CVEs published in November 2012
447 vulnerabilities, 76 critical, 1 exploited.
- apache tomcatImproper Access Control in Apache Tomcat5.0 Medium
- uk-cookie project uk-cookieCross-site scripting (XSS) vulnerability in the Uk Cookie (aka uk-cookie) plugin for WordPress...4.3 Medium
- asial monaca debuggerThe Asial Monaca Debugger application before 1.4.2 for Android allows remote attackers to obtain...5.0 Medium
- apache tomcatjava/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache...5.0 Medium
- mozilla bugzillaThe User.get method in Bugzilla/WebService/User.pm in Bugzilla 4.3.2 allows remote attackers to...5.0 Medium
- mozilla bugzilla, yahoo yui +1 moreCross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0...4.3 Medium
- yahoo yuiCross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0...4.3 Medium
- yahoo yuiCross-site scripting in yui 2.4.04.3 Medium
- mozilla bugzillatemplate/en/default/bug/field-events.js.tmpl in Bugzilla 3.x before 3.6.12, 3.7.x and 4.0.x...4.3 Medium
- mozilla bugzillaThe User.get method in Bugzilla/WebService/User.pm in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1...4.0 Medium
- mozilla bugzillaBugzilla/Attachment.pm in attachment.cgi in Bugzilla 2.x and 3.x before 3.6.12, 3.7.x and 4.0.x...5.0 Medium
- mozilla bugzillaCross-site scripting (XSS) vulnerability in Bugzilla 4.1.x and 4.2.x before 4.2.4, and 4.3.x and...4.3 Medium
- phome empirecmsEval injection vulnerability in the ReplaceListVars function in the template parser in e/class...6.8 Medium
- mantisbtcore/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail...5.5 Medium
- mantisbtMantisBT before 1.2.12 does not use an expected default value during decisions about whether a...5.5 Medium
- emc rsa data protection manager applianceEMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict...6.9 Medium
- emc rsa data protection manager appliance, rsa data protection manager software server +1 moreCross-site scripting (XSS) vulnerability in EMC RSA Data Protection Manager Appliance and...4.3 Medium
- apple safari, webkit, google chrome +2 morehtml/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5...4.3 Medium
- dell openmanage server administratorCross-site scripting (XSS) vulnerability in Dell OpenManage Server Administrator (OMSA) before 6...4.3 Medium
- vanillaforums vanilla, vanilla forums +1 moreThe edit-profile page in Vanilla Forums before 2.1a32 allows remote authenticated users to modify...3.5 Low
- verifone vericentre web consoleMultiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web...7.5 High
- typo3Typo3 Backend API XSS Vulnerability3.5 Low
- typo3Typo3 Backend History Module Vulnerable to XSS4.0 Medium
- typo3Typo3 Backend History Module Vulnerable to XSS3.5 Low
- typo3Typo3 Backend History Module Vulnerable to SQL Injection6.5 Medium
- oberthur id-one cosmoUnspecified vulnerability on Oberthur ID-One COSMO 5.2, 5.2a, and 64 smart cards makes it easier...4.0 Medium
- vmware player, workstation +1 moreUntrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x...7.9 High
- vmware player, workstation +1 moreVMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak...8.3 High
- symantec antivirus, endpoint protection, scan engine +2 moreThe decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection...9.3 High
- esri arcgis serverSQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute...6.5 Medium
- fortinet fortigate-1000c, fortigate-100d, fortigate-110c +26 more +28 moreThe default configuration of Fortinet Fortigate UTM appliances uses the same Certification...5.3 Medium
- ibm websphere application serverCross-site request forgery (CSRF) vulnerability in IBM WebSphere Application Server 6.1 before 6...6.8 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 8.5 Liberty Profile...4.3 Medium
- ibm websphere application serverIBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1, when JAX-RS is used, does...7.5 High
- ibm cognos business intelligenceIBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows remote authenticated users to cause a...4.0 Medium
- vmware ovf tool, player, workstation +2 moreFormat string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x...9.3 High
- ibm websphere application serverThe proxy server in IBM WebSphere Application Server 7.0 before 7.0.0.27, 8.0 before 8.0.0.5, and...5.0 Medium
- broadcom bcm4325, bcm4329, apple iphone os +2 moreThe Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC,...7.8 High
- microsoft .net frameworkThe code-optimization feature in the reflection implementation in Microsoft .NET Framework 4 and...9.3 High
- microsoft .net frameworkThe Web Proxy Auto-Discovery (WPAD) functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3...7.2 High
- microsoft excel, excel viewer, office +1 more +3 moreStack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1; Office 2011 for Mac...9.3 High
- microsoft ftp serviceMicrosoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified...5.0 Medium
- No product listedMicrosoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log,...2.1 Low
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- microsoft .net frameworkUntrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1...7.9 High
- microsoft .net frameworkMicrosoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during...5.0 Medium
- microsoft .net frameworkThe reflection implementation in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4...9.3 High
- microsoft excel, office +1 moreUse-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and...9.3 High
- Show moreLoading…