Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
June

CVEs published in June 2012

356 vulnerabilities, 63 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm security appscan source, spss data collection +1 moreCross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS),...CVE-2012-21614.3 MediumJune 20, 2012
ibm security appscan source, spss data collection +1 moreOpen redirect vulnerability in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan...CVE-2012-21595.8 MediumJune 20, 2012
ibm websphere application serverCross-site scripting (XSS) vulnerability in the Integration Solution Console in the...CVE-2012-07204.3 MediumJune 20, 2012
ibm websphere application serverIBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with...CVE-2012-07172.6 LowJune 20, 2012
ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere...CVE-2012-07164.3 MediumJune 20, 2012
wordpress plugin newsletter pluginDirectory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for...CVE-2012-3588Public exploitEPSS 10.4%5.0 MediumJune 19, 2012
debian advanced package toolAPT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import...CVE-2012-3587Fix available2.6 LowJune 19, 2012
digium asteriskchan_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1...CVE-2012-35534.0 MediumJune 19, 2012
checkpoint endpoint connect, endpoint security, endpoint security vpn +1 more +3 moreUntrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check...CVE-2012-27536.9 MediumJune 19, 2012
debian advanced package toolAPT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import...CVE-2012-0954Fix available2.6 LowJune 19, 2012
canonical ubuntu linuxThe Apport hook (DistUpgradeApport.py) in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and...CVE-2012-09505.0 MediumJune 19, 2012
spamdykeMultiple buffer overflows in Spamdyke before 4.3.0 might allow remote attackers to execute...CVE-2012-08027.5 HighJune 19, 2012
dell wyse device managerhagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which...CVE-2009-0695Public exploitEPSS 68.6%7.5 HighJune 19, 2012
dell wyse device managerMultiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute...CVE-2009-0693Public exploitEPSS 12.6%7.5 HighJune 19, 2012
innominate mguard firmwareThe Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS,...CVE-2012-30067.1 HighJune 19, 2012
wap2 smallpictCross-site scripting (XSS) vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows remote...CVE-2012-26384.3 MediumJune 19, 2012
kent-web web patioCross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier might allow...CVE-2012-26374.3 MediumJune 19, 2012
kent-web web patioCross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier allows remote...CVE-2012-26364.3 MediumJune 19, 2012
mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in...CVE-2011-36717.5 HighJune 18, 2012
mysqlMySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a...CVE-2012-27494.0 MediumJune 18, 2012
mariadb, oracle mysql +1 moresql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6,...CVE-2012-2122Public exploitEPSS 96.6%5.1 MediumJune 18, 2012
mysqlMySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a...CVE-2012-2102Fix available3.5 LowJune 18, 2012
oracle mysql, mariadb, redhat enterprise linux desktop +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier,...CVE-2012-17344.0 MediumJune 18, 2012
oracle mysql, mariadb, redhat enterprise linux desktop +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier,...CVE-2012-16894.0 MediumJune 18, 2012
oracle mysql, mariadb, redhat enterprise linux desktop +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows...CVE-2012-05404.0 MediumJune 18, 2012
wordpress fcchat widgetUnrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1...CVE-2012-3578Public exploit6.8 MediumJune 17, 2012
nmedia member conversationUnrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin...CVE-2012-3577Public exploitEPSS 13.5%7.5 HighJune 17, 2012
redhat libvirtlibvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when...CVE-2012-2693Fix available3.7 LowJune 17, 2012
mantisbtMantisBT before 1.2.11 does not check the delete_attachments_threshold permission when...CVE-2012-26923.6 LowJune 17, 2012
mantisbtThe mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly...CVE-2012-26917.5 HighJune 17, 2012
oracle mojarraOracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup,...CVE-2012-2672Fix available2.1 LowJune 17, 2012
rtomayko rack-cachRack-Cache caches sensitive headersCVE-2012-2671Fix available7.5 HighJune 17, 2012
o-dyn collabtivemanageuser.php in Collabtive before 0.7.6 allows remote authenticated users, and possibly...CVE-2012-26706.5 MediumJune 17, 2012
openldaplibraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS...CVE-2012-2668Fix available4.3 MediumJune 17, 2012
dlitz pycryptoPyCrypto makes Use of Insufficiently Random ValuesCVE-2012-2417Fix available4.3 MediumJune 17, 2012
flightgear, simgear +1 moreMultiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user...CVE-2012-2091Fix available9.3 HighJune 17, 2012
flightgear, simgear +1 moreMultiple format string vulnerabilities in FlightGear 2.6 and earlier and SimGear 2.6 and earlier...CVE-2012-2090Fix available9.3 HighJune 17, 2012
oracle jre, jdk +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-17266.4 MediumJune 16, 2012
oracle jre, jdk +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-172510.0 HighJune 16, 2012
oracle jre, jdk +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-17245.0 MediumJune 16, 2012
oracle java se, jre, jdk +6 more +8 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-1723In KEVPublic exploitEPSS 93.6%10.0 HighJune 16, 2012
oracle jre, jdk +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-172210.0 HighJune 16, 2012
oracle jre, jdk +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-172110.0 HighJune 16, 2012
oracle jre, jdk +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-17203.7 LowJune 16, 2012
oracle jre, jdk +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-17195.0 MediumJune 16, 2012
oracle jre, jdk +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-17185.0 MediumJune 16, 2012
oracle jre, jdk, redhat enterprise linux desktop +14 more +16 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-17172.1 LowJune 16, 2012
oracle jre, jdk +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-171610.0 HighJune 16, 2012
oracle javafx, jre, jdk +2 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-171310.0 HighJune 16, 2012
oracle jre, jdk +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-17117.5 HighJune 16, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open