Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
June

CVEs published in June 2012

356 vulnerabilities, 63 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

siemens winccThe XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2...CVE-2012-25965.5 MediumJune 8, 2012
siemens winccMultiple cross-site scripting (XSS) vulnerabilities in unspecified web applications in Siemens...CVE-2012-25954.3 MediumJune 8, 2012
emerson deltav, deltav proessentials scientific graph, deltav workstation +2 moreAn unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and...CVE-2012-18186.4 MediumJune 8, 2012
emerson deltav, deltav proessentials scientific graph, deltav workstation +2 moreBuffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and...CVE-2012-18177.5 HighJune 8, 2012
emerson deltav, deltav proessentials scientific graph, deltav workstation +2 morePORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV...CVE-2012-18165.0 MediumJune 8, 2012
emerson deltav, deltav proessentials scientific graph, deltav workstation +2 moreSQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11...CVE-2012-18157.5 HighJune 8, 2012
emerson deltav, deltav proessentials scientific graph, deltav workstation +2 moreCross-site scripting (XSS) vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1,...CVE-2012-18144.3 MediumJune 8, 2012
collabnet scrumworksThe server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain...CVE-2012-26036.5 MediumJune 8, 2012
dotcmsdotCMS allows remote authenticated users to execute arbitrary Java codeCVE-2012-1826Fix available6.0 MediumJune 8, 2012
canonical ubuntu linux, gnome update-manager-core +1 moreDistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04,...CVE-2012-09482.1 LowJune 7, 2012
globus toolkitThe GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does...CVE-2012-3292Fix available7.6 HighJune 7, 2012
infradead openconnectHeap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service...CVE-2012-3291Fix available7.8 HighJune 7, 2012
google cr-48 chromebook, samsung chromebox 3, acer ac700 chromebook +3 more +5 moreMultiple unspecified vulnerabilities in Google Chrome before 20.0.1132.22 on the Acer AC700;...CVE-2012-329010.0 HighJune 7, 2012
s9y serendipitySQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows...CVE-2012-27627.5 HighJune 7, 2012
sensiolabs symfonySession fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony...CVE-2012-26674.3 MediumJune 7, 2012
openstack novaOpenstack Compute (Nova) Denial of service via network request that triggers large number of iptables rulesCVE-2012-2101Fix available3.5 LowJune 7, 2012
mit kerberos 5The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka...CVE-2012-1013Fix available4.0 MediumJune 7, 2012
mit kerberos 5server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10...CVE-2012-1012Fix available5.5 MediumJune 7, 2012
sony vaio easy connect, vaio pc wireless lan wizard, vaio wireless wizard +1 more +3 moreMultiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony...CVE-2012-0985Public exploitEPSS 12.8%9.3 HighJune 7, 2012
request-tracker3.8 Debianrequest-tracker3.8 - regressionDSA-2480-3Fix availableNo scoreJune 7, 2012
apache openoffice.org, libreoffice +1 moreInteger overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta,...CVE-2012-2334Fix availableEPSS 13.4%6.8 MediumJune 7, 2012
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe glBufferData function in the WebGL implementation in Mozilla Firefox 4.x through 12.0,...CVE-2012-31059.3 HighJune 5, 2012
mozilla firefox, seamonkey, thunderbird +1 more +3 moreHeap-based buffer overflow in the utf16_to_isolatin1 function in Mozilla Firefox 4.x through 12.0...CVE-2012-19479.3 HighJune 5, 2012
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsINode::ReplaceOrInsertBefore function in Mozilla Firefox 4...CVE-2012-19469.3 HighJune 5, 2012
mozilla firefox, seamonkey, thunderbird +1 more +3 moreMozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0,...CVE-2012-19452.9 LowJune 5, 2012
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR...CVE-2012-19444.3 MediumJune 5, 2012
mozilla firefox, seamonkey, thunderbird +2 moreUntrusted search path vulnerability in Updater.exe in the Windows Updater Service in Mozilla...CVE-2012-19436.9 MediumJune 5, 2012
mozilla firefox, seamonkey, thunderbird +2 moreThe Mozilla Updater and Windows Updater Service in Mozilla Firefox 12.0, Thunderbird 12.0, and...CVE-2012-19427.2 HighJune 5, 2012
mozilla firefox, seamonkey, thunderbird +1 more +3 moreHeap-based buffer overflow in the nsHTMLReflowState::CalculateHypotheticalBox function in Mozilla...CVE-2012-19419.3 HighJune 5, 2012
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox 4.x...CVE-2012-19409.3 HighJune 5, 2012
mozilla firefox, thunderbird esr +1 morejsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does...CVE-2012-19399.3 HighJune 5, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0,...CVE-2012-19389.3 HighJune 5, 2012
mozilla firefox, seamonkey, thunderbird +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 12.0,...CVE-2012-19379.3 HighJune 5, 2012
mozilla firefox, network security services, seamonkey +2 more +4 moreThe ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13...CVE-2012-0441Fix available5.0 MediumJune 5, 2012
openstack horizonOpenStack Horizon Session FixationCVE-2012-2144Fix available6.8 MediumJune 5, 2012
openstack horizonOpenStack Horizon Cross-site scripting (XSS) vulnerabilityCVE-2012-2094Fix available4.3 MediumJune 5, 2012
isc bindISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6...CVE-2012-1667Fix availableEPSS 13.3%8.5 HighJune 5, 2012
sebastian heinlein aptdaemon, canonical ubuntu linux +1 moreAptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages...CVE-2012-09444.3 MediumJune 4, 2012
xinetdbuiltins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service...CVE-2012-0862Fix available4.3 MediumJune 4, 2012
rpmThe headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to...CVE-2012-0815Fix available6.8 MediumJune 4, 2012
rpmThe headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region...CVE-2012-0061Fix available6.8 MediumJune 4, 2012
rpmRPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause...CVE-2012-0060Fix available6.8 MediumJune 4, 2012
bestpractical rtBest Practical Solutions RT 4.x before 4.0.6 does not properly implement the DisallowExecuteCode...CVE-2011-50936.5 MediumJune 4, 2012
bestpractical rtBest Practical Solutions RT 3.8.x before 3.8.12 and 4.x before 4.0.6 allows remote attackers to...CVE-2011-50927.5 HighJune 4, 2012
segue project segueSQL injection vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to execute...CVE-2012-12557.5 HighJune 4, 2012
segue project segueCross-site scripting (XSS) vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to...CVE-2012-12544.3 MediumJune 4, 2012
opera browserOpera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man...CVE-2012-12515.8 MediumJune 4, 2012
logitech lan-w300n\/ru2 firmwareLogitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access,...CVE-2012-125010.0 HighJune 4, 2012
bandainamcogames madomagi-ip androidThe Puella Magi Madoka Magica iP application 1.05 and earlier for Android places cleartext...CVE-2012-26304.3 MediumJune 4, 2012
roundcube webmailCross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer...CVE-2012-1253Fix available2.6 LowJune 4, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open