Skip to content
OpenAdvisories

Archive

May 2012

Vulnerabilities first published in this month (UTC), newest first.

← April 2012 2012 / May June 2012 →
  1. 19
  2. 231
  3. 3111
  4. 48
  5. 5 
  6. 6 
  7. 7 
  8. 83
  9. 942
  10. 10 
  11. 1119
  12. 12 
  13. 13 
  14. 145
  15. 159
  16. 1630
  17. 1721
  18. 1812
  19. 19 
  20. 20 
  21. 2143
  22. 227
  23. 235
  24. 2433
  25. 258
  26. 26 
  27. 2714
  28. 28 
  29. 2911
  30. 301
  31. 313
All Critical High Medium Low Exploited only Public exploit

425 results · Feed

  • Unscored —
    CVE-2012-2030

    Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2012-0181 Public exploit

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —
    CVE-2012-0142 EPSS 22%

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compat…

  • Unscored —
    CVE-2012-0184 EPSS 24%

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Offi…

  • Unscored —
    CVE-2012-0167 EPSS 29%

    Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote a…

  • Unscored —
    CVE-2012-0162 EPSS 22%

    Microsoft .NET Framework 4 does not properly allocate buffers, which allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2012-0018 EPSS 25%

    Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote atta…

  • Unscored —
    CVE-2012-0178

    Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2,…

  • High 7.8
    CVE-2012-0180

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —
    CVE-2012-0161 EPSS 22%

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecif…

  • Unscored —
    CVE-2012-0176 EPSS 22%

    Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arb…

  • Unscored —
    CVE-2012-0185 EPSS 25%

    Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatib…

  • Unscored —
    CVE-2012-0141 EPSS 22%

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compat…

  • Unscored —
    CVE-2012-0174

    Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Go…

  • Unscored —
    CVE-2012-0160 EPSS 23%

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input da…

  • Unscored —
    CVE-2012-0159 EPSS 27%

    Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, …

  • Unscored —
    CVE-2012-0183 EPSS 24%

    Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 a…

  • Unscored —
    CVE-2012-0179

    Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows…

  • Unscored —
    CVE-2012-0165 EPSS 25%

    GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 do…

  • Unscored —
    CVE-2012-0143 EPSS 22%

    Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allow…

  • Unscored —
    CVE-2012-0164 EPSS 17%

    Microsoft .NET Framework 4 does not properly compare index values, which allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2012-1847 EPSS 25%

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Offi…

  • Unscored —
    CVE-2012-1848

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —
    CVE-2012-1675 Public exploit EPSS 77%

    The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2…

  • Unscored —
    CVE-2012-0674

    Safari in Apple iOS before 5.1.1 allows remote attackers to spoof the location bar's URL via a crafted web site.

  • Unscored —
    CVE-2012-0672

    WebKit in Apple iOS before 5.1.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2012-0779 Public exploit EPSS 87%

    Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 o…

  • Unscored —
    CVE-2012-0202 Public exploit EPSS 54%

    Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.…

  • Unscored —
    CVE-2012-0745

    The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with cu…

  • Unscored —
    CVE-2012-1517

    The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to ca…

  • Unscored —
    CVE-2012-1516

    The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which all…

  • Unscored —
    CVE-2012-2449

    VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 t…

  • Unscored —
    CVE-2012-2448

    VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial …

  • Unscored —
    CVE-2012-2450

    VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 th…

  • Unscored —
    CVE-2011-3620

    Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to…

  • Unscored —
    CVE-2012-1328

    Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration…

  • Unscored —
    CVE-2012-0581

    Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 a…

  • Unscored —
    CVE-2012-0567

    Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0…

  • Unscored —
    CVE-2012-0582

    Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, …

  • Unscored —
    CVE-2012-0564

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50 and 8.5…