Skip to content
OpenAdvisories

Archive

June 2012

Vulnerabilities first published in this month (UTC), newest first.

← May 2012 2012 / June July 2012 →
  1. 13
  2. 22
  3. 3 
  4. 422
  5. 526
  6. 6 
  7. 717
  8. 812
  9. 912
  10. 10 
  11. 112
  12. 1224
  13. 1332
  14. 1416
  15. 156
  16. 1630
  17. 1713
  18. 181
  19. 1914
  20. 2020
  21. 2137
  22. 2211
  23. 23 
  24. 24 
  25. 257
  26. 263
  27. 2763
  28. 28 
  29. 2926
  30. 306
All Critical High Medium Low Exploited only Public exploit

405 results · Feed

  • Unscored —
    CVE-2012-2451

    The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local use…

    libconfig-inifiles-perl Debian
  • Unscored —
    CVE-2012-2388

    The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2…

    strongswan Debian
  • Unscored —
    CVE-2012-2717

    Multiple cross-site scripting (XSS) vulnerabilities in the Mobile Tools module 6.x-2.x before 6.x-2.3 for Drupal allow …

  • Low —
    CVE-2012-1989

    Puppet allows local users to overwrite arbitrary files via a symlink attack

    telnet.rb in Puppet 2.7.x before 2.7.13 and Puppet Enterprise (PE) 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows local users to overwrite arbitrary files via a symlink attack on the NET::Telnet connection log (/tmp/out.log).

    puppet puppet Debian RubyGems
  • Unscored —
    CVE-2012-3802

    Unspecified vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote authenticated users to read t…

    Web / CMS
  • Unscored —
    CVE-2011-4940

    The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7…

    python-py python2.7 Debian Azure Linux
  • Unscored —
    CVE-2012-2824

    Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-2825

    The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incor…

    libxslt Debian
  • Unscored —
    CVE-2012-2831

    Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-2827

    Use-after-free vulnerability in the UI in Google Chrome before 20.0.1132.43 on Mac OS X allows attackers to cause a den…

  • Unscored —
    CVE-2012-2815

    Google Chrome before 20.0.1132.43 allows remote attackers to obtain potentially sensitive information from a fragment i…

  • Unscored —
    CVE-2012-2834

    Integer overflow in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly …

  • Unscored —
    CVE-2012-2817

    Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-2826

    Google Chrome before 20.0.1132.43 does not properly implement texture conversion, which allows remote attackers to caus…

  • Unscored —
    CVE-2012-2828

    Multiple integer overflows in the PDF functionality in Google Chrome before 20.0.1132.43 allow remote attackers to caus…

  • Unscored —
    CVE-2012-2822

    The PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (out-of…

  • Unscored —
    CVE-2012-2818

    Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-2200

    The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain …

  • Unscored —
    CVE-2012-2821

    The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified …

  • Unscored —
    CVE-2012-2816

    Google Chrome before 20.0.1132.43 on Windows does not properly isolate sandboxed processes, which might allow remote at…

  • Unscored —
    CVE-2012-2764 Public exploit

    Untrusted search path vulnerability in Google Chrome before 20.0.1132.43 on Windows might allow local users to gain pri…

  • Unscored —
    CVE-2012-2819

    The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle u…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2012-2829

    Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 20.0.1132.43 al…

  • Unscored —
    CVE-2012-2832

    The image-codec implementation in the PDF functionality in Google Chrome before 20.0.1132.43 does not initialize an uns…

  • Unscored —
    CVE-2012-2830

    Google Chrome before 20.0.1132.43 does not properly set array values, which allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2012-2820

    Google Chrome before 20.0.1132.43 does not properly implement SVG filters, which allows remote attackers to cause a den…

  • Unscored —
    CVE-2012-2823

    Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-2807

    Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux…

    libxml2 Debian
  • Unscored —
    CVE-2012-2833

    Buffer overflow in the JS API in the PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to …

  • Unscored —
    CVE-2012-3799

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allo…

  • Unscored —
    CVE-2012-3800

    Cross-site scripting (XSS) vulnerability in og.js in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal, …

  • Unscored —
    CVE-2012-3798

    The Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when creating a local user account, allows attackers to obta…

  • Unscored —
    CVE-2012-2723

    Cross-site scripting (XSS) vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenti…

  • Unscored —
    CVE-2012-2705

    The filter_titles function in the Smart Breadcrumb module 6.x-1.x before 6.x-1.3 for Drupal does not properly convert a…

  • Unscored —
    CVE-2012-2729

    Multiple cross-site request forgery (CSRF) vulnerabilities in the SimpleMeta module 6.x-1.x before 6.x-2.0 for Drupal a…

  • Unscored —
    CVE-2012-2713

    Cross-site request forgery (CSRF) vulnerability in the BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Dr…

  • Unscored —
    CVE-2012-2730

    The Protected Node module 6.x-1.x before 6.x-1.6 for Drupal does not properly "protect node access when nodes are acces…

  • Unscored —
    CVE-2012-2728

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Node Hierarchy module 6.x-1.x before 6.x-1.5 for Drup…

  • Unscored —
    CVE-2012-2719

    The filedepot module 6.x-1.x before 6.x-1.3 for Drupal, when accessed using multiple different browsers from the same I…

  • Unscored —
    CVE-2012-2712

    Multiple cross-site scripting (XSS) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.1 for Drupal, when su…