Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
November

CVEs published in November 2012

447 vulnerabilities, 76 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

microsoft excel, excel viewer, office compatibility pack +2 moreMicrosoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility...CVE-2012-1886EPSS 21.8%9.3 HighNovember 14, 2012
microsoft excel, office, office compatibility pack +2 moreHeap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office...CVE-2012-1885EPSS 29.3%9.3 HighNovember 14, 2012
microsoft internet explorer, ie +1 moreUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...CVE-2012-1539EPSS 28.3%9.3 HighNovember 14, 2012
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...CVE-2012-1538EPSS 21.3%9.3 HighNovember 14, 2012
microsoft windows 7, windows 8, windows server 2003 +4 more +6 moreInteger overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,...CVE-2012-1528EPSS 20.8%9.3 HighNovember 14, 2012
microsoft windows 7, windows 8, windows server 2003 +4 more +6 moreInteger underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,...CVE-2012-1527EPSS 20.8%9.3 HighNovember 14, 2012
adobe air, air sdk, flash player +2 moreUnspecified vulnerability in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287...CVE-2012-567310.0 HighNovember 13, 2012
adobe air, air sdk, flash player +1 more +3 moreBuffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows...CVE-2012-528710.0 HighNovember 13, 2012
adobe air, air sdk, flash player +1 more +3 moreBuffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows...CVE-2012-528610.0 HighNovember 13, 2012
adobe air, air sdk, flash player +2 moreBuffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows...CVE-2012-528510.0 HighNovember 13, 2012
c3-ilex eoscadaeosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a...CVE-2012-18137.8 HighNovember 13, 2012
c3-ilex eoscadaeosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain...CVE-2012-18125.0 MediumNovember 13, 2012
c3-ilex eoscadaEOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial...CVE-2012-18117.8 HighNovember 13, 2012
c3-ilex eoscadaEOSCoreScada.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of...CVE-2012-18105.0 MediumNovember 13, 2012
joomla joomla\!Joomla! 2.5.x before 2.5.8 and 3.0.x before 3.0.2 allows remote attackers to conduct clickjacking...CVE-2012-58274.3 MediumNovember 11, 2012
openstack essex, folsom, image registry and delivery service \(glance\) +2 moreOpenStack Glance arbitrary deletion of non-protected imagesCVE-2012-5482Fix available5.5 MediumNovember 11, 2012
openstack essex, folsom, image registry and delivery service \(glance\) +2 moreOpenStack Glance arbitrary deletion of non-protected imagesCVE-2012-4573Fix available5.5 MediumNovember 11, 2012
canonical ubuntu linux, debian linux, libtiff +5 more +7 moreppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote...CVE-2012-4564Fix availableEPSS 13.5%6.8 MediumNovember 11, 2012
drupalThe OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files...CVE-2012-4554EPSS 15.8%5.0 MediumNovember 11, 2012
drupalDrupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re...CVE-2012-45536.8 MediumNovember 11, 2012
lars hjemli cgitArgument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows...CVE-2012-45486.0 MediumNovember 11, 2012
redhat icedtea-web, opensuse +1 moreOff-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x...CVE-2012-4540Fix available6.8 MediumNovember 11, 2012
kdeUse-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3,...CVE-2012-4515Public exploit6.8 MediumNovember 11, 2012
kderendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a...CVE-2012-4514Public exploit5.0 MediumNovember 11, 2012
kdekhtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a...CVE-2012-4513Public exploitEPSS 12.6%6.4 MediumNovember 11, 2012
libproxy project libproxyStack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4...CVE-2012-4504Fix available10.0 HighNovember 11, 2012
isc innThe STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering...CVE-2012-3523Fix available6.8 MediumNovember 11, 2012
linux kernelThe online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local...CVE-2012-5517Fix available4.0 MediumNovember 11, 2012
uninett radsecproxyThe DTLS support in radsecproxy before 1.6.2 does not properly verify certificates when there are...CVE-2012-4566Fix available6.4 MediumNovember 10, 2012
uninett radsecproxyradsecproxy before 1.6.1 does not properly verify certificates when there are configuration...CVE-2012-4523Fix available6.4 MediumNovember 10, 2012
advance productivity software dte axiomAdvanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID,...CVE-2012-24556.4 MediumNovember 10, 2012
apple quicktimeBuffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code...CVE-2012-37589.3 HighNovember 9, 2012
apple quicktimeApple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial...CVE-2012-37579.3 HighNovember 9, 2012
apple quicktimeBuffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code...CVE-2012-37569.3 HighNovember 9, 2012
apple quicktimeBuffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code...CVE-2012-3755Public exploitEPSS 10.2%9.3 HighNovember 9, 2012
apple quicktimeUse-after-free vulnerability in the Clear method in the ActiveX control in Apple QuickTime before...CVE-2012-37549.3 HighNovember 9, 2012
apple quicktimeBuffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute...CVE-2012-3753Public exploitEPSS 35.1%9.3 HighNovember 9, 2012
apple quicktimeMultiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute...CVE-2012-3752Public exploitEPSS 36.0%9.3 HighNovember 9, 2012
apple quicktimeUse-after-free vulnerability in the plugin in Apple QuickTime before 7.7.3 allows remote...CVE-2012-37519.3 HighNovember 9, 2012
apple quicktimeBuffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code...CVE-2011-13749.3 HighNovember 9, 2012
be-graph bezipDirectory traversal vulnerability in Be Graph BeZIP before 3.10 allows remote attackers to create...CVE-2012-51715.0 MediumNovember 8, 2012
simon brown pebbleCRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary...CVE-2012-40234.3 MediumNovember 8, 2012
simon brown pebblePebble before 2.6.4 allows remote attackers to trigger loss of blog-entry viewability via a...CVE-2012-40226.4 MediumNovember 8, 2012
mosp kintai kanriMosP kintai kanri before 4.1.0 does not properly perform authentication, which allows remote...CVE-2012-40215.5 MediumNovember 8, 2012
mosp kintai kanriMosP kintai kanri before 4.1.0 does not enforce privilege requirements, which allows remote...CVE-2012-40204.0 MediumNovember 8, 2012
ibm tivoli federated identity manager, tivoli federated identity manager business gateway +1 moreThe Java servlets in the management console in IBM Tivoli Federated Identity Manager (TFIM)...CVE-2012-33155.0 MediumNovember 8, 2012
cisco secure access control serverCisco Secure Access Control System (ACS) 5.x before 5.2 Patch 11 and 5.3 before 5.3 Patch 7, when...CVE-2012-54245.0 MediumNovember 7, 2012
hp performance insightUnspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used,...CVE-2012-327010.0 HighNovember 7, 2012
hp performance insightUnspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used,...CVE-2012-32697.5 HighNovember 7, 2012
google chrome, v8 +1 moreGoogle V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, does not properly...CVE-2012-51287.5 HighNovember 7, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open