Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
November

CVEs published in November 2012

447 vulnerabilities, 76 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, seamonkey, thunderbird +6 more +8 moreThe copyTexImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0,...CVE-2012-58389.3 HighNovember 21, 2012
mozilla firefoxThe Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges,...CVE-2012-58376.8 MediumNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +5 more +7 moreMozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allow remote...CVE-2012-58367.5 HighNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreInteger overflow in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before...CVE-2012-583510.0 HighNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreThe texImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR...CVE-2012-58339.3 HighNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +11 more +13 moreUse-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11,...CVE-2012-58308.8 HighNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +11 more +13 moreHeap-based buffer overflow in the nsWindow::OnExposeEvent function in Mozilla Firefox before 17.0...CVE-2012-58299.3 HighNovember 21, 2012
moodleMoodle 2.3.x before 2.3.3 allows remote authenticated users to bypass the moodle/role:manage...CVE-2012-54814.0 MediumNovember 21, 2012
moodleThe Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2...CVE-2012-54806.4 MediumNovember 21, 2012
moodleThe Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3...CVE-2012-54796.5 MediumNovember 21, 2012
moodleThe Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2...CVE-2012-54734.0 MediumNovember 21, 2012
moodlelib/formslib.php in Moodle 2.2.x before 2.2.6 and 2.3.x before 2.3.3 allows remote authenticated...CVE-2012-54724.0 MediumNovember 21, 2012
moodleMoodle Allows Unauthenticated Dropbox AccessCVE-2012-5471Fix available6.5 MediumNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +5 more +7 moreUse-after-free vulnerability in the BuildTextRunsScanner::BreakSink::SetBreaks function in...CVE-2012-421810.0 HighNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +6 more +8 moreUse-after-free vulnerability in the nsViewManager::ProcessPendingUpdates function in Mozilla...CVE-2012-42179.3 HighNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +11 more +13 moreUse-after-free vulnerability in the gfxFont::GetFontEntry function in Mozilla Firefox before 17.0...CVE-2012-42169.3 HighNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreUse-after-free vulnerability in the nsPlaintextEditor::FireClipboardEvent function in Mozilla...CVE-2012-42159.3 HighNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreUse-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox...CVE-2012-42149.3 HighNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +6 more +8 moreUse-after-free vulnerability in the nsEditor::FindNextLeafNode function in Mozilla Firefox before...CVE-2012-42139.3 HighNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +5 more +7 moreUse-after-free vulnerability in the XPCWrappedNative::Mark function in Mozilla Firefox before 17...CVE-2012-421210.0 HighNovember 21, 2012
mozilla firefoxThe Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 does not...CVE-2012-42109.3 HighNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreMozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0,...CVE-2012-42094.3 MediumNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +5 more +7 moreThe XrayWrapper implementation in Mozilla Firefox before 17.0, Thunderbird before 17.0, and...CVE-2012-42084.3 MediumNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +11 more +13 moreThe HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x...CVE-2012-42074.3 MediumNovember 21, 2012
mozilla firefoxUntrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox...CVE-2012-42066.9 MediumNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +5 more +7 moreMozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system...CVE-2012-42056.8 MediumNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +5 more +7 moreThe str_unescape function in the JavaScript engine in Mozilla Firefox before 17.0, Thunderbird...CVE-2012-42049.3 HighNovember 21, 2012
mozilla firefoxThe New Tab page in Mozilla Firefox before 17.0 uses a privileged context for execution of...CVE-2012-42036.8 MediumNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +10 more +12 moreHeap-based buffer overflow in the image::RasterImage::DrawFrameTo function in Mozilla Firefox...CVE-2012-4202EPSS 11.1%9.3 HighNovember 21, 2012
mozilla firefox, seamonkey, thunderbird +11 more +13 moreThe evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11,...CVE-2012-42014.3 MediumNovember 21, 2012
andy armstrong cgi.pmCGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P...CVE-2012-5526Fix available5.0 MediumNovember 21, 2012
vmware esx, esxi +1 moreThe vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of...CVE-2012-57035.0 MediumNovember 20, 2012
adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 10 before Update 5, when Internet Information...CVE-2012-56747.1 HighNovember 20, 2012
google web toolkitCross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 through 2.5 Final, as...CVE-2012-59204.3 MediumNovember 20, 2012
firebirdsql firebirdTraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated...CVE-2012-55293.5 LowNovember 20, 2012
apple cupsCUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web...CVE-2012-5519Public exploitFix available7.2 HighNovember 20, 2012
google web toolkitCross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 Beta and release...CVE-2012-45634.3 MediumNovember 20, 2012
belkin n150 wireless router, n300 wireless router, n450 wireless router +1 more +3 moreBelkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2,...CVE-2012-4366Public exploit3.3 LowNovember 20, 2012
dokuwiki, fedoraproject fedora +1 moredoku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set,...CVE-2012-3354Fix available4.3 MediumNovember 20, 2012
xiph icecasticecast before 2.3.3 allows remote attackers to inject control characters such as newlines into...CVE-2011-4612Fix available5.0 MediumNovember 20, 2012
havalite cmsMultiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote...CVE-2012-5919Public exploit4.3 MediumNovember 19, 2012
razorcmsrazorCMS 1.2 allows remote authenticated users to access administrator directories and files by...CVE-2012-5918Public exploit4.0 MediumNovember 19, 2012
flashtux weechatHeap-based buffer overflow in WeeChat 0.3.6 through 0.3.9 allows remote attackers to cause a...CVE-2012-5854Fix available7.5 HighNovember 19, 2012
matomoCross-site scripting (XSS) vulnerability in Piwik before 1.9 allows remote attackers to inject...CVE-2012-45414.3 MediumNovember 19, 2012
redhat libvirtThe virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to...CVE-2012-4423Fix available5.0 MediumNovember 19, 2012
nvidia unix graphic driverNVIDIA UNIX graphics driver before 295.71 and before 304.32 allows local users to write to...CVE-2012-4225Fix available7.2 HighNovember 19, 2012
nspluginwrappernspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable...CVE-2011-2486Fix available5.0 MediumNovember 19, 2012
steve j baker plibStack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows...CVE-2012-4552Public exploitFix available6.8 MediumNovember 18, 2012
djangoproject djangoDjango Allows Arbitrary URL GenerationCVE-2012-4520Fix available6.4 MediumNovember 18, 2012
geglMultiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0...CVE-2012-4433Fix availableEPSS 13.3%7.5 HighNovember 18, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open