Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
January

CVEs published in January 2012

336 vulnerabilities, 40 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

google androidThe Bluetooth service (com/android/phone/BluetoothHeadsetService.java) in Android 2.3 before 2.3...CVE-2011-42764.3 MediumJanuary 25, 2012
asterisk open sourcechan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the res_srtp...CVE-2012-0885Fix available4.3 MediumJanuary 25, 2012
symantec pcanywhereSymantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka...CVE-2011-3479Public exploit6.8 MediumJanuary 25, 2012
symantec pcanywhereThe host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite...CVE-2011-3478Public exploitEPSS 39.5%10.0 HighJanuary 25, 2012
tencent qqpphotoThe Tencent QQPhoto (com.tencent.qqphoto) application 0.97 for Android does not properly protect...CVE-2011-48675.8 MediumJanuary 25, 2012
kaixin001The Kaixin001 (com.kaixin001.activity) application 1.3.1 and 1.3.3 for Android does not properly...CVE-2011-48666.4 MediumJanuary 25, 2012
tencent microblogpad, wblog +1 moreThe Tencent WBlog (com.tencent.WBlog) 3.3.1 and MicroBlogPad 1.4.0 applications for Android do...CVE-2011-48655.8 MediumJanuary 25, 2012
tencent mobileqqThe Tencent MobileQQ (com.tencent.mobileqq) application 2.2 for Android does not properly protect...CVE-2011-48645.8 MediumJanuary 25, 2012
tencent qqpimsecureThe Tencent QQPimSecure (com.tencent.qqpimsecure) application 3.0.2 for Android does not properly...CVE-2011-48635.8 MediumJanuary 25, 2012
anguanjiaThe AnGuanJia (com.anguanjia.safe) application 2.10.343 for Android does not properly protect...CVE-2011-47735.8 MediumJanuary 25, 2012
360 kouxinThe 360 KouXin (com.qihoo360.kouxin) application 1.5.3 for Android does not properly protect data...CVE-2011-47725.8 MediumJanuary 25, 2012
lucion scan to pdf freeThe Scan to PDF Free (com.scan.to.pdf.trial) application 2.0.4 for Android does not properly...CVE-2011-47715.8 MediumJanuary 25, 2012
qiwi walletThe QIWI Wallet (ru.mw) application before 1.14.2 for Android does not properly protect data,...CVE-2011-47705.8 MediumJanuary 25, 2012
360 mobilesafeThe 360 MobileSafe (com.qihoo360.mobilesafe) application 2.x before 2.3.0 for Android does not...CVE-2011-47695.8 MediumJanuary 25, 2012
ming blacklist freeThe Ming Blacklist Free (vc.software.blacklist) application 1.8.1 and 1.9.2.1 for Android does...CVE-2011-47055.8 MediumJanuary 25, 2012
voxofonThe Voxofon (com.voxofon) application before 2.5.2 for Android does not properly protect data,...CVE-2011-47045.8 MediumJanuary 25, 2012
nathanielkh limit my callThe Limit My Call (com.limited.call.view) application 2.11 for Android does not properly protect...CVE-2011-47035.8 MediumJanuary 25, 2012
nimbuzzThe Nimbuzz (com.nimbuzz) application 2.0.8 and 2.0.10 for Android does not properly protect data...CVE-2011-47025.8 MediumJanuary 25, 2012
hatena callconfirmThe CallConfirm (jp.gr.java_conf.ofnhwx.callconfirm) application 2.0.0 for Android does not...CVE-2011-47015.8 MediumJanuary 25, 2012
ubermedia ubersocialThe UberMedia UberSocial (com.twidroid) application 7.x before 7.2.4 for Android does not...CVE-2011-47005.8 MediumJanuary 25, 2012
ubermedia twidroyd legacyThe Ubermedia Twidroyd Legacy (com.twidroydlegacy) application 4.3.11 for Android does not...CVE-2011-46996.4 MediumJanuary 25, 2012
androidapptools easy filterThe AndroidAppTools Easy Filter (com.phoneblocker.android) application 1.1 and 1.2 for Android...CVE-2011-46986.4 MediumJanuary 25, 2012
xiaomi mitalk messengerThe Xiaomi MiTalk Messenger (com.xiaomi.channel) application before 2.1.320 for Android does not...CVE-2011-46976.4 MediumJanuary 25, 2012
hitachi it operations directorCross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50...CVE-2012-09194.3 MediumJanuary 24, 2012
