Skip to content
OpenAdvisories

Archive

March 2012

Vulnerabilities first published in this month (UTC), newest first.

← February 2012 2012 / March April 2012 →
  1. 111
  2. 28
  3. 36
  4. 4 
  5. 517
  6. 63
  7. 728
  8. 874
  9. 96
  10. 101
  11. 11 
  12. 125
  13. 1326
  14. 1425
  15. 1519
  16. 167
  17. 172
  18. 182
  19. 1933
  20. 2012
  21. 2145
  22. 2222
  23. 233
  24. 24 
  25. 25 
  26. 263
  27. 275
  28. 2817
  29. 2913
  30. 308
  31. 312
All Critical High Medium Low Exploited only Public exploit

403 results · Feed

  • Unscored —
    CVE-2012-0198 Public exploit EPSS 37%

    Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisio…

  • Unscored —
    CVE-2012-0322

    The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly restrict access, which …

  • Unscored —
    CVE-2012-0769

    Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1…

  • Unscored —
    CVE-2012-0768

    The Matrix3D component in Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux…

  • Unscored —
    CVE-2011-3039

    Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service o…

  • Unscored —
    CVE-2011-3042

    Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service o…

  • Unscored —
    CVE-2011-3037

    Google Chrome before 17.0.963.65 does not properly perform casts of unspecified variables during the splitting of anony…

  • Unscored —
    CVE-2011-3043

    Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service o…

  • Unscored —
    CVE-2011-3040

    Google Chrome before 17.0.963.65 does not properly handle text, which allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2011-3036

    Google Chrome before 17.0.963.65 does not properly perform a cast of an unspecified variable during handling of line bo…

  • Unscored —
    CVE-2011-3032

    Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service o…

  • Unscored —
    CVE-2011-3038

    Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service o…

  • Unscored —
    CVE-2011-3033

    Buffer overflow in Skia, as used in Google Chrome before 17.0.963.65, allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2011-3035

    Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service o…

  • Unscored —
    CVE-2011-3044

    Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service o…

  • Unscored —
    CVE-2011-3034

    Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service o…

  • Unscored —
    CVE-2011-3041

    Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service o…

  • Unscored —
    CVE-2011-3031

    Use-after-free vulnerability in the element wrapper in Google V8, as used in Google Chrome before 17.0.963.65, allows r…

  • Unscored —
    CVE-2012-0318

    Multiple cross-site scripting (XSS) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13…

  • Unscored —
    CVE-2012-0319

    The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote authentica…

  • Unscored —
    CVE-2012-0317

    Multiple cross-site request forgery (CSRF) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x befo…

  • Unscored —
    CVE-2012-0320

    Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions vi…

  • Unscored —
    CVE-2012-1497

    The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include …

  • Unscored —
    CVE-2012-1262

    Cross-site scripting (XSS) vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before 4.38, 5.0x before 5.07, and…

  • Unscored —
    CVE-2011-1385

    IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of service (system crash…

  • Unscored —
    CVE-2011-4189 Public exploit EPSS 11%

    The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial…

  • Unscored —
    CVE-2012-0321

    Unspecified vulnerability in the device driver in Kingsoft Internet Security 2011 allows local users to cause a denial …

  • High —
    CVE-2012-0838 EPSS 14%

    Apache Struts Code injection due to conversion error

    Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field.

    org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  • Unscored —
    CVE-2012-0715

    Cross-site scripting (XSS) vulnerability in the Gantt applet viewer in IBM Tivoli Change and Configuration Management D…

  • Unscored —
    CVE-2012-0201 Public exploit EPSS 36%

    Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x bef…

  • Unscored —
    CVE-2011-3443

    Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitr…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2012-0316

    The Cookpad 1.5.16 and earlier and Cookpad Noseru 1.1.1 and earlier applications for Android do not properly implement …

  • Unscored —
    CVE-2011-4486

    Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5…

  • Unscored —
    CVE-2011-4487

    SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5,…

  • Unscored —
    CVE-2012-0330

    Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2012-0369

    Cisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 be…

  • Unscored —
    CVE-2012-0367

    Cisco Unity Connection before 7.1.5b(Su5), 8.0 and 8.5 before 8.5.1(Su3), and 8.6 before 8.6.2 allows remote attackers …

  • Unscored —
    CVE-2012-0370

    Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91…

  • Unscored —
    CVE-2012-0368

    The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and…

  • Unscored —
    CVE-2012-0359

    The Cisco Cius with software before 9.2(1) SR2 allows remote attackers to cause a denial of service (device crash or ha…