April 2012

228 results · Feed

• Unscored —
  CVE-2012-1131

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows r…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1127

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1129

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1126

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1139

  Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows …

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1136

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1132

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1135

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1133

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1130

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1140

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1138

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1143

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1134

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1141

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-1142

  FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c…

  freetype Debian
  Apr 25, 2012
• Unscored —
  CVE-2012-2131 Public exploit EPSS 17%

  Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer…

  Apr 24, 2012
• Unscored —
  CVE-2012-0726

  The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2)…

  Apr 22, 2012
• Unscored —
  CVE-2012-0740

  Cross-site scripting (XSS) vulnerability in the Web Admin Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.22…

  Apr 22, 2012
• Unscored —
  CVE-2012-0946 Public exploit

  The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-n…

  nvidia-graphics-drivers Debian
  Apr 22, 2012
• Unscored —
  CVE-2012-0708 Public exploit EPSS 31%

  Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 be…

  Apr 22, 2012
• Unscored —
  CVE-2012-0216

  The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.…

  apache2 Debian
  Apr 22, 2012
• Unscored —
  CVE-2012-0743

  IBM Tivoli Directory Server (TDS) 6.3 and earlier allows remote attackers to cause a denial of service (daemon crash) v…

  Apr 22, 2012
• Unscored —
  CVE-2012-1575

  Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary we…

  Apr 22, 2012
• Unscored —
  CVE-2012-1113

  Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 bef…

  Apr 22, 2012
• Unscored —
  CVE-2012-2405

  Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and atta…

  Apr 22, 2012
• Unscored —
  CVE-2012-1243

  The TwitRocker2 application before 1.0.23 for Android does not properly implement the WebView class, which allows remot…

  Apr 22, 2012
• Unscored —
  CVE-2012-2234 Public exploit

  Cross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass before 2.1.6 allows remote authentica…

  Apr 22, 2012
• Unscored —
  CVE-2012-2400

  Unspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impact and attack vector…

  wordpress Debian
  Apr 21, 2012
• Unscored —
  CVE-2012-2404

  wp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier for remote attackers t…

  wordpress Debian
  Apr 21, 2012
• Unscored —
  CVE-2012-2403

  wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes …

  wordpress Debian
  Apr 21, 2012
• Unscored —
  CVE-2012-2401

  Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables script…

  wordpress Debian
  Apr 21, 2012
• Unscored —
  CVE-2012-2399

  Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFupload 2.2.0.1 and earlier, as used in WordPress before…

  wordpress Debian
  Apr 21, 2012
• Unscored —
  CVE-2012-2402

  wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended acces…

  wordpress Debian
  Apr 21, 2012
• Unscored —
  CVE-2012-2398

  Cross-site scripting (XSS) vulnerability in files/ajax/download.php in ownCloud before 3.0.3 allows remote attackers to…

  Apr 20, 2012
• Unscored —
  CVE-2012-2236 Public exploit

  SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitr…

  Apr 20, 2012
• Unscored —
  CVE-2012-2270 Public exploit

  Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redir…

  Apr 20, 2012
• Unscored —
  CVE-2012-2269

  Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 3.0.3 allow remote attackers to inject arbitrary…

  Apr 20, 2012
• Unscored —
  CVE-2012-2397

  Cross-site request forgery (CSRF) vulnerability in ownCloud before 3.0.3 allows remote attackers to hijack the authenti…

  Apr 20, 2012
• Unscored —
  CVE-2012-0406 Public exploit

  The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows r…

  Apr 20, 2012