Skip to content
OpenAdvisories

Archive

July 2012

Vulnerabilities first published in this month (UTC), newest first.

← June 2012 2012 / July August 2012 →
  1. 1 
  2. 2 
  3. 345
  4. 4 
  5. 520
  6. 6 
  7. 75
  8. 8 
  9. 910
  10. 1014
  11. 1116
  12. 1234
  13. 1312
  14. 14 
  15. 15 
  16. 1628
  17. 1799
  18. 1829
  19. 194
  20. 2017
  21. 2115
  22. 2218
  23. 2319
  24. 243
  25. 25113
  26. 2616
  27. 272
  28. 282
  29. 29 
  30. 303
  31. 3112
All Critical High Medium Low Exploited only Public exploit

536 results · Feed

  • Unscored —
    CVE-2012-3388

    The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly int…

  • Unscored —
    CVE-2012-3393

    Cross-site scripting (XSS) vulnerability in repository/lib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 allo…

  • Unscored —
    CVE-2012-3394

    auth/ldap/ntlmsso_attempt.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2…

  • Unscored —
    CVE-2012-0305

    Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 be…

  • Unscored —
    CVE-2012-2953 Public exploit EPSS 67%

    The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary comma…

  • Unscored —
    CVE-2012-2977 Public exploit

    The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwo…

  • Unscored —
    CVE-2012-2976

    The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell…

  • Unscored —
    CVE-2012-2574 Public exploit

    SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attac…

  • Unscored —
    CVE-2012-2961 Public exploit

    SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attac…

  • Unscored —
    CVE-2012-2957 Public exploit EPSS 59%

    The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying…

  • Unscored —
    CVE-2011-3149

    The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not…

    pam Debian
  • Unscored —
    CVE-2011-3148

    Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1…

    pam Debian
  • Unscored —
    CVE-2011-3464

    Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote a…

  • Unscored —
    CVE-2011-2199

    Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitr…

    tftp-hpa Debian
  • Unscored —
    CVE-2012-4045

    Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbi…

  • Unscored —
    CVE-2012-3384

    Cross-site request forgery (CSRF) vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to …

    wordpress Debian
  • Unscored —
    CVE-2012-3383

    The map_meta_cap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when the multisite feature i…

    wordpress Debian
  • Unscored —
    CVE-2012-3385

    WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows …

    wordpress Debian
  • Unscored —
    CVE-2012-2737

    The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does …

    accountsservice Debian
  • Unscored —
    CVE-2012-2113

    Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (app…

    tiff Debian
  • Unscored —
    CVE-2012-2088

    Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote …

    tiff Debian
  • Unscored —
    CVE-2012-3357

    The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly handle log messages when a…

  • Unscored —
    CVE-2012-3356

    The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authoriz…

  • Medium —
    CVE-2012-3361

    OpenStack Nova Arbitrary file injection/corruption through directory traversal issues

    virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image.

    nova nova Debian PyPI
  • Medium —
    CVE-2012-3360

    OpenStack Nova Directory traversal vulnerability

    Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote authenticated users to write arbitrary files to the disk image via a .. (dot dot) in …

    nova nova Debian PyPI
  • Unscored —
    CVE-2012-2738 Public exploit EPSS 11%

    The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (l…

    vte vte Debian Alpine
  • Unscored —
    CVE-2012-2751

    ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request …

    modsecurity-apache Debian
  • Unscored —
    CVE-2009-5031

    ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attack…

  • Unscored —
    CVE-2012-2358

    Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an ac…

  • Unscored —
    CVE-2012-2365

    Cross-site scripting (XSS) vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allow…

  • Unscored —
    CVE-2012-2366

    mod/data/preset.php in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not properly iterate through an array, whi…

  • Unscored —
    CVE-2012-2357

    The Multi-Authentication feature in the Central Authentication Service (CAS) functionality in auth/cas/cas_form.html in…

  • Unscored —
    CVE-2012-2360

    Cross-site scripting (XSS) vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.…

  • Unscored —
    CVE-2012-2362

    Cross-site scripting (XSS) vulnerability in blog/lib.php in the blog implementation in Moodle 1.9.x before 1.9.18, when…

  • Medium —
    CVE-2012-2356

    Moodle Authentication Bypass in Question-Bank

    The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a save_question action.

    moodle/moodle Packagist
  • Medium —
    CVE-2012-2353

    Moodle Exposes Sensitive User Information

    Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive user information from hidden fields by leveraging the teacher role and navigating to "Enrolled users" under the Users Settings section.

    moodle/moodle Packagist
  • Unscored —
    CVE-2012-2363

    SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x before 1.9.18 allows r…

  • Unscored —
    CVE-2012-2359

    admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authent…

  • Unscored —
    CVE-2012-2361

    Cross-site scripting (XSS) vulnerability in admin/webservice/forms.php in the web services implementation in Moodle 2.0…

  • Unscored —
    CVE-2012-2364

    Cross-site scripting (XSS) vulnerability in lib/filelib.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x…