CVEs published in February 2012

380 vulnerabilities, 81 critical, 3 exploited.

• google cr-48 chromebook, acer ac700 chromebook, google chrome os +1 more +3 more Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.60 on the Acer AC700,... CVE-2012-1418 10.0 HighFebruary 29, 2012
• kadu Multiple cross-site scripting (XSS) vulnerabilities in the History Window implementation in Kadu... CVE-2012-1410 4.3 MediumFebruary 29, 2012
• openssl The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote... CVE-2006-7250 Fix available 5.0 MediumFebruary 29, 2012
• christos zoulas file, tim robbins libmagic +1 more file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a... CVE-2012-1571 Fix available 4.3 MediumFebruary 29, 2012
• moodle PHPMailer vulnerable to email header injection CVE-2012-0796 Fix available 4.0 MediumFebruary 29, 2012
• moodle Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does... CVE-2012-0795 Fix available 6.5 MediumFebruary 29, 2012
• moodle The rc4encrypt function in lib/moodlelib.php in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2... CVE-2012-0794 Fix available 5.0 MediumFebruary 29, 2012
• moodle Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows... CVE-2012-0793 Fix available 5.0 MediumFebruary 29, 2012
• moodle mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the... CVE-2012-0792 Fix available 4.0 MediumFebruary 29, 2012
• moodle The ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x before 1.9.15 uses an incorrect... CVE-2011-4588 Fix available 5.0 MediumFebruary 29, 2012
• moodle lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does... CVE-2011-4587 Fix available 6.8 MediumFebruary 29, 2012
• moodle CRLF injection vulnerability in calendar/set.php in the Calendar subsystem in Moodle 1.9.x before... CVE-2011-4586 Fix available 5.0 MediumFebruary 29, 2012
• moodle login/change_password.php in Moodle 1.9.x before 1.9.15 does not use https for the change... CVE-2011-4585 Fix available 5.0 MediumFebruary 29, 2012
• moodle The MNET authentication functionality in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1... CVE-2011-4584 Fix available 4.0 MediumFebruary 29, 2012
• moodle mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2... CVE-2011-4308 Fix available 4.0 MediumFebruary 29, 2012
• linux kernel, redhat enterprise mrg, suse linux enterprise desktop +2 more +4 more The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to... CVE-2012-1090 Fix available 5.5 MediumFebruary 28, 2012
• oracle java se, jre, debian linux +4 more +6 more Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7... CVE-2012-0507 In KEVPublic exploitFix available EPSS 98.2% 10.0 HighFebruary 28, 2012
• redhat icedtea-web, canonical ubuntu linux, opensuse +2 more The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote... CVE-2011-3377 Fix available 4.3 MediumFebruary 28, 2012
• puppet, puppet enterprise, puppetlabs puppet enterprise users +2 more Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1... CVE-2012-1054 Fix available 4.4 MediumFebruary 27, 2012
• puppet, puppet enterprise, puppetlabs puppet enterprise users +2 more Puppet Privilege Escallation CVE-2012-1053 Fix available 6.9 MediumFebruary 27, 2012
• postgresql CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9... CVE-2012-0868 Fix available 6.8 MediumFebruary 27, 2012
• postgresql, debian linux, opensuse project opensuse +8 more +10 more PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common... CVE-2012-0867 Fix available 4.3 MediumFebruary 27, 2012
• postgresql CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9... CVE-2012-0866 Fix available 6.5 MediumFebruary 27, 2012
• mozilla bugzilla Cross-site request forgery (CSRF) vulnerability in xmlrpc.cgi in Bugzilla 4.0.2 through 4.0.4 and... CVE-2012-0453 5.1 MediumFebruary 25, 2012
• cisco small business srp520-u series firmware, small business srp520 series firmware, small business srp521w +9 more +11 more Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520... CVE-2012-0365 9.0 HighFebruary 25, 2012
