CVEs published in June 2012
356 vulnerabilities, 63 critical, 3 exploited.
- linux kernelMemory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial...4.9 Medium
- linux kernelThe __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the...4.6 Medium
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not block cross-domain scrolling events, which...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 does not properly handle objects in memory, which allows remote...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows user...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 7 through 9 does not properly create and initialize string data,...4.3 Medium
- microsoft internet explorerCross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 9 allows remote...4.3 Medium
- microsoft windows xpRace condition in the thread-creation implementation in win32k.sys in the kernel-mode drivers in...6.9 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreInteger overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3,...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...7.2 High
- microsoft internet explorer, lync, office communicator +2 moreThe toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9,...4.3 Medium
- microsoft dynamics axCross-site scripting (XSS) vulnerability in the Enterprise Portal component in Microsoft Dynamics...4.3 Medium
- microsoft .net frameworkMicrosoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function...9.3 High
- microsoft lyncUntrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows...9.3 High
- citrix xenserver, freebsd, illumos +8 more +10 moreThe x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreThe Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows...9.3 High
- apple itunesHeap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute...9.3 High
- ffmpeg, libav +1 moreThe adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5...6.8 Medium
- ffmpeg, libav +1 moreThe ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1...6.8 Medium
- ffmpeg, libav +1 moreThe decode_init function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before...6.8 Medium
- ffmpeg, libav +1 moreThe dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x...6.8 Medium
- bmc identity management suiteCross-site request forgery (CSRF) vulnerability in password-manager/changePasswords.do in BMC...5.1 Medium
- forescout counteractMultiple cross-site scripting (XSS) vulnerabilities in the status program on the ForeScout...4.3 Medium
- phpInteger overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before...7.5 High
- bloxx web filteringCross-site request forgery (CSRF) vulnerability in Microdasys before 3.5.1-B708, as used in Bloxx...6.8 Medium
- postgresqlPostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4...4.0 Medium
- bloxx web filteringBloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during...5.0 Medium
- bloxx web filteringBloxx Web Filtering before 5.0.14 does not use a salt during calculation of a password hash,...5.8 Medium
- bloxx web filteringMultiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in...6.8 Medium
- bloxx web filteringMultiple cross-site scripting (XSS) vulnerabilities in Bloxx Web Filtering before 5.0.14 allow (1...4.3 Medium
- freebsd, php, postgresql +1 more +3 moreThe crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP,...4.3 Medium
- adobe air, flash player, opensuse +1 more +3 moreUntrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and...9.3 High
- adobe air, flash player, opensuse +6 more +8 moreAdobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X;...9.3 High
- adobe air, flash player, opensuse +6 more +8 moreAdobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X;...4.3 Medium
- adobe air, flash player, opensuse +6 more +8 moreAdobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X;...9.3 High
- adobe air, flash player, opensuse +6 more +8 moreInteger overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows...9.3 High
- adobe air, flash player, opensuse +6 more +8 moreStack-based buffer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257...9.3 High
- adobe air, flash player, opensuse +6 more +8 moreAdobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X;...7.5 High
- siemens winccOpen redirect vulnerability in an unspecified web application in Siemens WinCC 7.0 SP3 before...5.8 Medium
- siemens winccBuffer overflow in the DiagAgent web server in Siemens WinCC 7.0 SP3 through Update 2 allows...4.3 Medium
- siemens winccMultiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow...4.0 Medium
- Show moreLoading…