CVEs published in July 2012
498 vulnerabilities, 108 critical, 1 exploited.
- wellintech kingviewDirectory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read...5.0 Medium
- wellintech kinghistorianWellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial...10.0 High
- ge intelligent platforms proficy historian, intelligent platforms proficy batch execution, intelligent platforms proficy hmi\/scada ifix +2 more +4 moreAn ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as...9.3 High
- emc captiva quickscan pro, documentum applicationxtender desktop, ge intelligent platforms proficy batch execution +4 more +6 moreMultiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2...9.3 High
- wellintech kingviewWellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of...10.0 High
- wellintech kingviewHeap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute...10.0 High
- wellintech kingviewStack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute...10.0 High
- atmoner php-pastebinCross-site scripting (XSS) vulnerability in index.php in PHP-pastebin 2.1 allows remote attackers...4.3 Medium
- lan messenger messenger1.2.28Buffer overflow in LAN Messenger 1.2.28 and earlier allows remote attackers to cause a denial of...5.0 Medium
- vbulletinCross-site scripting (XSS) vulnerability in vBulletin 4.1.12 allows remote attackers to inject...4.3 Medium
- e107Cross-site scripting (XSS) vulnerability in the registration page in e107, probably 1.0.1, allows...4.3 Medium
- directadminMultiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1...4.3 Medium
- kmplayerUntrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary...9.3 High
- myclientbaseMultiple cross-site scripting (XSS) vulnerabilities in index.php/users/form/user_id in...4.3 Medium
- myclientbaseMultiple SQL injection vulnerabilities in application/core/MY_Model.php in MyClientBase 0.12...7.5 High
- babygekko baby gekkoGekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request...5.0 Medium
- babygekko baby gekkoMultiple cross-site scripting (XSS) vulnerabilities in apps/users/registration.template.php in...4.3 Medium
- babygekko baby gekkoMultiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.0 allow remote...4.3 Medium
- alienvault open source security information managementMultiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security...4.3 Medium
- alienvault open source security information managementSQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security...6.5 Medium
- opensolution quick.cmsCross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0...4.3 Medium
- milesj decodaCross-site scripting (XSS) vulnerability in decoda/Decoda.php in Decoda before 3.2 allows remote...4.3 Medium
- milesj decodaCross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.1...4.3 Medium
- milesj decodaCross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.3...4.3 Medium
- joomla joomla\!Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header.5.0 Medium
- joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! 2.5.3 allows remote attackers to inject...4.3 Medium
- redhat dtachInteger signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive...2.6 Low
- ibm websphere portalDirectory traversal vulnerability in the Dojo module in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2...5.0 Medium
- avaya aura application server 5300Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura...10.0 High
- avaya ip office customer call reporterUnrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya...10.0 High
- joomla joomla\!Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain...5.0 Medium
- joomla joomla\!Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to gain...7.5 High
- pidginmsg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle...5.0 Medium
- pidginproxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection...3.5 Low
- apple mac os x, libexpat project libexpat +1 morereadfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of...4.3 Medium
- x.org x serverThe LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change...1.9 Low
- x.org x serverThe LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to...1.2 Low
- fedoraproject 389 directory server, redhat directory server +1 more389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the...2.1 Low
- fedoraproject 389 directory server, redhat directory server +1 more389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the...1.2 Low
- redhat automatic bug reporting toolThe C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does...1.9 Low
- fedoraproject 389 directory serverThe acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server...2.3 Low
- busybox, t-mobile tm-ac1900 +1 moreThe DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary...6.8 Medium
- gnome gdk-pixbufThe gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does...4.3 Medium
- fedoraproject anacondaThe bootloader configuration module (pyanaconda/bootloader.py) in Anaconda uses 755 permissions...2.1 Low
- apple mac os x, libexpat project libexpat +1 moreMemory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context...5.0 Medium
- canonical ubuntu linux, debian linux, libexpat project libexpat +8 more +10 moreThe XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the...4.3 Medium
- linux kernelMultiple stack-based buffer overflows in the Near Field Communication Controller Interface (NCI)...5.0 Medium
- trustwave modsecurity, debian linux, opensuse +1 more +3 moreModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the...4.3 Medium