CVEs published in June 2012
356 vulnerabilities, 63 critical, 3 exploited.
- mantisbtThe mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9...7.5 High
- mantisbtbug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold...3.6 Low
- mantisbtThe SOAP API in MantisBT before 1.2.9 does not properly enforce the...3.6 Low
- mantisbtMantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier...6.4 Medium
- mantisbtThe access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not...4.3 Medium
- xenXen 3.4, 4.0, and 4.1, when the guest OS has not registered a handler for a syscall or sysenter...1.9 Low
- roy marples dhcpcdStack-based buffer overflow in the get_packet method in socket.c in dhcpcd 3.2.3 allows remote...7.5 High
- rubyonrails rails, ruby on rails +1 moreactiverecord vulnerable to SQL Injection7.5 High
- rubyonrails rails, ruby on rails +1 moreactionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request4.3 Medium
- rubyonrails rails, ruby on rails +1 moreActive Record vulnerable to SQL Injection via nested query parameters5.0 Medium
- rubyonrails rails, ruby on rails +1 moreAction Pack contains database-query restrictions bypass6.4 Medium
- ibm aixlibodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a...6.9 Medium
- ibm ds4100, ds4200, ds4300 +15 more +17 moreCross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager...4.3 Medium
- ibm ds4100, ds4200, ds4300 +15 more +17 moreSQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System...6.5 Medium
- symantec liveupdate administratorSymantec LiveUpdate Administrator before 2.3.1 uses weak permissions (Everyone: Full Control) for...6.9 Medium
- ibm lotus expeditorThe web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not...5.0 Medium
- ibm lotus expeditorUntrusted search path vulnerability in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5...9.3 High
- ibm lotus expeditorDirectory traversal vulnerability in the Eclipse Help component in IBM Lotus Expeditor 6.1.x and...4.3 Medium
- linux kernelThe robust futex implementation in the Linux kernel before 2.6.28 does not properly handle...7.2 High
- linux kernelDouble free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local...4.7 Medium
- linux kernelThe Reliable Datagram Sockets (RDS) subsystem in the Linux kernel before 2.6.38 does not properly...4.9 Medium
- linux kerneldrivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary...3.6 Low
- linux kernelThe br_multicast_add_group function in net/bridge/br_multicast.c in the Linux kernel before 2.6...4.7 Medium
- linux kernelThe orinoco_ioctl_set_auth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel...3.3 Low
- linux kernelMemory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel...4.9 Medium
- cms-center simple web content management systemMultiple SQL injection vulnerabilities in Simple Web Content Management System 1.1 allow remote...7.5 High
- drupal-id counter moduleSQL injection vulnerability in the Counter module for Drupal allows remote attackers to execute...7.5 High
- david stosik comment moderationCross-site request forgery (CSRF) vulnerability in the Comment Moderation module 6.x-1.x before 6...6.8 Medium
- openstack compute, diablo, essex +2 moreOpenStack Compute (Nova) Improper Input Validation4.3 Medium
- w1.fi hostapdhostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd...2.1 Low
- apache openoffice.org, libwpd, redhat enterprise linux optional productivity applications +1 more +3 moreThe WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as...7.5 High
- color icclib, argyllcms +1 moreUse-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly...9.3 High
- dest-unreach socatHeap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0...6.2 Medium
- umich libgssapi, libgssglue +1 morelibgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to...6.2 Medium
- linux kernelfs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly...5.0 Medium
- cisco application control engine softwareCisco Application Control Engine (ACE) before A4(2.3) and A5 before A5(1.1), when multicontext...7.1 High
- cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +8 more +10 moreCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM)...7.8 High
- cisco anyconnect secure mobility clientA certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco...6.8 Medium
- cisco anyconnect secure mobility client, secure desktop +1 moreThe HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0...4.3 Medium
- cisco anyconnect secure mobility clientThe VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility...4.3 Medium
- cisco anyconnect secure mobility clientThe VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility...9.3 High
- opensslThe Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does...4.0 Medium
- polarsslThe Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not...4.0 Medium
- adiscon loganalyzerCross-site scripting (XSS) vulnerability in index.php in Adiscon LogAnalyzer before 3.4.4 and 3.5...4.3 Medium
- ibm aix, vios +1 moreThe socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local...4.9 Medium
- ibm db2The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in...4.3 Medium
- ibm lotus inotesBuffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM...9.3 High
- ibm lotus notesThe URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute...9.3 High
- ibm security appscan sourceThe ODBC driver in IBM Security AppScan Source 7.x and 8.x before 8.6 sends an SHA-1 hash of the...5.0 Medium
- ibm websphere application serverThe Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not...4.3 Medium
- Show moreLoading…