2012 Archive
| Severity | Date | Check Point Reference |
Industry Reference |
Description |
|---|---|---|---|---|
| CPAI-2012-1335 |
CVE-2012-4939 |
SolarWinds Orion IPAM Reflected Cross-site Scripting (CVE-2012-4939) | ||
| CPAI-2012-1323 | Lattice Semiconductor ispVM System XCF File Handling Overflow | |||
| CPAI-2012-1282 | Novell NetIQ Privileged User Manager modifyAccounts Policy Bypass | |||
| CPAI-2012-380 |
CVE-2012-1723 |
Oracle Java Runtime Bytecode Verifier Cache Code Execution (CVE-2012-1723) | ||
| CPAI-2012-796 |
CVE-2012-5470 |
VideoLAN VLC Media Player PNG Code Execution (CVE-2012-5470) | ||
| CPAI-2012-646 |
CVE-2012-3939 |
Cisco WebEx Recording Format Player atas32.dll Memory Corruption (CVE-2012-3939) | ||
| CPAI-2012-1313 |
CVE-2012-3754 |
Apple QuickTime ActiveX Control Clear Method Use-After-Free (CVE-2012-3754) | ||
| CPAI-2012-1307 | Sophos Anti-Virus RAR VMSF_RGB Filter Parsing Integer Underflow | |||
| CPAI-2012-1289 |
CVE-2012-4957 |
Novell File Reporter SRS Arbitrary File Retrieval (CVE-2012-4957) | ||
| CPAI-2012-1286 |
CVE-2012-4958 |
Novell File Reporter FSFUI Arbitrary File Retrieval (CVE-2012-4958) | ||
| CPAI-2012-1318 | EZHomeTech EzServer Stack Buffer Overflow | |||
| CPAI-2012-1310 |
CVE-2012-0284 |
Cisco Linksys PlayerPT ActiveX Control Buffer overflow (CVE-2012-0284) | ||
| CPAI-2012-830 | Sophos Anti-Virus PDF Handling Stack Buffer Overflow | |||
| CPAI-2012-816 |
CVE-2012-2971 |
CA ARCserve Backup Authentication Service Invalid Call Remote Code Execution (CVE-2012-2971) | ||
| CPAI-2012-1336 |
CVE-2012-4792 |
Internet Explorer Heap Spray Memory Corruption (CVE-2012-4792) | ||
| CPAI-2012-1314 |
CVE-2012-5267 |
Adobe Flash Player JPEG Parsing Buffer Overflow (APSB22-12; CVE-2012-5267) | ||
| CPAI-2012-1302 |
CVE-2012-5678 |
Adobe Flash Player SWF Traits Structure Remote Code Execution (APSB12-27; CVE-2012-5678) | ||
| CPAI-2012-1301 |
CVE-2012-5677 |
Adobe Flash Player PCM File Integer Overflow (APSB12-27; CVE-2012-5677) | ||
| CPAI-2012-1300 |
CVE-2012-5676 |
Adobe Flash Player and AIR SWF File Buffer Overflow (APSB12-27; CVE-2012-5676) | ||
| CPAI-2012-1288 |
CVE-2012-5266 |
Adobe Flash Player and AIR Malformed Tag Buffer Overflow (APSB12-22; CVE-2012-5266) | ||
| CPAI-2012-1253 |
CVE-2012-5269 |
Adobe Flash Player Out of Bound Memory Corruption (APSB12-22; CVE-2012-5269) | ||
| CPAI-2012-1136 |
CVE-2012-5270 |
Adobe Flash Player Type Confusion Remote Code Execution (APSB12-22; CVE-2012-5270) | ||
| CPAI-2012-1135 |
CVE-2012-5278 |
Adobe Flash Player and AIR Security Bypass (APSB12-24; CVE-2012-5278) | ||
| CPAI-2012-1134 |
CVE-2012-5272 |
Adobe Flash Player Plugin Use-After-Free Code Execution (APSB12-22; CVE-2012-5272) | ||
| CPAI-2012-1328 | SCADA Siemens FactoryLink vrn.exe Opcode 9 Buffer Overflow | |||
| CPAI-2012-1327 | SCADA Schneider Modicon Quantum Password Recovery | |||
| CPAI-2012-1321 |
CVE-2008-1544 |
Internet Explorer Malformed Request Header Information Disclosure (CVE-2008-1544) | ||
| CPAI-2012-842 | Horde FTP Server Backdoor Arbitrary PHP Code Execution (CVE-2012-0209) | |||
| CPAI-2012-835 |
CVE-2011-4050 |
7-Technologies IGSS 9 IGSSdataServer.exe Denial of Service (CVE-2011-4050) | ||
| CPAI-2012-831 | CVE-2011-3486 | Beckhoff TwinCAT Out-Of-Bounds Read Denial of Service (CVE-2011-3486) | ||
| CPAI-2012-657 |
CVE-2012-3579 |
Symantec Messaging Gateway Default SSH Password (CVE-2012-3579) | ||
| CPAI-2012-602 | Flexera Multiple Products ISGrid.dll ActiveX Control Code Execution | |||
| CPAI-2012-289 |
CVE-2012-1923 |
