Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
March

CVEs published in March 2012

430 vulnerabilities, 132 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

tskynet kongreg8Multiple cross-site scripting (XSS) vulnerabilities in Kongreg8 1.7.3 allow remote attackers to...CVE-2012-17894.3 MediumMarch 19, 2012
wonderdesk sqlMultiple cross-site scripting (XSS) vulnerabilities in wonderdesk.cgi in WonderDesk SQL 4.14...CVE-2012-17884.3 MediumMarch 19, 2012
webglimpseMultiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and...CVE-2012-1787Public exploit4.3 MediumMarch 19, 2012
kylegilman video embed \& thumbnail generatorThe Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress...CVE-2012-17865.0 MediumMarch 19, 2012
kylegilman video embed \& thumbnail generatorkg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows...CVE-2012-17857.5 HighMarch 19, 2012
myjoblistSQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL...CVE-2012-1784Public exploit7.5 HighMarch 19, 2012
saurabh gupta tiny serverTiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a...CVE-2012-1783Public exploit7.8 HighMarch 19, 2012
osqaMultiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote...CVE-2012-1782Public exploit4.3 MediumMarch 19, 2012
socialcmsMultiple cross-site scripting (XSS) vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5...CVE-2012-17814.3 MediumMarch 19, 2012
socialcmsSQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute...CVE-2012-17807.5 HighMarch 19, 2012
idevspot idev-businessdirectoryCross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote...CVE-2012-17794.3 MediumMarch 19, 2012
createvision cmsSQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to...CVE-2012-1778Public exploit7.5 HighMarch 19, 2012
contao cmsMultiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly...CVE-2012-1297Public exploit6.8 MediumMarch 19, 2012
dotclearUnrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2...CVE-2011-50837.5 HighMarch 19, 2012
s2memberCross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress...CVE-2011-50824.3 MediumMarch 19, 2012
bitweaverDirectory traversal vulnerability in wiki/rankings.php in Bitweaver 2.7 and 2.8.1 allows remote...CVE-2010-50865.0 MediumMarch 19, 2012
iwork webglimpseDirectory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote...CVE-2009-5114Public exploitEPSS 11.7%5.0 MediumMarch 19, 2012
iwork webglimpseCross-site scripting (XSS) vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows...CVE-2009-51134.3 MediumMarch 19, 2012
iwork webglimpsewgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation...CVE-2009-5112Public exploit5.0 MediumMarch 19, 2012
videolan vlc media playerMultiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote...CVE-2012-1776Fix available9.3 HighMarch 19, 2012
videolan vlc media playerStack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to...CVE-2012-1775Public exploitFix availableEPSS 43.7%9.3 HighMarch 19, 2012
apache mod fcgidfcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the...CVE-2012-1181Fix available5.0 MediumMarch 19, 2012
f5 nginx, debian linux, fedoraproject fedora +2 moreUse-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP...CVE-2012-1180Fix availableEPSS 10.6%5.0 MediumMarch 19, 2012
gnu gnashInteger overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10...CVE-2012-11756.8 MediumMarch 19, 2012
gnu gnashplugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie...CVE-2011-43285.0 MediumMarch 19, 2012
gomlab gom media playerUnspecified vulnerability in the Open URL feature in Gretech GOM Media Player before 2.1.39.5101...CVE-2012-1774Public exploit10.0 HighMarch 18, 2012
gomlab gom media playerUnspecified vulnerability in Gretech GOM Media Player before 2.1.37.5091 allows remote attackers...CVE-2012-12649.3 HighMarch 18, 2012
tetsuya aoyama twiccaThe twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of...CVE-2012-03265.0 MediumMarch 17, 2012
symantec altiris wise package studioMultiple SQL injection vulnerabilities in Symantec Altiris WISE Package Studio before 8.0MR1...CVE-2012-02936.8 MediumMarch 17, 2012
vmware vshield managerCross-site request forgery (CSRF) vulnerability in VMware vShield Manager (vSM) 1.0.1 before...CVE-2012-15146.8 MediumMarch 16, 2012
vmware vcenter orchestratorThe Web Configuration tool in VMware vCenter Orchestrator (vCO) 4.0 before Update 4, 4.1 before...CVE-2012-15134.0 MediumMarch 16, 2012
vmware vsphereCross-site scripting (XSS) vulnerability in the internal browser in vSphere Client in VMware...CVE-2012-15124.3 MediumMarch 16, 2012
vmware viewCross-site scripting (XSS) vulnerability in View Manager Portal in VMware View before 4.6.1...CVE-2012-15114.3 MediumMarch 16, 2012
vmware esx, esxi, view +2 moreBuffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4...CVE-2012-15107.2 HighMarch 16, 2012
vmware viewBuffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to...CVE-2012-15097.2 HighMarch 16, 2012
vmware esx, esxi, view +2 moreThe XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View...CVE-2012-15087.2 HighMarch 16, 2012
ge intelligent platforms proficy real-time information portalDirectory traversal vulnerability in rifsrvd.exe in the Remote Interface Service in GE...CVE-2012-02326.4 MediumMarch 15, 2012
ge intelligent platforms proficy plant applicationsPRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant...CVE-2012-023110.0 HighMarch 15, 2012
ge intelligent platforms proficy plant applicationsPRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant...CVE-2012-023010.0 HighMarch 15, 2012
ge intelligent platforms proficy historianThe Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier allows...CVE-2012-022910.0 HighMarch 15, 2012
netfrontlife netfront life browserUnspecified vulnerability in the NetFront Life Browser (com.access_company.android.nflifebrowser...CVE-2012-148510.0 HighMarch 15, 2012
wali walisms cnUnspecified vulnerability in the WaliSMS CN (cn.com.wali.walisms) application 2.9.2 and 3.7.0 for...CVE-2012-148410.0 HighMarch 15, 2012
zhou bo message forwarderUnspecified vulnerability in the Message Forwarder (com.gmail.zbnetium) application 1.12.20110409...CVE-2012-148310.0 HighMarch 15, 2012
touchpal contactsUnspecified vulnerability in the TouchPal Contacts (com.cootek.smartdialer) application 3.3.1 and...CVE-2012-148210.0 HighMarch 15, 2012
kashif masud textdroidUnspecified vulnerability in the Textdroid (com.app.android.textdroid) application 2.5.2 for...CVE-2012-148110.0 HighMarch 15, 2012
opensslThe mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0...CVE-2012-1165Fix available5.0 MediumMarch 15, 2012
pidginThe msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin...CVE-2012-1178Fix available5.0 MediumMarch 15, 2012
pidginThe pidgin_conv_chat_rename_user function in gtkconv.c in Pidgin before 2.10.2 allows remote...CVE-2011-4939Fix available6.4 MediumMarch 15, 2012
emc documentum eroomCross-site scripting (XSS) vulnerability in EMC Documentum eRoom before 7.4.4 allows remote...CVE-2012-04044.3 MediumMarch 15, 2012
emc documentum eroomEMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote...CVE-2012-03987.5 HighMarch 15, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open