Skip to content
OpenAdvisories

Archive

June 2012

Vulnerabilities first published in this month (UTC), newest first.

← May 2012 2012 / June July 2012 →
  1. 13
  2. 22
  3. 3 
  4. 422
  5. 526
  6. 6 
  7. 717
  8. 812
  9. 912
  10. 10 
  11. 112
  12. 1224
  13. 1332
  14. 1416
  15. 156
  16. 1630
  17. 1713
  18. 181
  19. 1914
  20. 2020
  21. 2137
  22. 2211
  23. 23 
  24. 24 
  25. 257
  26. 263
  27. 2763
  28. 28 
  29. 2926
  30. 306
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High —
    CVE-2012-2695

    activerecord vulnerable to SQL Injection

    The Active Record component in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL inj…

    activerecord RubyGems
  • High —
    CVE-2012-2395

    Cobbler subject to Command Injection

    Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.

    cobbler PyPI
  • High 8.8
    CVE-2012-1889 Exploited Public exploit EPSS 84%

    Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacke…

    KEV Jun 8, 2022
  • High 8.4
    CVE-2012-1867

    Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,…

  • High 8.1
    CVE-2012-1879 EPSS 20%

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to ex…

  • High 7.5
    CVE-2012-2034 Exploited

    Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x…

    KEV Mar 28, 2022
  • High —
    CVE-2012-1826

    dotCMS allows remote authenticated users to execute arbitrary Java code

    dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template.

    com.dotcms:dotcms Maven