CVEs

346,574 total · page 5942 of 6,932

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2012-1484	Wali Walisms Cn		0.00	—	0.02	Mar 15, 2012	Unspecified vulnerability in the WaliSMS CN (cn.com.wali.walisms) application 2.9.2 and 3.7.0 for Android has unknown impact and attack vectors.
CVE-2012-1483	Zhou Bo Message Forwarder		0.00	—	0.02	Mar 15, 2012	Unspecified vulnerability in the Message Forwarder (com.gmail.zbnetium) application 1.12.20110409.1 for Android has unknown impact and attack vectors.
CVE-2012-1482	Touchpal Touchpal Contacts		0.00	—	0.02	Mar 15, 2012	Unspecified vulnerability in the TouchPal Contacts (com.cootek.smartdialer) application 3.3.1 and 4.0.1 for Android has unknown impact and attack vectors.
CVE-2012-1481	Kashif Masud Textdroid		0.00	—	0.02	Mar 15, 2012	Unspecified vulnerability in the Textdroid (com.app.android.textdroid) application 2.5.2 for Android has unknown impact and attack vectors.
CVE-2012-1165	OpenSSL Project OpenSSL		0.01	—	0.07	Mar 15, 2012	The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250.
CVE-2012-1178	Pidgin (software) Pidgin		0.00	—	0.02	Mar 15, 2012	The msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service (application crash) via an OIM message that lacks UTF-8 encoding.
CVE-2011-4939	Pidgin (software) Pidgin		0.00	—	0.04	Mar 15, 2012	The pidgin_conv_chat_rename_user function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by changing a nickname while in an XMPP chat room.
CVE-2012-0404	EMC Corporation Documentum Eroom		0.00	—	0.01	Mar 15, 2012	Cross-site scripting (XSS) vulnerability in EMC Documentum eRoom before 7.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-0398	EMC Corporation Documentum Eroom		0.00	—	0.01	Mar 15, 2012	EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors.
CVE-2012-0358	Cisco Systems, Inc. Cisco Adaptive Security Appliance		0.00	—	0.06	Mar 15, 2012	Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 through 7.2 before 7.2(5.6), 8.0 before 8.0(5.26), 8.1 before 8.1(2.53),…
CVE-2012-0356	Cisco Systems, Inc. Cisco Adaptive Security Appliance		0.00	—	0.02	Mar 15, 2012	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before 7.2(5.7), 8.0 before 8.0(5.27), 8.1 before 8.1(2.53), 8.2 before 8.2(5.8), 8.3 before 8.3(2.25), 8.4…
CVE-2012-0355	Cisco Systems, Inc. Cisco Adaptive Security Appliance		0.00	—	0.03	Mar 15, 2012	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(2.11) and 8.5 before 8.5(1.4) allow remote attackers to cause a denial of service (device reload) via (1) IPv4 or…
CVE-2012-0354	Cisco Systems, Inc. Cisco Adaptive Security Appliance		0.00	—	0.03	Mar 15, 2012	The Threat Detection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.0 through 8.2 before 8.2(5.20), 8.3 before 8.3(2.29), 8.4 before 8.4(3), 8.5 before 8.5(1.6),…
CVE-2012-0353	Cisco Systems, Inc. Cisco Adaptive Security Appliance		0.00	—	0.03	Mar 15, 2012	The UDP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.0 before 8.0(5.25), 8.1 before 8.1(2.50), 8.2 before 8.2(5.5), 8.3 before 8.3(2.22), 8.4 before…
CVE-2012-0464	Mozilla Corporation Firefox		0.00	—	0.04	Mar 14, 2012	Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to…
CVE-2012-0463	Mozilla Corporation Firefox		0.00	—	0.04	Mar 14, 2012	The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 does not check the validity of an…
CVE-2012-0462	Mozilla Corporation Firefox		0.00	—	0.04	Mar 14, 2012	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory…
CVE-2012-0461	Mozilla Corporation Firefox		0.00	—	0.03	Mar 14, 2012	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers…
CVE-2012-0460	Mozilla Corporation Firefox		0.00	—	0.02	Mar 14, 2012	Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user…
CVE-2012-0459	Mozilla Corporation Firefox		0.00	—	0.04	Mar 14, 2012	The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service (application…
CVE-2012-0458	Mozilla Corporation Firefox		0.00	—	0.03	Mar 14, 2012	Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the…
CVE-2012-0457	Mozilla Corporation Firefox		0.01	—	0.07	Mar 14, 2012	Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey…
CVE-2012-0456	Mozilla Corporation Firefox		0.00	—	0.03	Mar 14, 2012	The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive…
CVE-2012-0455	Mozilla Corporation Firefox		0.00	—	0.02	Mar 14, 2012	Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows…
CVE-2012-0454	Mozilla Corporation Firefox		0.00	—	0.03	Mar 14, 2012	Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service…
CVE-2012-0451	Mozilla Corporation Firefox		0.00	—	0.02	Mar 14, 2012	CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions…
CVE-2012-1480	Pansi Pansi Sms		0.00	—	0.02	Mar 14, 2012	Unspecified vulnerability in the Pansi SMS (com.pansi.msg) application 1.97, 2.01, and 2.07 for Android has unknown impact and attack vectors.
