CVEs published in May 2012
423 vulnerabilities, 87 critical, 2 exploited.
- apple mac os x, mac os x server +1 moreBuffer underflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute...6.8 Medium
- apple mac os x, mac os x server +1 moreInteger overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute...6.8 Medium
- apple mac os x, mac os x server +1 moreBuffer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute...6.8 Medium
- apple mac os x, mac os x server +1 moreQuartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled,...2.1 Low
- apple mac os xRace condition in LoginUIFramework in Apple Mac OS X 10.7.x before 10.7.4, when the Guest account...6.9 Medium
- apple mac os x, mac os x server +1 morelibsecurity in Apple Mac OS X before 10.7.4 does not properly restrict the length of RSA keys...6.4 Medium
- apple mac os x, mac os x server +1 morelibsecurity in Apple Mac OS X before 10.7.4 accesses uninitialized memory locations during the...6.8 Medium
- apple mac os xLogin Window in Apple Mac OS X 10.7.3, when Legacy File Vault or networked home directories are...4.9 Medium
- apple mac os x, mac os x server +1 moreThe directory server in Directory Service in Apple Mac OS X 10.6.8 allows remote attackers to...5.0 Medium
- apple mac os x, mac os x server +1 moreRace condition in the initialization routine in blued in Bluetooth in Apple Mac OS X before 10.7...6.9 Medium
- wordpressThe make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not...5.0 Medium
- wordpressCross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to...4.3 Medium
- hp performance insightUnspecified vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41...9.0 High
- hp performance insightCross-site scripting (XSS) vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41...4.3 Medium
- hp performance insightSQL injection vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5...7.5 High
- wellintech kingscada, kingview +1 moreWellinTech KingSCADA Missing Encryption of Sensitive Data7.1
- xnviewInteger overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute...9.3 High
- xnviewInteger overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute...9.3 High
- ffmpegInteger underflow in the asfrtp_parse_packet function in libavformat/rtpdec_asf.c in FFmpeg...6.8 Medium
- adobe shockwave playerAdobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a...10.0 High
- adobe shockwave playerAdobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a...10.0 High
- adobe shockwave playerAdobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a...10.0 High
- adobe shockwave playerAdobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a...10.0 High
- adobe shockwave playerAdobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a...10.0 High
- adobe photoshop, photoshop cs4, photoshop cs5.5 +2 moreBuffer overflow in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows...9.3 High
- adobe photoshop, photoshop cs4, photoshop cs5.5 +2 moreUse-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12...9.3 High
- adobe illustrator, illustrator cs5.5 +1 moreAdobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of...10.0 High
- adobe illustrator, illustrator cs5.5 +1 moreAdobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of...10.0 High
- adobe illustrator, illustrator cs5.5 +1 moreAdobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of...10.0 High
- adobe illustrator, illustrator cs5.5 +1 moreAdobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of...10.0 High
- adobe illustrator, illustrator cs5.5 +1 moreAdobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of...10.0 High
- adobe flash cs3, flash cs4, flash cs5.5 +2 moreBuffer overflow in Adobe Flash Professional before CS6 allows attackers to execute arbitrary code...10.0 High
- mahara, debian linux +1 moreThe default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username...5.0 Medium
- phpsapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script ...7.5 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...7.2 High
- microsoft excel, excel viewer, office +1 more +3 moreMicrosoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac;...9.3 High
- php, apple mac os x, debian linux +14 more +16 moresapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script ...7.5 High
- phpThe file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid ...5.8 Medium
- apache poiDenial of Service in Apache POI5.0 Medium
- microsoft excel, excel viewer, office compatibility pack +2 moreHeap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel...9.3 High
- microsoft excel, excel viewer, office +1 more +3 moreMicrosoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac;...9.3 High
- microsoft office, office compatibility pack, word +2 moreMicrosoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...7.2 High
- microsoft windows 7, windows server 2008 +1 moreDouble free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows...7.2 High
- microsoft windows 7, windows server 2008, windows vista +2 moreRace condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2,...7.2 High
- microsoft silverlightDouble free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote...9.3 High
- microsoft windows 7, windows server 2008, windows vista +2 moreWindows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2...1.7 Low
- microsoft officeHeap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2...9.3 High
- microsoft office, windows vista, windows server 2008 +2 moreGDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3,...9.3 High
- Show moreLoading…