Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
April

CVEs published in April 2012

382 vulnerabilities, 56 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

nsoftware unitronics uniopchttps50.ocx in IP*Works! SSL in the server in Unitronics UniOPC before 2.0.0 does not properly...CVE-2011-50866.8 MediumApril 18, 2012
opcsystems opcsystems.netOpen Automation Software OPC Systems.NET before 5.0 allows remote attackers to cause a denial of...CVE-2011-4871Public exploit5.0 MediumApril 18, 2012
f5 nginx, fedoraproject fedora +1 moreBuffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through...CVE-2012-2089Fix available6.8 MediumApril 17, 2012
vmware esx, esxi, fusion +2 more +4 moreVMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1...CVE-2012-15188.3 HighApril 17, 2012
syndeocmsCross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier...CVE-2012-1979Public exploit3.5 LowApril 17, 2012
google sketchupGoogle SketchUp before 8 does not properly handle edge geometry in SketchUp (aka .SKP) files,...CVE-2011-24789.3 HighApril 17, 2012
realnetworks helix mobile server, helix server +1 moremaster.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x...CVE-2012-22685.0 MediumApril 17, 2012
realnetworks helix mobile server, helix server +1 moremaster.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x...CVE-2012-22675.0 MediumApril 17, 2012
realnetworks helix mobile server, helix server +1 moreCross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile...CVE-2012-19856.8 MediumApril 17, 2012
realnetworks helix mobile server, helix server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in RealNetworks Helix Server and Helix Mobile...CVE-2012-19844.3 MediumApril 17, 2012
realnetworks helix mobile server, helix server +1 moreRealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext...CVE-2012-1923EPSS 38.3%2.1 LowApril 17, 2012
realnetworks helix mobile server, helix server +1 moreBuffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before...CVE-2012-09427.5 HighApril 17, 2012
artonx.org activescriptrubyGRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict...CVE-2012-12417.5 HighApril 16, 2012
recruit dokodemo rikunabi 2013Cross-site scripting (XSS) vulnerability in the RECRUIT Dokodemo Rikunabi 2013 extension before 1...CVE-2012-12404.3 MediumApril 16, 2012
gajimsrc/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink...CVE-2012-2093Fix available3.3 LowApril 16, 2012
gajimSQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in...CVE-2012-2086Fix available7.5 HighApril 16, 2012
gajimThe exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote...CVE-2012-2085Fix available6.8 MediumApril 16, 2012
freebsd libarchiveMultiple use-after-free vulnerabilities in libarchive 2.8.4 and 2.8.5 allow remote attackers to...CVE-2011-1779Fix available7.5 HighApril 13, 2012
freebsd libarchiveBuffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of...CVE-2010-4666Fix available7.5 HighApril 13, 2012
koyo h0-ecom, h0-ecom100, h2-ecom +5 more +7 moreThe web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2...CVE-2012-18095.0 MediumApril 13, 2012
koyo h0-ecom, h0-ecom100, h2-ecom +5 more +7 moreThe web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2...CVE-2012-180810.0 HighApril 13, 2012
koyo h0-ecom, h0-ecom100, h2-ecom +5 more +7 moreCross-site scripting (XSS) vulnerability in the web server in the ECOM Ethernet module in Koyo H0...CVE-2012-18074.3 MediumApril 13, 2012
koyo h0-ecom, h0-ecom100, h2-ecom +5 more +7 moreThe ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4...CVE-2012-18067.5 HighApril 13, 2012
koyo h0-ecom, h0-ecom100, h2-ecom +5 more +7 moreBuffer overflow in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2...CVE-2012-180510.0 HighApril 13, 2012
atvise webmi2adsThe web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly validate...CVE-2011-4883Public exploit5.0 MediumApril 13, 2012
atvise webmi2adsThe web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to...CVE-2011-4882Public exploit5.0 MediumApril 13, 2012
atvise webmi2adsThe web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly check return...CVE-2011-4881Public exploit5.0 MediumApril 13, 2012
atvise webmi2adsDirectory traversal vulnerability in the web server in Certec atvise webMI2ADS (aka webMI) before...CVE-2011-4880Public exploit5.0 MediumApril 13, 2012
microsys promoticUse-after-free vulnerability in MICROSYS PROMOTIC before 8.1.7 allows user-assisted remote...CVE-2011-48747.9 HighApril 13, 2012
puppet, puppet enterprise, canonical ubuntu linux +2 more +4 morePuppet Arbitrary Command ExecutionCVE-2012-1988Fix available6.0 MediumApril 13, 2012
puppet, puppet enterprise +1 morePuppet Denial of Service and Arbitrary File WriteCVE-2012-1987Fix available3.5 LowApril 13, 2012
puppet, puppet enterprise, puppetlabs puppet enterprise users +2 morePuppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1...CVE-2012-1986Fix available2.1 LowApril 13, 2012
puppet, puppet enterprise, puppetlabs puppet enterprise users +2 morePuppet uses predictable filenames, allowing arbitrary file overwriteCVE-2012-1906Fix available3.3 LowApril 13, 2012
debian linuxThe default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6...CVE-2012-0216Fix available4.4 MediumApril 13, 2012
cloudera manager, service and configuration manager +1 moreCloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is...CVE-2012-22306.5 MediumApril 12, 2012
apache hadoop, cloudera cdh +1 moreApache Hadoop allows impersonation of arbitrary cluster user accountsCVE-2012-1574Fix available6.5 MediumApril 12, 2012
hp procurve switch 5400zl, procurve switch 5400zl management module, procurve switch 5406-44g-poe\+-4sfpzl +11 more +13 moreHP ProCurve 5400 zl switches with certain serial numbers include a compact flash card that...CVE-2012-01333.7 LowApril 12, 2012
hp system management homepageCross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 6.2.2.7...CVE-2011-38466.8 MediumApril 12, 2012
linux kernelThe ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86...CVE-2012-2100Fix available7.1 HighApril 12, 2012
sqlalchemySQLAlchemy vulnerable to SQL injectionCVE-2012-0805Fix available7.5 HighApril 12, 2012
360zip360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file...CVE-2012-22257.5 HighApril 11, 2012
xunlei thunderXunlei Thunder before 7.2.6 allows remote attackers to execute arbitrary code via a crafted file,...CVE-2012-22247.5 HighApril 11, 2012
novell zenworks configuration managementThe xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x...CVE-2012-22234.3 MediumApril 11, 2012
sony bravia tvThe Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service ...CVE-2012-2210Public exploit7.8 HighApril 11, 2012
plume-cms plume cmsMultiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote...CVE-2012-2156Public exploit4.3 MediumApril 11, 2012
cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in admin/edituser.php in CMS Made Simple 1.10.3 and...CVE-2012-19924.3 MediumApril 11, 2012
ola lasisi e-ticketingSQL injection vulnerability in loginscript.php in e-ticketing allows remote attackers to execute...CVE-2012-1673Public exploit7.5 HighApril 11, 2012
useasdf 4444 hotel booking portalSQL injection vulnerability in getcity.php in Hotel Booking Portal 0.1 allows remote attackers to...CVE-2012-1672Public exploit7.5 HighApril 11, 2012
wiresharkThe mp2t_process_fragmented_payload function in epan/dissectors/packet-mp2t.c in the MP2T...CVE-2012-1596Fix available5.0 MediumApril 11, 2012
wiresharkThe pcap_process_pseudo_header function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12...CVE-2012-1595Fix available4.3 MediumApril 11, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open