CVE-2012-1479	Movesti Acontact		0.00	—	0.02	Mar 14, 2012	Unspecified vulnerability in the AContact (com.movester.quickcontact) application 1.8.2 for Android has unknown impact and attack vectors.
CVE-2012-1478	UCMobile BloveStorm		0.00	—	0.02	Mar 14, 2012	Unspecified vulnerability in the UCMobile BloveStorm (com.blovestorm) application 2.2.0 and 3.2.1 for Android has unknown impact and attack vectors.
CVE-2012-1477	Cnectd Cnectd		0.00	—	0.01	Mar 14, 2012	Unspecified vulnerability in the Cnectd (mci.cnectd) application 3.1.0 for Android has unknown impact and attack vectors.
CVE-2012-1476	Kktalk Kktalk		0.00	—	0.01	Mar 14, 2012	Unspecified vulnerability in the KKtalk (com.kkliaotian.android) application 4.0.0 and 4.1.5 for Android has unknown impact and attack vectors.
CVE-2012-1475	YagattaTalk YagattaTalk Messenger		0.00	—	0.01	Mar 14, 2012	Unspecified vulnerability in the YagattaTalk Messenger (com.iskoot.yagatta.yagattatalk) application 1.00.01.08 for Android has unknown impact and attack vectors.
CVE-2012-1474	Youni Youni SMS		0.00	—	0.01	Mar 14, 2012	Unspecified vulnerability in the Youni SMS (com.snda.youni) application 2.1.0c and 2.1.0d for Android has unknown impact and attack vectors.
CVE-2012-1409	Tinycouch Tiny Password		0.00	—	0.01	Mar 14, 2012	Unspecified vulnerability in the Tiny Password (com.tinycouch.android.freepassword) application 1.64 for Android has unknown impact and attack vectors.
CVE-2012-1408	Cc App Lock		0.00	—	0.01	Mar 14, 2012	Unspecified vulnerability in the App Lock (com.cc.applock) application 1.7.5 and 1.7.6 for Android has unknown impact and attack vectors.
CVE-2012-0124	Microfocus Data Protector Express		0.08	—	0.62	Mar 14, 2012	Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.
CVE-2012-0123	Microfocus Data Protector Express		0.01	—	0.10	Mar 14, 2012	Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1498.
CVE-2012-0122	Microfocus Data Protector Express		0.01	—	0.10	Mar 14, 2012	Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1393.
CVE-2012-0121	Microfocus Data Protector Express		0.01	—	0.10	Mar 14, 2012	Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1392.
CVE-2012-1663	GNU Gnutls		0.03	—	0.05	Mar 13, 2012	Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted certificate list.
CVE-2012-0770	Adobe Inc. Coldfusion		0.00	—	0.03	Mar 13, 2012	Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
CVE-2012-0157	Microsoft Windows	Hig	0.55	8.4	0.01	Mar 13, 2012	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle window messaging, which allows local users to gain privileges via a…
CVE-2012-0156	Microsoft Windows		0.01	—	0.15	Mar 13, 2012	DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly render Unicode characters, which allows remote attackers to cause a denial of service (application hang) via a (1) instant message or (2) web site,…
CVE-2012-0152	Microsoft Windows Server 2008		0.07	—	0.86	Mar 13, 2012	The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (application hang) via a series of crafted packets, aka "Terminal Server Denial of Service Vulnerability."
CVE-2012-0016	Microsoft Expression Design		0.05	—	0.22	Mar 13, 2012	Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .xpr or…
CVE-2012-0008	Microsoft Visual Studio		0.00	—	0.02	Mar 13, 2012	Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."
