CVEs published in May 2012

423 vulnerabilities, 87 critical, 2 exploited.

• canonical ubuntu linux The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain... CVE-2012-0949 5.0 MediumMay 31, 2012
• cisco ios xr, asr 9000 rsp440 router, crs performance route processor +2 more Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote... CVE-2012-2488 7.8 HighMay 31, 2012
• strongswan The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication... CVE-2012-2388 Fix available 7.5 HighMay 31, 2012
• typo3 TYPO3 Path Traversal vulnerability CVE-2010-5099 Public exploitFix available 6.8 MediumMay 30, 2012
• jaow SQL injection vulnerability in add_ons.php in Jaow 2.4.5 and earlier allows remote attackers to... CVE-2012-2952 Public exploit 7.5 HighMay 29, 2012
• zte score m The ZTE sync_agent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523... CVE-2012-2949 10.0 HighMay 29, 2012
• linux kernel The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not... CVE-2012-2136 Fix available 7.2 HighMay 29, 2012
• gnome libgdata libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows... CVE-2012-1177 Fix available 5.1 MediumMay 28, 2012
• captcha cryptographp CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to... CVE-2012-2943 5.0 MediumMay 27, 2012
• haproxy Buffer overflow in the trash buffer in the header capture functionality in HAProxy before 1.4.21,... CVE-2012-2942 Fix available 5.1 MediumMay 27, 2012
• yandex yandex.server 2010 Cross-site scripting (XSS) vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows... CVE-2012-2941 Public exploit 4.3 MediumMay 27, 2012
• mediachance real-draw pro MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service (application... CVE-2012-2940 Public exploit 4.3 MediumMay 27, 2012
• itechscripts travelon express Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote... CVE-2012-2939 Public exploit 6.5 MediumMay 27, 2012
• itechscripts travelon express Multiple cross-site scripting (XSS) vulnerabilities in Travelon Express 6.2.2 allow remote... CVE-2012-2938 Public exploit 4.3 MediumMay 27, 2012
• pligg cms Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to... CVE-2012-2937 7.5 HighMay 27, 2012
• pligg cms Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote... CVE-2012-2936 4.3 MediumMay 27, 2012
• pligg cms Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote... CVE-2012-2436 Public exploit 4.3 MediumMay 27, 2012
• pligg cms Directory traversal vulnerability in the captcha module in Pligg CMS before 1.2.2 allows remote... CVE-2012-2435 6.5 MediumMay 27, 2012
• oscommerce online merchant Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Checkout... CVE-2012-2935 4.3 MediumMay 27, 2012
• sitracker support incident tracker Cross-site scripting (XSS) vulnerability in Support Incident Tracker (SiT!) 3.65 and earlier... CVE-2012-2235 4.3 MediumMay 27, 2012
• oscommerce online merchant Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Setup/Application/Install/RPC... CVE-2012-1792 2.6 LowMay 27, 2012
• zen-cart zen cart Cross-site scripting (XSS) vulnerability in zc_install/includes/modules/pages/database_setup... CVE-2012-1413 2.6 LowMay 27, 2012
• lawrence berkeley national laboratory arpwatch arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop... CVE-2012-2653 Fix available 10.0 HighMay 27, 2012
• seagate blackarmor nas d41d8cd98f00b204e9800998ecf8427e.php in the management web server on the Seagate BlackArmor... CVE-2012-2568 10.0 HighMay 25, 2012
• ibm lotus quickr Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr... CVE-2012-2176 Public exploit EPSS 31.6% 9.3 HighMay 25, 2012
• hp linux imaging and printing project The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing ... CVE-2011-2722 Fix available 1.2 LowMay 25, 2012
• xarrow The server in xArrow before 3.4.1 performs an invalid read operation, which allows remote... CVE-2012-2429 10.0 HighMay 25, 2012
• xarrow Integer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute... CVE-2012-2428 10.0 HighMay 25, 2012
• xarrow Heap-based buffer overflow in the server in xArrow before 3.4.1 allows remote attackers to... CVE-2012-2427 10.0 HighMay 25, 2012
• xarrow The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote... CVE-2012-2426 7.8 HighMay 25, 2012
• measuresoft scadapro client, scadapro server +1 more Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro... CVE-2012-1824 7.2 HighMay 25, 2012
• linux kernel The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not... CVE-2011-4080 Fix available 4.0 MediumMay 24, 2012
• linux kernel, redhat enterprise linux +1 more The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not... CVE-2011-3363 Fix available 6.5 MediumMay 24, 2012
• linux kernel The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not... CVE-2011-3359 Fix available 7.5 HighMay 24, 2012
• linux kernel The ptrace_setxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does... CVE-2011-2707 6.0 MediumMay 24, 2012
• linux kernel The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events... CVE-2011-2521 Fix available 4.9 MediumMay 24, 2012
• google chrome Google V8, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a... CVE-2011-3115 7.5 HighMay 24, 2012
• google chrome Multiple buffer overflows in the PDF functionality in Google Chrome before 19.0.1084.52 allow... CVE-2011-3114 7.5 HighMay 24, 2012
• google chrome The PDF functionality in Google Chrome before 19.0.1084.52 does not properly perform a cast of an... CVE-2011-3113 7.5 HighMay 24, 2012
• google chrome Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.52 allows... CVE-2011-3112 5.0 MediumMay 24, 2012
• google chrome Google V8, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a... CVE-2011-3111 5.0 MediumMay 24, 2012
• google chrome The PDF functionality in Google Chrome before 19.0.1084.52 allows remote attackers to cause a... CVE-2011-3110 7.5 HighMay 24, 2012
• google chrome Google Chrome before 19.0.1084.52 on Linux does not properly perform a cast of an unspecified... CVE-2011-3109 7.5 HighMay 24, 2012
• google chrome Use-after-free vulnerability in Google Chrome before 19.0.1084.52 allows remote attackers to... CVE-2011-3108 10.0 HighMay 24, 2012
• google chrome Google Chrome before 19.0.1084.52 does not properly implement JavaScript bindings for plug-ins,... CVE-2011-3107 7.5 HighMay 24, 2012
• google chrome The WebSockets implementation in Google Chrome before 19.0.1084.52 does not properly handle use... CVE-2011-3106 10.0 HighMay 24, 2012
• google chrome Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome... CVE-2011-3105 7.5 HighMay 24, 2012
• google chrome Skia, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a denial of... CVE-2011-3104 5.0 MediumMay 24, 2012
• google chrome Google V8, as used in Google Chrome before 19.0.1084.52, does not properly perform garbage... CVE-2011-3103 7.5 HighMay 24, 2012
• adobe illustrator, illustrator cs5.5 +1 more Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of... CVE-2012-2042 10.0 HighMay 24, 2012
• Show olderLoading…