CVEs published in June 2012
356 vulnerabilities, 63 critical, 3 exploited.
- google chrome, apple iphone os +1 moreUse-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to...7.5 High
- google chromeUse-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to...7.5 High
- google chromeThe PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to cause a...5.0 Medium
- google chromeThe autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text,...7.5 High
- google chromeGoogle Chrome before 20.0.1132.43 does not properly implement SVG filters, which allows remote...5.0 Medium
- google chromeThe texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does...6.8 Medium
- google chromeUse-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to...7.5 High
- google chromeUse-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to...7.5 High
- google chromeGoogle Chrome before 20.0.1132.43 on Windows does not properly isolate sandboxed processes, which...7.8 High
- google chromeGoogle Chrome before 20.0.1132.43 allows remote attackers to obtain potentially sensitive...5.0 Medium
- google chrome, apple iphone os +1 moreMultiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other...6.8 Medium
- google chromeUntrusted search path vulnerability in Google Chrome before 20.0.1132.43 on Windows might allow...7.2 High
- ibm aix, vios +1 moreThe default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02,...7.2 High
- pythonThe list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5...2.6 Low
- moshe weitzman organic groupsCross-site scripting (XSS) vulnerability in og.js in the Organic Groups (OG) module 6.x-2.x...2.1 Low
- blaine lang maestroMultiple cross-site request forgery (CSRF) vulnerabilities in the Maestro module 7.x-1.x before 7...5.1 Medium
- bryce hamrick janrain captureThe Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when creating a local user account,...5.0 Medium
- richardo ante ubercart ajax cartThe Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the...2.6 Low
- alexis wilke protected nodeThe Protected Node module 6.x-1.x before 6.x-1.6 for Drupal does not properly "protect node...7.5 High
- adcillc simplemetaMultiple cross-site request forgery (CSRF) vulnerabilities in the SimpleMeta module 6.x-1.x...6.8 Medium
- ronan dowling node hierarchyMultiple cross-site request forgery (CSRF) vulnerabilities in the Node Hierarchy module 6.x-1.x...6.8 Medium
- bryce hamrick janrain captureOpen redirect vulnerability in the Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when...5.8 Medium
- alberto trujillo gonzalez protestCross-site scripting (XSS) vulnerability in the Protest module 6.x-1.x before 6.x-1.2 or 7.x-1.x...2.1 Low
- authoring html 6.x-1.0classes/Filter/WhitelistedExternalFilter.php in the Authoring HTML module 6.x-1.x before 6.x-1.1...3.5 Low
- blaine lang maestroCross-site scripting (XSS) vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal...2.6 Low
- scott reynen node embedThe node selection interface in the WYSIWYG editor (CKEditor) in the Node Embed module 6.x-1.x...4.3 Medium
- moshe weitzman organic groupsThe default views in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal do not...6.8 Medium
- adam ross tokenauthThe Token Authentication (tokenauth) module 6.x-1.x before 6.x-1.7 for Drupal does not properly...5.0 Medium
- blaine lang filedepotThe filedepot module 6.x-1.x before 6.x-1.3 for Drupal, when accessed using multiple different...5.1 Medium
- jason moore amadouCross-site scripting (XSS) vulnerability in the themes_links function in template.php in the...4.3 Medium
- browserid project browseridCross-site request forgery (CSRF) vulnerability in the BrowserID (Mozilla Persona) module 7.x-1.x...6.8 Medium
- thomas seidl search apiMultiple cross-site scripting (XSS) vulnerabilities in the Search API module 7.x-1.x before 7.x-1...2.6 Low
- nancy wichmann taxonomy listMultiple cross-site scripting (XSS) vulnerabilities in the Taxonomy List module 6.x-1.x before 6...2.1 Low
- john albin zenCross-site scripting (XSS) vulnerability in the Zen module 6.x-1.x before 6.x-1.1 for Drupal,...2.6 Low
- antoine beaupre hostmasterCross-site scripting (XSS) vulnerability in the _hosting_task_log_table function in modules...2.1 Low
- antoine beaupre hostmasterThe Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal does not properly exit when users...5.8 Medium
- peter pokrivcak post affiliate proCross-site scripting (XSS) vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows...4.3 Medium
- christopher mitchell smart breadcrumbThe filter_titles function in the Smart Breadcrumb module 6.x-1.x before 6.x-1.3 for Drupal does...2.1 Low
- john franklin advertisementCross-site scripting (XSS) vulnerability in the Advertisement module 6.x-2.x before 6.x-2.3 for...2.6 Low
- tony freixas ubercart product keysThe Ubercart Product Keys module 6.x-1.x before 6.x-1.1 for Drupal does not properly check access...5.0 Medium
- apache rollerMultiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.1 allow remote...3.5 Low
- apache rollerMultiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache...6.8 Medium
- nicholasthompson global redirectOpen redirect vulnerability in the Global Redirect module 6.x-1.x before 6.x-1.4 and 7.x-1.x...5.8 Medium
- pro-face pro-server ex, wingp pc runtime +1 morePro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000...10.0 High
- pro-face pro-server ex, wingp pc runtime +1 morePro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000...5.0 Medium
- pro-face pro-server ex, wingp pc runtime +1 morePro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000...5.0 Medium
- pro-face pro-server ex, wingp pc runtime +1 morePro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000...5.0 Medium
- pro-face pro-server ex, wingp pc runtime +1 moreInteger overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face...5.0 Medium
- pro-face pro-server ex, wingp pc runtime +1 morePro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000...5.0 Medium
- xenXen 4.0, and 4.1, when running a 64-bit PV guest on "older" AMD CPUs, does not properly protect...1.9 Low
- Show moreLoading…