CVEs published in April 2012
382 vulnerabilities, 56 critical, 4 exploited.
- hp onboard administratorHP Onboard Administrator (OA) before 3.50 allows remote attackers to redirect users to arbitrary...5.8 Medium
- hp business availability centerCross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 9.01 allows...4.3 Medium
- spreecommerce spreeSpree uses a hardcoded hash value5.0 Medium
- spreecommerce spreeSpree does not properly restrict the use of a hash to provide values for a model's attributes5.0 Medium
- insoshiInsoshi before 20080920 does not properly restrict the use of a hash to provide values for a...5.0 Medium
- cisco webex recording format playerBuffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB...9.3 High
- cisco webex recording format playerBuffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB...9.3 High
- cisco webex recording format playerBuffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB...9.3 High
- githubGitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values...7.5 High
- redmineRedmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's...5.0 Medium
- f5 firepassThe sudoers file in the Linux system configuration in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0...7.2 High
- socialcmsCross-site scripting (XSS) vulnerability in my_admin/admin1_list_pages.php in SocialCMS 1.0.2 and...3.5 Low
- f5 firepassSQL injection vulnerability in my.activation.php3 in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0...7.5 High
- redmineCross-site scripting (XSS) vulnerability in Redmine before 1.3.2 allows remote attackers to...4.3 Medium
- openbsd opensshThe ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with...3.5 Low
- libtiffMultiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute...6.8 Medium
- libpngThe png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x...6.8 Medium
- hp distributed computing environment, hp-ux +1 moreDistributed Computing Environment (DCE) 1.8 and 1.9 on HP HP-UX B.11.11 and B.11.23 allows remote...10.0 High
- craig peterson turbopower abbrevia, scadatec modbustagserver, scadaphone +2 moreBuffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and...6.8 Medium
- arcinfo frontvue, pcvue, plantvue +2 moreBuffer overflow in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0...4.3 Medium
- arcinfo frontvue, pcvue, plantvue +2 moreAn unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0,...5.8 Medium
- arcinfo frontvue, pcvue, plantvue +2 moreInteger overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0...9.3 High
- arcinfo frontvue, pcvue, plantvue +2 moreAn unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0,...9.3 High
- invensys archestra application object toolkit, foxboro control software, intouch +5 more +7 moreHeap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform...6.8 Medium
- invensys archestra application object toolkit, foxboro control software, intouch +5 more +7 moreHeap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform...6.8 Medium
- invensys wonderware information serverInvensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client...7.5 High
- invensys wonderware information serverSQL injection vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows...7.5 High
- invensys wonderware information serverCross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4...4.3 Medium
- rockwellautomation factorytalk, rslogix 5000 +1 moreThe FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk...5.0 Medium
- rockwellautomation factorytalk, rslogix 5000 +1 moreThe FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk...5.0 Medium
- vmware esx, esxi +1 moreVMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O...8.3 High
- ecava integraxorDirectory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor before 3...9.3 High