Skip to content
OpenAdvisories

Archive

12 July 2012

Vulnerabilities first published on this day (UTC), newest first.

← June 2012 2012 / July /12 August 2012 →
  1. 1 
  2. 2 
  3. 345
  4. 4 
  5. 520
  6. 6 
  7. 75
  8. 8 
  9. 910
  10. 1014
  11. 1116
  12. 1234
  13. 1312
  14. 14 
  15. 15 
  16. 1628
  17. 1799
  18. 1829
  19. 194
  20. 2017
  21. 2115
  22. 2218
  23. 2319
  24. 243
  25. 25113
  26. 2616
  27. 272
  28. 282
  29. 29 
  30. 303
  31. 3112
All Critical High Medium Low Exploited only Public exploit

34 results · Feed

  • Unscored —
    CVE-2012-1661 Public exploit EPSS 24%

    ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, w…

  • Unscored —
    CVE-2012-4000 Public exploit

    Cross-site scripting (XSS) vulnerability in the print_textinputs_var function in editor/dialog/fck_spellerpages/speller…

  • Unscored —
    CVE-2012-3997

    Multiple cross-site scripting (XSS) vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to inj…

  • Unscored —
    CVE-2012-3998

    Multiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2012-3350 Public exploit

    SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2012-3377

    Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC me…

    vlc Debian
  • Unscored —
    CVE-2012-3236 Public exploit EPSS 11%

    fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and appli…

    gimp Debian
  • Unscored —
    CVE-2012-3999

    Cross-site scripting (XSS) vulnerability in admin/login.php in Sticky Notes 0.3.09062012.4 and earlier allows remote at…

  • Unscored —
    CVE-2012-3382

    Cross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbidde…

    mono Debian
  • Unscored —
    CVE-2012-2842

    Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-2843

    Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-2614 Public exploit

    Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a …

  • Unscored —
    CVE-2012-2844

    The PDF functionality in Google Chrome before 20.0.1132.57 does not properly handle JavaScript code, which allows remot…

  • Medium 6.5
    CVE-2012-0215

    Trytond allows modification of privileges of arbitrary users

    model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenticated users to modify the privileges of arbitrary users via…

    trytond tryton-server Debian PyPI
  • Unscored —
    CVE-2012-1163

    Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrar…

    libzip Debian
  • Unscored —
    CVE-2012-1037

    PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated use…

  • Unscored —
    CVE-2012-1174

    The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allow…

    systemd Debian
  • Unscored —
    CVE-2012-1162

    Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause …

    libzip Debian
  • Unscored —
    CVE-2012-3362

    Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the …

  • Unscored —
    CVE-2012-2653

    arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, …

    arpwatch Debian
  • Unscored —
    CVE-2012-2351

    The default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username attribute to Remote u…

  • Unscored —
    CVE-2012-0911 Public exploit EPSS 63%

    TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafte…

  • Unscored —
    CVE-2012-1620

    slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proxi…

    suckless-tools Debian
  • Unscored —
    CVE-2012-3399 Public exploit EPSS 65%

    Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the…

  • High —
    CVE-2012-3376

    Client BlockTokens not checked in Apache Hadoop

    DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow remote clients to read arbitrary blocks, write to blocks to …

    org.apache.hadoop:hadoop-client Maven
  • Unscored —
    CVE-2012-3805 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the getAllPassedParams function in system/functions.php in Kajon…

  • Unscored —
    CVE-2012-3996 Public exploit

    TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to …

  • Unscored —
    CVE-2012-3881

    Multiple SQL injection vulnerabilities in RTG 0.7.4 and RTG2 0.9.2 allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2012-2763 Public exploit EPSS 82%

    Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and …

    gimp Debian
  • Unscored —
    CVE-2012-3076

    The administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows remote authenticated users …

  • Unscored —
    CVE-2012-3075

    The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authentica…

  • Unscored —
    CVE-2012-3074

    An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arb…

  • Unscored —
    CVE-2012-3073

    The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, an…

  • Unscored —
    CVE-2012-2486

    The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePrese…