Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
September

CVEs published in September 2012

651 vulnerabilities, 77 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36516.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36496.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36486.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36476.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36436.8 MediumSeptember 13, 2012
apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36329.3 HighSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36246.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36236.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36226.8 MediumSeptember 13, 2012
apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36219.3 HighSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36166.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36146.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36136.8 MediumSeptember 13, 2012
apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36079.3 HighSeptember 13, 2012
apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36069.3 HighSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36026.8 MediumSeptember 13, 2012
torproject torThe tor_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.22-rc,...CVE-2012-4922Fix available5.0 MediumSeptember 13, 2012
openslp, canonical ubuntu linux, debian linux +2 more +4 moreopenslp: SLPIntersectStringList()' Function has a DoS vulnerabilityCVE-2012-4428Fix availableEPSS 10.1%7.5 HighSeptember 13, 2012
torproject torThe compare_tor_addr_to_addr_policy function in or/policies.c in Tor before 0.2.2.39, and 0.2.3.x...CVE-2012-4419Fix available5.0 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36726.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36716.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36576.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36526.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36176.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36126.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-36016.8 MediumSeptember 13, 2012
apple itunesWebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or...CVE-2012-35986.8 MediumSeptember 13, 2012
cisco prime security manager, asa cx context-aware security +1 moreThe Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances ...CVE-2012-46297.8 HighSeptember 12, 2012
cisco jabber extensible communications platform, unified presence +1 moreCisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka...CVE-2012-39357.8 HighSeptember 12, 2012
realnetworks realplayer, realplayer sp +1 moreRealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer...CVE-2012-32347.5 HighSeptember 12, 2012
realnetworks realplayer, realplayer sp +1 moreBuffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and...CVE-2012-24106.8 MediumSeptember 12, 2012
realnetworks realplayer, realplayer sp +1 moreBuffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and...CVE-2012-24097.5 HighSeptember 12, 2012
realnetworks realplayer, realplayer sp +1 moreThe AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac...CVE-2012-24086.8 MediumSeptember 12, 2012
realnetworks realplayer, realplayer sp +1 moreBuffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and...CVE-2012-24077.5 HighSeptember 12, 2012
adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 10 and earlier allows attackers to cause a denial...CVE-2012-20485.0 MediumSeptember 12, 2012
isc bindISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6...CVE-2012-4244Fix availableEPSS 35.2%7.8 HighSeptember 12, 2012
gentoo webminMultiple cross-site request forgery (CSRF) vulnerabilities in file/show.cgi in Webmin 1.590 and...CVE-2012-48936.8 MediumSeptember 11, 2012
nurul hidayah hamazulan mymesyuarat, oscc mymeeting +1 moreOpen Source Competency Center (OSCC) MyMeeting 3.0.1 and earlier, and MyMesyuarat 09b-1, does not...CVE-2012-35726.0 MediumSeptember 11, 2012
gentoo webminfile/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before...CVE-2012-2983EPSS 20.5%5.0 MediumSeptember 11, 2012
gentoo webminfile/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary...CVE-2012-2982Public exploitEPSS 61.9%6.5 MediumSeptember 11, 2012
gentoo webminWebmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a...CVE-2012-29816.0 MediumSeptember 11, 2012
f5 application security manager applianceCross-site scripting (XSS) vulnerability in the traffic overview page on the F5 ASM appliance 10...CVE-2012-29754.3 MediumSeptember 11, 2012
microsoft system center configuration manager, systems management server +1 moreCross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and...CVE-2012-2536EPSS 16.2%4.3 MediumSeptember 11, 2012
microsoft visual studio team foundation serverCross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010...CVE-2012-1892EPSS 16.5%4.3 MediumSeptember 11, 2012
freeradiusStack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12,...CVE-2012-3547Fix available6.8 MediumSeptember 11, 2012
flatnuxMultiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow...CVE-2012-48924.3 MediumSeptember 10, 2012
manageengine firewall analyzerCross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2...CVE-2012-4891Public exploit4.3 MediumSeptember 10, 2012
flatnuxMultiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow...CVE-2012-48904.3 MediumSeptember 10, 2012
manageengine firewall analyzerMultiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow...CVE-2012-4889Public exploit4.3 MediumSeptember 10, 2012
ffmpeg, libav +1 moreUnspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8...CVE-2012-2804Fix available10.0 HighSeptember 10, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open