Skip to content

CVEs published in February 2012

380 vulnerabilities, 81 critical, 3 exploited.

apple mac os x, mac os x server +1 moreApple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for...CVE-2011-34467.5 HighFebruary 2, 2012
apple mac os x, mac os x server +1 moreAddress Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon...CVE-2011-34444.3 MediumFebruary 2, 2012
scriptsez ez albumSQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute...CVE-2012-0983Public exploit7.5 HighFebruary 2, 2012
vastal agent zoneSQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script...CVE-2012-0982Public exploit7.5 HighFebruary 2, 2012
kybernetika phpshowtimeDirectory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary...CVE-2012-0981Public exploit5.0 MediumFebruary 2, 2012
phux download managerSQL injection vulnerability in download.php in phux Download Manager allows remote attackers to...CVE-2012-0980Public exploit7.5 HighFebruary 2, 2012
twikiCross-site scripting (XSS) vulnerability in TWiki allows remote attackers to inject arbitrary web...CVE-2012-09794.3 MediumFebruary 2, 2012
luratech lurawave jp2 browser plug-inStack-based buffer overflow in npjp2.dll in LuraWave JP2 Browser Plug-In 1.1.1.11 and other...CVE-2012-09786.8 MediumFebruary 2, 2012
luratech lurawave jp2 activex controlStack-based buffer overflow in jp2_x.dll in LuraWave JP2 ActiveX Control 2.1.5.5 and other...CVE-2012-09779.3 HighFebruary 2, 2012
silverstripeCross-site scripting (XSS) vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote...CVE-2012-09762.1 LowFebruary 2, 2012
clixint image hosting script dpiCross-site scripting (XSS) vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and...CVE-2012-09754.3 MediumFebruary 2, 2012
freebsd, netbsd +1 moreThe Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD, NetBSD, and...CVE-2011-23937.8 HighFebruary 2, 2012
linux kernelThe Linux kernel, when using IPv6, allows remote attackers to determine whether a host is...CVE-2010-4563Fix available5.0 MediumFebruary 2, 2012
microsoft windows 2000, windows 2003 server, windows 7 +3 more +5 moreMicrosoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to...CVE-2010-4562EPSS 14.3%4.3 MediumFebruary 2, 2012
novell open enterprise serverBuffer overflow in Novell iPrint Server in Novell Open Enterprise Server 2 (OES2) through SP3 on...CVE-2011-41947.5 HighFebruary 2, 2012
emc documentum content server, centos +1 moreUnspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3...CVE-2011-41446.8 MediumFebruary 2, 2012
linux kernelnet/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are...CVE-2011-15735.9 MediumFebruary 2, 2012
phpThe php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to...CVE-2012-0830Public exploitFix availableEPSS 29.8%7.5 HighFebruary 2, 2012
hp network automationUnspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote...CVE-2011-47909.3 HighFebruary 2, 2012
mozilla firefox, seamonkey +1 moreMozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak...CVE-2012-04502.1 LowFebruary 1, 2012
mozilla firefox, seamonkey, thunderbird +5 more +7 moreMozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0,...CVE-2012-04499.3 HighFebruary 1, 2012
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not...CVE-2012-04475.0 MediumFebruary 1, 2012
mozilla firefox, seamonkey, thunderbird +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0,...CVE-2012-04464.3 MediumFebruary 1, 2012
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow...CVE-2012-04455.0 MediumFebruary 1, 2012
mozilla firefox, seamonkey, thunderbird +6 more +8 moreMozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0,...CVE-2012-0444Fix available10.0 HighFebruary 1, 2012
mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 9.0,...CVE-2012-044310.0 HighFebruary 1, 2012
mozilla firefox, seamonkey, thunderbird +5 more +7 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4...CVE-2012-04429.3 HighFebruary 1, 2012
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0,...CVE-2011-36705.0 MediumFebruary 1, 2012
mozilla firefox, seamonkey, thunderbird +4 more +6 moreUse-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird...CVE-2011-3659Public exploitEPSS 36.8%9.3 HighFebruary 1, 2012
todd miller sudoFormat string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local...CVE-2012-0809Public exploitFix available7.2 HighFebruary 1, 2012