• cisco small business srp520-u series firmware, small business srp520 series firmware, small business srp521w +9 more +11 more Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices... CVE-2012-0364 7.8 HighFebruary 25, 2012
• cisco small business srp520-u series firmware, small business srp520 series firmware, small business srp521w +9 more +11 more The web interface on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and... CVE-2012-0363 9.0 HighFebruary 25, 2012
• fex Debian fex - regression DSA-2414-2 Fix available No scoreFebruary 25, 2012
• contimex impulsio cms SQL injection vulnerability in CONTIMEX Impulsio CMS allows remote attackers to execute arbitrary... CVE-2012-1294 Public exploit 7.5 HighFebruary 23, 2012
• boonex dolphin Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote... CVE-2012-0873 Public exploit 4.3 MediumFebruary 23, 2012
• webmproject libvpx VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of... CVE-2012-0823 Fix available 5.0 MediumFebruary 23, 2012
• sap netweaver Unspecified vulnerability in the MessagingSystem servlet in SAP NetWeaver 7.0 allows remote... CVE-2012-1292 5.0 MediumFebruary 23, 2012
• sap netweaver Unspecified vulnerability in the com.sap.aii.mdt.amt.web.AMTPageProcessor servlet in SAP... CVE-2012-1291 5.0 MediumFebruary 23, 2012
• sap netweaver Cross-site scripting (XSS) vulnerability in b2b/auction/container.jsp in the Internet Sales (crm... CVE-2012-1290 4.3 MediumFebruary 23, 2012
• sap netweaver Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated... CVE-2012-1289 4.0 MediumFebruary 23, 2012
• utc fire \& security ge-mc100-ntp\/gps-zb master clock device The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an... CVE-2012-1288 10.0 HighFebruary 23, 2012
• rim blackberry playbook tablet, samba, rim blackberry playbook os +2 more Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service... CVE-2012-0870 Fix available 7.9 HighFebruary 23, 2012
• ibm websphere application server Cross-site scripting (XSS) vulnerability in IBM WebSphere Lombardi Edition 7.2 allows remote... CVE-2012-0707 4.3 MediumFebruary 23, 2012
• easyvista The single sign-on (SSO) implementation in EasyVista before 2010.1.1.89 allows remote attackers... CVE-2012-1256 5.0 MediumFebruary 22, 2012
• estsoft alftp Untrusted search path vulnerability in ALFTP before 5.31 allows local users to gain privileges... CVE-2012-0315 9.3 HighFebruary 22, 2012
• symantec altiris client management suite pcanywhere solution, altiris deployment solution remote pcanywhere solution, altiris it management suite pcanywhere solution +1 more +3 more Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5... CVE-2012-0291 5.0 MediumFebruary 22, 2012
• 7t termis Untrusted search path vulnerability in 7-Technologies (7T) TERMIS 2.10 and earlier allows local... CVE-2012-0223 9.3 HighFebruary 22, 2012
• notmuchmail notmuch emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user... CVE-2012-1103 Fix available 4.3 MediumFebruary 22, 2012
• xmlsoft libxml2, apple iphone os +1 more libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash... CVE-2012-0841 Fix available 5.0 MediumFebruary 22, 2012
• advantech webaccess Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote... CVE-2012-1235 6.0 MediumFebruary 21, 2012
• advantech webaccess SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users... CVE-2012-1234 6.5 MediumFebruary 21, 2012
• advantech webaccess Multiple SQL injection vulnerabilities in Advantech/BroadWin WebAccess before 7.0 allow remote... CVE-2012-0244 7.5 HighFebruary 21, 2012
• advantech webaccess Buffer overflow in an ActiveX control in bwocxrun.ocx in Advantech/BroadWin WebAccess before 7.0... CVE-2012-0243 10.0 HighFebruary 21, 2012
• advantech webaccess Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to... CVE-2012-0242 Public exploit 10.0 HighFebruary 21, 2012
• advantech webaccess Advantech/BroadWin WebAccess before 7.0 allows remote attackers to cause a denial of service ... CVE-2012-0241 Public exploit 5.0 MediumFebruary 21, 2012
• Show olderLoading…