Skip to content
OpenAdvisories

Archive

18 May 2012

Vulnerabilities first published on this day (UTC), newest first.

← April 2012 2012 / May /18 June 2012 →
  1. 19
  2. 231
  3. 3111
  4. 48
  5. 5 
  6. 6 
  7. 7 
  8. 83
  9. 942
  10. 10 
  11. 1119
  12. 12 
  13. 13 
  14. 145
  15. 159
  16. 1630
  17. 1721
  18. 1812
  19. 19 
  20. 20 
  21. 2143
  22. 227
  23. 235
  24. 2433
  25. 258
  26. 26 
  27. 2714
  28. 28 
  29. 2911
  30. 301
  31. 313
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2012-2341

    Cross-site request forgery (CSRF) vulnerability in the Take Control module 6.x-2.x before 6.x-2.2 for Drupal allows rem…

  • Unscored —
    CVE-2012-2120

    latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T opti…

    texlive-extra Debian
  • Unscored —
    CVE-2012-2320

    ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to b…

    connman Debian
  • Unscored —
    CVE-2012-2093

    src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary l…

    gajim Debian
  • Unscored —
    CVE-2012-2321

    The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharact…

    connman Debian
  • Unscored —
    CVE-2012-2322

    Integer overflow in the dhcpv6_get_option function in gdhcp/client.c in ConnMan before 0.85 allows remote attackers to …

    connman Debian
  • Unscored —
    CVE-2012-2118

    Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause …

    xorg-server Debian
  • Medium —
    CVE-2012-1589

    Drupal Open Redirect

    Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.

    drupal/drupal Packagist
  • Unscored —
    CVE-2012-2010

    The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium …

  • Unscored —
    CVE-2012-2337

    sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netm…

    sudo Debian
  • Unscored —
    CVE-2012-2406

    RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data…

  • Unscored —
    CVE-2012-2411

    Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attacke…