04-13	6.4	None	Remote	Low	Not required	Partial	Partial	None
Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote attackers to obtain an administrator cookie and bypass authorization checks via unknown vectors.
14	CVE-2012-0432	119		Overflow	2012-12-25	2021-04-13	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors.
15	CVE-2012-0738	20			2012-12-28	2017-08-29	5.8	None	Remote	Medium	Not required	Partial	Partial	None
IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during scanning, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate.
16	CVE-2012-0741	20			2012-12-28	2017-08-29	5.8	None	Remote	Medium	Not required	Partial	Partial	None
IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of the Manual Explore Proxy feature, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate.
17	CVE-2012-0841	399		DoS	2012-12-21	2014-01-28	5.0	None	Remote	Low	Not required	None	None	Partial
libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.
18	CVE-2012-0882	119		Exec Code Overflow	2012-12-21	2019-12-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. NOTE: due to lack of details, it is not clear whether this issue is a duplicate of CVE-2012-0492 or another CVE.
19	CVE-2012-0957	16		+Info	2012-12-21	2013-08-22	4.9	None	Local	Low	Not required	Complete	None	None
The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.
20	CVE-2012-0958			Bypass +Info	2012-12-26	2013-01-11	4.3	None	Remote	Medium	Not required	Partial	None	None
content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage.
21	CVE-2012-0961	200		+Info	2012-12-26	2020-01-08	2.1	None	Local	Low	Not required	Partial	None	None
Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.9.7.5ubuntu5.2, as used in Ubuntu, uses world-readable permissions for /var/log/apt/term.log, which allows local users to obtain sensitive shell information by reading the log file.
22	CVE-2012-0962				2012-12-26	2012-12-27	4.3	None	Remote	Medium	Not required	None	Partial	None
Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle (MITM) attack.
23	CVE-2012-1537	119		Exec Code Overflow	2012-12-12	2018-10-12	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted Office document, aka "DirectPlay Heap Overflow Vulnerability."
24	CVE-2012-1598	264			2012-12-03	2012-12-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Joomla! 1.5.x before 1.5.26 has unspecified impact and attack vectors related to "insufficient randomness" and a "password reset vulnerability."
25	CVE-2012-1599	264		+Info	2012-12-03	2012-12-04	5.0	None	Remote	Low	Not required	Partial	None	None
Joomla! 1.5.x before 1.5.26 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end information" via unknown vectors. NOTE: this might be a duplicate of CVE-2012-1611.
26	CVE-2012-1699	119		DoS Overflow Mem. Corr. +Info	2012-12-21	2017-09-19	3.6	None	Local	Low	Not required	Partial	None	Partial
The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service (memory corruption and crash) or obtain potentially sensitive information from memory via a SetEventMask request that triggers an invalid pointer dereference.
27	CVE-2012-1712	22		Dir. Trav.	2012-12-21	2012-12-21	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space Server before 10.0 Update 7 Patch 2 has unknown impact and attack vectors.
28	CVE-2012-1714			Exec Code	2012-12-21	2013-01-08	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11.1.1.4 and 11.1.2.1.104 allows remote attackers to execute arbitrary code via unknown vectors.
29	CVE-2012-2539	399		DoS Exec Code Mem. Corr.	2012-12-12	2018-10-12	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability."
30	CVE-2012-2549	20		Bypass	2012-12-12	2020-09-28	5.8	None	Remote	Medium	Not required	Partial	Partial	None
The IP-HTTPS server in Windows Server 2008 R2 and R2 SP1 and Server 2012 does not properly validate certificates, which allows remote attackers to bypass intended access restrictions via a revoked certificate, aka "Revoked Certificate Bypass Vulnerability."
31	CVE-2012-2556	94		Exec Code	2012-12-12	2020-09-28	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to execute arbitrary code via a crafted OpenType font file, aka "OpenType Font Parsing Vulnerability."
32	CVE-2012-2669	20			2012-12-27	2013-01-30	2.1	None	Local	Low	Not required	None	Partial	None
The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not validate the origin of Netlink messages, which allows local users to spoof Netlink communication via a crafted connector message.
33	CVE-2012-2934			DoS	2012-12-03	2014-05-05	1.9	None	Local	Medium	Not required	None	None	Partial
Xen 4.0, and 4.1, when running a 64-bit PV guest on "older" AMD CPUs, does not properly protect against a certain AMD processor bug, which allows local guest OS users to cause a denial of service (host hang) via sequential execution of instructions across a non-canonical boundary, a different vulnerability than CVE-2012-0217.
34	CVE-2012-3002	287		Bypass	2012-12-21	2013-03-02	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The web interface on (1) Foscam and (2) Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative functions or read the admin password, via a direct request to an unspecified URL.
