Skip to content
OpenAdvisories

Archive

March 2012

Vulnerabilities first published in this month (UTC), newest first.

403 results · Feed

  • Unscored —
    CVE-2012-0127 EPSS 24%

    Unspecified vulnerability in HP Performance Manager 9.00 allows remote attackers to execute arbitrary code via unknown …

  • Unscored —
    CVE-2012-1670 Public exploit

    admin/index.php in PHP Grade Book before 1.9.5 BETA allows remote attackers to read the database via a SaveSQL action.

  • Unscored —

    Google Chrome before 18.0.1025.142 does not properly validate the renderer's navigation requests, which has unspecified…

  • Unscored —

    Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service (memory corru…

  • Unscored —

    Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a de…

  • Unscored —

    Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a den…

  • Unscored —

    Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might a…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service…

  • Unscored —

    Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allows remote attackers to cause a…

  • Unscored —

    Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attack…

  • Unscored —

    Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 al…

  • Unscored —

    The Smart Install feature in Cisco IOS 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service …

  • Unscored —

    The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS…

  • Unscored —

    The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15…

  • Unscored —

    Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (…

  • Unscored —

    The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS throug…

  • Unscored —

    Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS throu…

  • Unscored —

    Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows r…

  • Unscored —

    Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows rem…

  • Unscored —

    The WAAS Express feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consum…

  • Unscored —

    Memory leak in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denia…

  • Unscored —

    The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is con…

  • Unscored —

    The MACE feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (device reload) via cr…

  • Unscored —

    The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Lin…

  • Unscored —

    An unspecified ActiveX control in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228, and AIR before 3.…

  • Unscored —

    Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows Vista, Windows Server…

  • Unscored —

    Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.31 allows local users to obtain access to diagnosti…

  • Unscored —

    Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.11 and 11.23 allows remote attackers to obtain acce…

  • Unscored —
    CVE-2012-1904 Public exploit

    mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 B…

  • Unscored —

    The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS r…

  • Unscored —

    The scanner engine in PrivaWall Antivirus 5.6 and earlier does not recognize the Office XML (aka Open Document XML) fil…

  • Unscored —
    CVE-2007-6752 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authen…

  • Unscored —

    Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and executing arbitrary files …

  • Unscored —

    Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for …

  • Unscored —

    Opera before 11.62 allows remote attackers to spoof the address field by triggering the launch of a dialog window assoc…

  • Unscored —

    Opera before 11.62 on UNIX, when used in conjunction with an unspecified printing application, allows local users to ov…

  • Unscored —

    Opera before 11.62 allows remote attackers to spoof the address field by triggering a page reload followed by a redirec…

  • Unscored —

    Opera before 11.62 on Mac OS X allows remote attackers to spoof the address field and security dialogs via crafted styl…

  • Unscored —

    Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) histo…

  • Unscored —

    Opera before 11.62 on UNIX uses world-readable permissions for temporary files during printing, which allows local user…