Skip to content
OpenAdvisories

Archive

May 2012

Vulnerabilities first published in this month (UTC), newest first.

← April 2012 2012 / May June 2012 →
  1. 19
  2. 231
  3. 3111
  4. 48
  5. 5 
  6. 6 
  7. 7 
  8. 83
  9. 942
  10. 10 
  11. 1119
  12. 12 
  13. 13 
  14. 145
  15. 159
  16. 1630
  17. 1721
  18. 1812
  19. 19 
  20. 20 
  21. 2143
  22. 227
  23. 235
  24. 2433
  25. 258
  26. 26 
  27. 2714
  28. 28 
  29. 2911
  30. 301
  31. 313
All Critical High Medium Low Exploited only Public exploit

425 results · Feed

  • Unscored —
    CVE-2012-0663 Public exploit EPSS 28%

    Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbi…

  • Unscored —
    CVE-2012-0671

    Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

  • Unscored —
    CVE-2012-0664

    Heap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2012-0666

    Stack-based buffer overflow in the plugin in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute…

  • Unscored —
    CVE-2012-0667

    Integer signedness error in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code o…

  • Unscored —
    CVE-2012-0265

    Stack-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary cod…

  • Unscored —
    CVE-2012-0669

    Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a…

  • Unscored —
    CVE-2012-0670

    Integer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of…

  • Unscored —
    CVE-2011-3097

    The PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or poss…

  • Unscored —
    CVE-2011-3098

    Google Chrome before 19.0.1084.46 on Windows uses an incorrect search path for the Windows Media Player plug-in, which …

  • Unscored —
    CVE-2011-3084

    Google Chrome before 19.0.1084.46 does not use a dedicated process for the loading of links found on an internal page, …

  • Unscored —
    CVE-2011-3087

    Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote …

  • Unscored —
    CVE-2011-3102

    Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers t…

    libxml2 Debian
  • Unscored —
    CVE-2011-3089

    Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2011-3093

    Google Chrome before 19.0.1084.46 does not properly handle glyphs, which allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2011-3092

    The regex implementation in Google V8, as used in Google Chrome before 19.0.1084.46, allows remote attackers to cause a…

    libv8-3.14 Ubuntu
  • Unscored —
    CVE-2011-3094

    Google Chrome before 19.0.1084.46 does not properly handle Tibetan text, which allows remote attackers to cause a denia…

  • Unscored —
    CVE-2011-3088

    Google Chrome before 19.0.1084.46 does not properly draw hairlines, which allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2011-3091

    Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 19.0.1084.46 allows remote attacke…

  • Unscored —
    CVE-2011-3083

    browser/profiles/profile_impl_io_data.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp …

  • Unscored —
    CVE-2011-3100

    Google Chrome before 19.0.1084.46 does not properly draw dash paths, which allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2011-3095

    The OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly…

  • Unscored —
    CVE-2011-3096

    Use-after-free vulnerability in Google Chrome before 19.0.1084.46 on Linux allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2011-3086

    Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2011-3085

    The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote …

  • Unscored —
    CVE-2011-3099

    Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to c…

  • Unscored —
    CVE-2011-3090

    Race condition in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly ha…

  • Unscored —
    CVE-2011-3101

    Google Chrome before 19.0.1084.46 on Linux does not properly mitigate an unspecified flaw in an NVIDIA driver, which ha…

  • Unscored —
    CVE-2012-1246

    Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier might allow remote attackers to inject ar…

  • Unscored —
    CVE-2012-1248

    app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environment…

  • Unscored —
    CVE-2012-1247

    Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier, when Internet Explorer is used, allows r…

  • Unscored —
    CVE-2012-2513 Public exploit

    The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EH…

  • Unscored —
    CVE-2012-2512 Public exploit

    The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver…

  • Unscored —
    CVE-2012-2514 Public exploit

    The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver…

  • Unscored —
    CVE-2012-2611 Public exploit EPSS 44%

    The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Disp…

  • Unscored —
    CVE-2012-2612 Public exploit

    The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0…

  • Unscored —
    CVE-2012-2511 Public exploit

    The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7…

  • Unscored —
    CVE-2011-1390

    SQL injection vulnerability in the Maintenance tool in IBM Rational ClearQuest 7.1.1.x before 7.1.1.9, 7.1.2.x before 7…

  • Unscored —
    CVE-2012-2333 EPSS 28%

    Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTL…

    openssl openssl098 Debian Ubuntu
  • Unscored —
    CVE-2012-2276 Public exploit

    The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remot…