Skip to content
OpenAdvisories

Archive

5 July 2012

Vulnerabilities first published on this day (UTC), newest first.

20 results · Feed

  • Unscored —
    CVE-2012-3585 Public exploit

    Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns b…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 8.x, 9.0x, and 9.1x allows remote attacker…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote atta…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 …

  • Unscored —

    Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to h…

  • Unscored —

    Brightmail Control Center in Symantec Message Filter 6.3 does not properly restrict establishment of sessions to the li…

  • Unscored —

    The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI valu…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web scrip…

  • Unscored —

    Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrar…

  • Unscored —

    The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other pr…

  • Unscored —

    EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens a…

  • Unscored —

    WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds …

  • Unscored —
    CVE-2012-1830 Public exploit

    Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted…

  • Unscored —
    CVE-2012-1831 Public exploit EPSS 16%

    Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted …

  • Unscored —

    slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remo…

  • Unscored —

    Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform …

  • Unscored —

    WellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial of service (invalid po…

  • Unscored —

    Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a cra…

  • Unscored —
    CVE-2012-2515 Public exploit EPSS 27%

    Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHe…

  • Unscored —
    CVE-2012-2516 Public exploit EPSS 39%

    An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent P…