Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
November

CVEs published in November 2012

447 vulnerabilities, 76 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

google chromeInteger overflow in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial...CVE-2012-5127Fix available7.5 HighNovember 7, 2012
google chromeUse-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to...CVE-2012-51267.5 HighNovember 7, 2012
google chromeUse-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to...CVE-2012-51257.5 HighNovember 7, 2012
google chromeGoogle Chrome before 23.0.1271.64 does not properly handle textures, which allows remote...CVE-2012-51247.5 HighNovember 7, 2012
google chromeSkia, as used in Google Chrome before 23.0.1271.64, allows remote attackers to cause a denial of...CVE-2012-51235.0 MediumNovember 7, 2012
google chromeGoogle Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified variable...CVE-2012-51227.5 HighNovember 7, 2012
google chromeUse-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to...CVE-2012-51217.5 HighNovember 7, 2012
google chrome, v8 +1 moreGoogle V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, on 64-bit Linux...CVE-2012-51207.5 HighNovember 7, 2012
google chromeRace condition in Pepper, as used in Google Chrome before 23.0.1271.64, allows remote attackers...CVE-2012-51196.8 MediumNovember 7, 2012
google chromeGoogle Chrome before 23.0.1271.64 on Mac OS X does not properly validate an integer value during...CVE-2012-51187.5 HighNovember 7, 2012
google chromeGoogle Chrome before 23.0.1271.64 does not properly restrict the loading of an SVG subresource in...CVE-2012-51177.5 HighNovember 7, 2012
google chromeUse-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to...CVE-2012-51167.5 HighNovember 7, 2012
google chromeGoogle Chrome before 23.0.1271.64 on Mac OS X does not properly mitigate improper write behavior...CVE-2012-51157.5 HighNovember 7, 2012
adobe air, air sdk, flash player +2 moreBuffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows...CVE-2012-5280EPSS 10.9%10.0 HighNovember 7, 2012
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X,...CVE-2012-527910.0 HighNovember 7, 2012
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X,...CVE-2012-527810.0 HighNovember 7, 2012
adobe air, air sdk, flash player +2 moreBuffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows...CVE-2012-5277EPSS 10.6%10.0 HighNovember 7, 2012
adobe air, air sdk, flash player +2 moreBuffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows...CVE-2012-5276EPSS 10.6%10.0 HighNovember 7, 2012
adobe air, air sdk, flash player +2 moreBuffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows...CVE-2012-5275EPSS 10.6%10.0 HighNovember 7, 2012
adobe air, air sdk, flash player +2 moreBuffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows...CVE-2012-5274EPSS 10.6%10.0 HighNovember 7, 2012
abraham williams twitteroauthTwitterOAuth does not verify that the server hostname matches a domain name in the subject's...CVE-2011-52435.8 MediumNovember 6, 2012
themattharris tmhoauthtmhOAuth before 0.61 does not verify that the server hostname matches a domain name in the...CVE-2011-52425.8 MediumNovember 6, 2012
services twitter group twitterServices_Twitter 0.6.3 does not verify that the server hostname matches a domain name in the...CVE-2011-52415.8 MediumNovember 6, 2012
magentocommerce magentoMagento 1.5 and 1.6.2 does not verify that the server hostname matches a domain name in the...CVE-2011-52405.8 MediumNovember 6, 2012
civicrmCiviCRM 4.0.5 and 4.1.1 does not verify that the server hostname matches a domain name in the...CVE-2011-52395.8 MediumNovember 6, 2012
google checkout-phpgoogle-checkout-php-sample-code before 1.3.2 does not verify that the server hostname matches a...CVE-2011-52385.8 MediumNovember 6, 2012
paypal wps toolkitPayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject...CVE-2011-52375.8 MediumNovember 6, 2012
moneris eselect plusMoneris eSelectPlus 2.03 PHP API does not verify that the server hostname matches a domain name...CVE-2011-52365.8 MediumNovember 6, 2012
linux kernelThe KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace...CVE-2012-4461Fix available1.9 LowNovember 6, 2012
tweepyTweepy does not verify SSL CertificateCVE-2012-5825Fix available7.4 HighNovember 4, 2012
cerulean studios trillianTrillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's...CVE-2012-58245.8 MediumNovember 4, 2012
opensourceclassifiedsOpen Source Classifieds does not verify that the server hostname matches a domain name in the...CVE-2012-58235.8 MediumNovember 4, 2012
mozilla zamboniThe contribution feature in Zamboni does not verify that the server hostname matches a domain...CVE-2012-58227.4 HighNovember 4, 2012
lynx, canonical ubuntu linux +1 moreLynx does not verify that the server's certificate is signed by a trusted certification authority...CVE-2012-58215.9 MediumNovember 4, 2012
google admobThe developer-account sample code in Google AdMob does not verify that the server hostname...CVE-2012-58205.8 MediumNovember 4, 2012
filesanywhereFilesAnywhere does not verify that the server hostname matches a domain name in the subject's...CVE-2012-58197.4 HighNovember 4, 2012
elephantdriveElephantDrive does not verify that the server hostname matches a domain name in the subject's...CVE-2012-58185.8 MediumNovember 4, 2012
amazon ec2 api tools java library, codehaus xfire +1 moreImproper Input Validation in XFireCVE-2012-58177.4 HighNovember 4, 2012
aol aimAOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a domain...CVE-2012-58165.8 MediumNovember 4, 2012
rackspaceThe Rackspace app 2.1.5 for iOS does not verify that the server hostname matches a domain name in...CVE-2012-58155.8 MediumNovember 4, 2012
github gaug.es, roderick baier weberknecht +1 moreWeberknecht, as used in GitHub Gaug.es and other products, does not verify that the server...CVE-2012-58145.8 MediumNovember 4, 2012
emorym android pusherThe Android_Pusher library for Android does not verify that the server hostname matches a domain...CVE-2012-58135.8 MediumNovember 4, 2012
acra libraryThe ACRA library for Android does not verify that the server hostname matches a domain name in...CVE-2012-58125.8 MediumNovember 4, 2012
breezyThe Breezy application for Android does not verify that the server hostname matches a domain name...CVE-2012-58115.8 MediumNovember 4, 2012
jpmorganchase chase mobileThe Chase mobile banking application for Android does not verify that the server hostname matches...CVE-2012-58105.9 MediumNovember 4, 2012
groupon merchantsThe Groupon Redemptions application for Android does not verify that the server hostname matches...CVE-2012-58095.8 MediumNovember 4, 2012
firstdata linkpoint, zen-cart zen cart +1 moreThe LinkPoint module in Zen Cart does not verify that the server hostname matches a domain name...CVE-2012-58085.8 MediumNovember 4, 2012
lincolnloop authorize.net echeck module, zen-cart zen cart +1 moreThe Authorize.Net eCheck module in Zen Cart does not verify that the server hostname matches a...CVE-2012-58075.8 MediumNovember 4, 2012
paypal payments pro, zen-cart zen cart +1 moreThe PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a...CVE-2012-58065.8 MediumNovember 4, 2012
zen-cart zen cart, paypal instant payment notification +1 moreThe PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a...CVE-2012-58055.8 MediumNovember 4, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open