[CLOSE] OSVDB ID : 77673 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to read content from a different (1) domain or (2) zone via a "trial and error" attack, aka "XSS Filter Information Disclosure Vulnerability."

[CLOSE] OSVDB ID : 77675 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : Microsoft Internet Explorer 6 through 9 does not properly use the Content-Disposition HTTP header to control rendering of the HTTP response body, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Content-Disposition Information Disclosure Vulnerability."

[CLOSE] OSVDB ID : 77699 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.

[CLOSE] OSVDB ID : 77706 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : Google Chrome before 16.0.912.63 does not properly perform regex matching, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

[CLOSE] OSVDB ID : 77707 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

[CLOSE] OSVDB ID : 77708 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : The PDF parser in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

[CLOSE] OSVDB ID : 77710 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

[CLOSE] OSVDB ID : 77711 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property arrays, which allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.

[CLOSE] OSVDB ID : 77712 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

[CLOSE] OSVDB ID : 77713 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : Google Chrome before 16.0.912.63 does not properly handle PDF documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

[CLOSE] OSVDB ID : 77714 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG filters.

[CLOSE] OSVDB ID : 77716 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : The internationalization (aka i18n) functionality in Google V8, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.

[CLOSE] OSVDB ID : 77717 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : Buffer overflow in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF fonts.

[CLOSE] OSVDB ID : 77718 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : Google Chrome before 16.0.912.63 does not properly handle PDF cross references, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

[CLOSE] OSVDB ID : 77719 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : Stack-based buffer overflow in FileWatcher in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

[CLOSE] OSVDB ID : 78624 - Disclosed: 2011-12-13

Description:

The NEED FOR SPEED FREE application for Android has trojaned copies available for download on some app markets. These trojans will cause a phone to send SMS messages to premium numbers, charging the user money.

[CLOSE] OSVDB ID : 78625 - Disclosed: 2011-12-13

Description:

The Assassin's Creed FREE application for Android has trojaned copies available for download on some app markets. These trojans will cause a phone to send SMS messages to premium numbers, charging the user money.

[CLOSE] OSVDB ID : 78626 - Disclosed: 2011-12-13

Description:

The Where's My Water? FREE application for Android has trojaned copies available for download on some app markets. These trojans will cause a phone to send SMS messages to premium numbers, charging the user money.

[CLOSE] OSVDB ID : 78627 - Disclosed: 2011-12-13

Description:

The Riptide GP FREE application for Android has trojaned copies available for download on some app markets. These trojans will cause a phone to send SMS messages to premium numbers, charging the user money.

[CLOSE] OSVDB ID : 78628 - Disclosed: 2011-12-13

Description:

The Great Little War Game FREE application for Android has trojaned copies available for download on some app markets. These trojans will cause a phone to send SMS messages to premium numbers, charging the user money.

[CLOSE] OSVDB ID : 78671 - Disclosed: 2011-12-13

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 78670 - Disclosed: 2011-12-13

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 80642 - Disclosed: 2011-12-13

Description:

Family Connections contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the 'for' upon submission to the prayers.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 81866 - Disclosed: 2011-12-13

Description:

Cisco IOS contains an unspecified flaw that may allow a remote denial of service. The issue is triggered when the system is configured as an IPsec hub with X.509 certificates in use, and will result in loss of availability for the system.

[CLOSE] OSVDB ID : 77669 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the Microsoft Pinyin (aka MSPY) IME toolbar, aka "Pinyin IME Elevation Vulnerability."

[CLOSE] OSVDB ID : 77685 - Disclosed: 2011-12-13

Description:

Fork CMS contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate input passed via the URL before returning it to the user. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 77693 - Disclosed: 2011-12-13

Description:

Pulse Pro CMS contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the 'd' and 'post_id' parameters upon submission to the index.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 77686 - Disclosed: 2011-12-13

Description:

Fork CMS contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the 'q_widget' parameter before returning it to the user via the canonical URL. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 77747 - Disclosed: 2011-12-13

Description:

(Description Provided by CVE) : WMDrive.sys 3.4.181.224 in WinMount 3.5.1018 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted 0x87342000 IOCTL request to the WMDriver device.

[CLOSE] OSVDB ID : 78010 - Disclosed: 2011-12-13

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 78587 - Disclosed: 2011-12-13

Description:

360 MobileSafe Application for Android contains a flaw related that may allow a remote attacker to access and manipulate data relating to SMS and the contact list.

[CLOSE] OSVDB ID : 78629 - Disclosed: 2011-12-13

Description:

The World of Goo FREE application for Android has trojaned copies available for download on some app markets. These trojans will cause a phone to send SMS messages to premium numbers, charging the user money.

[CLOSE] OSVDB ID : 78630 - Disclosed: 2011-12-13

Description:

The Angry Birds FREE application for Android has trojaned copies available for download on some app markets. These trojans will cause a phone to send SMS messages to premium numbers, charging the user money.

[CLOSE] OSVDB ID : 78631 - Disclosed: 2011-12-13

Description:

The Talking Tom Cat FREE application for Android has trojaned copies available for download on some app markets. These trojans will cause a phone to send SMS messages to premium numbers, charging the user money.

[CLOSE] OSVDB ID : 78632 - Disclosed: 2011-12-13

Description:

The Talking Larry the Bird FREE application for Android has trojaned copies available for download on some app markets. These trojans will cause a phone to send SMS messages to premium numbers, charging the user money.

[CLOSE] OSVDB ID : 79498 - Disclosed: 2011-12-13

Description:

phpDenora contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the remote.php script not properly sanitizing user-supplied input to the 'param' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 79499 - Disclosed: 2011-12-13

Description:

phpDenora contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the libs/phpdenora/graphs/pie.php script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied to the 'theme' and 'lang' parameters. This may allow an attacker to include a file from the targeted host that contains arbitrary commands or code that will be executed by the vulnerable script. Such attacks are limited due to the script only calling files already on the target host. In addition, this flaw can potentially be used to disclose the contents of any file on the system accessible by the web server.

[CLOSE] OSVDB ID : 79500 - Disclosed: 2011-12-13

Description:

phpDenora contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the libs/phpdenora/graphs/bar.php script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied to the 'theme' and 'lang' parameters. This may allow an attacker to include a file from the targeted host that contains arbitrary commands or code that will be executed by the vulnerable script. Such attacks are limited due to the script only calling files already on the target host. In addition, this flaw can potentially be used to disclose the contents of any file on the system accessible by the web server.

[CLOSE] OSVDB ID : 79501 - Disclosed: 2011-12-13

Description:

phpDenora contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the libs/phpdenora/graphs/line.php script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied to the 'theme' and 'lang' parameters. This may allow an attacker to include a file from the targeted host that contains arbitrary commands or code that will be executed by the vulnerable script. Such attacks are limited due to the script only calling files already on the target host. In addition, this flaw can potentially be used to disclose the contents of any file on the system accessible by the web server.

[CLOSE] OSVDB ID : 79666 - Disclosed: 2011-12-13

Description:

Unknown / Incomplete