RealNetworks Helix Server SNMP Master Agent TCP Connection Denial of Service (CVE-2012-1923) | ||
| CPAI-2012-1299 | Aladdin Knowledge System ChooseFilePath Buffer Overflow | |||
| CPAI-2012-1296 | General Electric D20 Password Recovery | |||
| CPAI-2012-1290 |
CVE-2011-1140 |
Wireshark CLDAP Dissector Denial of Service (CVE-2011-1140) | ||
| CPAI-2012-1280 |
CVE-2012-5611 |
MySQL acl_get() Buffer Overrun Remote Code Execution (CVE-2012-5611) | ||
| CPAI-2012-1137 |
CVE-2010-3332 |
Microsoft ASP.NET PKCS Padding Information Disclosure (MS10-070; CVE-2010-3332) | ||
| CPAI-2012-1131 |
CVE-2009-1730 |
Ipswitch TFTP Server Information disclosure (CVE-2009-1730) | ||
| CPAI-2012-1294 |
CVE-2012-5611 |
Oracle MySQL GRANT Command Stack Buffer Overflow (CVE-2012-5611) | ||
| CPAI-2012-828 |
CVE-2012-4170 |
Adobe Photoshop PNG Image Processing Buffer Overflow (APSB12-20; CVE-2012-4170) | ||
| CPAI-2012-827 | Adobe Flash Player copyRawDataTo Out of Bounds Array Indexing (APSB12-19) | |||
| CPAI-2012-826 |
CVE-2012-5271 |
Adobe Flash Player OP_inclocal and OP_declocal Memory Corruption (APSB12-22; CVE-2012-5271) | ||
| CPAI-2012-825 |
CVE-2012-2972 |
CA ARCserve Backup Authentication Service Denial of Service (CVE-2012-2972) | ||
| CPAI-2012-817 |
CVE-2012-3752 |
Apple QuickTime TeXML Style Element Text Specification Buffer Overflow (CVE-2012-3752) | ||
| CPAI-2012-800 |
CVE-2012-5671 |
Exim DKIM DNS Decoding Buffer Overflow (CVE-2012-5671) | ||
| CPAI-2012-799 | SafeNet HASP SL ActiveX Control ChooseFilePath Buffer Overflow | |||
| CPAI-2012-787 |
CVE-2012-2995 |
Trend Micro InterScan Messaging Security Suite Cross-site Scripting (CVE-2012-2995) | ||
| CPAI-2012-660 |
CVE-2012-4192 |
Mozilla Firefox Cross Domain Information Disclosure (CVE-2012-4192) | ||
| CPAI-2012-658 |
CVE-2012-3526 |
Apache HTTP Server mod_rpaf Denial of Service (CVE-2012-3526) | ||
| CPAI-2012-655 | Novell File Reporter VOL Tag Stack Buffer Overflow | |||
| CPAI-2012-645 | HP SiteScope SOAP Call APIPreferenceImpl Multiple Security Bypass | |||
| CPAI-2012-637 |
CVE-2012-2494 |
Cisco AnyConnect VPN Client Software Downgrade Code Execution (CVE-2012-2494) | ||
| CPAI-2012-422 | Oracle Fusion Middleware Outside In Excel File Parsing Integer Overflow | |||
| CPAI-2012-1287 |
CVE-2012-5533 |
lighttpd Connection Header Parsing Denial of Service (CVE-2012-5533) | ||
| CPAI-2012-1138 |
CVE-2012-3755 |
Apple QuickTime Targa File Buffer Overflow (CVE-2012-3755) | ||
| CPAI-2012-1133 | D-Link Wireless Router CAPTCHA Data Processing Buffer Overflow | |||
| CPAI-2012-1132 |
CVE-2012-4554 |
Dries Buytaert Drupal Core OpenID Module Information Disclosure (CVE-2012-4554) | ||
| CPAI-2012-788 |
CVE-2012-4774 |
Microsoft Windows Filename Parsing Remote Code Execution (MS12-081; CVE-2012-4774) | ||
| CPAI-2012-1295 | DNS ANY Request Malformed Payload Denial of Service | |||
| CPAI-2012-1291 | CVE-2012-4786 | Microsoft Windows TrueType Font Parsing Remote Code Execution (MS12-078; CVE-2012-4786) | ||
| CPAI-2012-1279 |
CVE-2012-2556 |
Microsoft Windows OpenType Font Parsing Remote Code Execution (MS12-078; CVE-2012-2556) | ||
| CPAI-2012-1261 | CVE-2012-1537 | Microsoft DirectPlay CLSID_DirectPlay8Address (MS12-082; CVE-2012-1537) | ||
| CPAI-2012-1260 | CVE-2012-1537 | Microsoft DirectPlay CLSID_DirectPlay8LobbiedApplication (MS12-082; CVE-2012-1537) | ||
| CPAI-2012-1259 | CVE-2012-1537 | Microsoft DirectPlay CLSID_DirectPlay8LobbyClient (MS12-082; CVE-2012-1537) | ||
| CPAI-2012-1258 | CVE-2012-1537 | Microsoft DirectPlay CLSID_DirectPlay8Client (MS12-082; CVE-2012-1537) | ||
