Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
October

CVEs published in October 2012

549 vulnerabilities, 90 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, seamonkey, thunderbird +10 more +12 moreHeap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox...CVE-2012-4188EPSS 14.7%9.3 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +9 more +11 moreMozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird...CVE-2012-41879.3 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreHeap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox...CVE-2012-4186EPSS 14.7%9.3 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +9 more +11 moreBuffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR...CVE-2012-41859.3 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +9 more +11 moreThe Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x...CVE-2012-41844.3 MediumOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreUse-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox...CVE-2012-41839.3 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreUse-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox...CVE-2012-41829.3 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +6 more +8 moreUse-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla...CVE-2012-41819.3 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreHeap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla...CVE-2012-41809.3 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreUse-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla...CVE-2012-41799.3 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +9 more +11 moreThe IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8...CVE-2012-39959.3 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +9 more +11 moreMozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird...CVE-2012-39944.3 MediumOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x...CVE-2012-3993Public exploitEPSS 42.6%9.3 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +9 more +11 moreMozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird...CVE-2012-39924.3 MediumOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +9 more +11 moreMozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird...CVE-2012-39919.3 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreUse-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16...CVE-2012-39909.3 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +3 more +5 moreMozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly...CVE-2012-39899.3 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +9 more +11 moreUse-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8,...CVE-2012-39889.3 HighOctober 10, 2012
mozilla firefoxMozilla Firefox before 16.0 on Android assigns chrome privileges to Reader Mode pages, which...CVE-2012-39874.0 MediumOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreMozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird...CVE-2012-39864.3 MediumOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +3 more +5 moreMozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly...CVE-2012-39854.3 MediumOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +3 more +5 moreMozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly...CVE-2012-39846.8 MediumOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +3 more +5 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0,...CVE-2012-398310.0 HighOctober 10, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0,...CVE-2012-39829.3 HighOctober 10, 2012
linux kernelThe override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local...CVE-2012-0957Public exploitFix available4.9 MediumOctober 10, 2012
eduserv openathens service providerEduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass...CVE-2012-53535.8 MediumOctober 9, 2012
josso java open single sign-on project homeJava Open Single Sign-On Project Home (JOSSO) allows remote attackers to forge messages and...CVE-2012-53525.8 MediumOctober 9, 2012
apache axis2Improper Authentication in Apache Axis2CVE-2012-5351Fix available6.4 MediumOctober 9, 2012
dracut project dracut, fedoraproject fedora, redhat enterprise linux desktop +2 more +4 moredracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other...CVE-2012-4453Fix available2.1 LowOctober 9, 2012
oracle mysqlMySQL 5.0.88, and possibly other versions and platforms, allows local users to bypass certain...CVE-2012-4452Fix available2.1 LowOctober 9, 2012
apache axis2Apache Axis2 Vulnerable to XML Signature wrapping attackCVE-2012-4418Fix available5.8 MediumOctober 9, 2012
cakefoundation cakephpCakePHPallows remote attackers to read arbitrary files via XML data containing external entity referencesCVE-2012-4399Public exploitFix availableEPSS 12.1%7.5 HighOctober 9, 2012
glpi-project glpiMultiple cross-site scripting (XSS) vulnerabilities in GLPI-PROJECT GLPI before 0.83.3 allow...CVE-2012-40034.3 MediumOctober 9, 2012
glpi-project glpiCross-site request forgery (CSRF) vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote...CVE-2012-40026.8 MediumOctober 9, 2012
freebsdThe SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL...CVE-2012-3549Public exploit7.8 HighOctober 9, 2012
banu tinyproxyTinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory...CVE-2012-3505Fix available5.0 MediumOctober 9, 2012
microsoft sql server, sql server reporting services +1 moreCross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server...CVE-2012-2552EPSS 16.3%4.3 MediumOctober 9, 2012
microsoft windows 7, windows server 2008 +1 moreThe server in Kerberos in Microsoft Windows Server 2008 R2 and R2 SP1, and Windows 7 Gold and SP1...CVE-2012-2551EPSS 27.5%5.0 MediumOctober 9, 2012
microsoft worksMicrosoft Works 9 allows remote attackers to execute arbitrary code or cause a denial of service ...CVE-2012-2550EPSS 22.2%9.3 HighOctober 9, 2012
microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreInteger overflow in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,...CVE-2012-25297.2 HighOctober 9, 2012
microsoft office compatibility pack, office web apps, word +2 more +4 moreUse-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word...CVE-2012-2528EPSS 22.1%9.3 HighOctober 9, 2012
microsoft groove server, infopath, lync +5 more +7 moreCross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1,...CVE-2012-2520EPSS 34.3%4.3 MediumOctober 9, 2012
microsoft wordMicrosoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word...CVE-2012-0182EPSS 67.1%9.3 HighOctober 9, 2012
wordpress pay-with-tweetSQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote...CVE-2012-5350Public exploit6.0 MediumOctober 9, 2012
wordpress pay-with-tweetMultiple cross-site scripting (XSS) vulnerabilities in pay.php in the Pay With Tweet plugin...CVE-2012-5349Public exploit2.6 LowOctober 9, 2012
wilson steven mangosweb enhancedSQL injection vulnerability in MangosWeb Enhanced 3.0.3 allows remote attackers to execute...CVE-2012-5348Public exploit6.8 MediumOctober 9, 2012
tinywebgalleryTinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters...CVE-2012-5347Public exploit7.5 HighOctober 9, 2012
bencemeszaros wp-livephpCross-site scripting (XSS) vulnerability in wp-live.php in the WP Live.php module 1.2.1 for...CVE-2012-5346Public exploit4.3 MediumOctober 9, 2012
kepler lam iptoolsBuffer overflow in the Remote command server (Rcmd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4...CVE-2012-5345Public exploit5.0 MediumOctober 9, 2012
kepler lam iptoolsDirectory traversal vulnerability in the WebServer (Thttpd.bat) in IpTools (aka Tiny TCP/IP...CVE-2012-5344Public exploit5.0 MediumOctober 9, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open