cve.nowby Sazabi

CVEs published July 12, 2012

34 CVEs were published on July 12, 2012: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 34
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 34
Now in CISA KEV: 0
Fix available: 2

Most affected products

org.apache.hadoop:hadoop-client: 1
trytond: 1

Medium, low and unrated 34

CVE-2012-1661ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows…UnratedJul 12, 2012
CVE-2012-2614Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a denial of service…UnratedJul 12, 2012
CVE-2012-2842Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service or possibly have…UnratedJul 12, 2012
CVE-2012-2843Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service or possibly have…UnratedJul 12, 2012
CVE-2012-2844The PDF functionality in Google Chrome before 20.0.1132.57 does not properly handle JavaScript code, which allows remote attackers to…UnratedJul 12, 2012
CVE-2012-3236fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a…UnratedJul 12, 2012
CVE-2012-3350SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via the Referer HTTP…UnratedJul 12, 2012
CVE-2012-3377Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before…UnratedJul 12, 2012
CVE-2012-3382Cross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono…UnratedJul 12, 2012
CVE-2012-3997Multiple cross-site scripting (XSS) vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to inject arbitrary web…UnratedJul 12, 2012
CVE-2012-3998Multiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to execute arbitrary SQL commands via…UnratedJul 12, 2012
CVE-2012-3999Cross-site scripting (XSS) vulnerability in admin/login.php in Sticky Notes 0.3.09062012.4 and earlier allows remote attackers to inject…UnratedJul 12, 2012
CVE-2012-4000Cross-site scripting (XSS) vulnerability in the print_textinputs_var function in…UnratedJul 12, 2012
CVE-2012-0215model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the…trytondUnratedFix availableJul 12, 2012
CVE-2012-1037PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated users to execute…UnratedJul 12, 2012
CVE-2012-1162Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service…UnratedJul 12, 2012
CVE-2012-1163Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size…UnratedJul 12, 2012
CVE-2012-1174The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to…UnratedJul 12, 2012
CVE-2012-2351The default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username attribute to Remote username" option to…UnratedJul 12, 2012
CVE-2012-2653arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow…UnratedJul 12, 2012
CVE-2012-3362Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of…UnratedJul 12, 2012
CVE-2012-0911TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object…UnratedJul 12, 2012
CVE-2012-1620slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proximate attackers to…UnratedJul 12, 2012
CVE-2012-2763Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13…UnratedJul 12, 2012
CVE-2012-3376DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out…org.apache.hadoop:hadoop-clientUnratedFix availableJul 12, 2012

Show all 34 entriesShow fewer entries