| CPAI-2012-1257 | CVE-2012-1537 | Microsoft DirectPlay CLSID_DirectPlay8Peer (MS12-082; CVE-2012-1537) | ||
| CPAI-2012-1256 | CVE-2012-1537 | Microsoft DirectPlay CLSID_DP8SP_SERIAL (MS12-082; CVE-2012-1537) | ||
| CPAI-2012-1254 | CVE-2012-1537 | Microsoft DirectPlay CLSID_DP8SP_MODEM (MS12-082; CVE-2012-1537) | ||
| CPAI-2012-1252 |
CVE-2012-4787 |
Internet Explorer Improper Ref Counting Use After Free (MS12-077; CVE-2012-4787) | ||
| CPAI-2012-1139 |
CVE-2012-2539 |
Microsoft Word RTF listoverridecount Remote Code Execution (MS12-079; CVE-2012-2539) | ||
| CPAI-2012-833 |
CVE-2012-5076 |
Java Applet JAX-WS Remote Code Execution (CVE-2012-5076) | ||
| CPAI-2012-829 |
CVE-2008-2639 |
Citect SCADA ODBC Overflow Attempt (CVE-2008-2639) | ||
| CPAI-2012-819 |
CVE-2012-0235 |
Sunway ForceControl Activex Control Vulnerability | ||
| CPAI-2012-798 | CYME Multiple Products ChartFX.ClientServer.Core.dll Remote Code Execution | |||
| CPAI-2012-786 |
CVE-2012-4933 |
Novell ZENworks Asset Management Web Console Information Disclosure (CVE-2012-4933) | ||
| CPAI-2012-653 |
CVE-2012-2953 |
Symantec Web Gateway pbcontrol.php Command Injection (CVE-2012-2953) | ||
| CPAI-2012-652 |
CVE-2012-3547 |
FreeRADIUS Client Certificate Verification Stack Buffer Overflow (CVE-2012-3547) | ||
| CPAI-2012-394 |
CVE-2011-2592 |
Citrix Access Gateway nsepacom ActiveX Control Buffer Overflow (CVE-2011-2592) | ||
| CPAI-2012-824 | Symantec Web Gateway 5.0.2.8 Arbitrary PHP File Upload (CVE-2012-0299) | |||
| CPAI-2012-823 |
CVE-2012-3753 |
Apple QuickTime Plugin Content-Type Buffer Overflow (CVE-2012-3753) | ||
| CPAI-2012-383 |
CVE-2011-0517 |
Sielco Sistemi Winlog Server Buffer Overflow (CVE-2011-0517) | ||
| CPAI-2012-375 | Sysax Multi Server SSH Username Buffer Overflow | |||
| CPAI-2012-358 |
CVE-2011-1591 |
Wireshark DECT Dissector Stack Buffer Overflow (CVE-2011-1591) | ||
| CPAI-2012-822 | PROMOTIC ActiveX Control Insecure method (AddTrend) | |||
| CPAI-2012-821 | PROMOTIC ActiveX Control Insecure method (SaveCfg) | |||
| CPAI-2012-814 | SCADA PcVue Activex Control Insecure Method (GetExtendedColor) | |||
| CPAI-2012-813 | SCADA PcVue Activex Control Insecure Method (LoadObject) | |||
| CPAI-2012-812 | SCADA PcVue Activex Control Insecure Method (SaveObject) | |||
| CPAI-2012-811 | SCADA PcVue Activex Control Insecure Method (DeletePage) | |||
| CPAI-2012-810 | SCADA PcVue Activex Control Insecure Method (AddPage) | |||
| CPAI-2012-809 |
CVE-2011-2089 |
SCADA ICONICS WebHMI ActiveX Stack Overflow (2011-2089) | ||
| CPAI-2012-797 |
CVE-2012-1686 |
Oracle Business Intelligence Enterprise Edition Cross Site Scripting (CVE-2012-1686) | ||
| CPAI-2012-794 | HP Operations Agent NonStop Server Packet Parsing Stack Buffer Overflow | |||
| CPAI-2012-791 |
CVE-2012-3807 |
Samsung Kies Arbitrary Command Execution (CVE-2012-3807) | ||
| CPAI-2012-774 | SCADA DNP3 write system time | |||
| CPAI-2012-773 | SCADA DNP3 write function code | |||
| CPAI-2012-772 | SCADA DNP3 warm restart function code | |||
| CPAI-2012-771 | SCADA DNP3 unsolicited server response brute force | |||
| CPAI-2012-770 | DNP3 unsolicited response function code | |||
| CPAI-2012-769 | SCADA DNP3 unauthorized client | |||
| CPAI-2012-768 | SCADA DNP3 stop application function code | |||
| CPAI-2012-767 | DNP3 start application function code | |||
| CPAI-2012-766 | SCADA DNP3 server response function code | |||
| CPAI-2012-765 | SCADA DNP3 server response brute force | |||
