Skip to content
OpenAdvisories

Archive

March 2012

Vulnerabilities first published in this month (UTC), newest first.

← February 2012 2012 / March April 2012 →
  1. 111
  2. 28
  3. 36
  4. 4 
  5. 517
  6. 63
  7. 728
  8. 874
  9. 96
  10. 101
  11. 11 
  12. 125
  13. 1326
  14. 1425
  15. 1519
  16. 167
  17. 172
  18. 182
  19. 1933
  20. 2012
  21. 2145
  22. 2222
  23. 233
  24. 24 
  25. 25 
  26. 263
  27. 275
  28. 2817
  29. 2913
  30. 308
  31. 312
All Critical High Medium Low Exploited only Public exploit

403 results · Feed

  • Unscored —
    CVE-2011-4818

    Open redirect vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows rem…

  • Unscored —
    CVE-2012-0884 EPSS 13%

    The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h doe…

    openssl openssl098 Debian Ubuntu
  • Unscored —
    CVE-2012-0195

    Cross-site scripting (XSS) vulnerability in the Start Center Layout and Configuration component in IBM Maximo Asset Man…

  • Unscored —
    CVE-2012-1472

    VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests, which allows remote…

  • Unscored —
    CVE-2012-0640

    WebKit in Apple Safari before 5.1.4 does not properly implement "From third parties and advertisers" cookie blocking, w…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2012-0647

    WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which m…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2012-0584

    The Internationalized Domain Name (IDN) feature in Apple Safari before 5.1.4 on Windows does not properly restrict the …

  • Unscored —
    CVE-2012-1557

    SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU#2, 9.x b…

  • Unscored —
    CVE-2012-1558

    yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and applicatio…

  • Unscored —
    CVE-2011-3047

    The GPU process in Google Chrome before 17.0.963.79 allows remote attackers to execute arbitrary code or cause a denial…

  • Low —
    CVE-2012-0325

    Jenkins allows Cross-Site Scripting (XSS)

    Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors,…

    org.jenkins-ci.main:jenkins-core Maven
  • Unscored —
    CVE-2012-0323

    Cross-site scripting (XSS) vulnerability in the Autocomplete plugin before 3.0 for SquirrelMail allows remote attackers…

  • Unscored —
    CVE-2012-0245

    Multiple stack-based buffer overflows in RobNetScanHost.exe in ABB Robot Communications Runtime before 5.14.02, as used…

  • Low —
    CVE-2012-0324

    Jenkins allows Cross-Site Scripting (XSS)

    Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors,…

    org.jenkins-ci.main:jenkins-core Maven
  • Unscored —
    CVE-2012-1545 EPSS 19%

    Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or c…

  • Unscored —
    CVE-2011-3046

    The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows r…

  • Unscored —
    CVE-2011-2871

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2011-2873

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2011-2872

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2011-2866

    WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —
    CVE-2011-2868

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2011-2869

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2011-2867

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2011-2870

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2011-2833

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2012-0623

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2012-0600

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2012-0603

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2012-0617

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2012-0598

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2012-0585

    The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy setti…

  • Unscored —
    CVE-2012-0627

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2012-0644

    Race condition in the Passcode Lock feature in Apple iOS before 5.1 allows physically proximate attackers to bypass int…

  • Unscored —
    CVE-2012-0604

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2012-0620

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2012-0630

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2012-0610

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…

  • Unscored —
    CVE-2012-0641

    CFNetwork in Apple iOS before 5.1 does not properly construct request headers during parsing of URLs, which allows remo…

  • Unscored —
    CVE-2012-0589

    Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5.1, allows remote attackers to inject …

  • Unscored —
    CVE-2012-0591

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or ca…