CVEs published in December 2012
251 vulnerabilities, 43 critical, 2 exploited.
- layton technology helpboxLayton Helpbox 4.4.0 allows remote attackers to discover cleartext credentials for the login page...5.0 Medium
- layton technology helpboxselectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database...5.0 Medium
- layton technology helpboxeditrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary...4.0 Medium
- laytontechnology helpboxLayton Helpbox 4.4.0 allows remote authenticated users to change the login context and gain...6.5 Medium
- layton technology helpboxMultiple cross-site scripting (XSS) vulnerabilities in Layton Helpbox 4.4.0 allow remote...4.3 Medium
- layton technology helpboxMultiple SQL injection vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to execute...7.5 High
- microsoft exchange serverMicrosoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to...3.5 Low
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreThe kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows...10.0 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreMicrosoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008...9.3 High
- microsoft windows 7, windows 8, windows rt +6 more +8 moreThe OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3,...9.3 High
- microsoft windows server 2008, windows server 2012 +1 moreThe IP-HTTPS server in Windows Server 2008 R2 and R2 SP1 and Server 2012 does not properly...5.8 Medium
- microsoft office compatibility pack, office web apps, word +2 more +4 moreMicrosoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack...9.3 High
- microsoft directxHeap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2...9.3 High
- simple gmail login 1.1.2, 1.1.3 +1 moresimple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote...5.0 Medium
- video-lead-form uk-cookieCross-site scripting (XSS) vulnerability in the Video Lead Form plugin for WordPress allows...4.3 Medium
- zohocorp manageengine assetexplorerMultiple cross-site scripting (XSS) vulnerabilities in ManageEngine AssetExplorer 5.6 before...4.3 Medium
- symantec network access controlUnquoted Windows search path vulnerability in Symantec Network Access Control (SNAC) 12.1 before...7.2 High
- bogofilter project bogofilterHeap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3...7.5 High
- perlHeap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5,...7.5 High
- google androidThe Browser application in Android 4.0.3 allows remote attackers to cause a denial of service ...5.0 Medium
- ca xcom data transportCA XCOM Data Transport r11.0 and r11.5 on UNIX and Linux allows remote attackers to execute...10.0 High
- ibm informix dynamic serverBuffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows...9.0 High
- ibm flex system chassis management module, integrated management module ii +1 moreIBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow...1.9 Low
- rockwellautomation plc-5 controller, slc 500 controller, ab micrologix controller +2 moreRockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500...7.1 High
- post oak traffic systems awam bluetooth reader traffic system, postoaktraffic awam bluetooth reader +1 morePost Oak Bluetooth Traffic Systems Insufficient Entropy7.6
- ibm tivoli monitoringCross-site scripting (XSS) vulnerability in the embedded HTTP server in the Service Console in...4.3 Medium
- xenXen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a...4.6 Medium
- isc bind, canonical ubuntu linux +1 moreISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote...7.8 High
- kent-web access reportCross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote...4.3 Medium
- kent-web access reportCross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 4.2 and earlier allows remote...4.3 Medium
- hp network node manager iUnspecified vulnerability in HP Network Node Manager i (NNMi) 9.1x and 9.20 allows remote...10.0 High
- hp intelligent management centerStack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP...10.0 High
- hp laserjet pro mfp m401, laserjet pro mfp m425 +1 moreMultiple unspecified vulnerabilities on the HP LaserJet Pro 400 MFP M425 with firmware 20120625...5.0 Medium
- hp color laserjet cm3530, color laserjet cm60xx, color laserjet cp3525 +4 more +6 moreCross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53...4.3 Medium
- vmware springsource spring securityExposure of Sensitive Information to an Unauthorized Actor in Spring Security5.0 Medium
- vmware springsource spring securityImproper Control of Generation of Code in Spring Security4.3 Medium
- vmware springsource spring securityConcurrent Execution using Shared Resource with Improper Synchronization in Spring Security5.1 Medium
- vmware hyperic hqThe monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3...2.1 Low
- wiresharkThe dissect_rtcp_app function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark...5.0 Medium
- wiresharkThe dissect_wtp_common function in epan/dissectors/packet-wtp.c in the WTP dissector in Wireshark...5.0 Medium
- wiresharkInteger overflow in the dissect_iscsi_pdu function in epan/dissectors/packet-iscsi.c in the iSCSI...5.0 Medium
- wiresharkThe dissect_isakmp function in epan/dissectors/packet-isakmp.c in the ISAKMP dissector in...5.0 Medium
- wiresharkInteger overflow in the dissect_icmpv6 function in epan/dissectors/packet-icmpv6.c in the ICMPv6...5.0 Medium
- wiresharkThe dissect_eigrp_metric_comm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector...5.0 Medium
- wiresharkInteger overflow in the dissect_sack_chunk function in epan/dissectors/packet-sctp.c in the SCTP...5.0 Medium
- wiresharkepan/dissectors/packet-3g-a11.c in the 3GPP2 A11 dissector in Wireshark 1.8.x before 1.8.4 allows...5.0 Medium
- wiresharkThe dissect_sflow_245_address_type function in epan/dissectors/packet-sflow.c in the sFlow...5.0 Medium
- Show moreLoading…