| CPAI-2012-764 | SCADA DNP3 server unsolicited auth challenge response function code | |||
| CPAI-2012-763 | SCADA DNP3 select function code | |||
| CPAI-2012-762 | SCADA DNP3 save configuration function code | |||
| CPAI-2012-761 | SCADA DNP3 record current time function code | |||
| CPAI-2012-760 | SCADA DNP3 read function code | |||
| CPAI-2012-759 | SCADA DNP3 operate function code | |||
| CPAI-2012-758 | SCADA DNP3 open file function code | |||
| CPAI-2012-757 | Non-DNP3 Traffic over DNP3 Port | |||
| CPAI-2012-756 | DNP3 Non-Compliant requests | |||
| CPAI-2012-755 | SCADA DNP3 init data function code | |||
| CPAI-2012-754 | SCADA DNP3 init app function code | |||
| CPAI-2012-753 | SCADA DNP3 get file info function code | |||
| CPAI-2012-752 | SCADA DNP3 freeze time no ack function code | |||
| CPAI-2012-751 | SCADA DNP3 freeze time function code | |||
| CPAI-2012-750 | SCADA DNP3 freeze no ack function code | |||
| CPAI-2012-749 | SCADA DNP3 freeze clear no ack function code | |||
| CPAI-2012-748 | SCADA DNP3 freeze clear function code | |||
| CPAI-2012-747 | SCADA DNP3 freeze function code | |||
| CPAI-2012-746 | SCADA DNP3 enable solution function code | |||
| CPAI-2012-745 | SCADA DNP3 disable solution function code | |||
| CPAI-2012-744 | SCADA DNP3 direct operate no ack function code | |||
| CPAI-2012-743 | SCADA DNP3 dir operate function code | |||
| CPAI-2012-742 | SCADA DNP3 delete file function code | |||
| CPAI-2012-741 | SCADA DNP3 delay measure function code | |||
| CPAI-2012-740 | SCADA DNP3 confirm function code | |||
| CPAI-2012-739 | SCADA DNP3 cold restart function code | |||
| CPAI-2012-738 | SCADA DNP3 close file request | |||
| CPAI-2012-737 | SCADA DNP3 broadcast | |||
| CPAI-2012-736 | SCADA DNP3 auth request function code | |||
| CPAI-2012-735 | SCADA DNP3 auth reply function code | |||
| CPAI-2012-734 | SCADA DNP3 auth file function code | |||
| CPAI-2012-733 | SCADA DNP3 auth error function code | |||
| CPAI-2012-732 | SCADA DNP3 server auth challenge response function code | |||
| CPAI-2012-731 | SCADA DNP3 assign class function code | |||
| CPAI-2012-730 | SCADA DNP3 abort file function code | |||
| CPAI-2012-663 |
CVE-2011-4963 |
Nginx Location NTFS Extended Attributes Security Bypass (CVE-2011-4963) | ||
| CPAI-2012-659 | HP Diagnostics magentservice.exe Stack Buffer Overflow | |||
| CPAI-2012-656 |
CVE-2012-3684 |
Apple Safari WebKit CSS Title Memory Corruption (CVE-2012-3684) | ||
| CPAI-2012-648 |
CVE-2012-2998 |
Trend Micro Control Manager ad hoc query Module SQL Injection (CVE-2012-2998) | ||
| CPAI-2012-644 |
CVE-2012-3137 |
Oracle Database O5Logon Protocol Information Disclosure (CVE-2012-3137) | ||
| CPAI-2012-641 |
CVE-2012-0271 |
Novell GroupWise Internet Agent Content-length Integer Overflow (CVE-2012-0271) | ||
| CPAI-2012-638 | HP SiteScope Multiple Directory Traversal Vulnerabilities | |||
| CPAI-2012-636 |
CVE-2011-3827 |
Novell GroupWise Internet Agent iCalendar Parsing Denial of Service (CVE-2011-3827) | ||
| CPAI-2012-808 |
CVE-2012-1527 CVE-2012-1528 |
Microsoft Windows Briefcase Integer Underflow (MS12-072; CVE-2012-1527; CVE-2012-1528) | ||
| CPAI-2012-807 |
CVE-2012-4775 |
Microsoft Internet Explorer CTreeNode Use After Free (MS12-071; CVE-2012-4775) | ||
| CPAI-2012-806 |
CVE-2012-2897 |
Microsoft Windows Font Parsing Remote Code Execution (MS12-075; CVE-2012-2897) | ||
| CPAI-2012-805 |
CVE-2012-1538 |
Microsoft Internet Explorer CFormElement Use After Free (MS12-071; CVE-2012-1538) | ||
| CPAI-2012-804 |
CVE-2012-4776 |
