CVEs published in March 2012

430 vulnerabilities, 132 critical, 0 exploited.

• phpgradebook php grade book admin/index.php in PHP Grade Book before 1.9.5 BETA allows remote attackers to read the database... CVE-2012-1670 Public exploit 5.0 MediumMarch 31, 2012
• hp performance manager Unspecified vulnerability in HP Performance Manager 9.00 allows remote attackers to execute... CVE-2012-0127 EPSS 23.6% 10.0 HighMarch 31, 2012
• openarena Debian openarena - UDP traffic amplification DSA-2442-2 Fix available No scoreMarch 31, 2012
• typo3 Typo3 API XSS Vulnerabilities CVE-2012-1608 Fix available 5.0 MediumMarch 31, 2012
• typo3 TYPO3 allows remote attackers to obtain the database name via a direct request CVE-2012-1607 Fix available 5.0 MediumMarch 31, 2012
• typo3 Typo3 Backend XSS Vulnerabilities CVE-2012-1606 Fix available 3.5 LowMarch 31, 2012
• google chrome Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of... CVE-2011-3065 Fix available 6.8 MediumMarch 30, 2012
• google chrome, apple iphone os, itunes +1 more +3 more Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to... CVE-2011-3064 Fix available 7.5 HighMarch 30, 2012
• google chrome Google Chrome before 18.0.1025.142 does not properly validate the renderer's navigation requests,... CVE-2011-3063 Fix available 4.3 MediumMarch 30, 2012
• google chrome, mozilla firefox, seamonkey +2 more +4 more Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote... CVE-2011-3062 Fix available 6.8 MediumMarch 30, 2012
• google chrome Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a... CVE-2011-3061 Fix available 5.8 MediumMarch 30, 2012
• google chrome, apple iphone os, itunes +1 more +3 more Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote... CVE-2011-3060 Fix available 6.8 MediumMarch 30, 2012
• google chrome, apple iphone os, itunes +1 more +3 more Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allows... CVE-2011-3059 Fix available 6.8 MediumMarch 30, 2012
• google chrome, apple iphone os, mac os x +2 more Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which... CVE-2011-3058 Fix available 4.3 MediumMarch 30, 2012
• cisco ios Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15... CVE-2012-1315 7.8 HighMarch 29, 2012
• cisco ios The WAAS Express feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of... CVE-2012-1314 7.8 HighMarch 29, 2012
• cisco ios The MACE feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service ... CVE-2012-1312 7.1 HighMarch 29, 2012
• cisco ios, ios xe +1 more The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when... CVE-2012-1311 7.8 HighMarch 29, 2012
• cisco ios Memory leak in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote... CVE-2012-1310 7.8 HighMarch 29, 2012
• cisco ios Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0,... CVE-2012-0388 7.8 HighMarch 29, 2012
• cisco ios Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4,... CVE-2012-0387 7.8 HighMarch 29, 2012
• cisco ios, ios xe +1 more The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2... CVE-2012-0386 7.8 HighMarch 29, 2012
• cisco ios The Smart Install feature in Cisco IOS 12.2, 15.0, 15.1, and 15.2 allows remote attackers to... CVE-2012-0385 7.8 HighMarch 29, 2012
• cisco ios, ios xe +1 more Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS... CVE-2012-0384 7.2 HighMarch 29, 2012
• cisco ios Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause... CVE-2012-0383 7.8 HighMarch 29, 2012
• cisco ios, ios xe +1 more The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12... CVE-2012-0382 7.5 HighMarch 29, 2012
• cisco ios, ios xe +1 more The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x... CVE-2012-0381 7.5 HighMarch 29, 2012
• linux kernel The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of... CVE-2012-1601 Fix available 4.9 MediumMarch 29, 2012
• tryton trytond Trytond allows modification of privileges of arbitrary users CVE-2012-0215 Fix available 5.5 MediumMarch 29, 2012
• adobe air, flash player, xerox freeflow print server +2 more The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on... CVE-2012-0773 Fix available 9.3 HighMarch 28, 2012
• adobe air, flash player +1 more An unspecified ActiveX control in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202... CVE-2012-0772 10.0 HighMarch 28, 2012
• microsoft windows 2000, windows 7, windows server 2008 +2 more +4 more Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows... CVE-2007-6753 6.2 MediumMarch 28, 2012
• privawall antivirus The scanner engine in PrivaWall Antivirus 5.6 and earlier does not recognize the Office XML (aka... CVE-2012-1907 4.3 MediumMarch 28, 2012
• realnetworks realplayer, realplayer sp +1 more mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and... CVE-2012-1904 Public exploit 4.3 MediumMarch 28, 2012
• maradns The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names... CVE-2012-1570 Fix available 4.3 MediumMarch 28, 2012
• hp hp-ux Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.11 and 11.23 allows remote... CVE-2012-0126 5.8 MediumMarch 28, 2012
• hp hp-ux Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.31 allows local users to... CVE-2012-0125 3.3 LowMarch 28, 2012
• drupal ** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows... CVE-2007-6752 Public exploitDisputed 6.8 MediumMarch 28, 2012
• opera browser Opera before 11.62 on UNIX, when used in conjunction with an unspecified printing application,... CVE-2012-1931 4.6 MediumMarch 28, 2012
• opera browser Opera before 11.62 on UNIX uses world-readable permissions for temporary files during printing,... CVE-2012-1930 4.6 MediumMarch 28, 2012
• opera browser Opera before 11.62 on Mac OS X allows remote attackers to spoof the address field and security... CVE-2012-1929 6.4 MediumMarch 28, 2012
• opera browser Opera before 11.62 allows remote attackers to spoof the address field by triggering a page reload... CVE-2012-1928 6.4 MediumMarch 28, 2012
• opera browser Opera before 11.62 allows remote attackers to spoof the address field by triggering the launch of... CVE-2012-1927 6.4 MediumMarch 28, 2012
• opera browser Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history... CVE-2012-1926 5.0 MediumMarch 28, 2012
• opera browser Opera before 11.62 does not ensure that a dialog window is placed on top of content windows,... CVE-2012-1925 6.8 MediumMarch 28, 2012
• opera browser Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and... CVE-2012-1924 6.8 MediumMarch 28, 2012
• atmail open @Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain... CVE-2012-1920 5.0 MediumMarch 27, 2012
• atmail open CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1... CVE-2012-1919 6.4 MediumMarch 27, 2012
• atmail open Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php... CVE-2012-1918 5.0 MediumMarch 27, 2012
• atmail open compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ..... CVE-2012-1917 5.0 MediumMarch 27, 2012
• Show olderLoading…