hitachi cobol2002 net developer, cobol2002 net client suite, cobol2002 net server suite +2 moreUnspecified vulnerability in Hitachi COBOL2002 Net Developer, Net Server Suite, and Net Client...CVE-2012-091810.0 HighJanuary 24, 2012
hitachi it operations analyzerCross-site scripting (XSS) vulnerability in Hitachi IT Operations Analyzer 02-01, 02-51 through...CVE-2012-09174.3 MediumJanuary 24, 2012
renren talkHeap-based buffer overflow in RenRen Talk 2.9 allows remote attackers to execute arbitrary code...CVE-2012-09169.3 HighJanuary 24, 2012
renren talkInteger signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via...CVE-2012-09159.3 HighJanuary 24, 2012
earl miles panelsCross-site scripting (XSS) vulnerability in display_renderers/panels_renderer_editor.class.php in...CVE-2012-09144.3 MediumJanuary 24, 2012
icloudcenter ictimeattendanceSQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote...CVE-2012-0913Public exploit7.5 HighJanuary 24, 2012
horde groupware webmail editionCross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before...CVE-2012-09094.3 MediumJanuary 24, 2012
horde groupware webmail edition, imp, dynamic imp +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde...CVE-2012-0791Fix available4.3 MediumJanuary 24, 2012
oetiker smokepingCross-site scripting (XSS) vulnerability in smokeping_cgi in Smokeping 2.4.2, 2.6.6, and other...CVE-2012-0790Fix available4.3 MediumJanuary 24, 2012
mailenableCross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional,...CVE-2012-0389Public exploit4.3 MediumJanuary 24, 2012
bataviSQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute...CVE-2012-00697.5 HighJanuary 24, 2012
stone-ware webnetworkSQL injection vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to...CVE-2012-09127.5 HighJanuary 24, 2012
stone-ware webnetworkCross-site request forgery (CSRF) vulnerability in Stoneware webNetwork before 6.0.8.0 allows...CVE-2012-0286Public exploit6.8 MediumJanuary 24, 2012
stone-ware webnetworkMultiple cross-site scripting (XSS) vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow...CVE-2012-0285Public exploit4.3 MediumJanuary 24, 2012
curl, curl libcurl +1 morecurl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction...CVE-2012-0036Fix availableEPSS 16.1%7.5 HighJanuary 24, 2012
glucose 2Cross-site scripting (XSS) vulnerability in glucose 2 before stage 6.2 allows remote attackers to...CVE-2012-03134.3 MediumJanuary 24, 2012
google chrome, apple iphone os, safari +2 moreUse-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause...CVE-2011-39287.5 HighJanuary 24, 2012
google chromeSkia, as used in Google Chrome before 16.0.912.77, does not perform all required initialization...CVE-2011-39277.5 HighJanuary 24, 2012
google chrome, apple iphone os, itunes +1 more +3 moreHeap-based buffer overflow in the tree builder in Google Chrome before 16.0.912.77 allows remote...CVE-2011-39267.5 HighJanuary 24, 2012
google chromeUse-after-free vulnerability in the Safe Browsing feature in Google Chrome before 16.0.912.75...CVE-2011-39257.5 HighJanuary 24, 2012
google chrome, apple iphone os, itunes +1 more +3 moreUse-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause...CVE-2011-39247.5 HighJanuary 24, 2012
duckcorp bipBuffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute...CVE-2012-0806Fix available6.5 MediumJanuary 24, 2012
ibm lotus symphonyMultiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony...CVE-2012-01929.3 HighJanuary 23, 2012
rails Debianrails - severalDSA-2301-2Fix availableNo scoreJanuary 23, 2012
phpmyadminphpMyAdmin Vulnerable to Cross-Site ScriptingCVE-2011-1940Fix available4.3 MediumJanuary 22, 2012
neoaxis web playerDirectory traversal vulnerability in the web player in NeoAxis NeoAxis web player 1.4 and earlier...CVE-2012-09075.8 MediumJanuary 20, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open