Microsoft .Net Framework Web Proxy Auto-Discovery Code Execution (MS12-074; CVE-2012-4776) | ||
| CPAI-2012-803 |
CVE-2012-1539 |
Microsoft Internet Explorer CTreePos Use After Free (MS12-071; CVE-2012-1539) | ||
| CPAI-2012-802 |
CVE-2012-1887 |
Microsoft Excel SST Invalid Length Use After Free (MS12-076; CVE-2012-1887) | ||
| CPAI-2012-795 |
CVE-2012-2543 |
Microsoft Excel Modified Data Structure Stack Overflow (MS12-076; CVE-2012-2543) | ||
| CPAI-2012-793 |
CVE-2012-2519 |
Microsoft .NET Framework Insecure Library Loading Code Execution (MS12-074; CVE-2012-2519) | ||
| CPAI-2012-790 |
CVE-2012-1886 |
Microsoft Excel Malformed File Memory Corruption (MS12-076; CVE-2012-1886) | ||
| CPAI-2012-402 |
CVE-2012-1885 |
Microsoft Excel SerAuxErrBar Heap Overflow (MS12-076; CVE-2012-1885) | ||
| CPAI-2012-785 | ROCKWELL Automation ControlLogix EtherNET/IP Firmware Update Initialization | |||
| CPAI-2012-784 | ROCKWELL Automation ControlLogix Crash 1756-ENBT Module (CrashEth) | |||
| CPAI-2012-783 | ROCKWELL Automation ControlLogix EtherNET/IP Reset Command Denial Of Service | |||
| CPAI-2012-782 | ROCKWELL Automation ControlLogix EtherNET/IP Modules Boot Code Dump (Dump) | |||
| CPAI-2012-781 | ROCKWELL Automation ControlLogix Denial of Service (Crash CPU) | |||
| CPAI-2012-780 | ROCKWELL Automation ControlLogix Denial of Service (CPU Stop) | |||
| CPAI-2012-779 | Rockwell RNA Message Header Not Null Terminated | |||
| CPAI-2012-778 | Rockwell RNA Message Negative Body Length | |||
| CPAI-2012-777 | Rockwell RNA Message Large Body Length - 8Mb | |||
| CPAI-2012-776 | Rockwell RNA Message Negative Header Length | |||
| CPAI-2012-775 | Rockwell RNA Message Large Header Length - 8Kb | |||
| CPAI-2012-726 | Sielco Sistemi WinLog Stack Overflow Attempt | |||
| CPAI-2012-724 | RealWin INFOTAG SET CONTROL Packet Processing Buffer Overflow | |||
| CPAI-2012-721 | RealWin HMI Service Buffer Overflow Attempt 1 | |||
| CPAI-2012-709 | RealFlex RealWin SCADA On FC RFUSER FCS LOGIN Buffer Overflow | |||
| CPAI-2012-695 | IGSS SCADA ListAll Function Buffer Overflow | |||
| CPAI-2012-691 | RealFlex RealWin SCADA On FC BINFILE FCS FILE Buffer Overflow 1 | |||
| CPAI-2012-669 | IGSS SCADA Write File Function Buffer Overflow | |||
| CPAI-2012-654 |
CVE-2012-4167 |
Adobe Flash Player Video File Heap Buffer Overflow (APSB12-19; CVE-2012-4167) | ||
| CPAI-2012-649 |
CVE-2012-4171 |
Adobe Flash Player Multiple Dialog Boxes Denial Of Service (APSB12-19; CVE-2012-4171) | ||
| CPAI-2012-647 |
CVE-2012-4168 |
Adobe Flash Player Flash Plugin Cross-Domain Information Leak (APSB12-19; CVE-2012-4168) | ||
| CPAI-2012-642 |
CVE-2012-2551 |
Microsoft Kerberos NULL Dereference Denial of Service (MS12-069; CVE-2012-2551) | ||
| CPAI-2012-640 |
CVE-2012-4165 |
Adobe Flash Player Malformed Byte Code Remote Code Execution (APSB12-19; CVE-2012-4165) | ||
| CPAI-2012-639 |
CVE-2012-4163 |
Adobe Flash Player Malformed Tag Memory Corruption (CVE-2012-4163; APSB12-19) | ||
| CPAI-2012-415 |
CVE-2011-1986 |
Microsoft Office Excel Record Parsing Use After Free (MS11-072; CVE-2011-1986) | ||
| CPAI-2012-634 |
CVE-2012-2288 |
EMC NetWorker nsrd Format String Remote Code Execution (CVE-2012-2288) | ||
| CPAI-2012-633 |
CVE-2012-2516 |
GE Proficy Historian KeyHelp ActiveX LaunchTriPane Remote Code Execution (CVE-2012-2516) | ||
| CPAI-2012-632 |
ZDI-12-170 |
HP Application Lifecycle Management ActiveX Control Arbitrary File Overwrite | ||
| CPAI-2012-625 | HP Intelligent Management Center uam.exe Stack Buffer Overflow | |||
| CPAI-2012-612 |
CVE-2009-1016 |
