Skip to content
OpenAdvisories

Archive

11 April 2012

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 211
  3. 36
  4. 417
  5. 515
  6. 66
  7. 7 
  8. 8 
  9. 95
  10. 1016
  11. 1121
  12. 124
  13. 1315
  14. 14 
  15. 15 
  16. 162
  17. 1711
  18. 1814
  19. 193
  20. 208
  21. 216
  22. 2211
  23. 23 
  24. 241
  25. 2539
  26. 26 
  27. 276
  28. 286
  29. 29 
  30. 305

21 results · Feed

  • Unscored —

    The lanalyzer_read function in wiretap/lanalyzer.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remot…

  • Unscored —

    Buffer overflow in the reassemble_message function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.…

  • Unscored —

    The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote atta…

  • Unscored —
    CVE-2012-0067 Public exploit

    wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of …

  • Unscored —

    Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows…

  • Unscored —

    Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in DotNetNuke 6.x through 6.0.2 allows user-assisted remote attackers to injec…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in admin/edituser.php in CMS Made Simple 1.10.3 and earlier allows remote atta…

  • Unscored —
    CVE-2012-1593 Public exploit EPSS 11%

    epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows …

  • Unscored —
    CVE-2012-1672 Public exploit

    SQL injection vulnerability in getcity.php in Hotel Booking Portal 0.1 allows remote attackers to execute arbitrary SQL…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 all…

  • Unscored —

    The pcap_process_pseudo_header function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.…

  • Unscored —
    CVE-2012-1673 Public exploit

    SQL injection vulnerability in loginscript.php in e-ticketing allows remote attackers to execute arbitrary SQL commands…

  • Unscored —

    The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted pale…

  • Unscored —

    epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.6.x before 1.6.6 allows remote attackers…

  • Unscored —

    The mp2t_process_fragmented_payload function in epan/dissectors/packet-mp2t.c in the MP2T dissector in Wireshark 1.4.x …

  • Unscored —

    Xunlei Thunder before 7.2.6 allows remote attackers to execute arbitrary code via a crafted file, related to a "DLL inj…

  • Unscored —
    CVE-2012-2156 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote attackers to inject arb…

  • Unscored —
    CVE-2012-2210 Public exploit

    The Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service (configuration outage or device cra…

  • Unscored —

    360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extract…

  • Unscored —

    The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x before 11.2 enables the…