Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
February

CVEs published in February 2012

380 vulnerabilities, 81 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

4homepages 4imagesCross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote...CVE-2012-1021Public exploit4.3 MediumFebruary 8, 2012
overseaswtc nexorone online banking systemMultiple cross-site scripting (XSS) vulnerabilities in login.php in NexorONE Online Banking allow...CVE-2012-10204.3 MediumFebruary 8, 2012
xwiki enterpriseMultiple cross-site scripting (XSS) vulnerabilities in XWiki Enterprise 3.4 allow remote...CVE-2012-10194.3 MediumFebruary 8, 2012
dmackmedia mod currencyconverterCross-site scripting (XSS) vulnerability in includes/convert.php in D-Mack Media Currency...CVE-2012-1018Public exploit4.3 MediumFebruary 8, 2012
secureideas baseMultiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine...CVE-2012-1017Public exploit7.5 HighFebruary 8, 2012
hudong hdwikiUnrestricted file upload vulnerability in attachement.php in HDWiki 5.0 allows remote attackers...CVE-2011-50777.5 HighFebruary 8, 2012
hudong hdwikiSQL injection vulnerability in model/comment.class.php in HDWiki 5.0, 5.1, and possibly other...CVE-2011-50767.5 HighFebruary 8, 2012
likno allwebmenus pluginactions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass...CVE-2012-1011Public exploit7.5 HighFebruary 7, 2012
likno allwebmenus pluginUnrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for...CVE-2012-1010Public exploit7.5 HighFebruary 7, 2012
sphinx-soft mobile web serverMultiple cross-site scripting (XSS) vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47...CVE-2012-1005Public exploit4.3 MediumFebruary 7, 2012
openemrinterface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute...CVE-2012-0992Public exploit8.5 HighFebruary 7, 2012
openemrMultiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to...CVE-2012-0991Public exploit3.5 LowFebruary 7, 2012
dclassifiedsCross-site request forgery (CSRF) vulnerability in admin/settings/update in DClassifieds 0.1...CVE-2012-0990Public exploit3.5 LowFebruary 7, 2012
apache strutsWithdrawn Advisory: Apache Struts XSSCVE-2012-1007Public exploitEPSS 32.8%4.3 MediumFebruary 7, 2012
apache strutsApache Struts Multiple Cross-site Scripting VulnerabilitiesCVE-2012-1006Public exploitFix availableEPSS 56.6%4.3 MediumFebruary 7, 2012
opera browserMultiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of...CVE-2012-10035.0 MediumFebruary 7, 2012
emc documentum xploreEMC Documentum xPlore 1.0, 1.1 before P07, and 1.2 does not properly enforce the requirement for...CVE-2012-03964.0 MediumFebruary 6, 2012
symantec altiris client management suite pcanywhere solution, altiris deployment solution remote pcanywhere solution, pcanywhere +2 moreSymantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5...CVE-2012-029010.0 HighFebruary 6, 2012
ibm aixThe TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is...CVE-2012-01947.1 HighFebruary 6, 2012
broadwin webaccesswebvrpcs.exe in Advantech/BroadWin WebAccess allows remote attackers to execute arbitrary code or...CVE-2011-4041Public exploitEPSS 17.7%10.0 HighFebruary 6, 2012
htc desire hd, desire s, droid incredible +6 more +8 moreMultiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid...CVE-2011-48722.6 LowFebruary 5, 2012
cacti Debiancacti - severalDSA-2384-2Fix availableNo scoreFebruary 4, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreminiweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3...CVE-2011-4879Public exploitEPSS 12.1%8.5 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreDirectory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible...CVE-2011-4878Public exploitEPSS 11.1%7.8 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreHmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 ...CVE-2011-4877Public exploit7.1 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreDirectory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004...CVE-2011-4876Public exploit9.3 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreStack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005...CVE-2011-4875Public exploitEPSS 13.8%9.3 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreThe TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal...CVE-2011-451410.0 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreSiemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP,...CVE-2011-451310.0 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreCRLF injection vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007,...CVE-2011-45125.0 MediumFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreCross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004,...CVE-2011-45114.3 MediumFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreCross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004,...CVE-2011-45104.3 MediumFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreThe HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA...CVE-2011-450910.0 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreThe HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 ...CVE-2011-45089.3 HighFebruary 3, 2012
emobile pocket wifi, pocket wifi firmware +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities on the eAccess Pocket WiFi (aka GP02)...CVE-2012-03146.8 MediumFebruary 3, 2012
hp data protector media operationsDBServer.exe in HP Data Protector Media Operations 6.11 and earlier allows remote attackers to...CVE-2011-479110.0 HighFebruary 3, 2012
mozilla bugzillaBugzilla 2.x and 3.x before 3.4.14, 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4,...CVE-2012-04484.0 MediumFebruary 2, 2012
mozilla bugzillaCross-site request forgery (CSRF) vulnerability in jsonrpc.cgi in Bugzilla 3.5.x and 3.6.x before...CVE-2012-04405.1 MediumFebruary 2, 2012
apple mac os x, mac os x server +1 moreWebDAV Sharing in Apple Mac OS X 10.7.x before 10.7.3 does not properly perform authentication,...CVE-2011-34637.2 HighFebruary 2, 2012
apple mac os x, mac os x server +1 moreTime Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote...CVE-2011-34625.0 MediumFebruary 2, 2012
apple mac os x, mac os x server +1 moreBuffer overflow in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute...CVE-2011-34607.5 HighFebruary 2, 2012
apple mac os x, mac os x server +1 moreOff-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute...CVE-2011-34596.8 MediumFebruary 2, 2012
apple mac os x, mac os x server +1 moreQuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory...CVE-2011-34586.8 MediumFebruary 2, 2012
apple mac os x, mac os x server +1 moreThe OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL...CVE-2011-34577.5 HighFebruary 2, 2012
apple mac os x, mac os x server +1 moreInteger overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute...CVE-2011-34537.5 HighFebruary 2, 2012
apple mac os x, mac os x server +1 moreInternet Sharing in Apple Mac OS X before 10.7.3 does not preserve the Wi-Fi configuration across...CVE-2011-34524.3 MediumFebruary 2, 2012
apple mac os x, mac os x server +1 moreCoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack...CVE-2011-34506.8 MediumFebruary 2, 2012
apple mac os x, mac os x server +1 moreUse-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers...CVE-2011-34496.8 MediumFebruary 2, 2012
apple mac os x, mac os x server +1 moreHeap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers...CVE-2011-34486.8 MediumFebruary 2, 2012
apple mac os x, mac os x server +1 moreCFNetwork in Apple Mac OS X 10.7.x before 10.7.3 does not properly construct request headers...CVE-2011-34474.3 MediumFebruary 2, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open