Archive
June 2012
Vulnerabilities first published in this month (UTC), newest first.
405 results · Feed
-
Unscored —
The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 …
-
Unscored —
The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access t…
-
Unscored —
Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service (memory co…
-
High 8.8
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacke…
KEV Jun 8, 2022 -
Unscored —
CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to …
-
Unscored —
The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and…
-
Unscored —CVE-2012-0173 EPSS 21%
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows …
-
Unscored —
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…
-
Unscored —CVE-2012-1874 EPSS 24%
Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows user-assisted remote attac…
-
Unscored —
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …
-
Unscored —CVE-2012-1881 EPSS 24%
Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execut…
-
High 8.4
Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,…
-
Unscored —
Race condition in the thread-creation implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows XP S…
-
Unscored —
The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lyn…
-
Unscored —CVE-2012-1857 EPSS 11%
Cross-site scripting (XSS) vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote…
-
High 8.1CVE-2012-1879 EPSS 20%
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to ex…
-
Unscored —CVE-2012-1855 EPSS 20%
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remot…
-
Unscored —CVE-2012-1878 EPSS 22%
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to ex…
-
Unscored —CVE-2012-1873 EPSS 18%
Microsoft Internet Explorer 7 through 9 does not properly create and initialize string data, which allows remote attack…
-
Unscored —CVE-2012-1877 EPSS 24%
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to ex…
-
Unscored —
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …
-
Unscored —CVE-2012-1523 EPSS 22%
Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to ex…
-
Unscored —CVE-2012-1849 EPSS 18%
Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gai…
-
Unscored —CVE-2012-1880 EPSS 24%
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to ex…
-
Unscored —CVE-2012-1882 EPSS 14%
Microsoft Internet Explorer 6 through 9 does not block cross-domain scrolling events, which allows remote attackers to …
-
Medium 6.1
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to inject a…
-
Unscored —
Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which all…
-
Unscored —
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …
-
Unscored —
Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a d…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the status program on the ForeScout CounterACT appliance with so…
-
Unscored —CVE-2012-2959 Public exploit
Cross-site request forgery (CSRF) vulnerability in password-manager/changePasswords.do in BMC Identity Management Suite…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Microdasys before 3.5.1-B708, as used in Bloxx Web Filtering before …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bloxx Web Filtering befor…
-
Unscored —
Bloxx Web Filtering before 5.0.14 does not use a salt during calculation of a password hash, which makes it easier for …
-
Unscored —
Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging…
-
Unscored —
Integer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before …
-
Unscored —
Stack-based buffer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Bloxx Web Filtering before 5.0.14 allow (1) remote attackers to …
-
Unscored —
Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.…
-
Unscored —
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x…