Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
July

CVEs published in July 2012

498 vulnerabilities, 108 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

moodleMoodle does not use the forceloginforprofiles setting for course-profiles access controlCVE-2011-4279Fix available5.0 MediumJuly 16, 2012
emc rsa authentication manager, rsa authentication manager, securid appliance +2 moreEMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 do...CVE-2012-22805.0 MediumJuly 13, 2012
emc rsa authentication manager, rsa authentication manager, securid appliance +2 moreOpen redirect vulnerability in the Security Console in EMC RSA Authentication Manager 7.1 before...CVE-2012-22796.4 MediumJuly 13, 2012
emc rsa authentication manager, rsa authentication manager, securid appliance +2 moreMultiple cross-site scripting (XSS) vulnerabilities in the (1) Self-Service Console and (2)...CVE-2012-22784.3 MediumJuly 13, 2012
andreas gohr dokuwikiCross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in...CVE-2012-0283Fix available4.3 MediumJuly 13, 2012
curtis galloway exifInteger overflow in the jpeg_data_load_data function in jpeg-data.c in libjpeg in exif 0.6.20...CVE-2012-2845Fix available6.4 MediumJuly 13, 2012
libexif project libexifInteger underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing...CVE-2012-2841Fix available7.5 HighJuly 13, 2012
libexif project libexifOff-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag...CVE-2012-2840Fix available7.5 HighJuly 13, 2012
libexif project libexifThe mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag...CVE-2012-2837Fix available5.0 MediumJuly 13, 2012
libexif project libexifThe exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif)...CVE-2012-2836Fix available6.4 MediumJuly 13, 2012
libexif project libexifBuffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing...CVE-2012-2814Fix available7.5 HighJuly 13, 2012
libexif project libexifThe exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka...CVE-2012-2813Fix available6.4 MediumJuly 13, 2012
libexif project libexifThe exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif)...CVE-2012-2812Fix available6.4 MediumJuly 13, 2012
ckeditor fckeditorCross-site scripting (XSS) vulnerability in the print_textinputs_var function in editor/dialog...CVE-2012-4000Public exploitFix available4.3 MediumJuly 12, 2012
sayakbanerjee sticky notesCross-site scripting (XSS) vulnerability in admin/login.php in Sticky Notes 0.3.09062012.4 and...CVE-2012-39994.3 MediumJuly 12, 2012
sayakbanerjee sticky notesMultiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote...CVE-2012-39987.5 HighJuly 12, 2012
sayakbanerjee sticky notesMultiple cross-site scripting (XSS) vulnerabilities in Sticky Notes before 0.2.27052012.5 allow...CVE-2012-39974.3 MediumJuly 12, 2012
videolan vlc media playerHeap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg...CVE-2012-3377Fix available6.8 MediumJuly 12, 2012
valarsoft webmaticSQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute...CVE-2012-3350Public exploit6.8 MediumJuly 12, 2012
gimpfits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer...CVE-2012-3236Public exploitFix availableEPSS 10.7%4.3 MediumJuly 12, 2012
google chromeThe PDF functionality in Google Chrome before 20.0.1132.57 does not properly handle JavaScript...CVE-2012-28449.3 HighJuly 12, 2012
google chromeUse-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to...CVE-2012-28437.5 HighJuly 12, 2012
google chromeUse-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to...CVE-2012-28427.5 HighJuly 12, 2012
lattice semiconductor diamond programmerBuffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote...CVE-2012-2614Public exploit6.8 MediumJuly 12, 2012
esri arcmapESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing...CVE-2012-1661Public exploitEPSS 23.8%9.3 HighJuly 12, 2012
linux systemdThe rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44,...CVE-2012-1174Fix available3.3 LowJuly 12, 2012
nih libzipInteger overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote...CVE-2012-1163Fix available6.8 MediumJuly 12, 2012
nih libzipHeap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows...CVE-2012-1162Fix available7.5 HighJuly 12, 2012
glpi-project glpiPHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows...CVE-2012-10376.5 MediumJuly 12, 2012
tiki tikiwiki cms\/groupwareTikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path...CVE-2012-3996Public exploit5.0 MediumJuly 12, 2012
adrian chadd rtg, rtg2 +1 moreMultiple SQL injection vulnerabilities in RTG 0.7.4 and RTG2 0.9.2 allow remote attackers to...CVE-2012-38817.5 HighJuly 12, 2012
kajonaMultiple cross-site scripting (XSS) vulnerabilities in the getAllPassedParams function in system...CVE-2012-3805Public exploit4.3 MediumJuly 12, 2012
artis.imag basilicConfig/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell...CVE-2012-3399Public exploitEPSS 65.3%7.5 HighJuly 12, 2012
apache hadoopClient BlockTokens not checked in Apache HadoopCVE-2012-3376Fix available7.5 HighJuly 12, 2012
gimpBuffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2...CVE-2012-2763Public exploitFix availableEPSS 81.7%7.5 HighJuly 12, 2012
suckless slockslock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might...CVE-2012-1620Fix available3.6 LowJuly 12, 2012
tiki tikiwiki cms\/groupwareTikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary...CVE-2012-0911Public exploitEPSS 63.0%9.8 CriticalJuly 12, 2012
cisco telepresence recording serverThe administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows...CVE-2012-30769.0 HighJuly 12, 2012
cisco telepresence system 1300 65, telepresence system 3000, telepresence system 3010 +8 more +10 moreThe administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4...CVE-2012-30759.0 HighJuly 12, 2012
cisco telepresence system 1300 65, telepresence system 3000, telepresence system 3010 +8 more +10 moreAn unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote...CVE-2012-30748.3 HighJuly 12, 2012
cisco telepresence manager, telepresence multipoint switch, telepresence recording server +12 more +14 moreThe IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence...CVE-2012-30737.8 HighJuly 12, 2012
cisco telepresence manager, telepresence multipoint switch, telepresence recording server +12 more +14 moreThe Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before...CVE-2012-24868.3 HighJuly 12, 2012
puppet, puppet enterprise, canonical ubuntu linux +4 more +6 morePupper does not properly restrict characters in Common Name field of Certificate Signing RequestCVE-2012-3867Fix available4.3 MediumJuly 12, 2012
puppet, puppet enterprise +1 morePuppet allows local users to obtain sensitive configuration informationCVE-2012-3866Fix available2.1 LowJuly 12, 2012
puppet, puppet enterprise +1 morePuppet vulnerable to Path TraversalCVE-2012-3865Fix available3.5 LowJuly 12, 2012
puppet, puppet enterprise +1 morePuppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote...CVE-2012-3864Fix available4.0 MediumJuly 12, 2012
monoCross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web...CVE-2012-3382Fix available4.3 MediumJuly 12, 2012
extplorerCross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote...CVE-2012-3362Fix available6.8 MediumJuly 12, 2012
nullsoft winampThe in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service ...CVE-2012-38906.8 MediumJuly 11, 2012
nullsoft winampThe in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service ...CVE-2012-38896.8 MediumJuly 11, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open