35	CVE-2012-3133	119		Overflow	2012-12-21	2013-01-08	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, Essbase Server 11.1.2.1 and 11.1.2.2, Production Reporting Server 11.1.2.1 and 11.1.2.2, and Integration Services Server 11.1.2.1 and 11.1.2.2 has unknown impact and attack vectors.
36	CVE-2012-3272	79		XSS	2012-12-06	2013-01-08	4.3	None	Remote	Medium	Not required	None	Partial	None
Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Color LaserJet CM60xx with firmware before 52.210.9, Color LaserJet CP3525 with firmware before 06.140.3 18, Color LaserJet CP4xxx with firmware before 07.120.6, Color LaserJet CP6015 with firmware before 04.160.3, LaserJet P3015 with firmware before 07.140.3, and LaserJet P4xxx with firmware before 04.170.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
37	CVE-2012-3273			+Info	2012-12-06	2013-03-14	5.0	None	Remote	Low	Not required	Partial	None	None
Multiple unspecified vulnerabilities on the HP LaserJet Pro 400 MFP M425 with firmware 20120625 and LaserJet 400 M401 with firmware 20120621 allow remote attackers to obtain sensitive information via unknown vectors.
38	CVE-2012-3274	119		Exec Code Overflow	2012-12-06	2019-10-09	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (IMC) before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data.
39	CVE-2012-3275			Exec Code	2012-12-06	2013-03-14	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.1x and 9.20 allows remote attackers to execute arbitrary code via unknown vectors.
40	CVE-2012-3276	16		DoS	2012-12-13	2019-10-09	2.1	None	Local	Low	Not required	None	None	Partial
HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN programs, which allows local users to cause a denial of service via unspecified vectors.
41	CVE-2012-3277			DoS	2012-12-13	2019-10-09	5.0	None	Remote	Low	Not required	None	None	Partial
HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN programs, which allows remote attackers to cause a denial of service via unspecified vectors.
42	CVE-2012-3297	79		XSS	2012-12-08	2017-08-29	4.3	None	Remote	Medium	Not required	None	Partial	None
Cross-site scripting (XSS) vulnerability in the embedded HTTP server in the Service Console in IBM Tivoli Monitoring 6.2.2 before 6.2.2-TIV-ITM-FP0009 and 6.3.2 before 6.2.3-TIV-ITM-FP0001 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.
43	CVE-2012-3317	264		+Priv	2012-12-05	2017-08-29	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
IBM WebSphere Message Broker 6.1 before 6.1.0.11, 7.0 before 7.0.0.5, and 8.0 before 8.0.0.2 has incorrect ownership of certain uninstaller Java Runtime Environment (JRE) files, which might allow local users to gain privileges by leveraging access to uid 501 or gid 300.
44	CVE-2012-3329	59			2012-12-19	2017-08-29	3.3	None	Local	Medium	Not required	None	Partial	Partial
IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a (1) temporary file or (2) log file.
45	CVE-2012-3428	255			2012-12-20	2013-01-08	4.3	None	Remote	Medium	Not required	None	Partial	None
The IronJacamar container before 1.0.12.Final for JBoss Application Server, when allow-multiple-users is enabled in conjunction with a security domain, does not use the credentials supplied in a getConnection function call, which allows remote attackers to obtain access to an arbitrary datasource connection in opportunistic circumstances via an invalid connection attempt.
46	CVE-2012-3432	264		DoS	2012-12-03	2013-10-11	1.9	None	Local	Medium	Not required	None	None	Partial
The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service (guest OS crash) via unspecified operations on MMIO regions.
47	CVE-2012-3482			DoS +Info	2012-12-21	2013-04-05	5.8	None	Remote	Medium	Not required	Partial	None	Partial
Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or (2) obtain sensitive information from memory via an NTLM Type 2 message with a crafted Target Name structure, which triggers an out-of-bounds read.
48	CVE-2012-3546	264		Bypass	2012-12-19	2017-09-19	4.3	None	Remote	Medium	Not required	None	Partial	None
org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.
49	CVE-2012-3870	79	1	XSS	2012-12-28	2012-12-28	3.5	None	Remote	Medium	???	None	Partial	None
Multiple cross-site scripting (XSS) vulnerabilities in objects/createobject.php in Open Constructor 3.12.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) name or (2) description parameter.
50	CVE-2012-3871	79	1	XSS	2012-12-28	2012-12-28	3.5	None	Remote	Medium	???	None	Partial	None
Cross-site scripting (XSS) vulnerability in data/hybrid/i_hybrid.php in Open Constructor 3.12.0 allows remote authenticated users to inject arbitrary web script or HTML via the header parameter.

Total number of vulnerabilities : 256 Page : 1 (This Page)2 3 4 5 6