Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
May

CVEs published in May 2012

423 vulnerabilities, 87 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

ikiwikiMultiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in...CVE-2012-0220Fix available4.3 MediumMay 16, 2012
google chrome, apple iphone os +1 moreOff-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products,...CVE-2011-3102Fix available6.8 MediumMay 16, 2012
google chromeGoogle Chrome before 19.0.1084.46 on Linux does not properly mitigate an unspecified flaw in an...CVE-2011-310110.0 HighMay 16, 2012
google chromeGoogle Chrome before 19.0.1084.46 does not properly draw dash paths, which allows remote...CVE-2011-31005.0 MediumMay 16, 2012
google chromeUse-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.46 allows...CVE-2011-309910.0 HighMay 16, 2012
google chrome, opensuse +1 moreGoogle Chrome before 19.0.1084.46 on Windows uses an incorrect search path for the Windows Media...CVE-2011-30987.2 HighMay 16, 2012
google chromeThe PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a...CVE-2011-309710.0 HighMay 16, 2012
google chromeUse-after-free vulnerability in Google Chrome before 19.0.1084.46 on Linux allows remote...CVE-2011-30967.5 HighMay 16, 2012
google chromeThe OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial...CVE-2011-309510.0 HighMay 16, 2012
google chromeGoogle Chrome before 19.0.1084.46 does not properly handle Tibetan text, which allows remote...CVE-2011-30945.0 MediumMay 16, 2012
google chromeGoogle Chrome before 19.0.1084.46 does not properly handle glyphs, which allows remote attackers...CVE-2011-30935.0 MediumMay 16, 2012
google chromeThe regex implementation in Google V8, as used in Google Chrome before 19.0.1084.46, allows...CVE-2011-309210.0 HighMay 16, 2012
google chromeUse-after-free vulnerability in the IndexedDB implementation in Google Chrome before 19.0.1084.46...CVE-2011-309110.0 HighMay 16, 2012
google chromeRace condition in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of...CVE-2011-30907.6 HighMay 16, 2012
google chromeUse-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to...CVE-2011-308910.0 HighMay 16, 2012
google chromeGoogle Chrome before 19.0.1084.46 does not properly draw hairlines, which allows remote attackers...CVE-2011-30885.0 MediumMay 16, 2012
google chromeGoogle Chrome before 19.0.1084.46 does not properly perform window navigation, which has...CVE-2011-308710.0 HighMay 16, 2012
google chromeUse-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to...CVE-2011-308610.0 HighMay 16, 2012
google chromeThe Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values...CVE-2011-30855.0 MediumMay 16, 2012
google chromeGoogle Chrome before 19.0.1084.46 does not use a dedicated process for the loading of links found...CVE-2011-30847.5 HighMay 16, 2012
google chromebrowser/profiles/profile_impl_io_data.cc in Google Chrome before 19.0.1084.46 does not properly...CVE-2011-30835.0 MediumMay 16, 2012
basercmsapp/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in...CVE-2012-12485.1 MediumMay 15, 2012
webcreate web martCross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier, when Internet...CVE-2012-12472.6 LowMay 15, 2012
webcreate web martCross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier might allow remote...CVE-2012-12464.3 MediumMay 15, 2012
sap netweaverThe DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the...CVE-2012-2612Public exploit5.0 MediumMay 15, 2012
sap netweaverThe DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200...CVE-2012-2611Public exploitEPSS 44.3%9.3 HighMay 15, 2012
sap netweaverThe DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the...CVE-2012-2514Public exploit5.0 MediumMay 15, 2012
sap netweaverThe Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher...CVE-2012-2513Public exploit5.0 MediumMay 15, 2012
sap netweaverThe DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the...CVE-2012-2512Public exploit5.0 MediumMay 15, 2012
sap netweaverThe DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the...CVE-2012-2511Public exploit5.0 MediumMay 15, 2012
emc documentum information rights managementThe IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before...CVE-2012-2277Public exploit7.8 HighMay 14, 2012
emc documentum information rights managementThe IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before...CVE-2012-2276Public exploit7.8 HighMay 14, 2012
ibm rational clearquestSQL injection vulnerability in the Maintenance tool in IBM Rational ClearQuest 7.1.1.x before 7.1...CVE-2011-13907.5 HighMay 14, 2012
progea moviconThe OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service...CVE-2012-18047.8 HighMay 14, 2012
opensslInteger underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when...CVE-2012-2333Fix availableEPSS 27.9%6.8 MediumMay 14, 2012
linux kernel, novell suse linux enterprise server, redhat enterprise linux +5 more +7 moreThe rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does...CVE-2012-2313Fix available1.2 LowMay 14, 2012
libavHeap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in...CVE-2012-0947Fix available6.8 MediumMay 13, 2012
ffmpegThe render_line function in the vorbis codec (vorbis.c) in libavcodec in FFmpeg before 0.9.1...CVE-2012-0859Fix available6.8 MediumMay 13, 2012
ffmpeg, libav +1 moreThe decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x...CVE-2012-0853Fix available6.8 MediumMay 13, 2012
ffmpeg, libav +1 moreBuffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8...CVE-2011-3947Fix available6.8 MediumMay 13, 2012
ffmpeg, libav +1 morensvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x...CVE-2011-3940Fix available6.8 MediumMay 13, 2012
ffmpeg, libav +1 moreThe dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11...CVE-2011-3936Fix available4.3 MediumMay 13, 2012
ffmpeg, libav +1 moreThe avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x...CVE-2011-3929Fix available6.8 MediumMay 13, 2012
phpsapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script ...CVE-2012-2336Public exploitEPSS 52.1%5.0 MediumMay 11, 2012
phpphp-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers...CVE-2012-2335EPSS 33.7%7.5 HighMay 11, 2012
phpBuffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before...CVE-2012-2329Public exploitEPSS 61.9%5.0 MediumMay 11, 2012
apple safariWebKit in Apple Safari before 5.1.7 does not properly track state information during the...CVE-2012-06765.0 MediumMay 11, 2012
apple mac os x, mac os x server +1 moreTime Machine in Apple Mac OS X before 10.7.4 does not require continued use of SRP-based...CVE-2012-06754.3 MediumMay 11, 2012
apple mac os x, mac os x server +1 moreInteger overflow in the Security Framework in Apple Mac OS X before 10.7.4 allows remote...CVE-2012-06627.5 HighMay 11, 2012
apple mac os x, mac os x server +1 moreUse-after-free vulnerability in QuickTime in Apple Mac OS X 10.7.x before 10.7.4 allows remote...CVE-2012-06616.8 MediumMay 11, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open