CVEs published in July 2012

498 vulnerabilities, 108 critical, 1 exploited.

• djangoproject django Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer CVE-2012-3444 Fix available 5.0 MediumJuly 31, 2012
• djangoproject django Django Image Field Vulnerable to Image Decompression Bombs CVE-2012-3443 Fix available 5.0 MediumJuly 31, 2012
• djangoproject django Django Allows Redirect via Data URL CVE-2012-3442 Fix available 4.3 MediumJuly 31, 2012
• sonicwall scrutinizer The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and... CVE-2012-3951 Public exploit EPSS 52.0% 7.5 HighJuly 31, 2012
• sonicwall scrutinizer Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka... CVE-2012-3848 Public exploit 4.3 MediumJuly 31, 2012
• openstack essex, keystone, horizon +2 more OpenStack Keystone token expiration issues CVE-2012-3426 Fix available 4.9 MediumJuly 31, 2012
• iconics bizviz, genesis32 +1 more The lockout-recovery feature in the Security Configurator component in ICONICS GENESIS32 9.22 and... CVE-2012-3018 4.4 MediumJuly 31, 2012
• siemens simatic s7-400 cpu 414-3 pn\/dp, simatic s7-400 cpu 416-3 pn\/dp, simatic s7-400 cpu 416f-3 pn\/dp +1 more +3 more Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial... CVE-2012-3017 7.8 HighJuly 31, 2012
• siemens simatic s7-400 cpu 412-2 pn, simatic s7-400 cpu 414-3 pn\/dp, simatic s7-400 cpu 414f-3 pn\/dp +3 more +5 more Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to... CVE-2012-3016 7.8 HighJuly 31, 2012
• yahoo toolbar Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari allows remote attackers to modify the... CVE-2012-2647 5.8 MediumJuly 31, 2012
• sonicwall scrutinizer d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before... CVE-2012-2627 Public exploit 9.4 HighJuly 31, 2012
• sonicwall scrutinizer cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer)... CVE-2012-2626 Public exploit EPSS 44.5% 5.0 MediumJuly 31, 2012
• mit kerberos 5 The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT... CVE-2012-1015 Fix available 9.3 HighJuly 31, 2012
• mit kerberos 5 The process_as_req function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1... CVE-2012-1014 Fix available 9.0 HighJuly 31, 2012
• sonicwall scrutinizer SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL... CVE-2012-2962 Public exploit EPSS 66.8% 6.5 MediumJuly 30, 2012
• ibm scale out network attached storage IBM Scale Out Network Attached Storage (SONAS) 1.1 through 1.3.1 allows remote authenticated... CVE-2012-2163 9.0 HighJuly 30, 2012
• ibm aix, vios +1 more The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly... CVE-2012-0723 4.9 MediumJuly 30, 2012
• mozilla bugzilla The get_attachment_link function in Template.pm in Bugzilla 2.x and 3.x before 3.6.10, 3.7.x and... CVE-2012-1969 4.3 MediumJuly 28, 2012
• mozilla bugzilla Bugzilla 4.1.x and 4.2.x before 4.2.2 and 4.3.x before 4.3.2 uses bug-editor privileges instead... CVE-2012-1968 4.3 MediumJuly 28, 2012
• ibm lotus protector for mail security, proventia network mail security system firmware +1 more Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security... CVE-2012-2202 Public exploit 3.5 LowJuly 27, 2012
• airdroid The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple... CVE-2012-3888 5.0 MediumJuly 26, 2012
• airdroid AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as... CVE-2012-3887 5.0 MediumJuly 26, 2012
• airdroid AirDroid 1.0.4 beta uses the MD5 algorithm for values in the checklogin key parameter and 7bb... CVE-2012-3886 5.0 MediumJuly 26, 2012
• airdroid The default configuration of AirDroid 1.0.4 beta uses a four-character alphanumeric password,... CVE-2012-3885 7.5 HighJuly 26, 2012
• airdroid AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over... CVE-2012-3884 5.0 MediumJuly 26, 2012
