CVE-2012-6042

GPSMapEdit 1.1.73.2 allows user-assisted remote attackers to cause a denial of service crash via a long string in a lst file...

CVE-2012-5691

Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file...

CVE-2012-4598

An unspecified ActiveX control in McAfee Virtual Technician MVT before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service Internet Explorer crash via a crafted web site...

CVE-2012-4908

Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...

CVE-2012-6465

Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed SVG image...

CVE-2012-2426

The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via unspecified vectors...

CVE-2012-1824

Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2012-4121

Cisco NX-OS allows local users to gain privileges, and read or modify arbitrary files, via the sed 1 r and 2 w commands, aka Bug IDs CSCts56559, CSCts56565, CSCts56570, and CSCts56574...

CVE-2012-4687

Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value...

CVE-2012-4519

Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS...

CVE-2012-4873

Cross-site scripting XSS vulnerability in the filedownload function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrary web script or HTML via the filename parameter...

CVE-2012-2368

Bytemark Symbiosis before Revision 1322 does not properly validate passwords, which allows remote attackers to gain access to email accounts via an arbitrary password...

CVE-2012-2204

InfoSphere Guardium aixktap module: DoS...

CVE-2012-1782

Multiple cross-site scripting XSS vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the 1 url bar or 2 picture bar...

CVE-2012-1402

Unspecified vulnerability in the QianXun YingShi com.qianxun.yingshi application 1.2.3 and 1.3.4 for Android has unknown impact and attack vectors...

CVE-2012-5214

Unspecified vulnerability in HP ServiceCenter 6.2.8 before 6.2.8.10 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2012-3024

Tridium Niagara AX Framework through 3.6 uses predictable values for 1 session IDs and 2 keys, which might allow remote attackers to bypass authentication via a brute-force attack...

CVE-2012-4525

piwigo has XSS in password.php...

CVE-2012-0367

Cisco Unity Connection before 7.1.5bSu5, 8.0 and 8.5 before 8.5.1Su3, and 8.6 before 8.6.2 allows remote attackers to cause a denial of service services crash via a series of crafted TCP segments, aka Bug ID CSCtq67899...

CVE-2012-3513

munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command...