Skip to content
OpenAdvisories

Archive

July 2012

Vulnerabilities first published in this month (UTC), newest first.

← June 2012 2012 / July August 2012 →
  1. 1 
  2. 2 
  3. 345
  4. 4 
  5. 520
  6. 6 
  7. 75
  8. 8 
  9. 910
  10. 1014
  11. 1116
  12. 1234
  13. 1312
  14. 14 
  15. 15 
  16. 1628
  17. 1799
  18. 1829
  19. 194
  20. 2017
  21. 2115
  22. 2218
  23. 2319
  24. 243
  25. 25113
  26. 2616
  27. 272
  28. 282
  29. 29 
  30. 303
  31. 3112
All Critical High Medium Low Exploited only Public exploit

536 results · Feed

  • Unscored —
    CVE-2012-1730

    Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0…

  • Unscored —
    CVE-2012-1752

    Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability, related to Kernel/NFS.

  • Unscored —
    CVE-2012-1745

    Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0…

  • Unscored —
    CVE-2012-1689

    Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier, allows remote authenticate…

  • Unscored —
    CVE-2012-1728

    Unspecified vulnerability in the Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality an…

  • Unscored —
    CVE-2012-1740

    Unspecified vulnerability in the Oracle Application Express Listener component in Oracle Application Express Listener 1…

  • Unscored —
    CVE-2012-1742

    Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via unkno…

  • Unscored —
    CVE-2012-1746

    Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0…

  • Unscored —
    CVE-2012-1732

    Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidential…

  • Unscored —
    CVE-2012-1715

    Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0…

  • Unscored —
    CVE-2012-1748

    Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote a…

  • Unscored —
    CVE-2012-1736

    Unspecified vulnerability in the Oracle MapViewer component in Oracle Fusion Middleware 10.1.3.1 allows remote attacker…

  • Unscored —
    CVE-2012-0282 Public exploit

    Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application cras…

  • Unscored —
    CVE-2012-0276 Public exploit

    Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applica…

  • Unscored —
    CVE-2012-0277 Public exploit

    Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application cras…

  • Medium 6.5
    CVE-2012-1571

    file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Docum…

    file Debian
  • Unscored —
    CVE-2012-4032 Public exploit Scanner template EPSS 10%

    Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users …

  • Unscored —
    CVE-2012-4031 Public exploit EPSS 52%

    Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attack…

  • Unscored —
    CVE-2012-3241

    The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows…

  • Unscored —
    CVE-2012-3240

    The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges …

  • Unscored —
    CVE-2012-3355

    (1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.…

    rhythmbox Debian
  • Low —
    CVE-2012-3371

    OpenStack Nova Scheduler denial of service through scheduler_hints

    The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang) via a re…

    nova nova Debian PyPI
  • Unscored —
    CVE-2012-0794

    The rc4encrypt function in lib/moodlelib.php in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and…

  • High —
    CVE-2012-0796

    PHPMailer vulnerable to email header injection

    class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving …

    phpmailer/phpmailer Packagist
  • Unscored —
    CVE-2012-0792

    mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other detail…

  • Unscored —
    CVE-2012-0795

    Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does not validate e-mail add…

  • Unscored —
    CVE-2012-0798

    The self-enrolment functionality in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 allows remote authenticated users …

  • Unscored —
    CVE-2012-0799

    Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attacker…

  • Unscored —
    CVE-2012-0801

    lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle multiple instances of a f…

  • Unscored —
    CVE-2012-0793

    Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote attackers to v…

  • Medium —
    CVE-2012-0797

    Moodle Users Can Bypass Deleted Status

    The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote authenticated users to bypass the deleted status and continue using a server via a token.

    moodle/moodle Packagist
  • Unscored —
    CVE-2012-0800

    The form-autocompletion functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 makes it…

  • Unscored —
    CVE-2012-4027

    Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the …

  • Unscored —
    CVE-2012-4028

    Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypas…

  • Unscored —
    CVE-2012-2282

    EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 (aka M…

  • Unscored —
    CVE-2012-4026

    The Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to trigger false alerts via…

  • Unscored —
    CVE-2012-2607

    The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform ar…

  • Unscored —
    CVE-2012-2021

    Multiple cross-site scripting (XSS) vulnerabilities in HP AssetManager 5.20, 5.21, 5.22, and 9.30 allow remote authenti…

  • Unscored —
    CVE-2012-2645

    The Yahoo! Japan Yahoo! Browser application 1.2.0 and earlier for Android does not properly implement the WebView class…

  • Medium —
    CVE-2011-4294

    Moodle Open Redirect Via Error Messages

    The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before 2.1.1 does not ensure that a continuation link refers to an http or https URL for the local Moodle instance, which might allow attackers to trick users into vi…

    moodle/moodle Packagist