opensuse opensuse 12.2 vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks via a single quote in a request parameter in the...

Trustwave Modsecurity Opensuse Opensuse 11.4 Opensuse Opensuse 12.2 Opensuse Opensuse 12.3

5

CVSSv2

Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris....

Apache Tomcat Opensuse Opensuse 11.4 Opensuse Opensuse 12.1 Opensuse Opensuse 12.23 Github repositories available

2.1

CVSSv2

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the uniq command, which triggers a stack-based buffer overflow in the alloca function....

Opensuse Opensuse 11.4 Opensuse Opensuse 12.2 Opensuse Opensuse 12.1 Redhat Enterprise Linux 6.01 Github repository available

5

CVSSv2

The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header....

Trustwave Modsecurity Opensuse Opensuse 11.4 Opensuse Opensuse 12.2 Opensuse Opensuse 12.31 EDB exploit available

5

CVSSv2

The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an invalid part precedes the crafted data....

Trustwave Modsecurity Opensuse Opensuse 11.4 Opensuse Opensuse 12.2 Opensuse Opensuse 12.3 Fedoraproject Fedora 181 EDB exploit available

2.1

CVSSv2

The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate...

Clutter Project Clutter -Opensuse Opensuse 12.3 Opensuse Opensuse 12.2

1.9

CVSSv2

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function....

Opensuse Opensuse 12.1 Opensuse Opensuse 11.4 Opensuse Opensuse 12.2 Redhat Enterprise Linux 6.01 Github repository available

4.3

CVSSv2

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the sort command, when using the (1) -d or (2) -M switch, which triggers a stack-based buffer overflow in the...

Redhat Enterprise Linux 6.0 Opensuse Opensuse 12.2 Opensuse Opensuse 12.11 EDB exploit available1 Github repository available

4.3

CVSSv2

A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user execute arbitrary code....

Otrs Faq Otrs Otrs Itsm Opensuse Opensuse 12.2 Opensuse Opensuse 12.31 EDB exploit available

4.3

CVSSv2

The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.7, when multiple realms are configured, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request....

Mit Kerberos 5 Debian Debian Linux 7.0 Opensuse Opensuse 11.4 Opensuse Opensuse 12.2 Opensuse Opensuse 12.3 Opensuse Opensuse 13.1

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook