Skip to content
OpenAdvisories

Archive

July 2012

Vulnerabilities first published in this month (UTC), newest first.

← June 2012 2012 / July August 2012 →
  1. 1 
  2. 2 
  3. 345
  4. 4 
  5. 520
  6. 6 
  7. 75
  8. 8 
  9. 910
  10. 1014
  11. 1116
  12. 1234
  13. 1312
  14. 14 
  15. 15 
  16. 1628
  17. 1799
  18. 1829
  19. 194
  20. 2017
  21. 2115
  22. 2218
  23. 2319
  24. 243
  25. 25113
  26. 2616
  27. 272
  28. 282
  29. 29 
  30. 303
  31. 3112
All Critical High Medium Low Exploited only Public exploit

536 results · Feed

  • Unscored —
    CVE-2012-2020 Public exploit EPSS 65%

    Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2012-2019 Public exploit EPSS 64%

    Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via …

  • High 8.8
    CVE-2012-0175 EPSS 26%

    The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2,…

  • Unscored —
    CVE-2012-1862 EPSS 11%

    Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect …

  • Unscored —
    CVE-2012-1861 EPSS 15%

    Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 G…

  • Unscored —
    CVE-2012-1522 EPSS 21%

    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  • Unscored —
    CVE-2012-1870

    The CBC mode in the TLS protocol, as used in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista S…

  • Unscored —
    CVE-2012-1893

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —
    CVE-2012-1890

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —
    CVE-2012-1859 EPSS 23%

    Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoin…

  • Critical 9.8
    CVE-2012-1891 EPSS 29%

    Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Component…

  • Unscored —
    CVE-2012-1863 EPSS 23%

    Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Serv…

  • Unscored —
    CVE-2012-1524 EPSS 22%

    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  • High 7.8
    CVE-2012-1854 Exploited EPSS 21%

    Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; …

    KEV Apr 13, 2026
  • Unscored —
    CVE-2012-1860 EPSS 12%

    Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold…

  • Unscored —
    CVE-2012-1894

    Microsoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft Office 2011/" directory a…

  • Unscored —
    CVE-2012-1493 Public exploit EPSS 63%

    F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, …

  • Unscored —
    CVE-2012-3812

    Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2,…

    asterisk Debian
  • Unscored —
    CVE-2012-3238

    Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before …

  • Medium —
    CVE-2012-2138 Public exploit EPSS 14%

    Apache Sling POST Servlets Denial of Service Vulnerability

    The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite…

    org.apache.sling:org.apache.sling.servlets.post Maven
  • Unscored —
    CVE-2012-2970

    The Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of service (device hang) via ne…

  • Unscored —
    CVE-2012-3859 Public exploit

    Unspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack vectors, a different vulne…

  • Unscored —
    CVE-2012-2447

    Cross-site request forgery (CSRF) vulnerability in accountmgr/adminupdate.php in the WebAdmin Portal in Netsweeper allo…

  • Unscored —
    CVE-2012-2446

    Cross-site scripting (XSS) vulnerability in tools/local_lookup.php in the WebAdmin Portal in Netsweeper allows remote a…

  • Unscored —
    CVE-2012-3863

    channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3…

    asterisk Debian
  • High 7.4
    CVE-2012-3372

    The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private…

  • Unscored —
    CVE-2012-3374

    Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to…

    pidgin Debian
  • Unscored —
    CVE-2012-2386 Public exploit EPSS 42%

    Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x befor…

  • Unscored —
    CVE-2012-2642

    Cross-site scripting (XSS) vulnerability in the MT4i plugin 3.1 beta 4 and earlier for Movable Type allows remote attac…

  • Unscored —
    CVE-2012-2644

    Cross-site scripting (XSS) vulnerability in the MT4i plugin 3.1 beta 4 and earlier for Movable Type allows remote attac…

  • Unscored —
    CVE-2012-2643

    Cross-site scripting (XSS) vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2012-3585 Public exploit

    Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns b…

  • Unscored —
    CVE-2012-2018

    Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 8.x, 9.0x, and 9.1x allows remote attacker…

  • Unscored —
    CVE-2012-0302

    Cross-site scripting (XSS) vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote atta…

  • Unscored —
    CVE-2012-0303

    Multiple cross-site request forgery (CSRF) vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 …

  • Unscored —
    CVE-2012-0301

    Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to h…

  • Unscored —
    CVE-2012-0300

    Brightmail Control Center in Symantec Message Filter 6.3 does not properly restrict establishment of sessions to the li…

  • Unscored —
    CVE-2012-2640

    The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI valu…

  • Unscored —
    CVE-2012-2641

    Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2012-0410

    Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrar…