Skip to content
OpenAdvisories

Archive

12 December 2012

Vulnerabilities first published on this day (UTC), newest first.

← November 2012 2012 / December /12 January 2013 →
  1. 1 
  2. 2 
  3. 338
  4. 46
  5. 524
  6. 67
  7. 7 
  8. 85
  9. 9 
  10. 102
  11. 114
  12. 1226
  13. 1315
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1818
  19. 1918
  20. 2010
  21. 2120
  22. 22 
  23. 233
  24. 245
  25. 254
  26. 2624
  27. 275
  28. 2810
  29. 29 
  30. 301
  31. 3110
All Critical High Medium Low Exploited only Public exploit

26 results · Feed

  • Unscored —
    CVE-2012-4976

    selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=…

  • Unscored —
    CVE-2012-4977

    Layton Helpbox 4.4.0 allows remote attackers to discover cleartext credentials for the login page by sniffing the netwo…

  • Unscored —
    CVE-2012-4974

    Layton Helpbox 4.4.0 allows remote authenticated users to change the login context and gain privileges via a modified (…

  • Unscored —
    CVE-2012-4972

    Multiple cross-site scripting (XSS) vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2012-4975

    editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data v…

  • Unscored —
    CVE-2012-4971

    Multiple SQL injection vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2012-5678

    Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.…

  • Unscored —
    CVE-2012-5139

    Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-5144

    Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC dec…

  • Unscored —
    CVE-2012-5676

    Buffer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 an…

  • Unscored —
    CVE-2012-5141

    Google Chrome before 23.0.1271.97 does not properly restrict instantiation of the Chromoting client plug-in, which has …

  • Unscored —
    CVE-2012-5142

    Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute…

  • Unscored —
    CVE-2012-5675

    Adobe ColdFusion 9.0 through 9.0.2, and 10, allows local users to bypass intended shared-hosting sandbox permissions vi…

  • Unscored —
    CVE-2012-5677

    Integer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 a…

  • Unscored —
    CVE-2012-5143

    Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly …

  • Unscored —
    CVE-2012-5140

    Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-1537 EPSS 23%

    Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Serve…

  • Unscored —
    CVE-2012-4782 EPSS 26%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2012-4781 EPSS 18%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2012-4791 EPSS 13%

    Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service …

  • Unscored —
    CVE-2012-4786 EPSS 24%

    The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server…

  • Unscored —
    CVE-2012-4774 EPSS 21%

    Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, …

  • Critical 9.0
    CVE-2012-4787 EPSS 18%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2012-2556 EPSS 21%

    The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,…

  • High 7.8
    CVE-2012-2539 Exploited EPSS 53%

    Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office…

    KEV Mar 28, 2022
  • Unscored —
    CVE-2012-2549

    The IP-HTTPS server in Windows Server 2008 R2 and R2 SP1 and Server 2012 does not properly validate certificates, which…