Skip to content

CVEs published in January 2012

336 vulnerabilities, 40 critical, 1 exploited.

igor vlasenko html-template-proCross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl...CVE-2011-4616Fix available4.3 MediumJanuary 6, 2012
gnu gnutlsThe DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if...CVE-2012-0390Fix available4.3 MediumJanuary 6, 2012
opensslThe GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST...CVE-2012-0027Fix available5.0 MediumJanuary 6, 2012
opensslThe Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f...CVE-2011-4619Fix availableEPSS 17.8%5.0 MediumJanuary 6, 2012
opensslOpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote...CVE-2011-4577Fix available4.3 MediumJanuary 6, 2012
opensslThe SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly...CVE-2011-4576Fix availableEPSS 14.4%5.0 MediumJanuary 6, 2012
opensslDouble free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is...CVE-2011-4109Fix availableEPSS 16.9%9.3 HighJanuary 6, 2012
opensslThe DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only...CVE-2011-4108Fix availableEPSS 16.1%4.3 MediumJanuary 6, 2012
apache tomcatImproper Input Validation in Apache TomcatCVE-2011-4858Public exploitFix availableEPSS 79.7%5.0 MediumJanuary 5, 2012
textpatternCross-site scripting (XSS) vulnerability in setup/index.php in Textpattern CMS 4.4.1, when the...CVE-2011-5019Public exploit4.3 MediumJanuary 5, 2012
apache activemqDenial of Service in Apache ActiveMQCVE-2011-4905Fix available5.0 MediumJanuary 5, 2012
cocsoft stream downStack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute...CVE-2011-5052Public exploitEPSS 29.7%6.8 MediumJanuary 4, 2012
wpsymposium wp symposiumMultiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for...CVE-2011-50517.5 HighJanuary 4, 2012
elitecore cyberoam unified threat managementSQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before...CVE-2011-5050Public exploit6.0 MediumJanuary 4, 2012
No product listedMySQL 5.5.8, when running on Windows, allows remote attackers to cause a denial of service (NULL...CVE-2011-5049Public exploit4.3 MediumJanuary 4, 2012
e107SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions...CVE-2011-49215.1 MediumJanuary 4, 2012
e107Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.26, and other versions before 1.0...CVE-2011-49204.3 MediumJanuary 4, 2012
h-fj mailform pluginCross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable Type...CVE-2007-67514.3 MediumJanuary 4, 2012
eeye digital security audits, retina network security scanner +1 moreeEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network...CVE-2011-33376.9 MediumJanuary 4, 2012
ibm tivoli federated identity manager, tivoli federated identity manager business gateway +1 moreIBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business...CVE-2011-13864.3 MediumJanuary 4, 2012
ibm invscout.rteThe (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before...CVE-2011-13844.0 MediumJanuary 4, 2012
ibm web experience factoryMultiple cross-site scripting (XSS) vulnerabilities in IBM Web Experience Factory (aka WEF,...CVE-2011-50484.3 MediumJanuary 3, 2012
pfsenseCross-site scripting (XSS) vulnerability in status_rrd_graph.php in pfSense before 2.0.1 allows...CVE-2011-50474.3 MediumJanuary 3, 2012
pfsenseetc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509...CVE-2011-41977.5 HighJanuary 3, 2012
splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.2.x before 4.2.5 allows remote...CVE-2011-47784.3 MediumJanuary 3, 2012
splunkSplunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable...CVE-2011-4644Public exploit9.3 HighJanuary 3, 2012
splunkMultiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote...CVE-2011-4643Public exploit4.0 MediumJanuary 3, 2012
splunkmappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy...CVE-2011-4642Public exploitEPSS 28.6%4.6 MediumJanuary 3, 2012
ffmpeg, libav +1 moreThe svq1_decode_frame function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x...CVE-2011-4579Fix available4.3 MediumJanuary 3, 2012
ffmpeg, libav +1 moreBuffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x...CVE-2011-4364Fix available6.8 MediumJanuary 3, 2012
ffmpeg, libav +1 moreThe (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg...CVE-2011-4353Fix available4.3 MediumJanuary 3, 2012
ffmpegBuffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before...CVE-2011-4351Fix available7.5 HighJanuary 3, 2012
mozilla bugzillaCross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.x...CVE-2011-36696.8 MediumJanuary 2, 2012
mozilla bugzillaCross-site request forgery (CSRF) vulnerability in post_bug.cgi in Bugzilla 2.x, 3.x, and 4.x...CVE-2011-36686.8 MediumJanuary 2, 2012
mozilla bugzillaThe User.offer_account_by_email WebService method in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x...CVE-2011-36676.8 MediumJanuary 2, 2012
mozilla bugzillaMultiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x...CVE-2011-36574.3 MediumJanuary 2, 2012