Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
August

CVEs published in August 2012

741 vulnerabilities, 105 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

qemu, arista eos, canonical ubuntu linux +15 more +17 moreHeap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute...CVE-2015-3209Fix available7.5 HighAugust 31, 2012
qemu, suse linux enterprise server +1 moreInteger overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local...CVE-2014-0223Fix available4.6 MediumAugust 31, 2012
qemu, suse linux enterprise server +1 moreInteger overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote...CVE-2014-0222Fix available7.5 HighAugust 31, 2012
qemu, xen, canonical ubuntu linux +10 more +12 moreQemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a...CVE-2012-3515Fix available7.2 HighAugust 31, 2012
digium asterisk, certified asterisk +1 morechannels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1,...CVE-2012-4737Fix available6.0 MediumAugust 31, 2012
adobe photoshop cs6Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute...CVE-2012-4170Public exploitEPSS 11.0%9.3 HighAugust 31, 2012
cybozu liveThe WebView class in the Cybozu Live application 1.0.4 and earlier for Android allows remote...CVE-2012-40096.8 MediumAugust 31, 2012
cybozu liveThe Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute...CVE-2012-40086.8 MediumAugust 31, 2012
asterisk business edition, certified asterisk, digiumphones +2 more +4 moreIncomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15...CVE-2012-2186Fix available9.0 HighAugust 31, 2012
unixodbc** DISPUTED ** Buffer overflow in the SQLDriverConnect function in unixODBC 2.3.1 allows local...CVE-2012-2658Fix availableDisputed2.1 LowAugust 31, 2012
unixodbc** DISPUTED ** Buffer overflow in the SQLDriverConnect function in unixODBC 2.0.10, 2.3.1, and...CVE-2012-2657Fix availableDisputed2.1 LowAugust 31, 2012
oracle jre, jdk +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-313610.0 HighAugust 30, 2012
oracle jre, jdk +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-168210.0 HighAugust 30, 2012
oracle jre, jdk +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-0547Public exploitEPSS 12.5%0.0 LowAugust 30, 2012
apple iphone os, mac os x, safari +21 more +23 moreThe TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on...CVE-2015-4000Public exploitFix availableEPSS 99.9%3.7 LowAugust 30, 2012
opensslThe PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1...CVE-2015-1790Public exploitFix availableEPSS 24.0%5.0 MediumAugust 30, 2012
openssl, oracle sparc-opl service processor +1 moreThe X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0...CVE-2015-1789Fix availableEPSS 75.7%7.5 HighAugust 30, 2012
opensslThe SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and...CVE-2015-0293Fix availableEPSS 21.2%5.0 MediumAugust 30, 2012
opensslInteger underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding...CVE-2015-0292Fix availableEPSS 42.5%7.5 HighAugust 30, 2012
opensslThe PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m,...CVE-2015-0289Fix available5.0 MediumAugust 30, 2012
opensslThe X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1...CVE-2015-0288Fix available5.0 MediumAugust 30, 2012
opensslThe ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1...CVE-2015-0287Fix available5.0 MediumAugust 30, 2012
opensslThe ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r...CVE-2015-0286Fix availableEPSS 19.9%5.0 MediumAugust 30, 2012
opensslThe ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1...CVE-2015-0205Public exploitFix availableEPSS 22.3%5.0 MediumAugust 30, 2012
opensslThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,...CVE-2015-0204Public exploitFix availableEPSS 98.7%4.3 MediumAugust 30, 2012
opensslOpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain...CVE-2014-8275Public exploitFix availableEPSS 15.0%5.0 MediumAugust 30, 2012
opensslThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,...CVE-2014-3572Fix available5.0 MediumAugust 30, 2012
opensslThe BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k...CVE-2014-3570Public exploitFix availableEPSS 21.9%5.0 MediumAugust 30, 2012
opensslOpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce...CVE-2014-3568Fix availableEPSS 14.0%4.3 MediumAugust 30, 2012
openssl, apple mac os x, debian linux +17 more +19 moreThe SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic...CVE-2014-3566Public exploitFix availableEPSS 100.0%3.4 LowAugust 30, 2012
opensslThe OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0...CVE-2014-3508Fix availableEPSS 24.5%4.3 MediumAugust 30, 2012
openssl, fedoraproject fedora, mariadb +8 more +10 moreThe ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1...CVE-2014-3470Fix availableEPSS 85.8%4.3 MediumAugust 30, 2012
openssl, fedoraproject fedora, filezilla-project filezilla server +13 more +15 moreOpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict...CVE-2014-0224Public exploitFix availableEPSS 95.3%7.4 HighAugust 30, 2012
openssl, oracle openjdk, polarssl +2 moreThe TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK,...CVE-2013-0169Public exploitFix availableEPSS 35.6%2.6 LowAugust 30, 2012
opensslOpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform...CVE-2013-0166Fix availableEPSS 19.7%5.0 MediumAugust 30, 2012
wiresharkThe dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and...CVE-2012-3548Fix available4.3 MediumAugust 30, 2012
ibm websphere application serverIBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before...CVE-2012-33256.0 MediumAugust 30, 2012
epractizelabs subscription managershowImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to...CVE-2011-51366.4 MediumAugust 30, 2012
docebo docebolmsMultiple SQL injection vulnerabilities in the save_connection function in lib/lib.iotask.php in...CVE-2011-5135Public exploit6.0 MediumAugust 30, 2012
widgetfactorylimited com jceUnrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component...CVE-2011-51346.0 MediumAugust 30, 2012
mybbUnspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to...CVE-2011-513310.0 HighAugust 30, 2012
mybbCross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject...CVE-2011-51324.3 MediumAugust 30, 2012
mybbCross-site request forgery (CSRF) vulnerability in global.php in MyBB before 1.6.5 allows remote...CVE-2011-51316.8 MediumAugust 30, 2012
haudenschilt family connections cmsdev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled,...CVE-2011-5130Public exploitEPSS 36.5%6.8 MediumAugust 30, 2012
xchatHeap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial...CVE-2011-5129Public exploit5.0 MediumAugust 30, 2012
phpThe sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does...CVE-2011-1398Public exploitEPSS 10.2%4.3 MediumAugust 30, 2012
opera browserOpera before 11.60 allows remote attackers to spoof the address bar via unspecified homograph...CVE-2012-40105.0 MediumAugust 30, 2012
hp inode management center pcMultiple unspecified vulnerabilities in HP iNode Management Center before iNode PC 5.1 E0304...CVE-2012-325410.0 HighAugust 30, 2012
hp intelligent management centerMultiple unspecified vulnerabilities in HP Intelligent Management Center (IMC) before 5.0...CVE-2012-325310.0 HighAugust 30, 2012
otrs, otrs itsm +1 moreCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x...CVE-2012-4600Public exploitFix available2.6 LowAugust 30, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open