Skip to content
OpenAdvisories

Archive

9 May 2012

Vulnerabilities first published on this day (UTC), newest first.

← April 2012 2012 / May /9 June 2012 →
  1. 19
  2. 231
  3. 3111
  4. 48
  5. 5 
  6. 6 
  7. 7 
  8. 83
  9. 942
  10. 10 
  11. 1119
  12. 12 
  13. 13 
  14. 145
  15. 159
  16. 1630
  17. 1721
  18. 1812
  19. 19 
  20. 20 
  21. 2143
  22. 227
  23. 235
  24. 2433
  25. 258
  26. 26 
  27. 2714
  28. 28 
  29. 2911
  30. 301
  31. 313
All Critical High Medium Low Exploited only Public exploit

42 results · Feed

  • Unscored —
    CVE-2011-4031

    Integer underflow in the asfrtp_parse_packet function in libavformat/rtpdec_asf.c in FFmpeg before 0.8.3 allows remote …

  • Unscored —
    CVE-2012-0685

    Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted…

  • Unscored —
    CVE-2012-0684

    Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted…

  • High 7.1
    CVE-2012-1977

    WellinTech KingSCADA Missing Encryption of Sensitive Data

    WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.

    WellinTech KingSCADA
  • Unscored —
    CVE-2012-2008

    Cross-site scripting (XSS) vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 all…

  • Unscored —
    CVE-2012-2009

    Unspecified vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote auth…

  • Unscored —
    CVE-2012-2007

    SQL injection vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote at…

  • Unscored —
    CVE-2012-0780 Public exploit EPSS 15%

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

  • Unscored —
    CVE-2012-0778 EPSS 11%

    Buffer overflow in Adobe Flash Professional before CS6 allows attackers to execute arbitrary code via unspecified vecto…

  • Unscored —
    CVE-2012-2028

    Buffer overflow in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to exe…

  • Unscored —
    CVE-2012-2031 EPSS 18%

    Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2012-2027 Public exploit EPSS 13%

    Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote att…

  • Unscored —
    CVE-2012-2029

    Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2012-2026

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

  • Unscored —
    CVE-2012-2033

    Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2012-2024

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

  • Unscored —
    CVE-2012-2032

    Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2012-2025

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

  • Unscored —
    CVE-2012-2023

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

  • Unscored —
    CVE-2012-2030

    Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2012-0181 Public exploit

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —
    CVE-2012-0142 EPSS 22%

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compat…

  • Unscored —
    CVE-2012-0184 EPSS 24%

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Offi…

  • Unscored —
    CVE-2012-0167 EPSS 29%

    Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote a…

  • Unscored —
    CVE-2012-0162 EPSS 22%

    Microsoft .NET Framework 4 does not properly allocate buffers, which allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2012-0018 EPSS 25%

    Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote atta…

  • Unscored —
    CVE-2012-0178

    Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2,…

  • High 7.8
    CVE-2012-0180

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —
    CVE-2012-0161 EPSS 22%

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecif…

  • Unscored —
    CVE-2012-0176 EPSS 22%

    Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arb…

  • Unscored —
    CVE-2012-0185 EPSS 25%

    Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatib…

  • Unscored —
    CVE-2012-0141 EPSS 22%

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compat…

  • Unscored —
    CVE-2012-0174

    Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Go…

  • Unscored —
    CVE-2012-0160 EPSS 23%

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input da…

  • Unscored —
    CVE-2012-0159 EPSS 27%

    Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, …

  • Unscored —
    CVE-2012-0183 EPSS 24%

    Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 a…

  • Unscored —
    CVE-2012-0179

    Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows…

  • Unscored —
    CVE-2012-0165 EPSS 25%

    GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 do…

  • Unscored —
    CVE-2012-0143 EPSS 22%

    Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allow…

  • Unscored —
    CVE-2012-0164 EPSS 17%

    Microsoft .NET Framework 4 does not properly compare index values, which allows remote attackers to cause a denial of s…