Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
October

CVEs published in October 2012

549 vulnerabilities, 90 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

intelliants subrion cmsMultiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow...CVE-2012-4773Public exploit6.8 MediumOctober 22, 2012
intelliants subrion cmsSQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to...CVE-2012-4772Public exploit7.5 HighOctober 22, 2012
intelliants subrion cmsMultiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote...CVE-2012-4771Public exploit4.3 MediumOctober 22, 2012
openfabrics ibacmibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite...CVE-2012-45183.6 LowOctober 22, 2012
openfabrics ibacmibacm before 1.0.6 does not properly manage reference counts for multicast connections, which...CVE-2012-45175.0 MediumOctober 22, 2012
openfabrics librdmacmlibrdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote...CVE-2012-4516Fix available5.8 MediumOctober 22, 2012
gnome libsocialwebservices/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr when no...CVE-2012-45115.8 MediumOctober 22, 2012
claws-mailThe strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to...CVE-2012-4507Fix available5.0 MediumOctober 22, 2012
gitoliteDirectory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a...CVE-2012-45064.6 MediumOctober 22, 2012
cipherdyne fwknopBuffer overflow in the run_last_args function in client/fwknop.c in fwknop before 2.0.3, when...CVE-2012-4436Fix available4.4 MediumOctober 22, 2012
cipherdyne fwknopfwknop before 2.0.3 does not properly validate IP addresses, which allows remote authenticated...CVE-2012-4435Fix available4.0 MediumOctober 22, 2012
openstack swift, redhat storage, fedoraproject fedora +4 more +6 moreOpenStack Object Storage (swift) Code Injection vulnerabilityCVE-2012-4406Fix available9.8 CriticalOctober 22, 2012
jcoreSQL injection vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to...CVE-2012-42327.5 HighOctober 22, 2012
jcoreCross-site scripting (XSS) vulnerability in admin/index.php in jCore before 1.0pre2 allows remote...CVE-2012-4231Public exploit4.3 MediumOctober 22, 2012
gnome gnome-keyringGNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout,"...CVE-2012-3466Fix available4.4 MediumOctober 22, 2012
redhat rhncfgRed Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak...CVE-2012-2679Fix available2.1 LowOctober 22, 2012
razorcmsCross-site request forgery (CSRF) vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier...CVE-2012-1900Public exploit6.8 MediumOctober 22, 2012
redhat jboss enterprise application platform, mod cluster +1 moreImproper Access Control in JBoss mod_clusterCVE-2012-1154Fix available4.3 MediumOctober 22, 2012
intelliants subrion cmsSQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to...CVE-2011-5212Public exploit7.5 HighOctober 22, 2012
intelliants subrion cmsCross-site scripting (XSS) vulnerability in the poll module in Subrion CMS 2.0.4 allows remote...CVE-2011-5211Public exploit4.3 MediumOctober 22, 2012
gnome libsocialweb(1) services/twitter/twitter-contact-view.c and (2) services/twitter/twitter-item-view.c in...CVE-2011-41295.8 MediumOctober 22, 2012
phpmyfaqCross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to...CVE-2010-4821Public exploit4.3 MediumOctober 22, 2012
otrsCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x...CVE-2012-4751Public exploitFix available4.3 MediumOctober 22, 2012
mutiny standardMutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the...CVE-2012-3001Public exploitEPSS 27.3%8.5 HighOctober 22, 2012
libtiffHeap-based buffer overflow in tif_pixarlog.c in LibTIFF before 4.0.3 allows remote attackers to...CVE-2012-4447Fix available6.8 MediumOctober 21, 2012
novell zenworks asset managementThe rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses...CVE-2012-4933EPSS 44.0%7.8 HighOctober 20, 2012
ibm xiv storage system gen3, xiv storage system gen3 firmware +1 moreThe IBM XIV Storage System Gen3 before 11.1.0.a allows remote attackers to cause a denial of...CVE-2012-21677.8 HighOctober 20, 2012
ibm aix, vios +1 moreThe FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage...CVE-2012-48456.8 MediumOctober 20, 2012
ibm db2Stack-based buffer overflow in the SQL/PSM (aka SQL Persistent Stored Module) Stored Procedure ...CVE-2012-48268.5 HighOctober 20, 2012
No product listedThe (1) server and (2) agent components in CA ARCserve Backup r12.5, r15, and r16 on Windows do...CVE-2012-29725.0 MediumOctober 20, 2012
No product listedThe server in CA ARCserve Backup r12.5, r15, and r16 on Windows does not properly process RPC...CVE-2012-29717.5 HighOctober 20, 2012
emc networker module for microsoft applicationsThe client in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122,...CVE-2012-22909.3 HighOctober 18, 2012
emc networker module for microsoft applicationsThe (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM...CVE-2012-22842.1 LowOctober 18, 2012
symantec ghost solutions suiteSymantec Ghost Solution Suite 2.x through 2.5.1 allows remote attackers to execute arbitrary code...CVE-2012-03066.8 MediumOctober 18, 2012
libreoffice, sun openoffice.org +1 moreLibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote...CVE-2012-4233Fix available4.3 MediumOctober 18, 2012
sun sunosUnspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality,...CVE-2012-50954.4 MediumOctober 17, 2012
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain...CVE-2012-50945.0 MediumOctober 17, 2012
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain...CVE-2012-50934.3 MediumOctober 17, 2012
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain...CVE-2012-50925.5 MediumOctober 17, 2012
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile Product Supplier Collaboration for Process...CVE-2012-50914.3 MediumOctober 17, 2012
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain...CVE-2012-50904.0 MediumOctober 17, 2012
oracle industry applicationsUnspecified vulnerability in the Oracle Central Designer component in Oracle Industry...CVE-2012-50666.8 MediumOctober 17, 2012
oracle fusion middlewareUnspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1...CVE-2012-50652.1 LowOctober 17, 2012
oracle financial services softwareUnspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial...CVE-2012-50643.5 LowOctober 17, 2012
oracle financial services softwareUnspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial...CVE-2012-50635.0 MediumOctober 17, 2012
oracle financial services softwareUnspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial...CVE-2012-50614.0 MediumOctober 17, 2012
oracle e-business suiteUnspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12...CVE-2012-50584.3 MediumOctober 17, 2012
oracle siebel crmUnspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 allows...CVE-2012-32304.3 MediumOctober 17, 2012
oracle siebel crmUnspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 allows...CVE-2012-32294.0 MediumOctober 17, 2012
oracle financial services softwareUnspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial...CVE-2012-32284.9 MediumOctober 17, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open