Skip to content

CVEs published in March 2012

430 vulnerabilities, 132 critical, 0 exploited.

google chrome, apple iphone os, itunes +2 more +4 moreUse-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause...CVE-2011-30326.8 MediumMarch 5, 2012
google chrome, opensuse +1 moreUse-after-free vulnerability in the element wrapper in Google V8, as used in Google Chrome before...CVE-2011-30316.8 MediumMarch 5, 2012
xml\ \It was discovered that the XML::Atom Perl module before version 0.39 did not disable external...CVE-2012-1102Fix available7.5 HighMarch 4, 2012
apache strutsApache Struts Code injection due to conversion errorCVE-2012-0838Fix availableEPSS 13.7%10.0 HighMarch 2, 2012
kingsoft internet securityUnspecified vulnerability in the device driver in Kingsoft Internet Security 2011 allows local...CVE-2012-03212.1 LowMarch 2, 2012
novell groupwiseThe client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary...CVE-2011-4189Public exploitEPSS 11.5%7.5 HighMarch 2, 2012
ibm aix, vios +1 moreIBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of...CVE-2011-13857.8 HighMarch 2, 2012
ibm ilog jviews gantt, tivoli change and configuration management database +1 moreCross-site scripting (XSS) vulnerability in the Gantt applet viewer in IBM Tivoli Change and...CVE-2012-07154.3 MediumMarch 2, 2012
ibm personal communicationsStack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x...CVE-2012-0201Public exploitEPSS 36.3%9.3 HighMarch 2, 2012
movabletype movable type advanced, movable type enterprise, movable type open source +1 more +3 moreThe default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13...CVE-2012-14974.0 MediumMarch 2, 2012
movabletype movable type advanced, movable type enterprise, movable type open source +1 more +3 moreCross-site scripting (XSS) vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before 4.38,...CVE-2012-12624.3 MediumMarch 2, 2012
sixapart movable typeMovable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take...CVE-2012-03207.5 HighMarch 2, 2012
movabletype movable type advanced, movable type enterprise, movable type open source +1 more +3 moreThe file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13...CVE-2012-03196.5 MediumMarch 2, 2012
movabletype movable type advanced, movable type enterprise, movable type open source +1 more +3 moreMultiple cross-site scripting (XSS) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07...CVE-2012-03184.3 MediumMarch 2, 2012
sixapart movable typeMultiple cross-site request forgery (CSRF) vulnerabilities in Movable Type before 4.38, 5.0x...CVE-2012-03176.8 MediumMarch 2, 2012
cookpad android activities, android mykitchen +1 moreThe Cookpad 1.5.16 and earlier and Cookpad Noseru 1.1.1 and earlier applications for Android do...CVE-2012-03165.0 MediumMarch 2, 2012
sixapart movable typeUnspecified vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote...CVE-2011-50857.5 HighMarch 2, 2012
sixapart movable typeCross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05...CVE-2011-50844.3 MediumMarch 2, 2012
apple safariUse-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.6, allows remote...CVE-2011-34437.5 HighMarch 2, 2012
cisco 2000 wireless lan controller, 2100 wireless lan controller, 2106 wireless lan controller +10 more +12 moreCisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4...CVE-2012-03719.3 HighMarch 1, 2012
cisco 2000 wireless lan controller, 2100 wireless lan controller, 2106 wireless lan controller +10 more +12 moreCisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0...CVE-2012-03707.8 HighMarch 1, 2012
cisco 2000 wireless lan controller, 2100 wireless lan controller, 2106 wireless lan controller +10 more +12 moreCisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0, 7.1...CVE-2012-03697.8 HighMarch 1, 2012
cisco 2000 wireless lan controller, 2100 wireless lan controller, 2106 wireless lan controller +10 more +12 moreThe administrative management interface on Cisco Wireless LAN Controller (WLC) devices with...CVE-2012-03687.8 HighMarch 1, 2012
cisco unity connectionCisco Unity Connection before 7.1.5b(Su5), 8.0 and 8.5 before 8.5.1(Su3), and 8.6 before 8.6.2...CVE-2012-03677.8 HighMarch 1, 2012
cisco unity connectionCisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the...CVE-2012-03669.0 HighMarch 1, 2012
cisco cius, cius software +1 moreThe Cisco Cius with software before 9.2(1) SR2 allows remote attackers to cause a denial of...CVE-2012-03597.8 HighMarch 1, 2012
cisco telepresence video communication server, telepresence system software +1 moreCisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers...CVE-2012-03317.5 HighMarch 1, 2012
cisco telepresence video communication server, telepresence system software +1 moreCisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers...CVE-2012-03307.8 HighMarch 1, 2012
cisco business edition 3000, unified communications manager, business edition 3000 software +4 more +6 moreSQL injection vulnerability in Cisco Unified Communications Manager (CUCM) with software 6.x and...CVE-2011-44876.8 MediumMarch 1, 2012
cisco business edition 3000, unified communications manager, business edition 3000 software +4 more +6 moreCisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0...CVE-2011-44867.8 HighMarch 1, 2012