Skip to content
OpenAdvisories

Archive

4 April 2012

Vulnerabilities first published on this day (UTC), newest first.

← March 2012 2012 / April /4 May 2012 →
  1. 1 
  2. 211
  3. 36
  4. 417
  5. 515
  6. 66
  7. 7 
  8. 8 
  9. 95
  10. 1016
  11. 1121
  12. 124
  13. 1315
  14. 14 
  15. 15 
  16. 162
  17. 1711
  18. 1814
  19. 193
  20. 208
  21. 216
  22. 2211
  23. 23 
  24. 241
  25. 2539
  26. 26 
  27. 276
  28. 286
  29. 29 
  30. 305
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2012-0130

    HP Onboard Administrator (OA) before 3.50 allows remote attackers to obtain sensitive information via unspecified vecto…

  • Unscored —
    CVE-2012-0128

    HP Onboard Administrator (OA) before 3.50 allows remote attackers to redirect users to arbitrary web sites and conduct …

  • Unscored —
    CVE-2012-0129

    HP Onboard Administrator (OA) before 3.50 allows remote attackers to bypass intended access restrictions and execute ar…

  • Unscored —
    CVE-2012-0132

    Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 9.01 allows remote attackers to injec…

  • Unscored —
    CVE-2008-7309

    Insoshi before 20080920 does not properly restrict the use of a hash to provide values for a model's attributes, which …

  • Medium —
    CVE-2008-7310

    Spree does not properly restrict the use of a hash to provide values for a model's attributes

    Spree 0.2.0 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the Order state value and bypass the intended payment step via a modified URL, related to a "mass assignment" vulnerabili…

    spree RubyGems
  • Medium —
    CVE-2008-7311

    Spree uses a hardcoded hash value

    The session cookie store implementation in Spree 0.2.0 uses a hardcoded config.action_controller_session hash value (aka secret key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging an application that co…

    spree RubyGems
  • Unscored —
    CVE-2012-1335

    Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27…

  • Unscored —
    CVE-2012-1336

    Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27…

  • Unscored —
    CVE-2012-1337 EPSS 24%

    Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27…

  • Unscored —
    CVE-2011-5000

    The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is en…

    openssh Debian
  • Unscored —
    CVE-2012-0327

    Cross-site scripting (XSS) vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script…

    redmine Debian
  • Unscored —
    CVE-2012-1982

    Cross-site scripting (XSS) vulnerability in my_admin/admin1_list_pages.php in SocialCMS 1.0.2 and earlier allows remote…

  • Unscored —
    CVE-2012-1777

    SQL injection vulnerability in my.activation.php3 in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 allows remote attackers …

  • Unscored —
    CVE-2012-2054

    Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which all…

    redmine Debian
  • Unscored —
    CVE-2012-2055

    GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attribut…

  • Unscored —
    CVE-2012-2053

    The sudoers file in the Linux system configuration in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 does not require a pass…