• novell zenworks configuration management Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in... CVE-2011-3174 6.8 MediumJuly 26, 2012
• novell zenworks configuration management The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management (ZCM)... CVE-2011-2658 6.8 MediumJuly 26, 2012
• novell zenworks configuration management Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1... CVE-2011-2657 Public exploit EPSS 48.4% 6.8 MediumJuly 26, 2012
• citrix provisioning services Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5... CVE-2012-4068 7.5 HighJuly 26, 2012
• palo alto networks, ssl vpn, global protected gateway +2 more Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto Networks Global... CVE-2012-4043 4.3 MediumJuly 26, 2012
• apple xcode Apple Xcode before 4.4 does not properly compose a designated requirement (DR) during signing of... CVE-2012-3698 5.0 MediumJuly 26, 2012
• f5 nginx nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass... CVE-2011-4963 5.0 MediumJuly 26, 2012
• systemtap runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6... CVE-2011-2502 Fix available 4.4 MediumJuly 26, 2012
• siemens simatic pcs7, simatic step 7 +1 more Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC... CVE-2012-3015 6.9 MediumJuly 26, 2012
• invensys foxboro control software, intouch, wonderware historian +4 more +6 more Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in... CVE-2012-3005 6.9 MediumJuly 26, 2012
• asp-dev xm diary Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute... CVE-2012-4061 7.5 HighJuly 25, 2012
• asp-dev xm forums Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute... CVE-2012-4060 Public exploit 7.5 HighJuly 25, 2012
• socketmail Cross-site request forgery (CSRF) vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9... CVE-2012-4059 6.8 MediumJuly 25, 2012
• socketmail Cross-site scripting (XSS) vulnerability in SocketMail Pro 2.2.9 allows remote attackers to... CVE-2012-4058 4.3 MediumJuly 25, 2012
• twd-industries remote-anything Buffer overflow in the Player in Remote-Anything 5.60.15 allows remote attackers to execute... CVE-2012-4057 Public exploit 9.3 HighJuly 25, 2012
• uiga personal portal SQL injection vulnerability in index2.php in Uiga Personal Portal allows remote attackers to... CVE-2012-4056 7.5 HighJuly 25, 2012
• uiga fan club SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute... CVE-2012-4055 Public exploit 7.5 HighJuly 25, 2012
• cpe17 autorun killer Buffer overflow in the readfile function in CPE17 Autorun Killer 1.7.1 and earlier allows... CVE-2012-4054 Public exploit 6.9 MediumJuly 25, 2012
• nokia pc suite Buffer overflow in the Video Manager in Nokia PC Suite 7.1.180.64 and earlier allows remote... CVE-2012-2442 Public exploit 4.3 MediumJuly 25, 2012
• oleg kovalchuk cctags Cross-site scripting (XSS) vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10... CVE-2012-2310 3.5 LowJuly 25, 2012
• wearepropeople glossify internal links auto seo Cross-site scripting (XSS) vulnerability in the Glossify Internal Links Auto SEO module for... CVE-2012-2309 3.5 LowJuly 25, 2012
• tahiticlic taxonomy grid catalog Cross-site scripting (XSS) vulnerability in the Taxonomy Grid : Catalog module for Drupal 6.x-1.6... CVE-2012-2308 3.5 LowJuly 25, 2012
• plaatsoft addressbook Cross-site request forgery (CSRF) vulnerability in the Addressbook module for Drupal 6.x-4.2 and... CVE-2012-2307 6.8 MediumJuly 25, 2012
• drupal SQL injection vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows... CVE-2012-2306 7.5 HighJuly 25, 2012
• justin ellison node gallery Cross-site request forgery (CSRF) vulnerability in the Node Gallery module for Drupal 6.x-3.1 and... CVE-2012-2305 6.8 MediumJuly 25, 2012
• Show olderLoading…