Skip to content
OpenAdvisories

Archive

August 2012

Vulnerabilities first published in this month (UTC), newest first.

← July 2012 2012 / August September 2012 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 663
  7. 720
  8. 812
  9. 96
  10. 107
  11. 11 
  12. 1235
  13. 1356
  14. 1438
  15. 1552
  16. 1623
  17. 1720
  18. 18 
  19. 197
  20. 2037
  21. 2117
  22. 2235
  23. 2330
  24. 244
  25. 2555
  26. 2665
  27. 2719
  28. 2812
  29. 2947
  30. 3017
  31. 3158
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.5
    CVE-2012-2146

    Elixir can leak information due to weak use of crypto

    Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for context-dependent users to obtain sensitive information and decrypt the database.

    elixir elixir Ubuntu PyPI
  • High 7.5
    CVE-2012-1176

    PyFriBidi Buffer overflow in the fribidi_utf8_to_unicode function

    Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application crash) via a 4-byte utf-8 sequence.

    pyfribidi pyfribidi Debian PyPI
  • High 7.0
    CVE-2010-5169

    Race condition in Online Armor Premium 4.0.0.35 on Windows XP allows local users to bypass kernel-mode hook handlers, a…

  • High 7.0
    CVE-2010-5181

    Race condition in VIPRE Antivirus Premium 4.0.3272 on Windows XP allows local users to bypass kernel-mode hook handlers…

  • High 7.0
    CVE-2010-5159

    Race condition in Dr.Web Security Space Pro 6.0.0.03100 on Windows XP allows local users to bypass kernel-mode hook han…

  • High 7.8
    CVE-2012-1535 Exploited Public exploit EPSS 70%

    Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on …

    KEV Mar 3, 2022
  • High 8.8
    CVE-2012-1856 Exploited EPSS 72%

    The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Compo…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2012-2806

    Heap-based buffer overflow in the get_sos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to caus…

  • High —
    CVE-2012-2965

    Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables

    Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.

    com.caucho:resin Maven
  • High —
    CVE-2012-2967

    Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons

    Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.

    com.caucho:resin Maven
  • High —
    CVE-2012-2966

    Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters

    Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.

    com.caucho:resin Maven