Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
July

CVEs published in July 2012

498 vulnerabilities, 108 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

moodleMoodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended...CVE-2011-43095.0 MediumJuly 11, 2012
moodleCross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0...CVE-2011-43074.3 MediumJuly 11, 2012
moodleThe chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote...CVE-2011-43044.0 MediumJuly 11, 2012
moodlelib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct...CVE-2011-43034.3 MediumJuly 11, 2012
moodleMoodle does not properly restrict access to category and course dataCVE-2011-4300Fix available5.0 MediumJuly 11, 2012
moodleMoodle vulnerable to Cross-Site ScriptingCVE-2011-4299Fix available4.3 MediumJuly 11, 2012
moodleMoodle vulnerable to Cross-Site Request ForgeryCVE-2011-4298Fix available6.8 MediumJuly 11, 2012
hp operations agentUnspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to...CVE-2012-2020Public exploitEPSS 64.3%10.0 HighJuly 11, 2012
hp operations agentUnspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to...CVE-2012-2019Public exploitEPSS 63.5%10.0 HighJuly 11, 2012
microsoft officeMicrosoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft...CVE-2012-18946.9 MediumJuly 10, 2012
microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...CVE-2012-18937.2 HighJuly 10, 2012
microsoft data access components, windows data access components +1 moreHeap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows...CVE-2012-1891EPSS 29.4%9.3 HighJuly 10, 2012
microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...CVE-2012-18907.2 HighJuly 10, 2012
microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreThe CBC mode in the TLS protocol, as used in Microsoft Windows XP SP2 and SP3, Windows Server...CVE-2012-18704.3 MediumJuly 10, 2012
microsoft office sharepoint server, sharepoint foundation, sharepoint server +1 more +3 moreCross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3...CVE-2012-1863EPSS 23.1%4.3 MediumJuly 10, 2012
microsoft sharepoint serverOpen redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote...CVE-2012-1862EPSS 10.8%6.8 MediumJuly 10, 2012
microsoft office web apps, sharepoint foundation, sharepoint server +2 moreCross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1,...CVE-2012-1861EPSS 15.4%4.3 MediumJuly 10, 2012
microsoft office web apps, sharepoint server +1 moreMicrosoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and...CVE-2012-1860EPSS 12.2%5.5 MediumJuly 10, 2012
microsoft office web apps, sharepoint foundation, sharepoint server +2 moreCross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010...CVE-2012-1859EPSS 23.1%4.3 MediumJuly 10, 2012
microsoft office, visual basic for applications (vba), visual basic for applications +1 more +3 moreUntrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3,...CVE-2012-1854In KEVEPSS 20.9%6.9 MediumJuly 10, 2012
microsoft internet explorerMicrosoft Internet Explorer 9 does not properly handle objects in memory, which allows remote...CVE-2012-1524EPSS 21.5%9.3 HighJuly 10, 2012
microsoft internet explorerMicrosoft Internet Explorer 9 does not properly handle objects in memory, which allows remote...CVE-2012-1522EPSS 20.9%9.3 HighJuly 10, 2012
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreThe Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2,...CVE-2012-0175EPSS 26.1%9.3 HighJuly 10, 2012
digium asterisk, certified asterisk, asteriske +2 moreDouble free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1...CVE-2012-3812Fix available4.0 MediumJuly 9, 2012
astaro security gateway, security gateway software, sophos unified threat management +1 more +3 moreCross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro...CVE-2012-32384.3 MediumJuly 9, 2012
synel sy-780\/a time \& attendance terminalThe Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of...CVE-2012-29707.8 HighJuly 9, 2012
apache org.apache.sling.servlets.postApache Sling POST Servlets Denial of Service VulnerabilityCVE-2012-2138Public exploitFix availableEPSS 14.0%5.0 MediumJuly 9, 2012
f5 enterprise manager, big-ip 1000, big-ip 11000 +22 more +24 moreF5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1...CVE-2012-1493Public exploitEPSS 63.0%7.8 HighJuly 9, 2012
netsweeperUnspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack...CVE-2012-3859Public exploit10.0 HighJuly 9, 2012
netsweeperCross-site request forgery (CSRF) vulnerability in accountmgr/adminupdate.php in the WebAdmin...CVE-2012-24476.8 MediumJuly 9, 2012
netsweeperCross-site scripting (XSS) vulnerability in tools/local_lookup.php in the WebAdmin Portal in...CVE-2012-24464.3 MediumJuly 9, 2012
digium asterisk, asterisk business edition, certified asterisk +1 more +3 morechannels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2,...CVE-2012-3863Fix available4.0 MediumJuly 9, 2012
elitecore cyberoam unified threat management** DISPUTED ** The default configuration of Cyberoam UTM appliances uses the same Certification...CVE-2012-3372Disputed5.8 MediumJuly 9, 2012
linux kernel, canonical ubuntu linux +1 moreHeap-based buffer overflow in the udf_load_logicalvol function in fs/udf/super.c in the Linux...CVE-2012-3400Fix available7.6 HighJuly 9, 2012
pidginBuffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5...CVE-2012-3374Fix available7.5 HighJuly 7, 2012
hazama mt4iCross-site scripting (XSS) vulnerability in the MT4i plugin 3.1 beta 4 and earlier for Movable...CVE-2012-26444.3 MediumJuly 7, 2012
kent-web yy-boardCross-site scripting (XSS) vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers...CVE-2012-26434.3 MediumJuly 7, 2012
hazama mt4iCross-site scripting (XSS) vulnerability in the MT4i plugin 3.1 beta 4 and earlier for Movable...CVE-2012-26424.3 MediumJuly 7, 2012
irfanview pluginsHeap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins...CVE-2012-3585Public exploit9.3 HighJuly 5, 2012
hp network node manager iCross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 8.x, 9.0x, and 9.1x...CVE-2012-20184.3 MediumJuly 5, 2012
zenphotoCross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to...CVE-2012-26414.3 MediumJuly 5, 2012
yomecolle nec biglobe yome collectionThe NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers...CVE-2012-26405.0 MediumJuly 5, 2012
symantec message filterMultiple cross-site request forgery (CSRF) vulnerabilities in Brightmail Control Center in...CVE-2012-03036.8 MediumJuly 5, 2012
symantec message filterCross-site scripting (XSS) vulnerability in Brightmail Control Center in Symantec Message Filter...CVE-2012-03024.3 MediumJuly 5, 2012
symantec message filterSession fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows...CVE-2012-03015.4 MediumJuly 5, 2012
symantec message filterBrightmail Control Center in Symantec Message Filter 6.3 does not properly restrict establishment...CVE-2012-03003.3 LowJuly 5, 2012
rsa access manager agent, access manager server +1 moreEMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly...CVE-2012-22816.8 MediumJuly 5, 2012
novell groupwiseDirectory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote...CVE-2012-04105.0 MediumJuly 5, 2012
invensys intouch, wonderware application server +1 moreslssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application...CVE-2012-38475.0 MediumJuly 5, 2012
invensys dasabcip, daserver runtime components, dassidirect +2 more +4 moreStack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the...CVE-2012-30075.0 MediumJuly 5, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open