Skip to content
OpenAdvisories

Archive

19 December 2012

Vulnerabilities first published on this day (UTC), newest first.

← November 2012 2012 / December /19 January 2013 →
  1. 1 
  2. 2 
  3. 338
  4. 46
  5. 524
  6. 67
  7. 7 
  8. 85
  9. 9 
  10. 102
  11. 114
  12. 1226
  13. 1315
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1818
  19. 1918
  20. 2010
  21. 2120
  22. 22 
  23. 233
  24. 245
  25. 254
  26. 2624
  27. 275
  28. 2810
  29. 29 
  30. 301
  31. 3110
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2012-4846

    IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application …

  • Medium —
    CVE-2012-4431 Public exploit

    Cross-Site Request Forgery in Apache Tomcat

    org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2012-4534

    org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO conn…

  • Unscored —
    CVE-2012-4848

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authentic…

  • Unscored —
    CVE-2012-6007 Public exploit

    Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) de…

  • Unscored —
    CVE-2012-3329

    IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 a…

  • Medium —
    CVE-2012-3546 EPSS 12%

    Authentication Bypass in Apache Tomcat

    org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2012-5968

    The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitiv…

  • Unscored —
    CVE-2012-5691 Public exploit EPSS 53%

    Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attacker…

  • Unscored —
    CVE-2012-5178

    Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attacker…

  • Unscored —
    CVE-2012-5992 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software…

  • Unscored —
    CVE-2012-5970

    The Huawei E585 device allows remote attackers to cause a denial of service (NULL pointer dereference and device outage…

  • Unscored —
    CVE-2012-5991 Public exploit

    screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote …

  • Unscored —
    CVE-2012-5967 Public exploit

    SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remot…

    Centreon Centreon Centreon web
  • Unscored —
    CVE-2012-5978

    Multiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View Security Server in VMware V…

  • Unscored —
    CVE-2012-5969

    Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to (1) read arbitrary fil…

  • Unscored —
    CVE-2012-5690

    RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2012-5177

    Cross-site scripting (XSS) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to in…