CVEs published in April 2012
382 vulnerabilities, 56 critical, 4 exploited.
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreMozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0,...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreMultiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreCross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreHeap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla...10.0 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 11.0,...10.0 High
- linux kernelThe Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of...5.2 Medium
- dropbear ssh project ssh, debian linux +1 moreUse-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command...7.1 High
- maian galleryGallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has...10.0 High
- trevor mckay cuminMultiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers...4.3 Medium
- maian galleryMultiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2...4.3 Medium
- nvidia unix driverThe NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by...4.6 Medium
- ibm tivoli directory serverIBM Tivoli Directory Server (TDS) 6.3 and earlier allows remote attackers to cause a denial of...5.0 Medium
- ibm tivoli directory serverCross-site scripting (XSS) vulnerability in the Web Admin Tool in IBM Tivoli Directory Server ...4.3 Medium
- ibm tivoli directory serverThe default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports...6.4 Medium
- ibm rational clearquestHeap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM...9.3 High
- teampassCross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass before 2.1.6...4.3 Medium
- studiohitori twitrocker2 androidThe TwitRocker2 application before 1.0.23 for Android does not properly implement the WebView...5.0 Medium
- wordpresswp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier...4.3 Medium
- wordpresswp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside...4.3 Medium
- wordpresswp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to...5.5 Medium
- moxiecode plupload, wordpress +1 morePlupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other...5.0 Medium
- wordpressUnspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown...10.0 High
- wordpressCross-site scripting (XSS) vulnerability in swfupload.swf in SWFupload 2.2.0.1 and earlier, as...10.0 High
- owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in files/ajax/download.php in ownCloud before 3.0.3...4.3 Medium
- owncloud, owncloud server +1 moreCross-site request forgery (CSRF) vulnerability in ownCloud before 3.0.3 allows remote attackers...6.8 Medium
- owncloud, owncloud server +1 moreOpen redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows...5.8 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 3.0.3 allow remote...4.3 Medium
- ryan walberg php gift registrySQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated...6.5 Medium
- comodo internet securityComodo Internet Security before 5.10.228257.2253 on Windows 7 x64 allows local users to cause a...4.9 Medium
- emc data protection advisorInteger overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5...5.0 Medium
- emc data protection advisorThe DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5...7.8 High
- rubygemsRubyGems does not verify SSL certificate4.3 Medium
- rubygemsRubyGems HTTPS to HTTP redirect5.8 Medium
- typo3Typo3 Exception Handler XSS4.3 Medium
- videolan vlc media playerVideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by...4.3 Medium
- hp openvmsUnspecified vulnerability in HP OpenVMS 7.3-2 on the Alpha platform, 8.3 and 8.4 on the Alpha and...4.9 Medium
- linux kernelThe cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not...7.2 High
- opensslThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1...7.5 High
- demandmedia pluck sitelifeMultiple cross-site scripting (XSS) vulnerabilities in Demand Media Pluck SiteLife before 5.0.13...4.3 Medium
- iconics bizviz, genesis32 +1 moreBuffer overflow in the Security Login ActiveX controls in ICONICS GENESIS32 8.05, 9.0, 9.1, and 9...10.0 High
- iconics bizviz, genesis32 +1 moreThe GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures...9.3 High
- hp system management homepageUnspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows local users to...3.2 Low
- siemens scalance x-300, scalance x-300 firmware, scalance x-300eec +7 more +9 moreBuffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch...7.8 High
- abb interlink module, quickteach, robotstudio lite +4 more +6 moreMultiple stack-based buffer overflows in (1) COM and (2) ActiveX controls in ABB WebWare Server,...7.7 High
- siemens scalance s602, scalance s612, scalance s613 +1 more +3 moreStack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S...6.1 Medium
- siemens scalance s602, scalance s612, scalance s613 +1 more +3 moreThe web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2...10.0 High
- apache http server, opensuse +1 moreenvvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory...6.9 Medium
- irfanview flashpix pluginHeap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote...9.3 High
- hp system management homepageUnspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows remote...3.5 Low
- adastra trace mode data centerUnspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read...5.0 Medium
- Show moreLoading…