Skip to content
OpenAdvisories

Archive

May 2012

Vulnerabilities first published in this month (UTC), newest first.

← April 2012 2012 / May June 2012 →
  1. 19
  2. 231
  3. 3111
  4. 48
  5. 5 
  6. 6 
  7. 7 
  8. 83
  9. 942
  10. 10 
  11. 1119
  12. 12 
  13. 13 
  14. 145
  15. 159
  16. 1630
  17. 1721
  18. 1812
  19. 19 
  20. 20 
  21. 2143
  22. 227
  23. 235
  24. 2433
  25. 258
  26. 26 
  27. 2714
  28. 28 
  29. 2911
  30. 301
  31. 313
All Critical High Medium Low Exploited only Public exploit

425 results · Feed

  • Unscored —
    CVE-2012-2277 Public exploit

    The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remot…

  • Unscored —
    CVE-2012-1804

    The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read a…

  • Critical 9.8
    CVE-2012-1823 Exploited Public exploit Scanner template EPSS 100%

    sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does no…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2012-2336 Public exploit EPSS 52%

    sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does no…

  • Unscored —
    CVE-2012-2335 EPSS 34%

    php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection …

  • Unscored —
    CVE-2012-2311 Public exploit EPSS 69%

    sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does no…

  • Unscored —
    CVE-2012-2329 Public exploit EPSS 62%

    Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote a…

  • Unscored —
    CVE-2012-0659

    Integer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or caus…

  • Unscored —
    CVE-2012-0662

    Integer overflow in the Security Framework in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2012-0651

    The directory server in Directory Service in Apple Mac OS X 10.6.8 allows remote attackers to obtain sensitive informat…

  • Unscored —
    CVE-2012-0661

    Use-after-free vulnerability in QuickTime in Apple Mac OS X 10.7.x before 10.7.4 allows remote attackers to execute arb…

  • Unscored —
    CVE-2012-0655

    libsecurity in Apple Mac OS X before 10.7.4 does not properly restrict the length of RSA keys within X.509 certificates…

  • Unscored —
    CVE-2012-0654

    libsecurity in Apple Mac OS X before 10.7.4 accesses uninitialized memory locations during the processing of X.509 cert…

  • Unscored —
    CVE-2012-0675

    Time Machine in Apple Mac OS X before 10.7.4 does not require continued use of SRP-based authentication after this auth…

  • Unscored —
    CVE-2012-0657

    Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically prox…

  • Unscored —
    CVE-2012-0676

    WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, whic…

  • Unscored —
    CVE-2012-0656

    Race condition in LoginUIFramework in Apple Mac OS X 10.7.x before 10.7.4, when the Guest account is enabled, allows ph…

  • Unscored —
    CVE-2012-0652

    Login Window in Apple Mac OS X 10.7.3, when Legacy File Vault or networked home directories are enabled, does not prope…

  • Unscored —
    CVE-2012-0660

    Buffer underflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or caus…

  • Unscored —
    CVE-2012-0658

    Buffer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause…

  • Unscored —
    CVE-2012-0649

    Race condition in the initialization routine in blued in Bluetooth in Apple Mac OS X before 10.7.4 allows local users t…

  • Unscored —
    CVE-2011-4031

    Integer underflow in the asfrtp_parse_packet function in libavformat/rtpdec_asf.c in FFmpeg before 0.8.3 allows remote …

  • Unscored —
    CVE-2012-0685

    Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted…

  • Unscored —
    CVE-2012-0684

    Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted…

  • High 7.1
    CVE-2012-1977

    WellinTech KingSCADA Missing Encryption of Sensitive Data

    WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.

    WellinTech KingSCADA
  • Unscored —
    CVE-2012-2008

    Cross-site scripting (XSS) vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 all…

  • Unscored —
    CVE-2012-2009

    Unspecified vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote auth…

  • Unscored —
    CVE-2012-2007

    SQL injection vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote at…

  • Unscored —
    CVE-2012-0780 Public exploit EPSS 15%

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

  • Unscored —
    CVE-2012-0778 EPSS 11%

    Buffer overflow in Adobe Flash Professional before CS6 allows attackers to execute arbitrary code via unspecified vecto…

  • Unscored —
    CVE-2012-2028

    Buffer overflow in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to exe…

  • Unscored —
    CVE-2012-2031 EPSS 18%

    Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2012-2027 Public exploit EPSS 13%

    Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote att…

  • Unscored —
    CVE-2012-2029

    Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2012-2026

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

  • Unscored —
    CVE-2012-2033

    Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2012-2024

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

  • Unscored —
    CVE-2012-2032

    Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2012-2025

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

  • Unscored —
    CVE-2012-2023

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption…