CVEs published in February 2012
380 vulnerabilities, 81 critical, 3 exploited.
- copadata zenonZenSysSrv.exe in Ing. Punzenberger COPA-DATA zenon 6.51 SP0 allows remote attackers to cause a...7.5 High
- copadata zenonzenAdminSrv.exe in Ing. Punzenberger COPA-DATA zenon 6.51 SP0 allows remote attackers to cause a...7.5 High
- dreamreport dream report, invensys wonderware hmi reports +1 moreInvensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream...9.3 High
- dreamreport dream report, invensys wonderware hmi reports +1 moreCross-site scripting (XSS) vulnerability in Invensys Wonderware HMI Reports 3.42.835.0304 and...4.3 Medium
- google chromeThe shader translator implementation in Google Chrome before 17.0.963.46 allows remote attackers...5.0 Medium
- google chrome, apple iphone os, itunes +1 more +3 moreUse-after-free vulnerability in Google Chrome before 17.0.963.46 allows user-assisted remote...6.8 Medium
- google chrome, xmlsoft libxslt, suse linux enterprise desktop +2 more +4 morelibxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial...4.3 Medium
- google chrome, apple iphone os, itunes +1 more +3 moreUse-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause...6.8 Medium
- google chrome, apple iphone os, itunes +1 more +3 moreUse-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause...4.3 Medium
- google chromeUnspecified vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a...5.0 Medium
- google chrome, apple iphone os, itunes +1 more +3 moreUse-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause...7.5 High
- google chromeGoogle Chrome before 17.0.963.46 does not properly check signatures, which allows remote...5.0 Medium
- google chromeGoogle Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which...5.8 Medium
- google chromeGoogle Chrome before 17.0.963.46 does not properly handle PDF FAX images, which allows remote...5.0 Medium
- google chromeGoogle Chrome before 17.0.963.46 does not properly perform path clipping, which allows remote...4.3 Medium
- google chromeRace condition in Google Chrome before 17.0.963.46 allows remote attackers to execute arbitrary...9.3 High
- google chromeGoogle Chrome before 17.0.963.46 does not properly decode audio data, which allows remote...4.3 Medium
- google chromeBuffer overflow in the locale implementation in Google Chrome before 17.0.963.46 allows remote...7.5 High
- google chrome, apple iphone os, itunes +1 more +3 moreGoogle Chrome before 17.0.963.46 does not properly perform casts of variables during handling of...6.8 Medium
- google chromeUse-after-free vulnerability in the garbage-collection functionality in Google Chrome before 17.0...7.5 High
- google chromeThe extension implementation in Google Chrome before 17.0.963.46 does not properly handle...6.8 Medium
- google chromeGoogle Chrome before 17.0.963.46 allows remote attackers to cause a denial of service ...7.5 High
- google chromeGoogle Chrome before 17.0.963.46 allows remote attackers to cause a denial of service ...5.0 Medium
- google chromeGoogle Chrome before 17.0.963.46 does not prevent monitoring of the clipboard after a paste event...7.5 High
- cvsHeap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12...10.0 High
- linux kernelThe journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does...4.9 Medium
- adacore ada web servicesAdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without...5.0 Medium
- sybase m-business anywhereThe web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3...6.5 Medium
- isc bindThe resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS...5.0 Medium
- inria ocamlOCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash...5.0 Medium
- realnetworks realplayer, realplayer sp +1 moreThe ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0...9.3 High
- realnetworks realplayer, realplayer sp +1 moreUnspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and...9.3 High
- realnetworks realplayer, realplayer sp +1 moreThe RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP...9.3 High
- realnetworks realplayer, realplayer sp +1 moreUnspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x...9.3 High
- realnetworks realplayer, realplayer sp +1 moreRealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5...9.3 High
- realnetworks realplayer, realplayer sp +1 moreThe RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP...9.3 High
- realnetworks realplayer, realplayer sp +1 morervrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1...9.3 High
- episerver cmsMultiple cross-site scripting (XSS) vulnerabilities in the admin interface in EPiServer CMS...4.3 Medium
- episerver cmsUnspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using...6.0 Medium
- officesip serverOfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a...5.0 Medium
- foswikiMultiple cross-site scripting (XSS) vulnerabilities in UI/Register.pm in Foswiki before 1.1.5...2.1 Low
- zakongroup openconfSQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote...10.0 High
- tubeace tube aceSQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6...7.5 High
- simple-groupware simplegroupwareCross-site scripting (XSS) vulnerability in bin/index.php in SimpleGroupware 0.742 and other...4.3 Medium
- project-open \]project-open\[Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x...4.3 Medium
- johannes ekberg xray cmsMultiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to...7.5 High
- dream-multimedia-tv enigma2 webinterfaceAbsolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3...5.0 Medium
- dream-multimedia-tv enigma2 webinterfaceDirectory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows...5.0 Medium
- 4homepages 4imagesOpen redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to...5.8 Medium
- 4homepages 4imagesSQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute...7.5 High
- Show moreLoading…