Skip to content
OpenAdvisories

Archive

31 July 2012

Vulnerabilities first published on this day (UTC), newest first.

← June 2012 2012 / July /31 August 2012 →
  1. 1 
  2. 2 
  3. 345
  4. 4 
  5. 520
  6. 6 
  7. 75
  8. 8 
  9. 910
  10. 1014
  11. 1116
  12. 1234
  13. 1312
  14. 14 
  15. 15 
  16. 1628
  17. 1799
  18. 1829
  19. 194
  20. 2017
  21. 2115
  22. 2218
  23. 2319
  24. 243
  25. 25113
  26. 2616
  27. 272
  28. 282
  29. 29 
  30. 303
  31. 3112
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • High 7.5
    CVE-2012-3444

    Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer

    The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service (process or thre…

    python-django django Debian PyPI
  • High 7.5
    CVE-2012-3443

    Django Image Field Vulnerable to Image Decompression Bombs

    The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service (memory consumption) by uploading an imag…

    python-django django Debian PyPI
  • Medium 6.1
    CVE-2012-3442

    Django Allows Redirect via Data URL

    The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scriptin…

    python-django django Debian PyPI
  • Medium —
    CVE-2012-3426

    OpenStack Keystone token expiration issues

    OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by (1) creating new tokens…

    keystone keystone Debian PyPI
  • Unscored —
    CVE-2012-3951 Public exploit EPSS 52%

    The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default passwo…

  • Unscored —
    CVE-2012-3016

    Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-3017

    Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mod…

  • Unscored —
    CVE-2012-3018

    The lockout-recovery feature in the Security Configurator component in ICONICS GENESIS32 9.22 and earlier and BizViz 9.…

  • Unscored —
    CVE-2012-3848 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scruti…

  • Unscored —
    CVE-2012-2647

    Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari allows remote attackers to modify the configured search URL, a…

  • Unscored —
    CVE-2012-2627 Public exploit

    d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote a…

  • Unscored —
    CVE-2012-2626 Public exploit EPSS 44%

    cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not requi…