Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
January

CVEs published in January 2012

336 vulnerabilities, 40 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle jd edwards enterpriseone tools, jd edwards products +1 moreUnspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24...CVE-2011-23214.0 MediumJanuary 18, 2012
oracle jd edwards enterpriseone tools, jd edwards products +1 moreUnspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24...CVE-2011-23174.0 MediumJanuary 18, 2012
oracle e-business suiteUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...CVE-2011-22713.5 LowJanuary 18, 2012
mysqlUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows...CVE-2011-22625.0 MediumJanuary 18, 2012
phpThe tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service...CVE-2012-0781Public exploitEPSS 10.4%5.0 MediumJanuary 18, 2012
ibm spss data collection, spss dimensions +1 moreUnspecified vulnerability in the Render method in the ExportHTML.ocx ActiveX control in...CVE-2012-01909.3 HighJanuary 18, 2012
ibm spss samplepowerMultiple unspecified vulnerabilities in the (1) PrintFile and (2) SaveDoc methods in the VsVIEW6...CVE-2012-01899.3 HighJanuary 18, 2012
ibm spss data collection, spss dimensions +1 moreUnspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in...CVE-2012-01889.3 HighJanuary 18, 2012
apache http server, debian linux, opensuse +9 more +11 morescoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a...CVE-2012-0031Public exploitFix available4.6 MediumJanuary 18, 2012
phpPHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow...CVE-2011-4153Public exploitEPSS 11.8%5.0 MediumJanuary 18, 2012
greg roelofs libpngThe png_handle_cHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is...CVE-2011-33282.6 LowJanuary 17, 2012
microsoft windows server 2008Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in...CVE-2010-5082EPSS 14.9%9.3 HighJanuary 17, 2012
ntrglobal ntr activex controlThe StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to...CVE-2012-0267Public exploitEPSS 38.5%9.3 HighJanuary 15, 2012
ntrglobal ntr activex controlMultiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote...CVE-2012-0266Public exploitEPSS 42.3%9.3 HighJanuary 15, 2012
ibm websphere application serverThe SibRaRecoverableSiXaResource class in the Default Messaging Component in IBM WebSphere...CVE-2011-50662.1 LowJanuary 15, 2012
ibm websphere application serverCross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1...CVE-2011-50654.3 MediumJanuary 15, 2012
isc dhcpThe logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and...CVE-2011-4868Fix available6.1 MediumJanuary 15, 2012
ibm websphere application serverThe Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM...CVE-2011-137710.0 HighJanuary 15, 2012
ibm websphere application serverCross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application...CVE-2011-13624.3 MediumJanuary 15, 2012
linux kernel, novell suse linux enterprise server +1 moreThe ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain...CVE-2011-49146.4 MediumJanuary 15, 2012
redhat kvmThe create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions,...CVE-2011-46224.9 MediumJanuary 15, 2012
linux kernelInteger overflow in the perf_event_interrupt function in arch/powerpc/kernel/perf_event.c in the...CVE-2011-46114.9 MediumJanuary 15, 2012
opensslcrypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other...CVE-2011-4354Fix available5.8 MediumJanuary 15, 2012
linux kernelBuffer overflow in the fuse_notify_inval_entry function in fs/fuse/dev.c in the Linux kernel...CVE-2011-33535.5 MediumJanuary 15, 2012
linux kernelnet/packet/af_packet.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space...CVE-2011-28985.5 MediumJanuary 15, 2012
apache tomcatUse of Hard-coded Cryptographic Key in Apache TomcatCVE-2011-5064Fix available4.3 MediumJanuary 14, 2012
apache tomcatImproper Authentication in Apache TomcatCVE-2011-5063Fix available4.3 MediumJanuary 14, 2012
apache tomcatImproper Authentication in Apache TomcatCVE-2011-5062Fix available5.0 MediumJanuary 14, 2012
apache tomcatAuthentication Bypass in Apache TomcatCVE-2011-1184Fix available5.0 MediumJanuary 14, 2012
gnome glib** DISPUTED ** GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash...CVE-2012-0039Disputed5.0 MediumJanuary 14, 2012
whmcs whmcompletesolution** DISPUTED ** submitticket.php in WHMCompleteSolution (WHMCS) 5.03 allows remote attackers to...CVE-2012-0693Disputed5.0 MediumJanuary 14, 2012
whmcs whmcompletesolutionfunctions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to...CVE-2011-50617.5 HighJanuary 14, 2012
gnome evince, t1lib, tetex +2 moreHeap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0...CVE-2011-0433Fix available6.8 MediumJanuary 14, 2012
roderich schupp par-packer moduleThe par_mktmpdir function in the PAR module before 1.003 for Perl creates temporary files in a...CVE-2011-5060Fix available3.3 LowJanuary 13, 2012
openstack essex, nova +1 moreNova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass...CVE-2012-0030Fix available4.9 MediumJanuary 13, 2012
roderich schupp par-packer moduleThe par_mktmpdir function in the PAR::Packer module before 1.012 for Perl creates temporary files...CVE-2011-4114Fix available3.3 LowJanuary 13, 2012
wibu codemeter runtimeWibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions before 4.40 allows...CVE-2011-40575.0 MediumJanuary 13, 2012
gisle aas digestEval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent...CVE-2011-3597Public exploitFix availableEPSS 13.1%7.5 HighJanuary 13, 2012
dan kogai encode module, perl +1 moreOff-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44...CVE-2011-2939Fix available5.1 MediumJanuary 13, 2012
hp storageworks p2000 g3 msaHP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for...CVE-2012-069710.0 HighJanuary 13, 2012
ibm cognos tm1, cognos executive viewer +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos...CVE-2012-06964.3 MediumJanuary 13, 2012
cogentdatahub cascade datahub, cogent datahub, opc datahub +2 moreCRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and...CVE-2012-03105.8 MediumJanuary 13, 2012
cogentdatahub cascade datahub, cogent datahub, opc datahub +2 moreCross-site scripting (XSS) vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4...CVE-2012-03094.3 MediumJanuary 13, 2012
cluster resources torque resource managerTerascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when...CVE-2011-49254.9 MediumJanuary 13, 2012
hp diagnosticsStack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before...CVE-2011-4789Public exploitEPSS 64.4%10.0 HighJanuary 13, 2012
hp storageworks p2000 g3 msa fc\/iscsi dual combo controller lff array system, storageworks p2000 g3 msa fibre channel dual controller lff array system, storageworks p2000 g3 msa fibre channel dual controller sff array system +2 moreAbsolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array...CVE-2011-47887.8 HighJanuary 13, 2012
linux kernel, redhat enterprise linux eus +1 moreThe igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote...CVE-2012-0207Public exploitEPSS 20.3%7.5 HighJanuary 13, 2012
linux kernelThe em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel...CVE-2012-0045Public exploit4.7 MediumJanuary 13, 2012
linux kernel, canonical ubuntu linux +1 moreInteger overflow in the drm_mode_dirtyfb_ioctl function in drivers/gpu/drm/drm_crtc.c in the...CVE-2012-00447.8 HighJanuary 13, 2012
linux kernelInteger overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before...CVE-2012-00385.5 MediumJanuary 13, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open