Skip to content
OpenAdvisories

Archive

14 November 2012

Vulnerabilities first published on this day (UTC), newest first.

← October 2012 2012 / November /14 December 2012 →
  1. 17
  2. 28
  3. 33
  4. 449
  5. 5 
  6. 68
  7. 724
  8. 86
  9. 99
  10. 101
  11. 1119
  12. 12 
  13. 138
  14. 1431
  15. 154
  16. 1615
  17. 1734
  18. 1821
  19. 1911
  20. 2012
  21. 2145
  22. 222
  23. 2336
  24. 2413
  25. 25 
  26. 2618
  27. 279
  28. 2814
  29. 293
  30. 3026
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2012-4847

    IBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service (CPU…

  • Unscored —
    CVE-2012-4850

    IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1, when JAX-RS is used, does not properly validate re…

  • Unscored —
    CVE-2012-4948

    The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and sa…

  • Unscored —
    CVE-2012-4953

    The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 1…

  • Unscored —
    CVE-2012-4853

    Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Application Server 6.1 before 6.1.0.45, 7.0 before 7.0…

  • Unscored —
    CVE-2012-4851

    Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1 allows …

  • Unscored —
    CVE-2012-4949 Public exploit

    SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2012-3569 Public exploit EPSS 48%

    Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware P…

  • Unscored —
    CVE-2012-3330

    The proxy server in IBM WebSphere Application Server 7.0 before 7.0.0.27, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, a…

  • Unscored —
    CVE-2012-2619 Public exploit EPSS 13%

    The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Mot…

  • Unscored —
    CVE-2012-5860

    Unspecified vulnerability on Oberthur ID-One COSMO 5.2, 5.2a, and 64 smart cards makes it easier for attackers to defea…

  • Unscored —
    CVE-2012-5458

    VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified …

  • Unscored —
    CVE-2012-5459

    Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Window…

  • Unscored —
    CVE-2012-1885 EPSS 29%

    Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; a…

  • Unscored —
    CVE-2012-1527 EPSS 21%

    Integer underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win…

  • Unscored —
    CVE-2012-1895 EPSS 23%

    The reflection implementation in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4 does not properly enf…

  • Unscored —
    CVE-2012-1896 EPSS 24%

    Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during construction of output data, …

  • Unscored —
    CVE-2012-1528 EPSS 21%

    Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Wind…

  • Unscored —
    CVE-2012-1886 EPSS 22%

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allow…

  • High 8.1
    CVE-2012-1539 EPSS 25%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a c…

  • Unscored —
    CVE-2012-1887 EPSS 25%

    Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for …

  • Unscored —
    CVE-2012-1538 EPSS 21%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a c…

  • Unscored —
    CVE-2012-4776 EPSS 25%

    The Web Proxy Auto-Discovery (WPAD) functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not …

  • Unscored —
    CVE-2012-4777 EPSS 25%

    The code-optimization feature in the reflection implementation in Microsoft .NET Framework 4 and 4.5 does not properly …

  • High 8.8
    CVE-2012-4775 EPSS 22%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a c…

  • Unscored —
    CVE-2012-2531

    Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log, which allows local use…

  • Unscored —
    CVE-2012-2553

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 …

  • Unscored —
    CVE-2012-2532 EPSS 42%

    Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is …

  • Unscored —
    CVE-2012-2530

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…

  • Unscored —
    CVE-2012-2519

    Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP…

  • Unscored —
    CVE-2012-2543 EPSS 26%

    Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1; Office 2011 for Mac; Excel Viewer; and Of…