Oracle BEA WebLogic Server Client Certificate Buffer Overflow (CVE-2009-1016) | ||
| CPAI-2012-609 | HP Application Lifecycle Management ActiveX Control Insecure Method Exposure | |||
| CPAI-2012-608 | HP SiteScope loadFileContent SOAP Request Information Disclosure | |||
| CPAI-2012-603 | HP SiteScope SOAP Call APISiteScopeImpl Multiple Information Disclosures | |||
| CPAI-2012-601 |
CVE-2012-0232 |
GE Proficy Real-Time Information Portal Directory Traversal (CVE-2012-0232) | ||
| CPAI-2012-425 |
CVE-2012-2174 |
IBM Lotus Notes URL Handler Command Execution (CVE-2012-2174) | ||
| CPAI-2012-424 |
CVE-2011-0340 |
InduSoft Thin Client ISSymbol ActiveX Heap Buffer Overflow (CVE-2011-0340) | ||
| CPAI-2012-421 |
CVE-2012-0409 |
EMC AutoStart ftAgent.exe Null Byte Write (CVE-2012-0409) | ||
| CPAI-2012-417 |
CVE-2012-4157 |
Adobe Acrobat and Reader Embedded TTF Memory Corruption (APSB12-16; CVE-2012-4157) | ||
| CPAI-2012-414 |
CVE-2011-1511 |
Oracle GlassFish Server Administration Console Authentication Bypass (CVE-2011-1511) | ||
| CPAI-2012-413 | HP iNode Management Center iNodeMngChecker.exe Stack Buffer Overflow | |||
| CPAI-2012-412 |
CVE-2011-4517 |
Oracle Outside In JPEG 2000 CRG Segment Processing Heap Buffer Overflow (CVE-2011-4517) | ||
| CPAI-2012-408 | Novell Remote Manager Off-by-One Denial of Service | |||
| CPAI-2012-407 | SAP NetWeaver SOAP Interface Arbitrary Command Execution | |||
| CPAI-2012-406 |
CVE-2012-0409 |
EMC AutoStart ftAgent.exe Multiple Integer Overflow Vulnerabilities (CVE-2012-0409) | ||
| CPAI-2012-404 | Oracle Outside In XPM Image Processing Stack Buffer Overflow | |||
| CPAI-2012-403 | Oracle Business Transaction Management Arbitrary File Deletion | |||
| CPAI-2012-398 |
CVE-2012-1520 |
Apple Safari WebKit Button Column Blocks Memory Corruption (CVE-2012-1520) | ||
| CPAI-2012-396 |
CVE-2012-2574 |
Symantec Web Gateway blocked.php Blind SQL Injection (CVE-2012-2574) | ||
| CPAI-2012-390 |
CVE-2012-2175 |
IBM Lotus iNotes dwa85W.dll ActiveX Control Buffer Overflow (CVE-2012-2175) | ||
| CPAI-2012-387 |
CVE-2011-3068 |
Google Chrome and Apple Safari Runin Handling Use After Free (CVE-2011-3068) | ||
| CPAI-2012-386 |
CVE-2012-0550 |
Oracle GlassFish Enterprise Server REST Interface Cross Site Request Forgery (CVE-2012-0550) | ||
| CPAI-2012-385 |
CVE-2012-2019 |
HP Operations Agent Opcode 0x34 Stack Buffer Overflow (CVE-2012-2019) | ||
| CPAI-2012-384 |
CVE-2012-0671 |
Apple QuickTime PICT File Processing Memory Corruption (CVE-2012-0671) | ||
| CPAI-2012-379 |
CVE-2012-1952 |
Mozilla Multiple Products Table Frames Memory Corruption (CVE-2012-1952) | ||
| CPAI-2012-378 |
CVE-2012-0121 |
HP Data Protector Express Multiple Opcodes Parsing Stack Buffer Overflow (CVE-2012-0121) | ||
| CPAI-2012-376 |
CVE-2012-0666 |
Apple QuickTime Plugin SetLanguage Buffer Overflow (CVE-2012-0666) | ||
| CPAI-2012-374 |
CVE-2011-4163 |
HP Database Archiving Software GIOP Opcode Buffer Overflow (CVE-2011-4163) | ||
| CPAI-2012-373 |
CVE-2012-1769 |
Oracle Outside In JPEG 2000 QCD Segment Processing Heap Buffer Overflow (CVE-2012-1769) | ||
| CPAI-2012-372 | HP StorageWorks File Migration Agent RsaCIFS.dll Stack Buffer Overflow | |||
| CPAI-2012-371 | HP StorageWorks File Migration Agent RsaFTP.dll Stack Buffer Overflow | |||
| CPAI-2012-370 |
CVE-2012-0663 |
Apple QuickTime TeXML Transform Attribute Parsing Buffer Overflow (CVE-2012-0663) | ||
| CPAI-2012-369 |
CVE-2012-2514 |
SAP NetWeaver DiagiEventSource Denial of Service (CVE-2012-2514) | ||
| CPAI-2012-368 |
CVE-2012-2695 |
