CVE-2012-4388
- EPSS 4.23%
- Veröffentlicht 07.09.2012 22:55:02
- Zuletzt bearbeitet 16.06.2026 23:44:55
The sapi_header_op function in main/SAPI.c in PHP 5.4.0RC2 through 5.4.0 does not properly determine a pointer during checks for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protec...
- EPSS 3.63%
- Veröffentlicht 05.09.2012 23:55:01
- Zuletzt bearbeitet 16.06.2026 23:43:22
Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors relate...
CVE-2012-3527
- EPSS 2.12%
- Veröffentlicht 05.09.2012 23:55:01
- Zuletzt bearbeitet 16.06.2026 23:43:24
view_help.php in the backend help system in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to unserialize arbitrary objects and possibly execute arbitrary PHP code via an unspecified pa...
- EPSS 3.96%
- Veröffentlicht 29.08.2012 10:56:41
- Zuletzt bearbeitet 16.06.2026 23:44:10
The format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to obtain sensit...
- EPSS 5.57%
- Veröffentlicht 29.08.2012 10:56:40
- Zuletzt bearbeitet 16.06.2026 23:40:43
Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers...
- EPSS 5.61%
- Veröffentlicht 29.08.2012 10:56:40
- Zuletzt bearbeitet 16.06.2026 23:40:43
Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to exe...
- EPSS 4.7%
- Veröffentlicht 29.08.2012 10:56:40
- Zuletzt bearbeitet 16.06.2026 23:44:08
Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attacke...
- EPSS 5.57%
- Veröffentlicht 29.08.2012 10:56:39
- Zuletzt bearbeitet 16.06.2026 23:40:42
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to cause a denial...
- EPSS 5.57%
- Veröffentlicht 29.08.2012 10:56:39
- Zuletzt bearbeitet 16.06.2026 23:40:42
Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote ...
- EPSS 5.57%
- Veröffentlicht 29.08.2012 10:56:39
- Zuletzt bearbeitet 16.06.2026 23:40:42
Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attac...