CVEs published in January 2012

336 vulnerabilities, 40 critical, 1 exploited.

• php PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create... CVE-2012-0057 Fix available 6.4 MediumJanuary 31, 2012
• wordpress ** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and... CVE-2012-0937 Public exploitDisputed 5.0 MediumJanuary 30, 2012
• samba Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of... CVE-2012-0817 Fix available 5.0 MediumJanuary 30, 2012
• wordpress ** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php... CVE-2012-0782 Public exploitDisputed 4.3 MediumJanuary 30, 2012
• wordpress ** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and... CVE-2011-4899 Public exploitDisputed 7.5 HighJanuary 30, 2012
• wordpress ** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and... CVE-2011-4898 Public exploitDisputed 5.0 MediumJanuary 30, 2012
• sitracker support incident tracker translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to... CVE-2011-5075 Public exploit 5.0 MediumJanuary 29, 2012
• sitracker support incident tracker Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!)... CVE-2011-5074 Public exploit 6.8 MediumJanuary 29, 2012
• sitracker support incident tracker Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) before... CVE-2011-5073 Public exploit 4.3 MediumJanuary 29, 2012
• sitracker support incident tracker Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow... CVE-2011-5072 Public exploit 7.5 HighJanuary 29, 2012
• sitracker support incident tracker Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45... CVE-2011-4337 Public exploit 7.5 HighJanuary 29, 2012
• opennms.org opennms Cross-site scripting (XSS) vulnerability in web/springframework/security... CVE-2012-0936 4.3 MediumJanuary 29, 2012
• aryadad cms SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute... CVE-2012-0935 Public exploit 7.5 HighJanuary 29, 2012
• zingiri theme tuner plugin PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for... CVE-2012-0934 7.5 HighJanuary 29, 2012
• acidcat cms Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and... CVE-2012-0933 Public exploit 2.6 LowJanuary 29, 2012
• leadcapturepagesystem lead capture page system Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows... CVE-2012-0932 Public exploit 4.3 MediumJanuary 29, 2012
• sitracker support incident tracker Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow... CVE-2011-5071 Public exploit 7.5 HighJanuary 29, 2012
• sitracker support incident tracker Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65... CVE-2011-5070 4.3 MediumJanuary 29, 2012
• sitracker support incident tracker Unrestricted file upload vulnerability in incident_attachments.php in Support Incident Tracker ... CVE-2011-5069 6.0 MediumJanuary 29, 2012
• sitracker support incident tracker Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!)... CVE-2011-5068 6.8 MediumJanuary 29, 2012
• sitracker support incident tracker move_uploaded_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated... CVE-2011-5067 4.0 MediumJanuary 29, 2012
• sitracker support incident tracker Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka... CVE-2011-3833 Public exploit EPSS 19.0% 6.0 MediumJanuary 29, 2012
• sitracker support incident tracker Eval injection vulnerability in config.php in Support Incident Tracker (aka SiT!) 3.65 allows... CVE-2011-3832 6.5 MediumJanuary 29, 2012
• sitracker support incident tracker SQL injection vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3... CVE-2011-3831 7.5 HighJanuary 29, 2012
• sitracker support incident tracker Cross-site scripting (XSS) vulnerability in search.php in Support Incident Tracker (aka SiT!) 3... CVE-2011-3830 4.3 MediumJanuary 29, 2012
• sitracker support incident tracker ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users... CVE-2011-3829 Public exploit EPSS 17.1% 4.0 MediumJanuary 29, 2012
• icu-project international components for unicode Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International... CVE-2011-4599 Fix available 7.5 HighJanuary 29, 2012
• apache http server, debian linux, opensuse +8 more +10 more protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header... CVE-2012-0053 Public exploitFix available EPSS 82.2% 4.3 MediumJanuary 28, 2012
• apache http server The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP... CVE-2012-0021 Fix available EPSS 30.3% 2.6 LowJanuary 28, 2012
• schneider-electric modicon quantum plc Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software... CVE-2012-0931 9.8 CriticalJanuary 28, 2012
• schneider-electric modicon quantum plc Cross-site scripting (XSS) vulnerability in Schneider Electric Modicon Quantum PLC allows remote... CVE-2012-0930 6.1 MediumJanuary 28, 2012
• schneider-electric modicon quantum plc Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to... CVE-2012-0929 7.5 HighJanuary 28, 2012
• openbsd openssh The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug... CVE-2012-0814 Fix available 3.5 LowJanuary 27, 2012
• redhat jboss enterprise application platform mod_cluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes... CVE-2011-4608 Fix available 7.5 HighJanuary 27, 2012
• linux kernel The NFS implementation in Linux kernel before 2.6.31-rc6 calls certain functions without properly... CVE-2011-4325 Fix available 4.9 MediumJanuary 27, 2012
• kay framework project framework, openid openid4java, redhat jboss enterprise application platform +2 more OpenID4Java does not verify that Attribute Exchange (AX) information is signed CVE-2011-4314 Fix available 5.8 MediumJanuary 27, 2012
• google android Stack-based buffer overflow in libsysutils in Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6... CVE-2011-3874 EPSS 11.4% 9.3 HighJanuary 27, 2012
• drusus logsurfer, kerry thompson logsurfer\+ +1 more Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and... CVE-2011-3626 7.5 HighJanuary 27, 2012
• hardened-php suhosin Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent... CVE-2012-0807 5.1 MediumJanuary 27, 2012
• emc networker Buffer overflow in the server in EMC NetWorker 7.5.x and 7.6.x before 7.6.3 SP1 Cumulative... CVE-2012-0395 9.3 HighJanuary 27, 2012
• wireshark The lanalyzer_read function in wiretap/lanalyzer.c in Wireshark 1.4.x before 1.4.11 and 1.6.x... CVE-2012-0068 Fix available 4.3 MediumJanuary 27, 2012
• wireshark, redhat enterprise linux +1 more wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers... CVE-2012-0067 Public exploitFix available 4.3 MediumJanuary 27, 2012
• wireshark, redhat enterprise linux +1 more Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of... CVE-2012-0066 Fix available 4.3 MediumJanuary 27, 2012
• wireshark, redhat enterprise linux +1 more Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string... CVE-2012-0042 Fix available 2.9 LowJanuary 27, 2012
• wireshark, redhat enterprise linux +1 more The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1... CVE-2012-0041 Fix available 4.3 MediumJanuary 27, 2012
• kvm group qemu-kvm Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in... CVE-2012-0029 Fix available 7.4 HighJanuary 27, 2012
• rsa envision EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive... CVE-2011-4143 5.0 MediumJanuary 27, 2012
• oscommerce online merchant, oscommerce +1 more Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online... CVE-2012-0312 4.3 MediumJanuary 26, 2012
• oscommerce Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9 allows remote attackers... CVE-2012-0311 4.3 MediumJanuary 26, 2012
• phpmyadmin phpMyAdmin Open Redirect in redirector CVE-2011-1941 Fix available 4.3 MediumJanuary 26, 2012
• Show olderLoading…