Archive
April 2012
Vulnerabilities first published in this month (UTC), newest first.
38 results · Clear filters · Feed
-
Unscored —
RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC A…
-
Unscored —CVE-2012-2441 Public exploit
RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the MAC Address f…
-
Unscored —
Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer…
-
Unscored —CVE-2012-0946 Public exploit
The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-n…
-
Unscored —
Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 be…
-
Unscored —CVE-2012-2234 Public exploit
Cross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass before 2.1.6 allows remote authentica…
-
Unscored —CVE-2012-2236 Public exploit
SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitr…
-
Unscored —CVE-2012-2270 Public exploit
Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redir…
-
Unscored —CVE-2012-0406 Public exploit
The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows r…
-
Unscored —CVE-2012-0407 Public exploit
Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote at…
-
Unscored —CVE-2012-2396 Public exploit
VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and applicat…
-
Unscored —
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 befor…
-
Unscored —CVE-2011-4871 Public exploit
Open Automation Software OPC Systems.NET before 5.0 allows remote attackers to cause a denial of service via a malforme…
-
Unscored —
Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute …
-
Unscored —CVE-2012-1979 Public exploit
Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticat…
-
Unscored —CVE-2011-4880 Public exploit
Directory traversal vulnerability in the web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote a…
-
Unscored —CVE-2011-4883 Public exploit
The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly validate values in HTTP requests, …
-
Unscored —CVE-2011-4881 Public exploit
The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly check return values from functions…
-
Unscored —CVE-2011-4882 Public exploit
The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to cause a denial of service…
-
Unscored —CVE-2012-0067 Public exploit
wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of …
-
Unscored —
epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows …
-
Unscored —CVE-2012-1672 Public exploit
SQL injection vulnerability in getcity.php in Hotel Booking Portal 0.1 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2012-1673 Public exploit
SQL injection vulnerability in loginscript.php in e-ticketing allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2012-2156 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2012-2210 Public exploit
The Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service (configuration outage or device cra…
-
High 8.8
The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Control…
KEV Nov 3, 2021 -
Unscored —
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function paramete…
-
Unscored —
The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement valid…
-
Unscored —
Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.…
-
Unscored —
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a all…
-
Unscored —
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a all…
-
Unscored —CVE-2012-1239 Public exploit
The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmw…
-
Unscored —
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows…
-
Unscored —CVE-2011-4043 Public exploit
Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue,…
-
Unscored —CVE-2011-4045 Public exploit
Buffer overflow in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, …
-
Unscored —
Buffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and earlier, ScadaTEC Mod…
-
Unscored —CVE-2011-4042 Public exploit
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows…
-
Unscored —
The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLo…