CVEs published November 28, 2012
14 CVEs were published on November 28, 2012: 0 critical, 0 high.
- Published
- 14
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 14
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- org.jruby:jruby-parent
- 1
Medium, low and unrated 14
- CVE-2012-2739Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the abil
- CVE-2012-5370JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent aorg.jruby:jruby-parent
- CVE-2012-5371Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash c
- CVE-2012-5372Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependen
- CVE-2012-5373Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash colli
- CVE-2012-6051Google CityHash computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-d
- CVE-2012-4964The Samsung printer firmware before 20121031 has a hardcoded read-write SNMP community, which makes it easier for remote attackers to obtain
- CVE-2012-5130Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecifie
- CVE-2012-5131Google Chrome before 23.0.1271.91 on Mac OS X does not properly mitigate improper rendering behavior in the Intel GPU driver, which allows r
- CVE-2012-5132Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service (application crash) via a response with chunked trans
- CVE-2012-5133Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unsp
- CVE-2012-5134Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome befor
- CVE-2012-5135Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unsp
- CVE-2012-5136Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which al