CVEs published in April 2012

382 vulnerabilities, 56 critical, 4 exploited.

• asterisk open source chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x... CVE-2012-2416 Fix available 6.5 MediumApril 30, 2012
• samba The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC... CVE-2012-2111 Fix available 6.5 MediumApril 30, 2012
• imagemagick, debian linux, opensuse +7 more +9 more The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote... CVE-2012-1798 Fix available 6.5 MediumApril 29, 2012
• imagemagick, canonical ubuntu linux, debian linux +1 more +3 more Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6... CVE-2012-1610 Fix available 7.5 HighApril 29, 2012
• imagemagick, canonical ubuntu linux, debian linux +1 more +3 more Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and... CVE-2012-1186 Fix available 5.5 MediumApril 29, 2012
• imagemagick, canonical ubuntu linux, debian linux +1 more +3 more Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5... CVE-2012-1185 Fix available EPSS 27.9% 7.8 HighApril 29, 2012
• imagemagick, canonical ubuntu linux, debian linux +8 more +10 more The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote... CVE-2012-0260 Fix available 6.5 MediumApril 29, 2012
• imagemagick, canonical ubuntu linux, debian linux +1 more +3 more The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote... CVE-2012-0259 Fix available 6.5 MediumApril 29, 2012
• squid-cache squid ** DISPUTED ** Squid 3.1.9 allows remote attackers to bypass the access configuration for the... CVE-2012-2213 Disputed EPSS 12.2% 5.0 MediumApril 28, 2012
• mcafee web gateway ** DISPUTED ** McAfee Web Gateway 7.0 allows remote attackers to bypass the access configuration... CVE-2012-2212 Disputed 5.0 MediumApril 28, 2012
• siemens ruggedcom rugged operating system RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived... CVE-2012-2441 Public exploit 8.5 HighApril 28, 2012
• tp-link 8840t The default configuration of the TP-Link 8840T router enables web-based administration on the WAN... CVE-2012-2440 7.5 HighApril 28, 2012
• netgear prosafe fvs318n The default configuration of the NETGEAR ProSafe FVS318N firewall enables web-based... CVE-2012-2439 7.5 HighApril 28, 2012
• siemens ruggedcom rugged operating system RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password... CVE-2012-1803 Public exploit EPSS 48.9% 8.5 HighApril 28, 2012
• mozilla bugzilla template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x... CVE-2012-0466 4.0 MediumApril 27, 2012
• mozilla bugzilla Bugzilla 3.5.x and 3.6.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4... CVE-2012-0465 4.3 MediumApril 27, 2012
• nttdocomo spmode mail android The NTT DOCOMO sp mode mail application 5400 and earlier for Android does not properly verify X... CVE-2012-1244 5.8 MediumApril 27, 2012
• justsystems ichitaro, ichitaro portable with oreplug, ichitaro viewer +4 more +6 more Untrusted search path vulnerability in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011,... CVE-2012-1242 6.9 MediumApril 27, 2012
• justsystems ichitaro, ichitaro portable with oreplug, ichitaro viewer +8 more +10 more Buffer overflow in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government... CVE-2012-0269 9.3 HighApril 27, 2012
• osqa Cross-site scripting (XSS) vulnerability in the cleanup_urls function in forum/utils/html.py in... CVE-2012-1245 4.3 MediumApril 27, 2012
• spip Multiple unspecified vulnerabilities in SPIP before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x... CVE-2012-4331 Fix available 10.0 HighApril 26, 2012
• spip Multiple cross-site scripting (XSS) vulnerabilities in SPIP 1.9.x before 1.9.2.o, 2.0.x before 2... CVE-2012-2151 Fix available 4.3 MediumApril 26, 2012
• intuit quickbooks The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in... CVE-2012-2425 1.8 LowApril 25, 2012
• intuit quickbooks The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in... CVE-2012-2424 1.8 LowApril 25, 2012
• intuit quickbooks The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in... CVE-2012-2423 1.8 LowApril 25, 2012
• intuit quickbooks Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information... CVE-2012-2422 2.9 LowApril 25, 2012
• intuit quickbooks Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable... CVE-2012-2421 1.8 LowApril 25, 2012
• intuit quickbooks The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in... CVE-2012-2420 1.8 LowApril 25, 2012
• intuit quickbooks Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in... CVE-2012-2419 1.8 LowApril 25, 2012
• intuit quickbooks Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol)... CVE-2012-2418 6.8 MediumApril 25, 2012
• freetype, mozilla firefox mobile +1 more FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... CVE-2012-1143 Fix available 4.3 MediumApril 25, 2012
• freetype, mozilla firefox mobile +1 more FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... CVE-2012-1141 Fix available 9.3 HighApril 25, 2012
• freetype, mozilla firefox mobile +1 more FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... CVE-2012-1140 Fix available 9.3 HighApril 25, 2012
• freetype, mozilla firefox mobile +1 more Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and... CVE-2012-1139 Fix available 9.3 HighApril 25, 2012
• freetype, mozilla firefox mobile +1 more FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... CVE-2012-1138 Fix available 9.3 HighApril 25, 2012
• freetype, mozilla firefox mobile +1 more FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... CVE-2012-1137 Fix available 9.3 HighApril 25, 2012
• freetype, mozilla firefox mobile +1 more FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... CVE-2012-1135 Fix available 9.3 HighApril 25, 2012
• freetype, mozilla firefox mobile +1 more FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... CVE-2012-1132 Fix available 9.3 HighApril 25, 2012
• freetype, mozilla firefox mobile +1 more FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64... CVE-2012-1131 Fix available 9.3 HighApril 25, 2012
• freetype, mozilla firefox mobile +1 more FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... CVE-2012-1130 Fix available 9.3 HighApril 25, 2012
• freetype, mozilla firefox mobile +1 more FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... CVE-2012-1129 Fix available 9.3 HighApril 25, 2012
• freetype, mozilla firefox mobile +1 more FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... CVE-2012-1128 Fix available 9.3 HighApril 25, 2012
• freetype, mozilla firefox mobile +1 more FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... CVE-2012-1127 Fix available 9.3 HighApril 25, 2012
• freetype, mozilla firefox mobile +1 more FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... CVE-2012-1126 Fix available 10.0 HighApril 25, 2012
• mozilla firefox, seamonkey, thunderbird +1 more +3 more The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox... CVE-2012-0478 Fix available 9.3 HighApril 25, 2012
• mozilla firefox, seamonkey, thunderbird +2 more Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 do not... CVE-2012-0475 Fix available 2.6 LowApril 25, 2012
• mozilla firefox, seamonkey, thunderbird +1 more +3 more Cross-site scripting (XSS) vulnerability in the docshell implementation in Mozilla Firefox 4.x... CVE-2012-0474 Fix available 4.3 MediumApril 25, 2012
• mozilla firefox, seamonkey, thunderbird +1 more +3 more The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR... CVE-2012-0473 Fix available 5.0 MediumApril 25, 2012
• mozilla firefox, seamonkey, thunderbird +1 more +3 more The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0... CVE-2012-0472 Fix available 9.3 HighApril 25, 2012
• mozilla firefox, seamonkey, thunderbird +1 more +3 more Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace... CVE-2012-0469 Fix available 10.0 HighApril 25, 2012
• Show olderLoading…