Skip to content
OpenAdvisories

Archive

December 2012

Vulnerabilities first published in this month (UTC), newest first.

← November 2012 2012 / December January 2013 →
  1. 1 
  2. 2 
  3. 338
  4. 46
  5. 524
  6. 67
  7. 7 
  8. 85
  9. 9 
  10. 102
  11. 114
  12. 1226
  13. 1315
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1818
  19. 1918
  20. 2010
  21. 2120
  22. 22 
  23. 233
  24. 245
  25. 254
  26. 2624
  27. 275
  28. 2810
  29. 29 
  30. 301
  31. 3110
All Critical High Medium Low Exploited only Public exploit

255 results · Feed

  • Unscored —
    CVE-2012-5537

    The Simplenews Scheduler module 6.x-2.x before 6.x-2.4 for Drupal allows remote authenticated users with the "send sche…

  • Unscored —
    CVE-2012-5541

    Cross-site scripting (XSS) vulnerability in the Twitter Pull module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.0-r…

  • Unscored —
    CVE-2012-5547

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.3 for Drupal a…

  • Unscored —
    CVE-2012-5858 Public exploit

    Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-…

  • Unscored —
    CVE-2012-5556

    Multiple cross-site request forgery (CSRF) vulnerabilities in the RESTful Web Services (RESTWS) module 7.x-1.x before 7…

  • Unscored —
    CVE-2012-5559

    Cross-site scripting (XSS) vulnerability in the page manager node view task in the Chaos tool suite (ctools) module 6.x…

  • Unscored —
    CVE-2012-5543

    The Feeds module 7.x-2.x before 7.x-2.0-alpha6 for Drupal, when a field is mapped to the node's author, does not proper…

  • Unscored —
    CVE-2012-5534

    The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitr…

    weechat Debian
  • Unscored —
    CVE-2012-5557

    The User Read-Only module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, does not properly assign roles …

  • Unscored —
    CVE-2012-5569

    Multiple cross-site scripting (XSS) vulnerabilities in the Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allow…

  • Unscored —
    CVE-2012-5611 Public exploit EPSS 24%

    Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.5…

  • Unscored —
    CVE-2012-5614 Public exploit EPSS 13%

    Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote …

  • Unscored —
    CVE-2012-5615 Public exploit EPSS 15%

    Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other ve…

    mysql-5.5 mysql-5.6 Ubuntu
  • Unscored —
    CVE-2012-5612 Public exploit EPSS 21%

    Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly o…

  • Unscored —
    CVE-2012-5613 Public exploit EPSS 32%

    MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign th…