opensuse opensuse 12.3 vulnerabilities and exploits

(subscribe to this query)

nginx 0.8.41 up to and including 1.4.3 and 1.5.x prior to 1.5.7 allows remote malicious users to bypass intended restrictions via an unescaped space character in a URI.

F5 Nginx Opensuse Opensuse 12.3 Suse Studio Onsite 1.3 Opensuse Opensuse 11.4 Suse Webyast 1.3 Opensuse Opensuse 12.2 Opensuse Opensuse 13.1 Suse Lifecycle Management Server 1.3

1 EDB exploit1 Github repository

Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick prior to 6.8.8-5 might allow remote malicious users to execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-2030.

Imagemagick Imagemagick Canonical Ubuntu Linux 13.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 12.10 Opensuse Opensuse 12.3 Opensuse Opensuse 11.4 Opensuse Opensuse 13.1

lighttpd prior to 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote malicious users to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network.

Lighttpd Lighttpd Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 6.0 Opensuse Opensuse 12.3 Opensuse Opensuse 12.2 Opensuse Opensuse 13.1

lighttpd prior to 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3) setgroups functions, which might cause lighttpd to run as root if it is restarted and allows remote malicious users to gain privileges, as demonstrated by multiple calls to the clone fu...

Lighttpd Lighttpd Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 6.0 Opensuse Opensuse 12.3 Opensuse Opensuse 12.2 Opensuse Opensuse 13.1

Use-after-free vulnerability in lighttpd prior to 1.4.33 allows remote malicious users to cause a denial of service (segmentation fault and crash) via unspecified vectors that trigger FAMMonitorDirectory failures.

Lighttpd Lighttpd Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 6.0 Opensuse Opensuse 12.3 Opensuse Opensuse 12.2 Opensuse Opensuse 13.1

ModSecurity prior to 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/form-data Content-Type header, which allows remote malicious users to bypass fil...

Trustwave Modsecurity Opensuse Opensuse 12.3 Opensuse Opensuse 11.4 Opensuse Opensuse 12.2 Debian Debian Linux 7.0 Debian Debian Linux 6.0 Oracle Http Server 11.1.1.6.0

The cpansign verify functionality in the Module::Signature module prior to 0.72 for Perl allows malicious users to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special unknown cipher" that references an untrusted module in Digest/.

Canonical Ubuntu Linux 13.04 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 12.04 Opensuse Opensuse 12.3 Opensuse Opensuse 11.4 Opensuse Opensuse 12.2 Perlmonks Module

The default configuration for the Xerces SAX Parser in Castor prior to 1.3.3 allows context-dependent malicious users to conduct XML External Entity (XXE) attacks via a crafted XML document.

Castor Project Castor 1.3 Castor Project Castor Castor Project Castor 1.3.1 Opensuse Project Opensuse 12.3 Opensuse Opensuse 13.1

1 EDB exploit

cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.

Jeff Ortel Suds 0.4 Redhat Enterprise Linux 6.0 Opensuse Opensuse 12.3 Redhat Enterprise Linux 5 Opensuse Opensuse 12.2

Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vul...

Imagemagick Imagemagick 6.8.8-5 Canonical Ubuntu Linux 13.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 12.10 Opensuse Opensuse 12.3 Opensuse Opensuse 11.4 Opensuse Opensuse 13.1

1 EDB exploit

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook