Show filters
205 Total Results
Displaying 111-120 of 205
Sort by:
Attacker Value
Unknown
CVE-2011-3201
Disclosure Date: March 08, 2013 (last updated October 05, 2023)
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
0
Attacker Value
Unknown
CVE-2013-0219
Disclosure Date: February 24, 2013 (last updated October 05, 2023)
System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.
0
Attacker Value
Unknown
CVE-2012-5624
Disclosure Date: February 24, 2013 (last updated October 05, 2023)
The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application.
0
Attacker Value
Unknown
CVE-2012-4285
Disclosure Date: August 16, 2012 (last updated October 04, 2023)
The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a zero-length message.
0
Attacker Value
Unknown
CVE-2012-4291
Disclosure Date: August 16, 2012 (last updated October 04, 2023)
The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
0
Attacker Value
Unknown
CVE-2012-4289
Disclosure Date: August 16, 2012 (last updated October 04, 2023)
epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a large number of ACL entries.
0
Attacker Value
Unknown
CVE-2012-4290
Disclosure Date: August 16, 2012 (last updated October 04, 2023)
The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.
0
Attacker Value
Unknown
CVE-2012-3425
Disclosure Date: August 13, 2012 (last updated October 04, 2023)
The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large avail_in field value in a PNG image.
0
Attacker Value
Unknown
CVE-2012-4048
Disclosure Date: July 24, 2012 (last updated October 04, 2023)
The PPP dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted packet, as demonstrated by a usbmon dump.
0
Attacker Value
Unknown
CVE-2012-2351
Disclosure Date: July 12, 2012 (last updated October 04, 2023)
The default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username attribute to Remote username" option to false, which allows remote SAML IdP servers to spoof users of other SAML IdP servers by using the same internal username.
0
