Skip to content
OpenAdvisories

Archive

March 2012

Vulnerabilities first published in this month (UTC), newest first.

← February 2012 2012 / March April 2012 →
  1. 111
  2. 28
  3. 36
  4. 4 
  5. 517
  6. 63
  7. 728
  8. 874
  9. 96
  10. 101
  11. 11 
  12. 125
  13. 1326
  14. 1425
  15. 1519
  16. 167
  17. 172
  18. 182
  19. 1933
  20. 2012
  21. 2145
  22. 2222
  23. 233
  24. 24 
  25. 25 
  26. 263
  27. 275
  28. 2817
  29. 2913
  30. 308
  31. 312
All Critical High Medium Low Exploited only Public exploit

403 results · Feed

  • Unscored —
    CVE-2012-0454

    Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 throu…

  • Unscored —
    CVE-2012-0460

    Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x be…

  • Unscored —
    CVE-2012-0461

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firef…

  • Unscored —
    CVE-2012-0464

    Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 1…

  • Unscored —
    CVE-2012-0455

    Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 t…

  • Unscored —
    CVE-2012-0123 EPSS 10%

    Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 1197…

  • Unscored —
    CVE-2012-0122 EPSS 10%

    Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 1197…

  • Unscored —
    CVE-2012-0124 Public exploit EPSS 62%

    Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 1197…

  • Unscored —
    CVE-2012-0121 EPSS 10%

    Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 1197…

  • Unscored —
    CVE-2012-1476

    Unspecified vulnerability in the KKtalk (com.kkliaotian.android) application 4.0.0 and 4.1.5 for Android has unknown im…

  • Unscored —
    CVE-2012-1480

    Unspecified vulnerability in the Pansi SMS (com.pansi.msg) application 1.97, 2.01, and 2.07 for Android has unknown imp…

  • Unscored —
    CVE-2012-1474

    Unspecified vulnerability in the Youni SMS (com.snda.youni) application 2.1.0c and 2.1.0d for Android has unknown impac…

  • Unscored —
    CVE-2012-1409

    Unspecified vulnerability in the Tiny Password (com.tinycouch.android.freepassword) application 1.64 for Android has un…

  • Unscored —
    CVE-2012-1477

    Unspecified vulnerability in the Cnectd (mci.cnectd) application 3.1.0 for Android has unknown impact and attack vector…

  • Unscored —
    CVE-2012-1408

    Unspecified vulnerability in the App Lock (com.cc.applock) application 1.7.5 and 1.7.6 for Android has unknown impact a…

  • Unscored —
    CVE-2012-1478

    Unspecified vulnerability in the UCMobile BloveStorm (com.blovestorm) application 2.2.0 and 3.2.1 for Android has unkno…

  • Unscored —
    CVE-2012-1479

    Unspecified vulnerability in the AContact (com.movester.quickcontact) application 1.8.2 for Android has unknown impact …

  • Unscored —
    CVE-2012-1475

    Unspecified vulnerability in the YagattaTalk Messenger (com.iskoot.yagatta.yagattatalk) application 1.00.01.08 for Andr…

  • Unscored —
    CVE-2012-0770

    Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to…

  • Unscored —
    CVE-2012-1663 Public exploit

    Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (ap…

    gnutls28 Debian
  • Unscored —
    CVE-2012-0016 Public exploit EPSS 18%

    Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, …

  • Unscored —
    CVE-2012-0002 Public exploit EPSS 75%

    The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows …

  • High 8.4
    CVE-2012-0157

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —
    CVE-2012-0006 EPSS 30%

    The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle object…

  • Unscored —
    CVE-2012-0008

    Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain …

  • Unscored —
    CVE-2012-0152 Public exploit EPSS 85%

    The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 all…

  • Unscored —
    CVE-2012-0156 EPSS 14%

    DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does no…

  • Unscored —
    CVE-2012-0687

    TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine b…

  • Unscored —
    CVE-2012-0689

    The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service …

  • Unscored —
    CVE-2012-0688

    Cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Gri…

  • Unscored —
    CVE-2012-0690

    TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Applicati…

  • Medium —
    CVE-2012-1099

    Cross-site Scripting in actionpack

    Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script …

    rails actionpack Debian RubyGems
  • Medium —
    CVE-2012-1098

    activesupport Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object that is manipulated through cert…

    rails activesupport Debian RubyGems
  • Unscored —
    CVE-2011-1395

    Cross-site scripting (XSS) vulnerability in imicon.jsp in IBM Maximo Asset Management and Asset Management Essentials 6…

  • Unscored —
    CVE-2011-1394

    IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, …

  • Unscored —
    CVE-2011-1396

    Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7…

  • Unscored —
    CVE-2011-1397

    Cross-site request forgery (CSRF) vulnerability in the Labor Reporting page in IBM Maximo Asset Management and Asset Ma…

  • Unscored —
    CVE-2011-4819

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management and Asset Management Essentials 6.2,…

  • Unscored —
    CVE-2011-4817

    The About option on the Help menu in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM…

  • Unscored —
    CVE-2011-4816

    SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.…