Skip to content
OpenAdvisories

Archive

April 2012

Vulnerabilities first published in this month (UTC), newest first.

← March 2012 2012 / April May 2012 →
  1. 1 
  2. 211
  3. 36
  4. 417
  5. 515
  6. 66
  7. 7 
  8. 8 
  9. 95
  10. 1016
  11. 1121
  12. 124
  13. 1315
  14. 14 
  15. 15 
  16. 162
  17. 1711
  18. 1814
  19. 193
  20. 208
  21. 216
  22. 2211
  23. 23 
  24. 241
  25. 2539
  26. 26 
  27. 276
  28. 286
  29. 29 
  30. 305
All Critical High Medium Low Exploited only Public exploit

228 results · Feed

  • Medium —
    CVE-2008-7311

    Spree uses a hardcoded hash value

    The session cookie store implementation in Spree 0.2.0 uses a hardcoded config.action_controller_session hash value (aka secret key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging an application that co…

    spree RubyGems
  • Unscored —
    CVE-2012-1335

    Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27…

  • Unscored —
    CVE-2012-1336

    Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27…

  • Unscored —
    CVE-2012-1337 EPSS 24%

    Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27…

  • Unscored —
    CVE-2011-5000

    The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is en…

    openssh Debian
  • Unscored —
    CVE-2012-0327

    Cross-site scripting (XSS) vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script…

    redmine Debian
  • Unscored —
    CVE-2012-1982

    Cross-site scripting (XSS) vulnerability in my_admin/admin1_list_pages.php in SocialCMS 1.0.2 and earlier allows remote…

  • Unscored —
    CVE-2012-1777

    SQL injection vulnerability in my.activation.php3 in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 allows remote attackers …

  • Unscored —
    CVE-2012-2054

    Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which all…

    redmine Debian
  • Unscored —
    CVE-2012-2055

    GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attribut…

  • Unscored —
    CVE-2012-2053

    The sudoers file in the Linux system configuration in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 does not require a pass…

  • Unscored —
    CVE-2012-0131

    Distributed Computing Environment (DCE) 1.8 and 1.9 on HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a …

  • Unscored —
    CVE-2011-4044 Public exploit EPSS 27%

    An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows…

  • Unscored —
    CVE-2011-4043 Public exploit

    Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue,…

  • Unscored —
    CVE-2011-4045 Public exploit

    Buffer overflow in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, …

  • Unscored —
    CVE-2011-4535 Public exploit EPSS 27%

    Buffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and earlier, ScadaTEC Mod…

  • Unscored —
    CVE-2011-4042 Public exploit

    An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows…

  • Unscored —
    CVE-2012-0257

    Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware …

  • Unscored —
    CVE-2012-0228

    Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote…

  • Unscored —
    CVE-2012-0226

    SQL injection vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to execut…

  • Unscored —
    CVE-2012-0258

    Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware …

  • Unscored —
    CVE-2012-0225

    Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attack…

  • Unscored —
    CVE-2011-5084

    Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to…

  • Unscored —
    CVE-2011-5085

    Unspecified vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to read or modify…

  • Unscored —
    CVE-2012-0221 Public exploit EPSS 10%

    The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLo…

  • Unscored —
    CVE-2012-0222

    The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLo…

  • Unscored —
    CVE-2012-0246

    Directory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor before 3.71.4200 allows remote …

  • Unscored —
    CVE-2012-1515

    VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allo…