Skip to content
OpenAdvisories

Archive

July 2012

Vulnerabilities first published in this month (UTC), newest first.

← June 2012 2012 / July August 2012 →
  1. 1 
  2. 2 
  3. 345
  4. 4 
  5. 520
  6. 6 
  7. 75
  8. 8 
  9. 910
  10. 1014
  11. 1116
  12. 1234
  13. 1312
  14. 14 
  15. 15 
  16. 1628
  17. 1799
  18. 1829
  19. 194
  20. 2017
  21. 2115
  22. 2218
  23. 2319
  24. 243
  25. 25113
  26. 2616
  27. 272
  28. 282
  29. 29 
  30. 303
  31. 3112
All Critical High Medium Low Exploited only Public exploit

536 results · Feed

  • Unscored —
    CVE-2012-2143

    The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other pr…

  • Unscored —
    CVE-2012-2281

    EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens a…

  • Unscored —
    CVE-2012-1832

    WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds …

  • Unscored —
    CVE-2012-1830 Public exploit

    Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted…

  • Unscored —
    CVE-2012-1831 Public exploit EPSS 16%

    Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted …

  • Unscored —
    CVE-2012-3847

    slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remo…

  • Unscored —
    CVE-2012-3007

    Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform …

  • Unscored —
    CVE-2012-2559

    WellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial of service (invalid po…

  • Unscored —
    CVE-2012-2560

    Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a cra…

  • Unscored —
    CVE-2012-2515 Public exploit EPSS 27%

    Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHe…

  • Unscored —
    CVE-2012-2516 Public exploit EPSS 39%

    An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent P…

  • Unscored —
    CVE-2012-3845 Public exploit

    Buffer overflow in LAN Messenger 1.2.28 and earlier allows remote attackers to cause a denial of service (crash) via a …

  • Unscored —
    CVE-2012-3835 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3…

  • Unscored —
    CVE-2012-3846

    Cross-site scripting (XSS) vulnerability in index.php in PHP-pastebin 2.1 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2012-3842

    Multiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allow remote authe…

  • Unscored —
    CVE-2012-3844

    Cross-site scripting (XSS) vulnerability in vBulletin 4.1.12 allows remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2012-3833

    Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers t…

  • Unscored —
    CVE-2012-3832

    Cross-site scripting (XSS) vulnerability in decoda/Decoda.php in Decoda before 3.2 allows remote attackers to inject ar…

  • Unscored —
    CVE-2012-3828

    Cross-site scripting (XSS) vulnerability in Joomla! 2.5.3 allows remote attackers to inject arbitrary web script or HTM…

  • Unscored —
    CVE-2012-3837 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and ear…

  • Unscored —
    CVE-2012-3834 Public exploit

    SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (O…

  • Unscored —
    CVE-2012-3840 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php/users/form/user_id in MyClientBase 0.12 allow remote a…

  • Unscored —
    CVE-2012-3830 Public exploit

    Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.3 allows remote attackers t…

  • Unscored —
    CVE-2012-3836 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.0 allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2012-3839 Public exploit

    Multiple SQL injection vulnerabilities in application/core/MY_Model.php in MyClientBase 0.12 allow remote attackers to …

  • Unscored —
    CVE-2012-3831 Public exploit

    Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.1 allows remote attackers t…

  • Unscored —
    CVE-2012-3838 Public exploit

    Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/…

  • Unscored —
    CVE-2012-3841

    Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary code and conduct DLL h…

  • Unscored —
    CVE-2012-3843

    Cross-site scripting (XSS) vulnerability in the registration page in e107, probably 1.0.1, allows remote attackers to i…

  • Unscored —
    CVE-2012-3829

    Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header.

  • Unscored —
    CVE-2011-5096

    Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (…

  • Unscored —
    CVE-2012-3368

    Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon s…

    dtach Debian
  • Unscored —
    CVE-2012-2181

    Directory traversal vulnerability in the Dojo module in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF14, and 8.0, …

  • Unscored —
    CVE-2011-4029 Public exploit

    The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of ar…

    xorg-server Debian
  • Unscored —
    CVE-2011-4028

    The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of a…

    xorg-server Debian
  • Unscored —
    CVE-2012-0876

    The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash …

    expat swish-e matanza coin3 Debian Ubuntu
  • Unscored —
    CVE-2012-1147

    readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor co…

    ghostscript apache2 xmlrpc-c vnc4 Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2012-1148

    Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers t…

    expat matanza swish-e coin3 Debian Ubuntu
  • Unscored —
    CVE-2012-3811 Public exploit EPSS 63%

    Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Cal…

  • Unscored —
    CVE-2012-2748

    Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain sensitive information via vec…