CVE-2012-0006	Microsoft Windows Server 2003		0.02	—	0.31	Mar 13, 2012	The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle objects in memory during record lookup, which allows remote attackers to cause a denial of service (daemon restart) via a crafted query, aka "DNS Denial of Service…
CVE-2012-0002	Microsoft Windows		0.09	—	0.74	Mar 13, 2012	The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to…
CVE-2012-1099	Rubyonrails Rails		0.00	—	0.02	Mar 13, 2012	Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors…
CVE-2012-1098	Rubyonrails Rails		0.00	—	0.02	Mar 13, 2012	Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object that is manipulated through certain methods.

CVE-2012-1484Mar 15, 2012
Wali
Walisms Cn
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the WaliSMS CN (cn.com.wali.walisms) application 2.9.2 and 3.7.0 for Android has unknown impact and attack vectors.
CVE-2012-1483Mar 15, 2012
Zhou Bo
Message Forwarder
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Message Forwarder (com.gmail.zbnetium) application 1.12.20110409.1 for Android has unknown impact and attack vectors.
CVE-2012-1482Mar 15, 2012
Touchpal
Touchpal Contacts
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the TouchPal Contacts (com.cootek.smartdialer) application 3.3.1 and 4.0.1 for Android has unknown impact and attack vectors.
CVE-2012-1481Mar 15, 2012
Kashif Masud
Textdroid
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Textdroid (com.app.android.textdroid) application 2.5.2 for Android has unknown impact and attack vectors.
CVE-2012-1165Mar 15, 2012
OpenSSL Project
OpenSSL
risk 0.01cvss —epss 0.07
The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250.
CVE-2012-1178Mar 15, 2012
Pidgin (software)
Pidgin
risk 0.00cvss —epss 0.02
The msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service (application crash) via an OIM message that lacks UTF-8 encoding.
CVE-2011-4939Mar 15, 2012
Pidgin (software)
Pidgin
risk 0.00cvss —epss 0.04
The pidgin_conv_chat_rename_user function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by changing a nickname while in an XMPP chat room.
CVE-2012-0404Mar 15, 2012
EMC Corporation
Documentum Eroom
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in EMC Documentum eRoom before 7.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-0398Mar 15, 2012
EMC Corporation
Documentum Eroom
risk 0.00cvss —epss 0.01
EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors.
CVE-2012-0358Mar 15, 2012
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.00cvss —epss 0.06
Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 through 7.2 before 7.2(5.6), 8.0 before 8.0(5.26), 8.1 before 8.1(2.53),…
CVE-2012-0356Mar 15, 2012
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.00cvss —epss 0.02
Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before 7.2(5.7), 8.0 before 8.0(5.27), 8.1 before 8.1(2.53), 8.2 before 8.2(5.8), 8.3 before 8.3(2.25), 8.4…
CVE-2012-0355Mar 15, 2012
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.00cvss —epss 0.03
Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(2.11) and 8.5 before 8.5(1.4) allow remote attackers to cause a denial of service (device reload) via (1) IPv4 or…
CVE-2012-0354Mar 15, 2012
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.00cvss —epss 0.03
The Threat Detection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.0 through 8.2 before 8.2(5.20), 8.3 before 8.3(2.29), 8.4 before 8.4(3), 8.5 before 8.5(1.6),…
CVE-2012-0353Mar 15, 2012
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.00cvss —epss 0.03
The UDP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.0 before 8.0(5.25), 8.1 before 8.1(2.50), 8.2 before 8.2(5.5), 8.3 before 8.3(2.22), 8.4 before…
CVE-2012-0464Mar 14, 2012
Mozilla Corporation
Firefox
risk 0.00cvss —epss 0.04
Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to…
CVE-2012-0463Mar 14, 2012
Mozilla Corporation
Firefox
risk 0.00cvss —epss 0.04
The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 does not check the validity of an…
CVE-2012-0462Mar 14, 2012
Mozilla Corporation
Firefox
risk 0.00cvss —epss 0.04
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory…
CVE-2012-0461Mar 14, 2012
Mozilla Corporation
Firefox
risk 0.00cvss —epss 0.03
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers…
CVE-2012-0460Mar 14, 2012
Mozilla Corporation
Firefox
risk 0.00cvss —epss 0.02
Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user…
CVE-2012-0459Mar 14, 2012
Mozilla Corporation
Firefox
risk 0.00cvss —epss 0.04
The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service (application…
CVE-2012-0458Mar 14, 2012
Mozilla Corporation
Firefox
risk 0.00cvss —epss 0.03
Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the…
CVE-2012-0457Mar 14, 2012
Mozilla Corporation
Firefox
risk 0.01cvss —epss 0.07
Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey…
CVE-2012-0456Mar 14, 2012
Mozilla Corporation
Firefox
risk 0.00cvss —epss 0.03
The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive…
CVE-2012-0455Mar 14, 2012
Mozilla Corporation
Firefox
risk 0.00cvss —epss 0.02
Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows…
CVE-2012-0454Mar 14, 2012
Mozilla Corporation
Firefox
risk 0.00cvss —epss 0.03
Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service…
CVE-2012-0451Mar 14, 2012
Mozilla Corporation
Firefox
risk 0.00cvss —epss 0.02
CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions…
CVE-2012-1480Mar 14, 2012
Pansi
Pansi Sms
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Pansi SMS (com.pansi.msg) application 1.97, 2.01, and 2.07 for Android has unknown impact and attack vectors.
