Skip to content
OpenAdvisories

Archive

April 2012

Vulnerabilities first published in this month (UTC), newest first.

← March 2012 2012 / April May 2012 →
  1. 1 
  2. 211
  3. 36
  4. 417
  5. 515
  6. 66
  7. 7 
  8. 8 
  9. 95
  10. 1016
  11. 1121
  12. 124
  13. 1315
  14. 14 
  15. 15 
  16. 162
  17. 1711
  18. 1814
  19. 193
  20. 208
  21. 216
  22. 2211
  23. 23 
  24. 241
  25. 2539
  26. 26 
  27. 276
  28. 286
  29. 29 
  30. 305
All Critical High Medium Low Exploited only Public exploit

228 results · Feed

  • Unscored —
    CVE-2012-0168 EPSS 18%

    Microsoft Internet Explorer 6 through 9 allows user-assisted remote attackers to execute arbitrary code via a crafted H…

  • High 8.8
    CVE-2012-0158 Exploited · Ransomware Public exploit EPSS 100%

    The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Control…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2012-0171 EPSS 27%

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to ex…

  • Unscored —
    CVE-2012-0146 EPSS 11%

    Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote…

  • Unscored —
    CVE-2012-0163 Public exploit EPSS 38%

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function paramete…

  • Unscored —
    CVE-2012-0169 EPSS 30%

    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  • Unscored —
    CVE-2012-0177 EPSS 30%

    Heap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6-9 File…

  • Unscored —
    CVE-2012-1182 Public exploit EPSS 74%

    The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement valid…

    samba Debian
  • Unscored —
    CVE-2012-2215 Public exploit EPSS 28%

    Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.…

  • Unscored —
    CVE-2011-4188

    Buffer overflow in the Create Attribute function in jclient in Novell iManager 2.7.4 before patch 4 allows remote authe…

  • Unscored —
    CVE-2011-3175 Public exploit EPSS 66%

    Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a all…

  • Unscored —
    CVE-2011-3176 Public exploit EPSS 70%

    Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a all…

  • Unscored —
    CVE-2012-0742

    IBM Tivoli Event Pump 4.2.2, when the LOG_REQUESTS and VALIDATE_SOAP_USERS options are enabled, places credentials into…

  • Unscored —
    CVE-2012-0724

    Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of servi…

  • Unscored —
    CVE-2012-0725

    Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of servi…

  • Unscored —
    CVE-2012-1239 Public exploit

    The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmw…

  • Unscored —
    CVE-2012-1902

    show_config_errors.php in phpMyAdmin 3.4.x before 3.4.10.2, when a configuration file does not exist, allows remote att…

    phpmyadmin Debian
  • Unscored —
    CVE-2012-1238

    Session fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack web sessions via unspecifie…

  • Unscored —
    CVE-2012-1237

    Cross-site request forgery (CSRF) vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authen…

  • Unscored —
    CVE-2011-3074

    Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2011-3069

    Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 a…

  • Unscored —
    CVE-2011-3067

    Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to repl…

  • Unscored —
    CVE-2011-3066

    Skia, as used in Google Chrome before 18.0.1025.151, does not properly perform clipping, which allows remote attackers …

  • Unscored —
    CVE-2011-3073

    Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2011-3071

    Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome before 18.0.1025.151 allows remote…

  • Unscored —
    CVE-2011-3072

    Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to pop-…

  • Unscored —
    CVE-2011-3076

    Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2011-3075

    Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2011-3068

    Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 a…

  • Unscored —
    CVE-2011-3070

    Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2011-3077

    Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2012-0255

    The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, whic…

  • Unscored —
    CVE-2012-0249

    Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga b…

    quagga Azure Linux
  • Unscored —
    CVE-2012-0250

    Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a den…

    quagga Azure Linux
  • Unscored —
    CVE-2012-0130

    HP Onboard Administrator (OA) before 3.50 allows remote attackers to obtain sensitive information via unspecified vecto…

  • Unscored —
    CVE-2012-0128

    HP Onboard Administrator (OA) before 3.50 allows remote attackers to redirect users to arbitrary web sites and conduct …

  • Unscored —
    CVE-2012-0129

    HP Onboard Administrator (OA) before 3.50 allows remote attackers to bypass intended access restrictions and execute ar…

  • Unscored —
    CVE-2012-0132

    Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 9.01 allows remote attackers to injec…

  • Unscored —
    CVE-2008-7309

    Insoshi before 20080920 does not properly restrict the use of a hash to provide values for a model's attributes, which …

  • Medium —
    CVE-2008-7310

    Spree does not properly restrict the use of a hash to provide values for a model's attributes

    Spree 0.2.0 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the Order state value and bypass the intended payment step via a modified URL, related to a "mass assignment" vulnerabili…

    spree RubyGems