CVEs published in January 2012
336 vulnerabilities, 40 critical, 1 exploited.
- hp easy printer care softwareA certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier...9.3 High
- hp easy printer care softwareA certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier...9.3 High
- google cr-48 chromebook, acer ac700 chromebook, google chrome os +1 more +3 moreMultiple unspecified vulnerabilities in Google Chrome before 17.0.963.27 on the Acer AC700,...10.0 High
- linux kernelThe encode_share_access function in fs/nfs/nfs4xdr.c in the Linux kernel before 2.6.29 allows...4.9 Medium
- simplesamlphpCross-site scripting (XSS) vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other...4.3 Medium
- simplesamlphpCross-site scripting (XSS) vulnerability in modules/core/www/no_cookie.php in SimpleSAMLphp 1.8.1...4.3 Medium
- finaldraftStack-based buffer overflow in Final Draft 8 before 8.02 allows remote attackers to execute...10.0 High
- 3ssoftware codesysThe CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote...6.4 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreIncomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP...9.3 High
- microsoft windows xp, windows server 2003 +1 moreUntrusted search path vulnerability in the Windows Object Packager configuration in Microsoft...9.3 High
- microsoft anti-cross site scripting libraryThe Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate...4.3 Medium
- microsoft windows xp, windows server 2003, windows server 2008 +1 more +3 moreThe Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP...6.9 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreUnspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows...9.3 High
- microsoft windows xp, windows 7, windows server 2003 +2 more +4 moreUnspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreThe kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows...9.3 High
- adobe acrobat, reader +1 moreAdobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow...9.8 Critical
- adobe acrobat, reader +1 moreAdobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow...9.8 Critical
- adobe acrobat, reader +1 moreAdobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow...7.5 High
- adobe acrobat, reader +1 moreAdobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow...7.5 High
- hp hp-chaisoeDirectory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015...7.8 High
- powerdns authoritative servercommon_startup.cc in PowerDNS (aka pdns) Authoritative Server before 2.9.22.5 and 3.x before 3.0...5.0 Medium
- siemens automation license managerAbsolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx...5.0 Medium
- siemens automation license managerSiemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to...5.0 Medium
- siemens automation license managerSiemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields...5.0 Medium
- siemens automation license managerMultiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1...7.5 High
- apache strutsApache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly...5.0 Medium
- apache strutsApache Struts's DebuggingInterceptor component allows remote code execution in developer mode6.8 Medium
- apache strutsApache Struts's ParameterInterceptor component does not prevent access to public constructors6.4 Medium
- apache strutsApache Struts's CookieInterceptor component does not use the parameter-name whitelist6.8 Medium
- apache struts, struts 2 +1 moreApache Struts Remote Java Code Execution9.8 Critical
- maradnsMaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without...7.8 High
- maradnsThe authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without...2.1 Low
- maradnsMaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the...5.0 Medium
- invensys wonderware inbatchMultiple buffer overflows in the (1) GUIControls, (2) BatchObjSrv, and (3) BatchSecCtrl ActiveX...6.8 Medium
- siemens tecnomatix factorylinkAn unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1...5.8 Medium
- siemens tecnomatix factorylinkBuffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6...9.3 High
- redhat jboss operations network, rhq-project rhq +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the administration interface in RHQ 4.2.0,...4.3 Medium
- robert luberda superBuffer overflow in the Error function in super.c in Super 3.30.0 might allow local users to...4.4 Medium
- google chromeStack-based buffer overflow in Google Chrome before 16.0.912.75 allows remote attackers to cause...7.5 High
- google chromeUse-after-free vulnerability in Google Chrome before 16.0.912.75 allows remote attackers to cause...7.5 High
- google chrome, apple iphone os, mac os x +6 more +8 moreHeap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote...7.5 High
- mount.ecrpytfs private project privatemount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group3.8 Low
- ecryptfs ecryptfs-utils, utils +1 moreThe lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90...3.6 Low
- ecryptfs ecryptfs-utils, utils +1 moreThe encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils...4.4 Medium
- ecryptfs ecryptfs-utils, utils +1 moreutils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab...2.1 Low
- ecryptfs ecryptfs-utils, utils +1 moreutils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint...2.1 Low
- ecryptfs ecryptfs-utils, utils +1 moreutils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint...4.6 Medium
- kde kcheckpasskcheckpass passes a user-supplied argument to the pam_start function, often within a setuid...6.9 Medium
- wi-fi wifi protected setup protocolThe Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is...5.8 Medium
- wordpressCross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1,...2.6 Low
- Show moreLoading…