Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
September

CVEs published in September 2012

651 vulnerabilities, 77 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

ffmpeg, libav +1 moreDouble free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg...CVE-2012-2803Fix available10.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg...CVE-2012-280210.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7...CVE-2012-2801Fix available10.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the ff_ivi_process_empty_tile function in libavcodec/ivi_common.c in...CVE-2012-280010.0 HighSeptember 10, 2012
ffmpegUnspecified vulnerability in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact...CVE-2012-279910.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 0.11,...CVE-2012-279810.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the decode_frame_mp3on4 function in libavcodec/mpegaudiodec.c in...CVE-2012-2797Fix available10.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the vc1_decode_frame function in libavcodec/vc1dec.c in FFmpeg...CVE-2012-279610.0 HighSeptember 10, 2012
ffmpegMultiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have...CVE-2012-279510.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the decode_mb_info function in libavcodec/indeo5.c in FFmpeg before...CVE-2012-279410.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the lag_decode_zero_run_line function in libavcodec/lagarith.c in...CVE-2012-279310.0 HighSeptember 10, 2012
ffmpegUnspecified vulnerability in the decode_init function in libavcodec/wmalosslessdec.c in FFmpeg...CVE-2012-279210.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreMultiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2)...CVE-2012-279110.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg...CVE-2012-279010.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg...CVE-2012-278910.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg...CVE-2012-2788Fix available10.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the decode_frame function in libavcodec/indeo4.c in FFmpeg before 0...CVE-2012-278710.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the decode_wdlt function in libavcodec/dfa.c in FFmpeg before 0.11,...CVE-2012-278610.0 HighSeptember 10, 2012
ffmpegMultiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have...CVE-2012-278510.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0...CVE-2012-2784Fix available10.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7...CVE-2012-2783Fix available10.0 HighSeptember 10, 2012
ffmpegUnspecified vulnerability in the decode_slice_header function in libavcodec/h264.c in FFmpeg...CVE-2012-278210.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0...CVE-2012-2779Fix available10.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0...CVE-2012-2777Fix available10.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg...CVE-2012-2776Fix available10.0 HighSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg...CVE-2012-2775Fix available10.0 HighSeptember 10, 2012
ffmpegThe ff_MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote...CVE-2012-27745.0 MediumSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in the ff_rv34_decode_frame function in libavcodec/rv34.c in FFmpeg...CVE-2012-2772Fix available10.0 HighSeptember 10, 2012
ibm change and configuration management database, maximo asset management, maximo service desk +3 more +5 moreCross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in...CVE-2012-33264.3 MediumSeptember 10, 2012
ibm change and configuration management database, maximo asset management, maximo service desk +3 more +5 moreCross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used...CVE-2012-33134.3 MediumSeptember 10, 2012
ibm change and configuration management database, maximo asset management, maximo service desk +3 more +5 moreIBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset...CVE-2012-21854.0 MediumSeptember 10, 2012
ibm change and configuration management database, maximo asset management, maximo service desk +3 more +5 moreSession fixation vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in...CVE-2012-21846.8 MediumSeptember 10, 2012
ibm change and configuration management database, maximo asset management, maximo service desk +3 more +5 moreSession fixation vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in...CVE-2012-21836.8 MediumSeptember 10, 2012
ibm change and configuration management database, maximo asset management, maximo service desk +3 more +5 moreSQL injection vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud...CVE-2012-07476.5 MediumSeptember 10, 2012
ibm change and configuration management database, maximo asset management, maximo service desk +3 more +5 moreCross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in...CVE-2012-07463.5 LowSeptember 10, 2012
ibm change and configuration management database, maximo asset management, maximo service desk +3 more +5 moreSQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud...CVE-2012-07286.5 MediumSeptember 10, 2012
ibm change and configuration management database, maximo asset management, maximo service desk +3 more +5 moreSQL injection vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control...CVE-2012-07276.5 MediumSeptember 10, 2012
ibm change and configuration management database, maximo asset management, maximo service desk +3 more +5 moreCross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 6.2 through 7.5,...CVE-2012-07146.8 MediumSeptember 10, 2012
mediawikiThe wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote...CVE-2012-4885Fix available5.0 MediumSeptember 9, 2012
openkmCross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7...CVE-2012-2316Public exploit6.8 MediumSeptember 9, 2012
openkmadmin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges...CVE-2012-2315Public exploit4.0 MediumSeptember 9, 2012
open-emr openemrSQL injection vulnerability in interface/login/validateUser.php in OpenEMR 4.1.0 and possibly...CVE-2012-2115Public exploit7.5 HighSeptember 9, 2012
chatelao php address bookCross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier...CVE-2012-1912Public exploit4.3 MediumSeptember 9, 2012
chatelao php address bookMultiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote...CVE-2012-1911Public exploit7.5 HighSeptember 9, 2012
danielb cool aidCool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows...CVE-2012-16494.9 MediumSeptember 9, 2012
danielb cool aidCross-site scripting (XSS) vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows...CVE-2012-16482.1 LowSeptember 9, 2012
mediawikiCross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3...CVE-2012-1582Fix available4.3 MediumSeptember 9, 2012
mediawikiMediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password...CVE-2012-1581Fix available5.0 MediumSeptember 9, 2012
mediawikiCross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17...CVE-2012-15806.8 MediumSeptember 9, 2012
mediawikiThe resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private...CVE-2012-15795.0 MediumSeptember 9, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open