Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
July

CVEs published in July 2012

498 vulnerabilities, 108 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-35979.3 HighJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-35969.3 HighJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-35959.3 HighJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-35949.3 HighJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-35939.3 HighJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-35929.3 HighJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-35919.3 HighJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-35908.8 HighJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-35899.3 HighJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-15209.3 HighJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-06839.3 HighJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-06829.3 HighJuly 25, 2012
ez publishCross-site request forgery (CSRF) vulnerability in eZOE flash player in eZ Publish 4.1 through 4...CVE-2012-40536.8 MediumJuly 25, 2012
apple safariWebKit in Apple Safari before 6.0 does not properly handle file: URLs, which allows remote...CVE-2012-36977.1 HighJuly 25, 2012
apple safariCRLF injection vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to...CVE-2012-36964.3 MediumJuly 25, 2012
apple safariCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0 allows remote...CVE-2012-36954.3 MediumJuly 25, 2012
apple safariWebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows...CVE-2012-36944.3 MediumJuly 25, 2012
apple safariIncomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers...CVE-2012-36935.0 MediumJuly 25, 2012
apple safariWebKit in Apple Safari before 6.0 does not properly handle Cascading Style Sheets (CSS) property...CVE-2012-36915.8 MediumJuly 25, 2012
apple safariWebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows...CVE-2012-36904.3 MediumJuly 25, 2012
apple safariWebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows...CVE-2012-36895.8 MediumJuly 25, 2012
apple safariWebKit in Apple Safari before 6.0 accesses uninitialized memory locations during the rendering of...CVE-2012-36504.3 MediumJuly 25, 2012
findingscience mod auth openidmod_auth_openid before 0.7 for Apache uses world-readable permissions for /tmp/mod_auth_openid.db...CVE-2012-2760Public exploitFix available2.1 LowJuly 25, 2012
boost poolInteger overflow in the ordered_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9...CVE-2012-2677Fix available5.0 MediumJuly 25, 2012
emery berger hoardMultiple integer overflows in the (1) malloc and (2) calloc functions in Hoard before 3.9 make it...CVE-2012-26764.3 MediumJuly 25, 2012
nedprod nedmallocMultiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions...CVE-2012-26754.3 MediumJuly 25, 2012
google bionicMultiple integer overflows in the (1) chk_malloc, (2) leak_malloc, and (3) leak_memalign...CVE-2012-26744.3 MediumJuly 25, 2012
boehm-demers-weiser garbage collectorMultiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and...CVE-2012-2673Fix available5.0 MediumJuly 25, 2012
apple safariApple Safari before 6.0 does not properly handle the autocomplete attribute of a password input...CVE-2012-06805.0 MediumJuly 25, 2012
apple safariApple Safari before 6.0 allows remote attackers to read arbitrary files via a feed:// URL.CVE-2012-06794.3 MediumJuly 25, 2012
apple safariCross-site scripting (XSS) vulnerability in Apple Safari before 6.0 allows remote attackers to...CVE-2012-06784.3 MediumJuly 25, 2012
freebsd, netbsd +1 moreThe ipalloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD does...CVE-2007-67545.0 MediumJuly 25, 2012
freebsd, netbsd +1 moreInteger overflow in the calloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6...CVE-2006-72525.0 MediumJuly 25, 2012
csilvers gperftoolsMultiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for...CVE-2005-4895Fix available5.0 MediumJuly 25, 2012
isc dhcp, canonical ubuntu linux, debian linux +2 moreMultiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6...CVE-2012-3954Fix available3.3 LowJuly 25, 2012
isc bindRace condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows...CVE-2012-38684.3 MediumJuly 25, 2012
isc bindISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9...CVE-2012-3817Fix availableEPSS 23.7%7.8 HighJuly 25, 2012
isc dhcp, canonical ubuntu linux, debian linux +2 moreISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a...CVE-2012-3571Public exploitFix availableEPSS 13.0%6.1 MediumJuly 25, 2012
isc dhcpBuffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote...CVE-2012-3570Fix available5.7 MediumJuly 25, 2012
fenrir-inc sleipnir mobileThe Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before...CVE-2012-26465.0 MediumJuly 25, 2012
ibm db2Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before...CVE-2012-21977.1 HighJuly 25, 2012
ibm db2IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows...CVE-2012-21965.0 MediumJuly 25, 2012
ibm db2Directory traversal vulnerability in the SQLJ.DB2_INSTALL_JAR stored procedure in IBM DB2 9.1...CVE-2012-21945.0 MediumJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-36809.3 HighJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-36569.3 HighJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-36559.3 HighJuly 25, 2012
apple safariWebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or...CVE-2012-36159.3 HighJuly 25, 2012
google chrome osMultiple unspecified vulnerabilities in Google Chrome OS before 21.0.1180.50 on the Cr-48 and...CVE-2012-405010.0 HighJuly 24, 2012
wireshark, opensuse +1 moreepan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before...CVE-2012-4049Fix available2.9 LowJuly 24, 2012
wireshark, debian linux +1 moreThe PPP dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1...CVE-2012-4048Fix available3.3 LowJuly 24, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open