Skip to content
OpenAdvisories

Archive

7 August 2012

Vulnerabilities first published on this day (UTC), newest first.

← July 2012 2012 / August /7 September 2012 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 663
  7. 720
  8. 812
  9. 96
  10. 107
  11. 11 
  12. 1235
  13. 1356
  14. 1438
  15. 1552
  16. 1623
  17. 1720
  18. 18 
  19. 197
  20. 2037
  21. 2117
  22. 2235
  23. 2330
  24. 244
  25. 2555
  26. 2665
  27. 2719
  28. 2812
  29. 2947
  30. 3017
  31. 3158
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Unscored —
    CVE-2012-4178 Public exploit

    SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0.3.18 allows remote att…

  • Medium —
    CVE-2012-0213

    Denial of Service in Apache POI

    The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Chan…

    org.apache.poi:poi org.apache.poi:poi-scratchpad Maven
  • Unscored —
    CVE-2012-3445

    The virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain* API calls with typed par…

    libvirt Debian
  • Unscored —
    CVE-2012-3423

    The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL terminators, which allows …

    icedtea-web Debian
  • Unscored —
    CVE-2012-3438

    The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the …

    graphicsmagick Debian
  • Unscored —
    CVE-2012-3437

    The Magick_png_malloc function in coders/png.c in ImageMagick 6.7.8 and earlier does not use the proper variable type f…

    imagemagick Debian
  • Unscored —
    CVE-2012-3386

    The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to t…

    automake automake1.11 Debian
  • Unscored —
    CVE-2012-3429

    The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly esca…

  • Unscored —
    CVE-2012-3422

    The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the i…

    icedtea-web Debian
  • Unscored —
    CVE-2012-4177 Public exploit EPSS 58%

    The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the …

  • Unscored —
    CVE-2012-3454

    eXtplorer 2.1.0b6 uses world writable permissions for the /var/lib/extplorer/ftp_tmp directory, which allows local user…

  • Unscored —
    CVE-2012-3452

    gnome-screensaver 3.4.x before 3.4.4 and 3.5.x before 3.5.4, when multiple screens are used, only locks the screen with…

  • Unscored —
    CVE-2012-3449

    Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var…

    openvswitch Debian
  • Unscored —
    CVE-2012-3453

    logol 1.5.0 uses world writable permissions for the /var/lib/logol/results directory, which allows local users to delet…

    logol Debian
  • Unscored —
    CVE-2012-3413

    The HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not disabl…

  • Unscored —
    CVE-2012-2652

    The bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node,…

    qemu Debian
  • Unscored —
    CVE-2012-4005

    The NHN Japan NAVER LINE application before 2.5.5 for Android does not properly handle implicit intents, which allows r…

  • Unscored —
    CVE-2012-2317

    The Debian php_crypt_revamped.patch patch for PHP 5.3.x, as used in the php5 package before 5.3.3-7+squeeze4 in Debian …

  • Unscored —
    CVE-2012-2022

    Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9.1x, and 9.20 allow…

  • Unscored —
    CVE-2012-2648

    Cross-site scripting (XSS) vulnerability in the GoodReader app 3.16 and earlier for iOS on the iPad, and 3.15.1 and ear…