Ruby on Rails Hash SQL Injection (CVE-2012-2695) | ||
| CPAI-2012-364 |
CVE-2012-1744 |
Oracle Outside In FlashPix Image Processing Heap Buffer Overflow (CVE-2012-1744) | ||
| CPAI-2012-363 |
CVE-2011-4187 |
Novell iPrint Client GetDriverSettings Realm Parameter Stack Buffer Overflow (CVE-2011-4187) | ||
| CPAI-2012-359 | Oracle Business Transaction Management Arbitrary File Creation | |||
| CPAI-2012-317 | CVE-2012-1182 | Samba DCE RPC IDL Parser Out-of-bounds Array Access (CVE-2012-1182) | ||
| CPAI-2012-300 | CVE-2012-2176 | IBM Lotus Quickr qp2.cab ActiveX Control Stack Buffer Overflow (CVE-2012-2176) | ||
| CPAI-2012-631 |
CVE-2012-2552 |
Microsoft SQL Server Report Manager Elevation of Privilege (MS12-070; CVE-2012-2552) | ||
| CPAI-2012-630 |
CVE-2012-2550 |
Microsoft Works RTF Heap Remote Code Execution (MS12-065; CVE-2012-2550) | ||
| CPAI-2012-629 |
CVE-2012-2528 |
Microsoft Office RTF File listid Use-After-Free Code Execution (MS12-064; CVE-2012-2528) | ||
| CPAI-2012-611 |
CVE-2012-0182 |
Microsoft Word PAPX Section Corruption Remote Code Execution (MS12-064; CVE-2012-0182) | ||
| CPAI-2012-423 |
CVE-2012-4159 |
Adobe Acrobat and Reader PDF Malicious Stream Code Execution (APSB12-16; CVE-2012-4159) | ||
| CPAI-2012-622 | CVE-2012-4681 | Preemptive Protection against Oracle JRE Restrictions Bypass Remote Code Execution (CVE-2012-4681) | ||
| CPAI-2012-607 |
CVE-2012-2557 |
Internet Explorer cloneNode Use After Free Remote Code Execution (MS12-063; CVE-2012-2557) | ||
| CPAI-2012-606 |
CVE-2012-2548 |
Internet Explorer Layout Use After Free Remote Code Execution (MS12-063; CVE-2012-2548) | ||
| CPAI-2012-605 |
CVE-2012-2546 |
Internet Explorer Event Listener Remote Code Execution (MS12-063; CVE-2012-2546) | ||
| CPAI-2012-604 |
CVE-2012-1529 |
Internet Explorer OnMove Use After Free Remote Code Execution (MS12-063; CVE-2012-1529) | ||
| CPAI-2012-420 |
CVE-2012-4149 |
Adobe Acrobat and Reader Invalid Value Code Execution (APSB12-16; CVE-2012-4149) | ||
| CPAI-2012-419 |
CVE-2012-4159 |
Adobe Acrobat and Reader Invalid Memory Access Code Execution (APSB12-16; CVE-2012-4159) | ||
| CPAI-2012-418 |
CVE-2012-4154 |
Adobe Acrobat and Reader Embedded TTF Integer Overflow (APSB12-16; CVE-2012-4154) | ||
| CPAI-2012-416 |
CVE-2012-4155 |
Adobe Acrobat and Reader Embedded Font Memory Corruption (APSB12-16; CVE-2012-4155) | ||
| CPAI-2012-401 |
CVE-2011-1907 |
ISC BIND RRSIG Query Denial of Service (CVE-2011-1907) | ||
| CPAI-2012-365 |
CVE-2011-4164 |
HP Database Archiving Software GIOP Parsing Buffer Overflow (CVE-2011-4164) | ||
| CPAI-2012-600 |
CVE-2012-4969 |
Internet Explorer execCommand Use-After-Free (CVE-2012-4969) | ||
| CPAI-2012-409 |
CVE-2012-1892 |
Microsoft Visual Studio Team Foundation Server XSS (MS12-061; CVE-2012-1892) | ||
| CPAI-2012-405 |
CVE-2012-2536 |
Microsoft SCCM Reflected Cross-site Scripting (MS12-062; CVE-2012-2536) | ||
| CPAI-2012-381 | Netop Remote Control DWS File Stack Buffer Overflow | |||
| CPAI-2012-367 |
CVE-2011-4404 |
VMware Update Manager Directory Traversal (CVE-2011-4404) | ||
| CPAI-2012-366 |
CVE-2012-0667 |
Apple QuickTime QTVR QTVRStringAtom Parsing Buffer Overflow (CVE-2012-0667) | ||
| CPAI-2012-346 |
CVE-2012-1667 |
ISC BIND Zero Length RDATA Denial of Service (CVE-2012-1667) | ||
| CPAI-2012-344 |
CVE-2004-1315 |
phpBB viewtopic.php URL Decoding Code Execution (CVE-2004-1315) | ||
| CPAI-2012-337 |
CVE-2012-3363 |
Zend Technologies Zend Framework Zend_XmlRpc Information Disclosure (CVE-2012-3363) | ||
| CPAI-2012-336 |