CVE-2012-1479Mar 14, 2012
Movesti
Acontact
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the AContact (com.movester.quickcontact) application 1.8.2 for Android has unknown impact and attack vectors.
CVE-2012-1478Mar 14, 2012
UCMobile
BloveStorm
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the UCMobile BloveStorm (com.blovestorm) application 2.2.0 and 3.2.1 for Android has unknown impact and attack vectors.
CVE-2012-1477Mar 14, 2012
Cnectd
Cnectd
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Cnectd (mci.cnectd) application 3.1.0 for Android has unknown impact and attack vectors.
CVE-2012-1476Mar 14, 2012
Kktalk
Kktalk
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the KKtalk (com.kkliaotian.android) application 4.0.0 and 4.1.5 for Android has unknown impact and attack vectors.
CVE-2012-1475Mar 14, 2012
YagattaTalk
YagattaTalk Messenger
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the YagattaTalk Messenger (com.iskoot.yagatta.yagattatalk) application 1.00.01.08 for Android has unknown impact and attack vectors.
CVE-2012-1474Mar 14, 2012
Youni
Youni SMS
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Youni SMS (com.snda.youni) application 2.1.0c and 2.1.0d for Android has unknown impact and attack vectors.
CVE-2012-1409Mar 14, 2012
Tinycouch
Tiny Password
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Tiny Password (com.tinycouch.android.freepassword) application 1.64 for Android has unknown impact and attack vectors.
CVE-2012-1408Mar 14, 2012
Cc
App Lock
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the App Lock (com.cc.applock) application 1.7.5 and 1.7.6 for Android has unknown impact and attack vectors.
CVE-2012-0124Mar 14, 2012
Microfocus
Data Protector Express
risk 0.08cvss —epss 0.62
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.
CVE-2012-0123Mar 14, 2012
Microfocus
Data Protector Express
risk 0.01cvss —epss 0.10
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1498.
CVE-2012-0122Mar 14, 2012
Microfocus
Data Protector Express
risk 0.01cvss —epss 0.10
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1393.
CVE-2012-0121Mar 14, 2012
Microfocus
Data Protector Express
risk 0.01cvss —epss 0.10
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1392.
CVE-2012-1663Mar 13, 2012
GNU
Gnutls
risk 0.03cvss —epss 0.05
Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted certificate list.
CVE-2012-0770Mar 13, 2012
Adobe Inc.
Coldfusion
risk 0.00cvss —epss 0.03
Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
CVE-2012-0157HigMar 13, 2012
Microsoft
Windows
risk 0.55cvss 8.4epss 0.01
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle window messaging, which allows local users to gain privileges via a…
CVE-2012-0156Mar 13, 2012
Microsoft
Windows
risk 0.01cvss —epss 0.15
DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly render Unicode characters, which allows remote attackers to cause a denial of service (application hang) via a (1) instant message or (2) web site,…
CVE-2012-0152Mar 13, 2012
Microsoft
Windows Server 2008
risk 0.07cvss —epss 0.86
The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (application hang) via a series of crafted packets, aka "Terminal Server Denial of Service Vulnerability."
CVE-2012-0016Mar 13, 2012
Microsoft
Expression Design
risk 0.05cvss —epss 0.22
Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .xpr or…
CVE-2012-0008Mar 13, 2012
Microsoft
Visual Studio
risk 0.00cvss —epss 0.02
Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."
CVE-2012-0006Mar 13, 2012
Microsoft
Windows Server 2003
risk 0.02cvss —epss 0.31
The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle objects in memory during record lookup, which allows remote attackers to cause a denial of service (daemon restart) via a crafted query, aka "DNS Denial of Service…
CVE-2012-0002Mar 13, 2012
Microsoft
Windows
risk 0.09cvss —epss 0.74
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to…
CVE-2012-1099Mar 13, 2012
Rubyonrails
Rails
risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors…
CVE-2012-1098Mar 13, 2012
Rubyonrails
Rails
risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object that is manipulated through certain methods.