 |
|
|
|
| Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | | Published: |  | 24.04.2012 | | Source: |  | | | SecurityVulns ID: |  | 12338 | | Type: |  | remote | | Level: |  | 5/10 | | Description: |  | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. |
| Asterisk multiple security vulnerabilities | | Published: | | 24.04.2012 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 12339 | | Type: | | remote | | Level: | | 7/10 | | Description: | | Buffer overflow on Skinny processing, DoS via SIP, Asterisk Manager code execution. |
| InspIRCd buffer overflow | | Published: | | 24.04.2012 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 12341 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Buffer overflow on DNS request processing. |
| Affected: |  | INSPIRCD : InspIRCd 2.0 | | CVE: |  | CVE-2012-1836 (Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression.) |
| Astaro Command Center crossite scripting | | Published: | | 24.04.2012 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 12342 | | Type: | | remote | | Level: | | 4/10 | | Description: | | Multiple crossite scripting vulnerabilities. |
| Astaro Security Gateway crossite scripting | | Published: | | 24.04.2012 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 12343 | | Type: | | remote | | Level: | | 4/10 | | Description: | | Multiple crossite scripting possibilities. |
| HP ProCurve switches compact flash cards virus | | Published: | | 24.04.2012 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 12344 | | Type: | | local | | Level: | | 4/10 | | Description: | | Some of the devices contain virus on compact flash card. |
| Plixer Scrutinizer NetFlow and sFlow Analyzer multiple security vulnerabilities | | Published: | | 24.04.2012 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 12345 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Authentication bypass, SQL injection, crossite scripting. |
| VMWare ESXi / ESX weak permissions | | Published: | | 24.04.2012 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 12346 | | Type: | | local | | Level: | | 5/10 | | Description: | | VMWare Tools folder weak permissions |
OpenSSL memory corruption
updated since 22.04.2012 | | Published: | | 24.04.2012 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 12332 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Memory corruption in asn1_d2i_read_bio()/SMIME_read_PKCS7()/SMIME_read_CMS() |
| Affected: | | OPENSSL : OpenSSL 0.9 | | | | POLARSSL : OpenSSL 1.0 | | CVE: | | CVE-2012-2131 (Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110.) | | | | CVE-2012-2110 (The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.) |
| RuggedCom SCADA equipment backdoor | | Published: | | 24.04.2012 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 12347 | | Type: | | remote | | Level: | | 5/10 | | Description: | | RuggedCom's Rugged Operating System backdoor account. |
| CVE: | | CVE-2012-1803 (RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) TELNET, (2) remote shell (aka rsh), or (3) serial-console session.) |
Android information leakage
updated since 24.04.2012 | | Published: | | 10.05.2012 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 12340 | | Type: | | local | | Level: | | 3/10 | | Description: | | All local applications have unrestricted /proce access and access to SQLite journal files. |
|
|
|
|
|
|
|
|
