CVEs published in December 2012
251 vulnerabilities, 43 critical, 2 exploited.
- huawei e585, e585u-82 +1 moreThe Huawei E585 device allows remote attackers to cause a denial of service (NULL pointer...6.1 Medium
- huawei e585, e585u-82 +1 moreMultiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to ...4.8 Medium
- huawei e585, e585u-82 +1 moreThe Huawei E585 device does not validate the status of admin sessions, which allows remote...4.8 Medium
- centreon, centreon web +1 moreSQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon...6.5 Medium
- realnetworks realplayer, realplayer sp +1 moreBuffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5...9.3 High
- realnetworks realplayer, realplayer sp +1 moreRealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote...9.3 High
- welcart pluginCross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress...6.8 Medium
- welcart pluginCross-site scripting (XSS) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows...4.3 Medium
- ibm lotus foundations startMultiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c...3.5 Low
- ibm lotus notesIBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header...4.3 Medium
- apache tomcatorg/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0...2.6 Low
- apache tomcatCross-Site Request Forgery in Apache Tomcat4.3 Medium
- apache tomcatAuthentication Bypass in Apache Tomcat4.3 Medium
- ibm advanced settings utility, bootable media creator +1 moreIBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator...3.3 Low
- symantec enterprise security managerMultiple unquoted Windows search path vulnerabilities in the (1) Manager and (2) Agent components...7.2 High
- symantec endpoint protectionThe management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before...7.2 High
- tropos mesh os, 1310 distrubution automation mesh router, 1410 mesh router +6 more +8 moreTropos Wireless Mesh Routers Insufficient Entropy6.1
- invensys wonderware intouch, siemens processsuite +1 moreInvensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption...1.9 Low
- siemens automation license managerMemory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote...3.3 Low
- redhat openshiftCross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app...6.8 Medium
- owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x...6.5 Medium
- owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote...6.5 Medium
- owncloud serverCross-site scripting (XSS) vulnerability in apps/user_webdavauth/settings.php in ownCloud 4.5.x...4.3 Medium
- owncloud, owncloud server +1 moreThe "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly...5.0 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow...4.3 Medium
- gimpMultiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2...7.5 High
- sensiolabs symfonylib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary...5.0 Medium
- openstack essex, folsom, red hat openstack essex for rhel 6 +5 more +7 moreOpenstack keystone: openstack keystone: authorization bypass via improper ec2 token handling5.4 Medium
- openstack folsomOpenStack Keystone Insufficient token expiration4.0 Medium
- meizu mx, samsung galaxy note 2, galaxy s2 +2 moreThe kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices,...9.3 High
- libtiffStack-based buffer overflow in tif_dir.c in LibTIFF before 4.0.2 allows remote attackers to cause...6.8 Medium
- xenMultiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to...4.7 Medium
- dlink dsl-2730uThe restricted telnet shell on the D-Link DSL2730U router allows remote authenticated users to...4.0 Medium
- adobe camera rawBuffer overflow in Adobe Photoshop Camera Raw before 7.3 allows attackers to execute arbitrary...10.0 High
- adobe camera rawBuffer underflow in Adobe Photoshop Camera Raw before 7.3 allows attackers to execute arbitrary...7.5 High
- xenThe get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to...4.7 Medium
- citrix xenserverArray index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS...3.2 Low
- axway securetransportMultiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow...8.5 High
- hp openvmsHP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the...5.0 Medium
- hp openvmsHP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the...2.1 Low
- adobe air, air sdk, flash player +2 moreAdobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48...10.0 High
- adobe air, air sdk, flash player +2 moreInteger overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows...10.0 High
- adobe air, air sdk, flash player +2 moreBuffer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows,...10.0 High
- adobe coldfusionAdobe ColdFusion 9.0 through 9.0.2, and 10, allows local users to bypass intended shared-hosting...4.4 Medium
- google chrome, libav, canonical ubuntu linux +1 more +3 moreGoogle Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not...10.0 High
- google chrome, opensuse +1 moreInteger overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial...10.0 High
- google chrome, opensuse +1 moreGoogle Chrome before 23.0.1271.97 does not properly handle history navigation, which allows...10.0 High
- google chrome, opensuse +1 moreGoogle Chrome before 23.0.1271.97 does not properly restrict instantiation of the Chromoting...10.0 High
- google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to...10.0 High
- google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to...10.0 High
- Show moreLoading…