CVEs published April 20, 2012
8 CVEs were published on April 20, 2012: 0 critical, 0 high.
- Published
- 8
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 8
- CVE-2012-2236SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitrary SQL commands via
- CVE-2012-2269Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 3.0.3 allow remote attackers to inject arbitrary web script or HTML v
- CVE-2012-2270Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrar
- CVE-2012-2397Cross-site request forgery (CSRF) vulnerability in ownCloud before 3.0.3 allows remote attackers to hijack the authentication of arbitrary u
- CVE-2012-2398Cross-site scripting (XSS) vulnerability in files/ajax/download.php in ownCloud before 3.0.3 allows remote attackers to inject arbitrary web
- CVE-2012-0406The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to ca
- CVE-2012-0407Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a de
- CVE-2012-2273Comodo Internet Security before 5.10.228257.2253 on Windows 7 x64 allows local users to cause a denial of service (system crash) via a craft