Archive
April 2012
Vulnerabilities first published in this month (UTC), newest first.
228 results · Feed
-
Unscored —CVE-2012-0407 Public exploit
Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote at…
-
Unscored —
Comodo Internet Security before 5.10.228257.2253 on Windows 7 x64 allows local users to cause a denial of service (syst…
-
Unscored —
Unspecified vulnerability in HP OpenVMS 7.3-2 on the Alpha platform, 8.3 and 8.4 on the Alpha and IA64 platforms, and 8…
-
Unscored —CVE-2012-2396 Public exploit
VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and applicat…
-
Unscored —
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 befor…
-
Unscored —
Buffer overflow in the Security Login ActiveX controls in ICONICS GENESIS32 8.05, 9.0, 9.1, and 9.2 and BizViz 8.05, 9.…
-
Unscored —
The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Demand Media Pluck SiteLife before 5.0.13 allow remote attackers…
-
Unscored —CVE-2011-4871 Public exploit
Open Automation Software OPC Systems.NET before 5.0 allows remote attackers to cause a denial of service via a malforme…
-
Unscored —
https50.ocx in IP*Works! SSL in the server in Unitronics UniOPC before 2.0.0 does not properly implement an unspecified…
-
Unscored —
Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown…
-
Unscored —
Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute …
-
Unscored —
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows remote authenticated users to cause …
-
Unscored —
envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_…
-
Unscored —
Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firew…
-
Unscored —
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows local users to modify data or obtain…
-
Unscored —
Multiple stack-based buffer overflows in (1) COM and (2) ActiveX controls in ABB WebWare Server, WebWare SDK, Interlink…
-
Unscored —
Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X…
-
Unscored —
The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.…
-
Unscored —
VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 th…
-
Unscored —CVE-2012-1180 EPSS 11%
Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensit…
-
Unscored —
Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 thro…
-
Unscored —
Google SketchUp before 8 does not properly handle edge geometry in SketchUp (aka .SKP) files, which allows remote attac…
-
Unscored —CVE-2012-1979 Public exploit
Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticat…
-
Unscored —
Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote at…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in RealNetworks Helix Server and Helix Mobile Server 14.x before 14…
-
Unscored —CVE-2012-1923 EPSS 38%
RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\…
-
Unscored —
master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remo…
-
Unscored —
master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the RECRUIT Dokodemo Rikunabi 2013 extension before 1.0.1 for Google Chrome…
-
Unscored —
GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Int…
-
Unscored —
Multiple buffer overflows in the (1) heap_add_entry and (2) relocate_dir functions in archive_read_support_format_iso96…
-
Unscored —
Multiple use-after-free vulnerabilities in libarchive 2.8.4 and 2.8.5 allow remote attackers to cause a denial of servi…
-
Unscored —
Buffer overflow in libarchive through 2.8.5 allows remote attackers to cause a denial of service (application crash) or…
-
Unscored —CVE-2012-0036 EPSS 16%
curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a …
-
Unscored —
Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application cr…
-
Unscored —
The ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM10…
-
Unscored —
Buffer overflow in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-EC…
-
Unscored —
The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECO…