CVEs published in June 2012
356 vulnerabilities, 63 critical, 3 exploited.
- linux kernelDouble free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the...5.0 Medium
- mozilla network security services** DISPUTED ** Mozilla Network Security Services (NSS) 3.x, with certain settings of the...4.3 Medium
- openssl** DISPUTED ** OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client...5.0 Medium
- jquindlen wpstorecartUnrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30...10.0 High
- rbx gallery galleryUnrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for...10.0 High
- tbelmans mm forms communityUnrestricted file upload vulnerability in includes/doajaxfileupload.php in the MM Forms Community...7.5 High
- michael dehaan cobblerCobbler subject to Command Injection7.5 High
- redhat satellitespacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not...5.0 Medium
- canonical ubuntu linuxThe Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS does not properly...7.5 High
- canonical ubuntu linuxThe Single Sign On Client (ubuntu-sso-client) for Ubuntu 11.04 and 11.10 does not properly...6.8 Medium
- qtBuffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote...9.3 High
- gnome pango, qt, canonical ubuntu linux +5 more +7 moreHeap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz...9.3 High
- dolphin-browser dolphin browser hd, dolphin for pad +1 moreThe Dolphin Browser HD application before 7.6 and Dolphin for Pad application before 1.0.1 for...4.3 Medium
- newsgator feeddemonCross-site scripting (XSS) vulnerability in FeedDemon before 4.0, when the feed preview option is...2.6 Low
- wordpress wassup pluginCross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for...4.3 Medium
- seil b1, x1, x2 +2 more +4 moreSEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30...2.6 Low
- ioquake3 engineioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the...5.6 Medium
- atmarkweb \@web shoppingcart, \@web shoppingcart t +1 moreCross-site scripting (XSS) vulnerability in WEBLOGIC @WEB ShoppingCart before 1.5.2.0, and @WEB...4.3 Medium
- vmware esx, esxi, player +1 more +3 moreVMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0,...7.8 High
- vmware esx, esxi, fusion +2 more +4 moreVMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x...9.3 High
- opera browserOpera before 12.00 Beta allows remote attackers to cause a denial of service (application crash)...5.0 Medium
- opera browserOpera before 12.00 Beta allows remote attackers to cause a denial of service (memory consumption...5.0 Medium
- opera browserOpera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service ...4.3 Medium
- opera browserOpera before 12.00 Beta allows remote attackers to cause a denial of service (application crash)...5.0 Medium
- opera browserOpera before 12.00 Beta allows remote attackers to cause a denial of service (application hang)...5.0 Medium
- opera browserOpera before 12.00 Beta allows remote attackers to cause a denial of service (application crash)...5.0 Medium
- opera browserOpera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service ...4.3 Medium
- opera browserOpera before 11.64 does not properly allocate memory for URL strings, which allows remote...10.0 High
- opera browserOpera before 11.65 does not ensure that the address field corresponds to the displayed web page...4.3 Medium
- opera browserUnspecified vulnerability in Opera before 12.00 on Mac OS X has unknown impact and attack vectors...10.0 High
- opera browserOpera before 11.65 does not ensure that the address field corresponds to the displayed web page...2.6 Low
- opera browserOpera before 11.65 does not properly restrict the reading of JSON strings, which allows remote...5.0 Medium
- opera browserOpera before 11.65 does not properly restrict the opening of a pop-up window in response to the...9.3 High
- opera browserOpera before 11.65 does not ensure that keyboard sequences are associated with a visible window,...7.6 High
- hp web jetadminMultiple cross-site scripting (XSS) vulnerabilities in HP Web Jetadmin 8.x allow remote attackers...4.3 Medium
- cisco spa2102 phone adapter with router, spa2102 phone adapter with router firmware, spa3102 voice gateway with router +15 more +17 moreCross-site scripting (XSS) vulnerability in the SIP implementation on the Cisco SPA8000 and...4.3 Medium
- efstechnology autoform pdm archiveAutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console...6.0 Medium
- poul-henning kamp md5cryptPoul-Henning Kamp md5crypt has insufficient algorithmic complexity and a consequently short...5.0 Medium
- efstechnology autoform pdm archiveMultiple cross-site scripting (XSS) vulnerabilities in AutoFORM PDM Archive before 6.920 allow...3.5 Low
- efstechnology autoform pdm archiveThe administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization...6.5 Medium
- efstechnology autoform pdm archiveThe web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements,...6.5 Medium
- bradfordnetworks network sentry appliance, network sentry appliance software +1 moreThe agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages,...5.0 Medium
- bradfordnetworks network sentry appliance, network sentry appliance software +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in...6.8 Medium
- bradfordnetworks network sentry appliance, network sentry appliance software +1 moreMultiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor...3.5 Low
- quaggaThe bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers...2.9 Low
- linux kernelThe ext4_fill_super function in fs/ext4/super.c in the Linux kernel before 2.6.39 does not...2.1 Low
- linux kernelThe osf_getsysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on...2.1 Low
- linux kernelThe ip_expire function in net/ipv4/ip_fragment.c in the Linux kernel before 2.6.39 does not...5.0 Medium
- adobe coldfusionCRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1...4.3 Medium
- microsoft xml core servicesMicrosoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which...8.8 High
- Show moreLoading…