Skip to content
OpenAdvisories

Archive

May 2012

Vulnerabilities first published in this month (UTC), newest first.

← April 2012 2012 / May June 2012 →
  1. 19
  2. 231
  3. 3111
  4. 48
  5. 5 
  6. 6 
  7. 7 
  8. 83
  9. 942
  10. 10 
  11. 1119
  12. 12 
  13. 13 
  14. 145
  15. 159
  16. 1630
  17. 1721
  18. 1812
  19. 19 
  20. 20 
  21. 2143
  22. 227
  23. 235
  24. 2433
  25. 258
  26. 26 
  27. 2714
  28. 28 
  29. 2911
  30. 301
  31. 313
All Critical High Medium Low Exploited only Public exploit

425 results · Feed

  • Unscored —
    CVE-2011-3293

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server…

  • Unscored —
    CVE-2011-3285

    CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances (ASA) 5500 series devices wit…

  • Unscored —
    CVE-2011-3317

    Multiple cross-site scripting (XSS) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) …

  • Unscored —
    CVE-2011-3309

    Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 process IKE requests despite…

  • Unscored —
    CVE-2011-3283

    Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service (Metro subsystem crash) via a f…

  • Unscored —
    CVE-2011-3289

    Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery f…

  • Unscored —
    CVE-2011-2583

    Cisco Unified Contact Center Express (aka CCX) 8.0 and 8.5 allows remote attackers to cause a denial of service via net…

  • Unscored —
    CVE-2011-2586

    The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assisted remote attackers to cause a denial of service (device c…

  • Unscored —
    CVE-2011-2578

    Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption) via ma…

  • Unscored —
    CVE-2012-0333

    Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XM…

  • Unscored —
    CVE-2012-0362

    The extended ACL functionality in Cisco IOS 12.2(58)SE2 and 15.0(1)SE discards all lines that end with a log or time ke…

  • Unscored —
    CVE-2012-0335

    Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform prox…

  • Unscored —
    CVE-2012-0338

    Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class command…

  • Unscored —
    CVE-2012-0337

    SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to…

  • Unscored —
    CVE-2012-0361

    The sccp-protocol component in Cisco IP Communicator (CIPC) 7.0 through 8.6 does not limit the rate of SCCP messages to…

  • Unscored —
    CVE-2012-0339

    Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class command…

  • Unscored —
    CVE-2012-0279

    Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\Quest Sh…

  • Medium 6.5
    CVE-2012-0878

    Paste Script has improper group memberships permissions

    Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem.

    paste pastescript pastescript Debian PyPI
  • Unscored —
    CVE-2012-2162

    The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication af…

  • Unscored —
    CVE-2012-2217

    The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before …

  • Unscored —
    CVE-2011-3079

    The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox …

  • Unscored —
    CVE-2011-3081

    Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2011-3078

    Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2011-3080

    Race condition in the Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168 allows att…

  • Unscored —
    CVE-2012-1521

    Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a…