Skip to content
OpenAdvisories

Archive

November 2012

Vulnerabilities first published in this month (UTC), newest first.

← October 2012 2012 / November December 2012 →
  1. 17
  2. 28
  3. 33
  4. 449
  5. 5 
  6. 68
  7. 724
  8. 86
  9. 99
  10. 101
  11. 1119
  12. 12 
  13. 138
  14. 1431
  15. 154
  16. 1615
  17. 1734
  18. 1821
  19. 1911
  20. 2012
  21. 2145
  22. 222
  23. 2336
  24. 2413
  25. 25 
  26. 2618
  27. 279
  28. 2814
  29. 293
  30. 3026
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2012-4571

    Python Keyring does not securely initialize encryption cipher

    Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack.

    keyring python-keyring Debian PyPI
  • High 7.8
    CVE-2012-5861 Public exploit

    Sinapsi eSolar SQL Injection

    These Sinapsi devices do not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication within the device, attackers can leak information from the device. This could allow the attack…

    Sinapsi eSolar DUO eSolar eSolar Light
  • High 7.5
    CVE-2012-4520

    Django Allows Arbitrary URL Generation

    The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values.

    python-django django Debian PyPI
  • High 8.1
    CVE-2012-1539 EPSS 25%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a c…

  • High 8.8
    CVE-2012-4775 EPSS 22%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a c…

  • High 7.4
    CVE-2012-5817

    Improper Input Validation in XFire

    Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which all…

    org.codehaus.xfire:xfire-core Maven