Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
May

CVEs published in May 2012

423 vulnerabilities, 87 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

microsoft .net frameworkMicrosoft .NET Framework 4 does not properly compare index values, which allows remote attackers...CVE-2012-0164EPSS 17.2%5.0 MediumMay 9, 2012
microsoft .net frameworkMicrosoft .NET Framework 4 does not properly allocate buffers, which allows remote attackers to...CVE-2012-0162EPSS 21.9%9.3 HighMay 9, 2012
microsoft .net frameworkMicrosoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not...CVE-2012-0161EPSS 22.3%9.3 HighMay 9, 2012
microsoft .net frameworkMicrosoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not...CVE-2012-0160EPSS 22.9%9.3 HighMay 9, 2012
microsoft office, silverlight, windows 7 +4 more +6 moreMicrosoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008...CVE-2012-0159EPSS 27.0%9.3 HighMay 9, 2012
microsoft excel, office +1 moreMicrosoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening...CVE-2012-0143EPSS 22.4%9.3 HighMay 9, 2012
microsoft excel, excel viewer, office +1 more +3 moreMicrosoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel...CVE-2012-0142EPSS 21.6%9.3 HighMay 9, 2012
microsoft excel, excel viewer, office +1 more +3 moreMicrosoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel...CVE-2012-0141EPSS 21.8%9.3 HighMay 9, 2012
microsoft visio viewerMicrosoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files,...CVE-2012-0018EPSS 25.1%9.3 HighMay 9, 2012
oracle database serverThe TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0...CVE-2012-1675Public exploitEPSS 77.4%7.5 HighMay 8, 2012
apple iphone osSafari in Apple iOS before 5.1.1 allows remote attackers to spoof the location bar's URL via a...CVE-2012-06744.3 MediumMay 8, 2012
icedove Debianicedove - regressionDSA-2464-2Fix availableNo scoreMay 8, 2012
apple iphone osWebKit in Apple iOS before 5.1.1 allows remote attackers to execute arbitrary code or cause a...CVE-2012-06726.8 MediumMay 8, 2012
adobe flash playerAdobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and...CVE-2012-0779Public exploitFix availableEPSS 87.1%9.3 HighMay 4, 2012
vmware esx, esxi, fusion +2 more +4 moreVMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1...CVE-2012-24509.0 HighMay 4, 2012
vmware esx, esxi, fusion +2 more +4 moreVMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4...CVE-2012-24499.0 HighMay 4, 2012
vmware esx, esxi +1 moreVMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary...CVE-2012-24487.5 HighMay 4, 2012
vmware esx, esxi +1 moreThe VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which...CVE-2012-15179.0 HighMay 4, 2012
vmware esx, esxi +1 moreThe VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle...CVE-2012-15169.9 CriticalMay 4, 2012
ibm aix, vios +1 moreThe getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not...CVE-2012-07457.2 HighMay 4, 2012
ibm cognos tm1Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x...CVE-2012-0202Public exploitEPSS 54.5%10.0 HighMay 4, 2012
quagga Debianquagga - regressionDSA-2459-2Fix availableNo scoreMay 4, 2012
cisco unified ip phone, unified ip phone firmware +1 moreCisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle...CVE-2012-13284.6 MediumMay 3, 2012
apache qpidApache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which...CVE-2011-3620Fix available7.5 HighMay 3, 2012
oracle fusion middlewareUnspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion...CVE-2012-1710In KEV9.8 CriticalMay 3, 2012
oracle fusion middlewareUnspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion...CVE-2012-17097.5 HighMay 3, 2012
oracle database serverUnspecified vulnerability in the Application Express component in Oracle Database Server 4.0 and...CVE-2012-17084.3 MediumMay 3, 2012
oracle financial services softwareUnspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial...CVE-2012-17074.0 MediumMay 3, 2012
oracle financial services softwareUnspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial...CVE-2012-17064.7 MediumMay 3, 2012
oracle financial services softwareUnspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial...CVE-2012-17043.5 LowMay 3, 2012
oracle mysql, mariadb, redhat enterprise linux desktop +4 more +6 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5...CVE-2012-17036.8 MediumMay 3, 2012
sun sunosUnspecified vulnerability in Oracle Sun Solaris 11 allows remote authenticated users to affect...CVE-2012-16982.1 LowMay 3, 2012
oracle mysql, mariadb +1 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.21 and earlier allows...CVE-2012-16974.0 MediumMay 3, 2012
mysql, mysql server, community server +1 more +3 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows...CVE-2012-16964.0 MediumMay 3, 2012
oracle fusion middleware, sun jdk, jre +2 moreUnspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.2 and...CVE-2012-16956.8 MediumMay 3, 2012
sun sunosUnspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect...CVE-2012-16946.4 MediumMay 3, 2012
oracle xcp, sparc enterprise m3000 server, sparc enterprise m4000 server +3 more +5 moreUnspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 allows remote...CVE-2012-16932.6 LowMay 3, 2012
sun sunosUnspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability,...CVE-2012-16924.9 MediumMay 3, 2012
sun sunosUnspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality,...CVE-2012-16916.6 MediumMay 3, 2012
oracle mysql, mariadb, redhat enterprise linux desktop +3 more +5 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5...CVE-2012-16904.0 MediumMay 3, 2012
oracle mysql, mariadb, redhat enterprise linux desktop +3 more +5 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5...CVE-2012-16884.0 MediumMay 3, 2012
sun sunosUnspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect...CVE-2012-16844.3 MediumMay 3, 2012
sun sunosUnspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect...CVE-2012-16835.9 MediumMay 3, 2012
sun sunosUnspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect...CVE-2012-16814.9 MediumMay 3, 2012
oracle financial services softwareUnspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial...CVE-2012-16793.5 LowMay 3, 2012
oracle financial services softwareUnspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial...CVE-2012-16763.5 LowMay 3, 2012
oracle industry applicationsUnspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7...CVE-2012-16744.0 MediumMay 3, 2012
mysqlUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.60 and earlier, and 5...CVE-2012-05834.0 MediumMay 3, 2012
oracle industry applicationsUnspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7...CVE-2012-05824.0 MediumMay 3, 2012
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2...CVE-2012-05814.3 MediumMay 3, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open