CVEs published June 29, 2012
26 CVEs were published on June 29, 2012: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 26
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- org.apache.commons:commons-compress
- 1
Medium, low and unrated 26
- CVE-2012-2012HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it…
- CVE-2012-2013Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial of service, or…
- CVE-2012-2014HP System Management Homepage (SMH) before 7.1.1 does not properly validate input, which allows remote authenticated users to have an…
- CVE-2012-2015Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote authenticated users to gain privileges and…
- CVE-2012-2016Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows local users to obtain sensitive information via…
- CVE-2010-5076QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might…
- CVE-2012-0813Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords…
- CVE-2012-1118The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly restrict access when the…
- CVE-2012-1119MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports…
- CVE-2012-1120The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete and delete_bug_threshold permissions…
- CVE-2012-1121MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify…
- CVE-2012-1122bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permission of the receiving project when…
- CVE-2012-1123The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass…
- CVE-2012-1164slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP…
- CVE-2012-2385The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU…
- CVE-2012-2664The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart…
- CVE-2012-2690virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable…
- CVE-2012-2698Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.17.5, 1.18.x before…
- CVE-2012-3232Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote attackers to…
- CVE-2012-3818The fpm exporter in Revelation 0.4.13-2 and earlier encrypts the version number but not the password when exporting a file, which might…
- CVE-2012-3053Buffer overflow in the Cisco WebEx Advanced Recording Format (ARF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before…
- CVE-2012-3054Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC…
- CVE-2012-3055Stack-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC…
- CVE-2012-3056Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25…
- CVE-2012-3057Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC…
- CVE-2012-2098Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons…org.apache.commons:commons-compress