cve.nowby Sazabi

CVEs published June 27, 2012

63 CVEs were published on June 27, 2012: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 63
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 63
Now in CISA KEV: 0
Fix available: 1

Most affected products

puppet: 1

Medium, low and unrated 63

CVE-2012-2742Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy…UnratedJun 27, 2012
CVE-2012-2743Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for…UnratedJun 27, 2012
CVE-2012-3231Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to…UnratedJun 27, 2012
CVE-2011-4956Cross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via…UnratedJun 27, 2012
CVE-2011-4957The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to…UnratedJun 27, 2012
CVE-2012-2388The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA…UnratedJun 27, 2012
CVE-2012-2451The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite…UnratedJun 27, 2012
CVE-2012-2717Multiple cross-site scripting (XSS) vulnerabilities in the Mobile Tools module 6.x-2.x before 6.x-2.3 for Drupal allow remote attackers to…UnratedJun 27, 2012
CVE-2012-3814Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to…UnratedJun 27, 2012
CVE-2012-3815Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote…UnratedJun 27, 2012
CVE-2012-3816WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Request packet.UnratedJun 27, 2012
CVE-2012-1989telnet.rb in Puppet 2.7.x before 2.7.13 and Puppet Enterprise (PE) 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows local users to overwrite…puppetUnratedFix availableJun 27, 2012
CVE-2012-3802Unspecified vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote authenticated users to read the commissions of…UnratedJun 27, 2012
CVE-2011-4940The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x…UnratedJun 27, 2012
CVE-2012-2200The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by…UnratedJun 27, 2012
CVE-2012-2764Untrusted search path vulnerability in Google Chrome before 20.0.1132.43 on Windows might allow local users to gain privileges via a…UnratedJun 27, 2012
CVE-2012-2807Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow…UnratedJun 27, 2012
CVE-2012-2815Google Chrome before 20.0.1132.43 allows remote attackers to obtain potentially sensitive information from a fragment identifier by…UnratedJun 27, 2012
CVE-2012-2816Google Chrome before 20.0.1132.43 on Windows does not properly isolate sandboxed processes, which might allow remote attackers to cause a…UnratedJun 27, 2012
CVE-2012-2817Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have…UnratedJun 27, 2012
CVE-2012-2818Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have…UnratedJun 27, 2012
CVE-2012-2819The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to…UnratedJun 27, 2012
CVE-2012-2820Google Chrome before 20.0.1132.43 does not properly implement SVG filters, which allows remote attackers to cause a denial of service…UnratedJun 27, 2012
CVE-2012-2821The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote…UnratedJun 27, 2012
CVE-2012-2822The PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (out-of-bounds read) via…UnratedJun 27, 2012

Show all 63 entriesShow fewer entries