Skip to content
OpenAdvisories

Archive

July 2012

Vulnerabilities first published in this month (UTC), newest first.

← June 2012 2012 / July August 2012 →
  1. 1 
  2. 2 
  3. 345
  4. 4 
  5. 520
  6. 6 
  7. 75
  8. 8 
  9. 910
  10. 1014
  11. 1116
  12. 1234
  13. 1312
  14. 14 
  15. 15 
  16. 1628
  17. 1799
  18. 1829
  19. 194
  20. 2017
  21. 2115
  22. 2218
  23. 2319
  24. 243
  25. 25113
  26. 2616
  27. 272
  28. 282
  29. 29 
  30. 303
  31. 3112
All Critical High Medium Low Exploited only Public exploit

66 results · Clear filters · Feed

  • Unscored —
    CVE-2012-3951 Public exploit EPSS 52%

    The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default passwo…

  • Unscored —
    CVE-2012-3848 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scruti…

  • Unscored —
    CVE-2012-2627 Public exploit

    d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote a…

  • Unscored —
    CVE-2012-2626 Public exploit EPSS 44%

    cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not requi…

  • Unscored —
    CVE-2012-2962 Public exploit EPSS 67%

    SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2…

  • Unscored —
    CVE-2012-2202 Public exploit

    Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and …

  • Unscored —
    CVE-2011-2657 Public exploit EPSS 48%

    Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in Lau…

  • Unscored —
    CVE-2012-4060 Public exploit

    Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2012-4055 Public exploit

    SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2012-4057 Public exploit

    Buffer overflow in the Player in Remote-Anything 5.60.15 allows remote attackers to execute arbitrary code via a crafte…

  • Unscored —
    CVE-2012-4054 Public exploit

    Buffer overflow in the readfile function in CPE17 Autorun Killer 1.7.1 and earlier allows physically proximate attacker…

  • Unscored —
    CVE-2012-2442 Public exploit

    Buffer overflow in the Video Manager in Nokia PC Suite 7.1.180.64 and earlier allows remote attackers to cause a denial…

  • Unscored —
    CVE-2012-2760 Public exploit

    mod_auth_openid before 0.7 for Apache uses world-readable permissions for /tmp/mod_auth_openid.db, which allows local u…

    libapache2-mod-auth-openid Debian
  • Unscored —
    CVE-2012-3571 Public exploit EPSS 13%

    ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infini…

    isc-dhcp Debian
  • Unscored —
    CVE-2012-2953 Public exploit EPSS 67%

    The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary comma…

  • Unscored —
    CVE-2012-2977 Public exploit

    The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwo…

  • Unscored —
    CVE-2012-2574 Public exploit

    SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attac…

  • Unscored —
    CVE-2012-2961 Public exploit

    SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attac…

  • Unscored —
    CVE-2012-2957 Public exploit EPSS 59%

    The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying…

  • Unscored —
    CVE-2012-2738 Public exploit EPSS 11%

    The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (l…

    vte vte Debian Alpine
  • Unscored —
    CVE-2012-2955 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mai…

  • Unscored —
    CVE-2012-2688 Public exploit EPSS 10%

    Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4…

  • Unscored —
    CVE-2012-0284 Public exploit EPSS 36%

    Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.…

  • Unscored —
    CVE-2012-1770 Public exploit

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 all…

  • Unscored —
    CVE-2012-1769 Public exploit

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 all…

  • Unscored —
    CVE-2012-1744 Public exploit

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 all…

  • Unscored —
    CVE-2012-0282 Public exploit

    Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application cras…

  • Unscored —
    CVE-2012-0276 Public exploit

    Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applica…

  • Unscored —
    CVE-2012-0277 Public exploit

    Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application cras…

  • Unscored —
    CVE-2012-4032 Public exploit EPSS 10%

    Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users …

  • Unscored —
    CVE-2012-4031 Public exploit EPSS 52%

    Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attack…

  • Medium —
    CVE-2011-4280 Public exploit

    Moodle vulnerable to XSS via bundled spikephpcoverage library

    Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.x before 2.0.2 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    moodle/moodle Packagist
  • Unscored —
    CVE-2012-1661 Public exploit EPSS 24%

    ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, w…

  • Unscored —
    CVE-2012-4000 Public exploit

    Cross-site scripting (XSS) vulnerability in the print_textinputs_var function in editor/dialog/fck_spellerpages/speller…

  • Unscored —
    CVE-2012-3350 Public exploit

    SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2012-3236 Public exploit EPSS 11%

    fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and appli…

    gimp Debian
  • Unscored —
    CVE-2012-2614 Public exploit

    Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a …

  • Unscored —
    CVE-2012-0911 Public exploit EPSS 63%

    TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafte…

  • Unscored —
    CVE-2012-3399 Public exploit EPSS 65%

    Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the…

  • Unscored —
    CVE-2012-3805 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the getAllPassedParams function in system/functions.php in Kajon…