Skip to content
OpenAdvisories

Archive

10 October 2012

Vulnerabilities first published on this day (UTC), newest first.

← September 2012 2012 / October /10 November 2012 →
  1. 149
  2. 24
  3. 312
  4. 425
  5. 512
  6. 614
  7. 710
  8. 850
  9. 963
  10. 1040
  11. 1112
  12. 125
  13. 13 
  14. 14 
  15. 15 
  16. 1667
  17. 1767
  18. 183
  19. 19 
  20. 206
  21. 21 
  22. 2233
  23. 236
  24. 244
  25. 2531
  26. 264
  27. 27 
  28. 281
  29. 299
  30. 301
  31. 3125
All Critical High Medium Low Exploited only Public exploit

40 results · Feed

  • Unscored —
    CVE-2012-4467

    The (1) do_siocgstamp and (2) do_siocgstampns functions in net/socket.c in the Linux kernel before 3.5.4 use an incorre…

  • Unscored —
    CVE-2012-2286

    Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 before SP3 P3 allows remote atta…

  • Unscored —
    CVE-2012-5166 EPSS 33%

    ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P…

    bind9 Debian
  • Unscored —
    CVE-2012-4465

    Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated …

  • Unscored —
    CVE-2012-4454

    openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbi…

    opencryptoki Debian
  • Unscored —
    CVE-2012-4455

    openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink atta…

    opencryptoki Debian
  • Unscored —
    CVE-2012-4463

    Midnight Commander (mc) 4.8.5 does not properly handle the (1) MC_EXT_SELECTED or (2) MC_EXT_ONLYTAGGED environment var…

    mc Debian
  • Unscored —
    CVE-2012-4899

    WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to …

  • Unscored —
    CVE-2012-4445

    Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authen…

    wpa Debian
  • Unscored —
    CVE-2012-4430

    The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allow…

    bacula Debian
  • Unscored —
    CVE-2012-3040

    Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows rem…

  • Unscored —
    CVE-2012-3504

    The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a…

  • Unscored —
    CVE-2012-5355

    welcome.py in xdiagnose before 2.5.2ubuntu0.1 allows local users to overwrite arbitrary files via a symlink attack on a…

  • Unscored —
    CVE-2012-5356

    The apt-add-repository tool in Ubuntu Software Properties 0.75.x before 0.75.10.3, 0.80.x before 0.80.9.2, 0.81.x befor…

  • Unscored —
    CVE-2009-5067 Public exploit

    Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (dot…

    html2ps Debian
  • Unscored —
    CVE-2012-4179

    Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firef…

  • Unscored —
    CVE-2012-4185

    Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Th…

  • Unscored —
    CVE-2012-4184

    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderb…

  • Unscored —
    CVE-2012-4181

    Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefo…

  • Unscored —
    CVE-2012-4187

    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.…

  • Unscored —
    CVE-2012-4182

    Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10…

  • Unscored —
    CVE-2012-4186 EPSS 15%

    Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10…

  • Unscored —
    CVE-2012-4188 EPSS 15%

    Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, …

  • Unscored —
    CVE-2012-4180

    Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Fir…

  • Unscored —
    CVE-2012-4183

    Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox E…

  • Unscored —
    CVE-2012-3986

    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.…

  • Unscored —
    CVE-2012-3989

    Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an un…

  • Unscored —
    CVE-2012-3983

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and…

  • Unscored —
    CVE-2012-3991

    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.…

  • Unscored —
    CVE-2012-3985

    Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Sam…

  • Unscored —
    CVE-2012-3984

    Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away …

  • Unscored —
    CVE-2012-3988

    Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, T…

  • Unscored —
    CVE-2012-3994

    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.…

  • Unscored —
    CVE-2012-3993 Public exploit EPSS 43%

    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderb…

  • Unscored —
    CVE-2012-3995

    The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 1…

  • Unscored —
    CVE-2012-3990

    Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x b…

  • Unscored —
    CVE-2012-3987

    Mozilla Firefox before 16.0 on Android assigns chrome privileges to Reader Mode pages, which allows user-assisted remot…

  • Unscored —
    CVE-2012-3992

    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.…

  • Unscored —
    CVE-2012-3982

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0…

  • Unscored —
    CVE-2012-5354

    Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away …