Skip to content
OpenAdvisories

Archive

July 2012

Vulnerabilities first published in this month (UTC), newest first.

← June 2012 2012 / July August 2012 →
  1. 1 
  2. 2 
  3. 345
  4. 4 
  5. 520
  6. 6 
  7. 75
  8. 8 
  9. 910
  10. 1014
  11. 1116
  12. 1234
  13. 1312
  14. 14 
  15. 15 
  16. 1628
  17. 1799
  18. 1829
  19. 194
  20. 2017
  21. 2115
  22. 2218
  23. 2319
  24. 243
  25. 25113
  26. 2616
  27. 272
  28. 282
  29. 29 
  30. 303
  31. 3112
All Critical High Medium Low Exploited only Public exploit

66 results · Clear filters · Feed

  • Unscored —
    CVE-2012-3996 Public exploit

    TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to …

  • Unscored —
    CVE-2012-2763 Public exploit EPSS 82%

    Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and …

    gimp Debian
  • Unscored —
    CVE-2012-2020 Public exploit EPSS 65%

    Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2012-2019 Public exploit EPSS 64%

    Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2012-1493 Public exploit EPSS 63%

    F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, …

  • Medium —
    CVE-2012-2138 Public exploit EPSS 14%

    Apache Sling POST Servlets Denial of Service Vulnerability

    The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite…

    org.apache.sling:org.apache.sling.servlets.post Maven
  • Unscored —
    CVE-2012-3859 Public exploit

    Unspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack vectors, a different vulne…

  • Unscored —
    CVE-2012-2386 Public exploit EPSS 42%

    Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x befor…

  • Unscored —
    CVE-2012-3585 Public exploit

    Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns b…

  • Unscored —
    CVE-2012-1830 Public exploit

    Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted…

  • Unscored —
    CVE-2012-1831 Public exploit EPSS 16%

    Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted …

  • Unscored —
    CVE-2012-2515 Public exploit EPSS 27%

    Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHe…

  • Unscored —
    CVE-2012-2516 Public exploit EPSS 39%

    An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent P…

  • Unscored —
    CVE-2012-3845 Public exploit

    Buffer overflow in LAN Messenger 1.2.28 and earlier allows remote attackers to cause a denial of service (crash) via a …

  • Unscored —
    CVE-2012-3835 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3…

  • Unscored —
    CVE-2012-3837 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and ear…

  • Unscored —
    CVE-2012-3834 Public exploit

    SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (O…

  • Unscored —
    CVE-2012-3840 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php/users/form/user_id in MyClientBase 0.12 allow remote a…

  • Unscored —
    CVE-2012-3830 Public exploit

    Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.3 allows remote attackers t…

  • Unscored —
    CVE-2012-3836 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.0 allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2012-3839 Public exploit

    Multiple SQL injection vulnerabilities in application/core/MY_Model.php in MyClientBase 0.12 allow remote attackers to …

  • Unscored —
    CVE-2012-3831 Public exploit

    Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.1 allows remote attackers t…

  • Unscored —
    CVE-2012-3838 Public exploit

    Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/…

  • Unscored —
    CVE-2011-4029 Public exploit

    The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of ar…

    xorg-server Debian
  • Unscored —
    CVE-2012-3811 Public exploit EPSS 63%

    Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Cal…

  • Unscored —
    CVE-2012-0045 Public exploit

    The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not …