Skip to content
OpenAdvisories

Archive

November 2012

Vulnerabilities first published in this month (UTC), newest first.

← October 2012 2012 / November December 2012 →
  1. 17
  2. 28
  3. 33
  4. 449
  5. 5 
  6. 68
  7. 724
  8. 86
  9. 99
  10. 101
  11. 1119
  12. 12 
  13. 138
  14. 1431
  15. 154
  16. 1615
  17. 1734
  18. 1821
  19. 1911
  20. 2012
  21. 2145
  22. 222
  23. 2336
  24. 2413
  25. 25 
  26. 2618
  27. 279
  28. 2814
  29. 293
  30. 3026
All Critical High Medium Low Exploited only Public exploit

436 results · Feed

  • Unscored —
    CVE-2012-5827

    Joomla! 2.5.x before 2.5.8 and 3.0.x before 3.0.2 allows remote attackers to conduct clickjacking attacks via unspecifi…

  • Unscored —
    CVE-2012-2455

    Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attac…

  • Unscored —
    CVE-2011-1374

    Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2012-3752 Public exploit EPSS 36%

    Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a d…

  • Unscored —
    CVE-2012-3754

    Use-after-free vulnerability in the Clear method in the ActiveX control in Apple QuickTime before 7.7.3 allows remote a…

  • Unscored —
    CVE-2012-3755 Public exploit EPSS 10%

    Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2012-3756

    Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2012-3757

    Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

  • Unscored —
    CVE-2012-3758

    Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2012-3751

    Use-after-free vulnerability in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2012-3753 Public exploit EPSS 35%

    Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or caus…

  • Unscored —
    CVE-2012-4022

    Pebble before 2.6.4 allows remote attackers to trigger loss of blog-entry viewability via a crafted comment.

  • Unscored —
    CVE-2012-4020

    MosP kintai kanri before 4.1.0 does not enforce privilege requirements, which allows remote authenticated users to read…

  • Unscored —
    CVE-2012-4021

    MosP kintai kanri before 4.1.0 does not properly perform authentication, which allows remote authenticated users to imp…

  • Unscored —
    CVE-2012-4023

    CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduc…

  • Unscored —
    CVE-2012-3315

    The Java servlets in the management console in IBM Tivoli Federated Identity Manager (TFIM) through 6.2.2 and Tivoli Fe…

  • Unscored —
    CVE-2012-5171

    Directory traversal vulnerability in Be Graph BeZIP before 3.10 allows remote attackers to create or overwrite arbitrar…

  • Unscored —
    CVE-2012-3269

    Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers …

  • Unscored —
    CVE-2012-3270

    Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers …

  • Unscored —
    CVE-2012-5424

    Cisco Secure Access Control System (ACS) 5.x before 5.2 Patch 11 and 5.3 before 5.3 Patch 7, when a certain configurati…

  • Unscored —
    CVE-2012-5117

    Google Chrome before 23.0.1271.64 does not properly restrict the loading of an SVG subresource in the context of an IMG…

  • Unscored —
    CVE-2012-5125

    Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-5118

    Google Chrome before 23.0.1271.64 on Mac OS X does not properly validate an integer value during the handling of GPU co…

  • Unscored —
    CVE-2012-5124

    Google Chrome before 23.0.1271.64 does not properly handle textures, which allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2012-5115

    Google Chrome before 23.0.1271.64 on Mac OS X does not properly mitigate improper write behavior in graphics drivers, w…

  • Unscored —
    CVE-2012-5122

    Google Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified variable during handling of input,…

  • Unscored —
    CVE-2012-5123

    Skia, as used in Google Chrome before 23.0.1271.64, allows remote attackers to cause a denial of service (out-of-bounds…

  • Unscored —
    CVE-2012-5119

    Race condition in Pepper, as used in Google Chrome before 23.0.1271.64, allows remote attackers to cause a denial of se…

  • Unscored —
    CVE-2012-5126

    Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-5116

    Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-5127

    Integer overflow in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service (out-of-boun…

    libwebp Debian
  • Unscored —
    CVE-2012-5128

    Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, does not properly perform write operations, wh…

    libv8-3.14 Ubuntu
  • Unscored —
    CVE-2012-5120

    Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, on 64-bit Linux platforms allows remote attack…

    libv8-3.14 Ubuntu
  • Unscored —
    CVE-2012-5121

    Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-5278

    Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x…

  • Unscored —
    CVE-2012-5275 EPSS 11%

    Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 1…

  • Unscored —
    CVE-2012-5277 EPSS 11%

    Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 1…

  • Unscored —
    CVE-2012-5274 EPSS 11%

    Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 1…

  • Unscored —
    CVE-2012-5279

    Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x…

  • Unscored —
    CVE-2012-5276 EPSS 11%

    Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 1…