Skip to content
OpenAdvisories

Archive

17 June 2012

Vulnerabilities first published on this day (UTC), newest first.

← May 2012 2012 / June /17 July 2012 →
  1. 13
  2. 22
  3. 3 
  4. 422
  5. 526
  6. 6 
  7. 717
  8. 812
  9. 912
  10. 10 
  11. 112
  12. 1224
  13. 1332
  14. 1416
  15. 156
  16. 1630
  17. 1713
  18. 181
  19. 1914
  20. 2020
  21. 2137
  22. 2211
  23. 23 
  24. 24 
  25. 257
  26. 263
  27. 2763
  28. 28 
  29. 2926
  30. 306
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2012-0037 EPSS 14%

    Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x…

  • Unscored —
    CVE-2012-3577 Public exploit EPSS 13%

    Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPres…

  • Unscored —
    CVE-2012-3578 Public exploit

    Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPres…

  • Unscored —
    CVE-2012-2691

    The mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which a…

  • Unscored —
    CVE-2012-2668

    libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the…

  • Unscored —
    CVE-2012-2692

    MantisBT before 1.2.11 does not check the delete_attachments_threshold permission when form_security_validation is set …

  • Unscored —
    CVE-2012-2090

    Multiple format string vulnerabilities in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted re…

    flightgear simgear Debian
  • Unscored —
    CVE-2012-2091

    Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attacker…

    flightgear simgear Debian
  • Unscored —
    CVE-2012-2693

    libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have th…

    libvirt Debian
  • Unscored —
    CVE-2012-2672

    Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users t…

    mojarra Debian
  • Medium 5.3
    CVE-2012-2417

    PyCrypto makes Use of Insufficiently Random Values

    PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.

    pycrypto PyPI
  • Medium —
    CVE-2012-2671

    Rack-Cache caches sensitive headers

    The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie and other sensitive headers, which allows attackers to obtain sensitive cookie information, hijack web sessions, or have other unspecified impact by accessing the cache.

    rack-cache ruby-rack-cache Debian RubyGems
  • Unscored —
    CVE-2012-2670

    manageuser.php in Collabtive before 0.7.6 allows remote authenticated users, and possibly unauthenticated attackers, to…