Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
April

CVEs published in April 2012

382 vulnerabilities, 56 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

wiresharkepan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.6.x before 1.6.6...CVE-2012-1594Fix available3.3 LowApril 11, 2012
wiresharkepan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6...CVE-2012-1593Public exploitFix availableEPSS 11.2%3.3 LowApril 11, 2012
uclouvain openjpegThe JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary...CVE-2012-14999.3 HighApril 11, 2012
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4...CVE-2012-10364.3 MediumApril 11, 2012
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in DotNetNuke 6.x through 6.0.2 allows user-assisted...CVE-2012-10304.3 MediumApril 11, 2012
wiresharkBuffer overflow in the reassemble_message function in epan/dissectors/packet-rlc.c in the RLC...CVE-2012-0043Fix available5.8 MediumApril 11, 2012
adobe acrobat, acrobat reader +1 moreThe JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS...CVE-2012-07776.8 MediumApril 10, 2012
adobe acrobat, acrobat reader +1 moreThe installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to bypass...CVE-2012-077610.0 HighApril 10, 2012
adobe acrobat, acrobat reader +1 moreThe JavaScript implementation in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3...CVE-2012-077510.0 HighApril 10, 2012
adobe acrobat, acrobat reader +1 moreInteger overflow in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows...CVE-2012-0774EPSS 15.5%10.0 HighApril 10, 2012
sambaThe RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4...CVE-2012-1182Public exploitFix availableEPSS 74.4%10.0 HighApril 10, 2012
microsoft office, works, works 6-9 file converter +2 moreHeap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works...CVE-2012-0177EPSS 30.1%9.3 HighApril 10, 2012
microsoft internet explorerMicrosoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows...CVE-2012-0172EPSS 21.9%9.3 HighApril 10, 2012
microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows...CVE-2012-0171EPSS 27.1%9.3 HighApril 10, 2012
microsoft internet explorerMicrosoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows...CVE-2012-0170EPSS 22.4%9.3 HighApril 10, 2012
microsoft internet explorerMicrosoft Internet Explorer 9 does not properly handle objects in memory, which allows remote...CVE-2012-0169EPSS 30.4%9.3 HighApril 10, 2012
microsoft internet explorerMicrosoft Internet Explorer 6 through 9 allows user-assisted remote attackers to execute...CVE-2012-0168EPSS 18.3%7.6 HighApril 10, 2012
microsoft .net frameworkMicrosoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly...CVE-2012-0163Public exploitEPSS 38.3%9.3 HighApril 10, 2012
microsoft biztalk server, commerce server, mscomctl.ocx +8 more +10 moreThe (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX...CVE-2012-0158In KEVPublic exploitEPSS 100.0%8.8 HighApril 10, 2012
microsoft windows, windows 7, windows server 2003 +3 more +5 moreThe Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows...CVE-2012-0151In KEVEPSS 87.7%7.8 HighApril 10, 2012
microsoft forefront unified access gatewayMicrosoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly...CVE-2012-0147EPSS 35.6%5.0 MediumApril 10, 2012
microsoft forefront unified access gatewayOpen redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1...CVE-2012-0146EPSS 11.0%5.8 MediumApril 10, 2012
novell zenworks configuration managementDirectory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration...CVE-2012-2215Public exploitEPSS 27.6%5.0 MediumApril 9, 2012
ibm tivoli event pumpIBM Tivoli Event Pump 4.2.2, when the LOG_REQUESTS and VALIDATE_SOAP_USERS options are enabled,...CVE-2012-07421.9 LowApril 9, 2012
novell imanagerBuffer overflow in the Create Attribute function in jclient in Novell iManager 2.7.4 before patch...CVE-2011-41884.0 MediumApril 9, 2012
novell zenworks configuration managementStack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management ...CVE-2011-3176Public exploitEPSS 70.1%10.0 HighApril 9, 2012
novell zenworks configuration managementStack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management ...CVE-2011-3175Public exploitEPSS 66.1%10.0 HighApril 9, 2012
adobe flash player, google chrome, adobe air +2 moreAdobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to...CVE-2012-07259.3 HighApril 6, 2012
adobe flash player, google chrome, adobe air +2 moreAdobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to...CVE-2012-07249.3 HighApril 6, 2012
phpmyadminshow_config_errors.php in phpMyAdmin 3.4.x before 3.4.10.2, when a configuration file does not...CVE-2012-1902Fix available4.3 MediumApril 6, 2012
toshibatec e-studio-167 with network printer kit, e-studio-167 with network printer kit firmware, e-studio-181 with network printer kit +61 more +63 moreThe TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral ...CVE-2012-1239Public exploit10.0 HighApril 6, 2012
icz sencha snsSession fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack web...CVE-2012-12384.3 MediumApril 6, 2012
icz sencha snsCross-site request forgery (CSRF) vulnerability in SENCHA SNS before 1.0.2 allows remote...CVE-2012-12376.8 MediumApril 6, 2012
google chromeUse-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to...CVE-2011-30776.8 MediumApril 5, 2012
google chrome, apple iphone os, itunes +1 more +3 moreUse-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to...CVE-2011-30766.8 MediumApril 5, 2012
google chrome, apple iphone os, itunes +1 more +3 moreUse-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to...CVE-2011-30756.8 MediumApril 5, 2012
google chrome, apple iphone os, itunes +1 more +3 moreUse-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to...CVE-2011-30746.8 MediumApril 5, 2012
google chrome, apple iphone os, itunes +1 more +3 moreUse-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to...CVE-2011-30736.8 MediumApril 5, 2012
google chromeGoogle Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via...CVE-2011-30726.8 MediumApril 5, 2012
google chrome, apple iphone os, itunes +1 more +3 moreUse-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome before 18.0...CVE-2011-30716.8 MediumApril 5, 2012
google chromeUse-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to...CVE-2011-30706.8 MediumApril 5, 2012
google chrome, apple iphone os, itunes +1 more +3 moreUse-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome...CVE-2011-30696.8 MediumApril 5, 2012
google chrome, apple iphone os, itunes +1 more +3 moreUse-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome...CVE-2011-30686.8 MediumApril 5, 2012
google chrome, apple iphone os, safari +2 moreGoogle Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via...CVE-2011-30676.8 MediumApril 5, 2012
google chromeSkia, as used in Google Chrome before 18.0.1025.151, does not properly perform clipping, which...CVE-2011-30666.8 MediumApril 5, 2012
quaggaThe BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers...CVE-2012-02555.0 MediumApril 5, 2012
quaggaBuffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote...CVE-2012-02503.3 LowApril 5, 2012
quaggaBuffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2...CVE-2012-02493.3 LowApril 5, 2012
hp onboard administratorHP Onboard Administrator (OA) before 3.50 allows remote attackers to obtain sensitive information...CVE-2012-01305.0 MediumApril 4, 2012
hp onboard administratorHP Onboard Administrator (OA) before 3.50 allows remote attackers to bypass intended access...CVE-2012-01297.6 HighApril 4, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open