Skip to content
OpenAdvisories

Archive

July 2012

Vulnerabilities first published in this month (UTC), newest first.

← June 2012 2012 / July August 2012 →
  1. 1 
  2. 2 
  3. 345
  4. 4 
  5. 520
  6. 6 
  7. 75
  8. 8 
  9. 910
  10. 1014
  11. 1116
  12. 1234
  13. 1312
  14. 14 
  15. 15 
  16. 1628
  17. 1799
  18. 1829
  19. 194
  20. 2017
  21. 2115
  22. 2218
  23. 2319
  24. 243
  25. 25113
  26. 2616
  27. 272
  28. 282
  29. 29 
  30. 303
  31. 3112
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.5
    CVE-2012-3444

    Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer

    The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service (process or thre…

    python-django django Debian PyPI
  • High 7.5
    CVE-2012-3443

    Django Image Field Vulnerable to Image Decompression Bombs

    The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service (memory consumption) by uploading an imag…

    python-django django Debian PyPI
  • High —
    CVE-2012-2140

    Mail Gem Improper Input Validation vulnerability

    The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.

    mail ruby-mail Debian RubyGems
  • High —
    CVE-2012-0796

    PHPMailer vulnerable to email header injection

    class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving …

    phpmailer/phpmailer Packagist
  • High —
    CVE-2012-3376

    Client BlockTokens not checked in Apache Hadoop

    DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow remote clients to read arbitrary blocks, write to blocks to …

    org.apache.hadoop:hadoop-client Maven
  • High 8.8
    CVE-2012-0175 EPSS 26%

    The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2,…

  • High 7.8
    CVE-2012-1854 Exploited EPSS 21%

    Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; …

    KEV Apr 13, 2026
  • High 7.4
    CVE-2012-3372

    The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private…