Skip to content
OpenAdvisories

Archive

13 March 2012

Vulnerabilities first published on this day (UTC), newest first.

← February 2012 2012 / March /13 April 2012 →
  1. 111
  2. 28
  3. 36
  4. 4 
  5. 517
  6. 63
  7. 728
  8. 874
  9. 96
  10. 101
  11. 11 
  12. 125
  13. 1326
  14. 1425
  15. 1519
  16. 167
  17. 172
  18. 182
  19. 1933
  20. 2012
  21. 2145
  22. 2222
  23. 233
  24. 24 
  25. 25 
  26. 263
  27. 275
  28. 2817
  29. 2913
  30. 308
  31. 312
All Critical High Medium Low Exploited only Public exploit

26 results · Feed

  • Unscored —
    CVE-2012-0770

    Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to…

  • Unscored —
    CVE-2012-1663 Public exploit

    Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (ap…

    gnutls28 Debian
  • Unscored —
    CVE-2012-0016 Public exploit EPSS 18%

    Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, …

  • Unscored —
    CVE-2012-0002 Public exploit EPSS 75%

    The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows …

  • High 8.4
    CVE-2012-0157

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —
    CVE-2012-0006 EPSS 30%

    The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle object…

  • Unscored —
    CVE-2012-0008

    Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain …

  • Unscored —
    CVE-2012-0152 Public exploit EPSS 85%

    The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 all…

  • Unscored —
    CVE-2012-0156 EPSS 14%

    DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does no…

  • Unscored —
    CVE-2012-0687

    TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine b…

  • Unscored —
    CVE-2012-0689

    The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service …

  • Unscored —
    CVE-2012-0688

    Cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Gri…

  • Unscored —
    CVE-2012-0690

    TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Applicati…

  • Medium —
    CVE-2012-1099

    Cross-site Scripting in actionpack

    Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script …

    rails actionpack Debian RubyGems
  • Medium —
    CVE-2012-1098

    activesupport Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object that is manipulated through cert…

    rails activesupport Debian RubyGems
  • Unscored —
    CVE-2011-1395

    Cross-site scripting (XSS) vulnerability in imicon.jsp in IBM Maximo Asset Management and Asset Management Essentials 6…

  • Unscored —
    CVE-2011-1394

    IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, …

  • Unscored —
    CVE-2011-1396

    Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7…

  • Unscored —
    CVE-2011-1397

    Cross-site request forgery (CSRF) vulnerability in the Labor Reporting page in IBM Maximo Asset Management and Asset Ma…

  • Unscored —
    CVE-2011-4819

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management and Asset Management Essentials 6.2,…

  • Unscored —
    CVE-2011-4817

    The About option on the Help menu in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM…

  • Unscored —
    CVE-2011-4816

    SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.…

  • Unscored —
    CVE-2011-4818

    Open redirect vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows rem…

  • Unscored —
    CVE-2012-0884 EPSS 13%

    The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h doe…

    openssl openssl098 Debian Ubuntu
  • Unscored —
    CVE-2012-0195

    Cross-site scripting (XSS) vulnerability in the Start Center Layout and Configuration component in IBM Maximo Asset Man…

  • Unscored —
    CVE-2012-1472

    VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests, which allows remote…