Export limit exceeded: 74798 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (74798 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2012-2350 2 Debian, Pam Shield Project 2 Debian Linux, Pam Shield 2024-11-21 7.5 High
pam_shield before 0.9.4: Default configuration does not perform protective action
CVE-2012-2312 1 Redhat 2 Jboss Application Server, Jboss Enterprise Application Platform 2024-11-21 7.8 High
An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets reused from the thread pool that still retains the security context from the process last used, which lets a local user obtain elevated privileges.
CVE-2012-2248 2 Debian, Dhclient Project 2 Debian Linux, Dhclient 2024-11-21 8.1 High
An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable.
CVE-2012-2238 1 Tryton 1 Trytond 2024-11-21 7.5 High
trytond 2.4: ModelView.button fails to validate authorization
CVE-2012-2201 1 Ibm 1 Websphere Mq 2024-11-21 7.5 High
IBM WebSphere MQ 7.1 is vulnerable to a denial of service, caused by an error when handling user ids. A remote attacker could exploit this vulnerability to bypass the security configuration setup on a SVRCONN channel and flood the queue manager.
CVE-2012-2142 4 Freedesktop, Opensuse, Redhat and 1 more 4 Poppler, Opensuse, Enterprise Linux and 1 more 2024-11-21 7.8 High
The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.
CVE-2012-2130 3 Debian, Fedoraproject, Polarssl 3 Debian Linux, Fedora, Polarssl 2024-11-21 7.4 High
A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys.
CVE-2012-2079 1 Drupal 1 Activity 2024-11-21 8.8 High
A cross-site request forgery (CSRF) vulnerability in the Activity module 6.x-1.x for Drupal.
CVE-2012-1615 1 Fedoraproject 2 Fedora, Sectool 2024-11-21 7.8 High
A Privilege Escalation vulnerability exits in Fedoraproject Sectool due to an incorrect DBus file.
CVE-2012-1592 1 Apache 1 Struts 2024-11-21 8.8 High
A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files.
CVE-2012-1572 2 Debian, Openstack 2 Debian Linux, Keystone 2024-11-21 7.5 High
OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space
CVE-2012-1567 1 Linuxmint 1 Linuxmint 2024-11-21 7.5 High
LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintUpdate.
CVE-2012-1566 1 Linuxmint 1 Linuxmint 2024-11-21 7.5 High
LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintNanny.
CVE-2012-1563 1 Joomla 1 Joomla\! 2024-11-21 7.5 High
Joomla! before 2.5.3 allows Admin Account Creation.
CVE-2012-1562 1 Joomla 1 Joomla\! 2024-11-21 7.5 High
Joomla! core before 2.5.3 allows unauthorized password change.
CVE-2012-1496 1 Webcalendar Project 1 Webcalendar 2024-11-21 8.8 High
Local file inclusion in WebCalendar before 1.2.5.
CVE-2012-1326 1 Cisco 1 Ironport Web Security Appliance 2024-11-21 7.4 High
Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks
CVE-2012-1170 2 Fedoraproject, Moodle 2 Fedora, Moodle 2024-11-21 7.5 High
Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough
CVE-2012-1168 3 Fedoraproject, Moodle, Redhat 3 Fedora, Moodle, Enterprise Linux 2024-11-21 8.2 High
Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.
CVE-2012-1156 3 Fedoraproject, Moodle, Redhat 3 Fedora, Moodle, Enterprise Linux 2024-11-21 7.5 High
Moodle before 2.2.2 has users' private files included in course backups