CVEs published in May 2012
423 vulnerabilities, 87 critical, 2 exploited.
- andrew killen share and followCross-site scripting (XSS) vulnerability in the Share and Follow plugin 1.80.3 for WordPress...4.3 Medium
- dlo simple anti bot registration engine pluginCross-site scripting (XSS) vulnerability in sabre_class_admin.php in the SABRE plugin before 2.1...4.3 Medium
- lattice semiconductor pac-designerStack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote...9.3 High
- unijimpe captchaCross-site scripting (XSS) vulnerability in captchademo.php in Unijimpe Captcha allows remote...4.3 Medium
- mapsmarker leaflet maps marker pluginMultiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for WordPress...4.3 Medium
- kolja schleich leaguemanagerMultiple cross-site scripting (XSS) vulnerabilities in the LeagueManager plugin 3.7 for WordPress...4.3 Medium
- silisoftware backupdb\(\)Cross-site scripting (XSS) vulnerability in backupDB.php in SiliSoftware backupDB() 1.2.7a allows...4.3 Medium
- silisoftware phpthumb\(\)Multiple cross-site scripting (XSS) vulnerabilities in SiliSoftware phpThumb() 1.7.11 allow...4.3 Medium
- viscachaMultiple cross-site scripting (XSS) vulnerabilities in Viscacha 0.8.1.1 allow remote attackers to...4.3 Medium
- viscachaMultiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote...7.5 High
- ishmael sanchez aberdeenCross-site scripting (XSS) vulnerability in the aberdeen_breadcrumb function in template.php in...2.6 Low
- artiphp cmsMultiple cross-site scripting (XSS) vulnerabilities in artpublic/recommandation/index.php in...4.3 Medium
- artiphp cmsArtiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web root...5.0 Medium
- longtailvideo jw playerplayer.swf in LongTail JW Player 5.9 allows remote attackers to conduct cross-site scripting (XSS...4.3 Medium
- chatelao php address bookMultiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow...4.3 Medium
- ryan demmer joomla content editorUnrestricted file upload vulnerability in editor/extensions/browser/file.php in the Joomla...6.0 Medium
- ryan demmer joomla content editorCross-site scripting (XSS) vulnerability in the Profile List in the Joomla Content Editor (JCE)...4.3 Medium
- phpBuffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows...10.0 High
- sympaThe archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does...7.5 High
- cypherpunks pidgin-otrFormat string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record...7.5 High
- rahul singla take controlCross-site request forgery (CSRF) vulnerability in the Take Control module 6.x-2.x before 6.x-2.2...6.8 Medium
- connmanInteger overflow in the dhcpv6_get_option function in gdhcp/client.c in ConnMan before 0.85...5.0 Medium
- connmanThe loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands...10.0 High
- connmanConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows...7.8 High
- debian texlive-extra-utilslatex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when...3.3 Low
- x.org x11Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11...10.0 High
- hp openvmsThe ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1,...6.9 Medium
- drupalDrupal Open Redirect5.8 Medium
- realnetworks realplayer, realplayer sp +1 moreBuffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5,...9.3 High
- realnetworks realplayer, realplayer sp +1 moreRealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly...9.3 High
- todd miller sudosudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support...7.2 High
- linux kernelThe Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is...4.0 Medium
- linux kernelThe kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to...5.5 Medium
- linux kernelThe Linux kernel before 2.6.37 does not properly implement a certain clock-update optimization,...5.5 Medium
- linux kernel, avaya 9608 firmware, 9608g firmware +4 more +6 moreThe net subsystem in the Linux kernel before 3.1 does not properly restrict use of the...5.5 Medium
- linux kernel, redhat enterprise linux +1 moreThe m_stop function in fs/proc/task_mmu.c in the Linux kernel before 2.6.39 allows local users to...5.5 Medium
- linux kernelMultiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3...7.2 High
- linux kernelThe KVM implementation in the Linux kernel before 3.3.4 does not properly manage the...4.9 Medium
- linux kernelThe NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes...4.6 Medium
- apple quicktimeApple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- apple quicktimeInteger overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary...9.3 High
- apple quicktimeBuffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute...9.3 High
- apple quicktimeBuffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code...9.3 High
- apple quicktimeInteger signedness error in Apple QuickTime before 7.7.2 on Windows allows remote attackers to...9.3 High
- apple quicktimeStack-based buffer overflow in the plugin in Apple QuickTime before 7.7.2 on Windows allows...9.3 High
- apple quicktimeHeap-based buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute...9.3 High
- apple quicktimeHeap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to...9.3 High
- apple quicktimeMultiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote...9.3 High
- apple quicktimeStack-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to...9.3 High
- apache openoffice.org, libreoffice, debian linux +7 more +9 moreInteger overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly...7.5 High
- Show moreLoading…