CVEs published in July 2012
498 vulnerabilities, 108 critical, 1 exploited.
- oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft...3.5 Low
- oracle siebel crmUnspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users...4.0 Medium
- oracle siebel crmUnspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect...6.8 Medium
- oracle e-business suiteUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...4.3 Medium
- oracle hyperionUnspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3 and earlier...4.3 Medium
- oracle siebel crmUnspecified vulnerability in the Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to...5.8 Medium
- oracle e-business suiteUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...3.5 Low
- oracle e-business suiteUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...4.3 Medium
- sun sunosUnspecified vulnerability in Oracle Solaris 10 and 11 allows local users to affect integrity and...5.6 Medium
- sun sunosUnspecified vulnerability in Oracle Solaris 9, 10, and 11 allows local users to affect...2.1 Low
- oracle fusion middlewareUnspecified vulnerability in the Portal component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.6,...4.3 Medium
- websitepanelOpen redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote...5.8 Medium
- wangkongbao cns-1000, cns-1100 +1 moreMultiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and...5.0 Medium
- openstack compute, essex, folsom +2 moreOpenStack Nova Scheduler denial of service through scheduler_hints3.5 Low
- gnome rhythmbox(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in...3.6 Low
- eucalyptusThe VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP...7.5 High
- eucalyptusThe Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain...7.5 High
- xnviewHeap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of...6.8 Medium
- xnviewHeap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of...6.8 Medium
- xnviewMultiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a...6.8 Medium
- moodlelib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle...7.5 High
- moodleThe form-autocompletion functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x...2.1 Low
- moodleMoodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled,...4.3 Medium
- moodleThe self-enrolment functionality in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 allows...5.5 Medium
- moodleMoodle Users Can Bypass Deleted Status5.5 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreMozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0,...10.0 High
- mozilla firefoxMozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through...10.0 High
- mozilla firefoxThe drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before...6.4 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0,...9.3 High
- tridium niagara axTridium Niagara AX Framework does not properly store credential data, which allows context...7.8 High
- tridium niagara axDirectory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read...5.0 Medium
- emc celerra network server, vnx, vnxe +2 moreEMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1...6.5 Medium
- johnsoncontrols pegasys p2000 server, pegasys p2000 server software +1 moreThe Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to...5.0 Medium
- yahoo yahoo\! browserThe Yahoo! Japan Yahoo! Browser application 1.2.0 and earlier for Android does not properly...4.3 Medium
- johnsoncontrols network controller, network controller firmware +1 moreThe Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote...7.5 High
- hp assetmanagerMultiple cross-site scripting (XSS) vulnerabilities in HP AssetManager 5.20, 5.21, 5.22, and 9.30...4.3 Medium
- moodleMoodle does not properly restrict comment capabilities6.4 Medium
- moodlelib/db/access.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 assigns incorrect...5.5 Medium
- moodleThe moodle_enrol_external:role_assign function in enrol/externallib.php in Moodle 2.0.x before 2...6.5 Medium
- moodleMoodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory6.4 Medium
- moodleMoodle allows remote authenticated users to cause a denial of service (invalid database records)4.0 Medium
- moodleMoodle allows remote authenticated users to cause a denial of service (invalid database records)4.0 Medium
- moodleMoodle does not recogniz configuration setting that makes e-mail addresses visible only to course members4.0 Medium
- moodleMoodle does not force password changes for autosubscribed users6.8 Medium
- moodleMoodle Incorrect Default Settings5.5 Medium
- moodleMoodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page5.0 Medium
- moodleMoodle vulnerable to Cross-site Scripting4.3 Medium
- moodleMoodle vulnerable to Cross-Site Request Forgery6.8 Medium
- moodle, nimish pachapurkar spike phpcoverage +1 moreMoodle vulnerable to XSS via bundled spikephpcoverage library4.3 Medium
- Show moreLoading…