CVE-2012-2414 |
Digium Asterisk Manager User Shell Command Execution (CVE-2012-2414) | ||
| CPAI-2012-334 |
CVE-2012-2763 |
Gimp Script-Fu Server Buffer Overflow (CVE-2012-2763) | ||
| CPAI-2012-333 |
CVE-2012-0659 |
Apple QuickTime MPEG Stream Padding Buffer Overflow (CVE-2012-0659) | ||
| CPAI-2012-332 |
CVE-2012-0677 |
Apple iTunes m3u Playlist Multiple Buffer Overflows (CVE-2012-0677) | ||
| CPAI-2012-330 |
CVE-2012-0663 |
Apple QuickTime TeXML Color String Parsing Buffer Overflow (CVE-2012-0663) | ||
| CPAI-2012-315 | Tftpd32 DNS Server Buffer Overflow | |||
| CPAI-2012-298 | CVE-2012-1573 | GnuTLS TLS Record Application GenericBlockCipher Parsing Integer Overflow (CVE-2012-1573) | ||
| CPAI-2012-290 | CVE-2012-0551 | Oracle GlassFish Enterprise Server Multiple Stored XSS Vulnerabilities (CVE-2012-0551) | ||
| CPAI-2012-399 |
CVE-2012-4681 |
Java 7 Applet RCE Gondvv (CVE-2012-4681) | ||
| CPAI-2012-397 |
CVE-2010-3945 |
Preemptive protection against Microsoft CGM File Format Memory Corruption (MS12-057; CVE-2012-2524) | ||
| CPAI-2012-395 |
CVE-2012-2030 |
Adobe Shockwave Player Chunk Parsing Uninitialized Object Access (APSB12-13; CVE-2012-2030) | ||
| CPAI-2012-389 |
CVE-2012-2050 |
Adobe Reader WKT String Buffer Overflow (APSB12-16; CVE-2012-2050) | ||
| CPAI-2012-388 |
CVE-2012-4148 |
Adobe Acrobat PDF File NULL Pointer Dereference Code Execution (APSB12-16; CVE-2012-4148) | ||
| CPAI-2012-360 |
CVE-2007-1447 |
CA BrightStor ARCserve Backup Tape Engine RPC Procedure Memory Corruption (CVE-2007-1447) | ||
| CPAI-2012-354 |
CVE-2012-2049 |
Adobe Acrobat and Reader U3D Texture Parsing Buffer Overflow (APSB12-16; CVE-2012-2049) | ||
| CPAI-2012-345 |
CVE-2012-0469 |
Mozilla Multiple Products IDBKeyRange Use-After-Free (CVE-2012-0469) | ||
| CPAI-2012-335 |
CVE-2011-4566 |
PHP Exif Header Parsing Integer Overflow (CVE-2011-4566) | ||
| CPAI-2012-312 | CVE-2012-2948 | Digium Asterisk Skinny Channel NULL-Pointer Dereference (CVE-2012-2948) | ||
| CPAI-2012-278 | CVE-2012-2415 | Digium Asterisk Skinny Channel Driver Heap Buffer Overflow (CVE-2012-2415) | ||
| CPAI-2012-277 | CVE-2011-4185 | Novell iPrint Client ActiveX GetPrinterURLList2 Code Execution (CVE-2011-4185) | ||
| CPAI-2012-229 |
CVE-2011-4516 |
Oracle Outside In JPEG 2000 COD and COC Parameter Heap Buffer Overflow (CVE-2011-4516) | ||
| CPAI-2012-391 |
CVE-2012-1525 |
Adobe Reader PDF File XSLT Processing Code Execution (APSB12-16; CVE-2012-1525) | ||
| CPAI-2012-362 |
CVE-2012-4150 |
Adobe Reader JBIG2 File Memory Corruption (APSB12-16; CVE-2012-4150) | ||
| CPAI-2012-357 |
CVE-2012-4153 |
Adobe Reader Malformed Entries Memory Corruption (APSB12-16; CVE-2012-4153) | ||
| CPAI-2012-356 |
CVE-2012-4152 |
Adobe Reader PDF File NULL Pointer Dereference Code Execution (APSB12-16; CVE-2012-4152) | ||
| CPAI-2012-355 |
CVE-2012-4151 |
Adobe Reader PDF File Invalid Value Code Execution (APSB12-16; CVE-2012-4151) | ||
| CPAI-2012-353 |
CVE-2012-4147 |
Adobe Acrobat PDF File Array Type Error Memory Corruption (APSB12-16; CVE-2012-4147) | ||
| CPAI-2012-331 |
CVE-2012-1337 |
Cisco WebEx Recording Format Player atas32.dll Subrecords Integer Overflow (CVE-2012-1337) | ||
| CPAI-2012-329 | Blackhole Exploit Kit Adobe Flash Player Vulnerability | |||
| CPAI-2012-320 | ZDI-12-052 | Flexera FlexNet Publisher License Server Manager lmgrd Stack Buffer Overflow | ||
| CPAI-2012-284 | CVE-2012-1335 | Cisco WebEx Recording Format Player atdl2006.dll Buffer Overflow (CVE-2012-1335) | ||
| CPAI-2012-280 |
CVE-2012-0551 |
Oracle GlassFish Enterprise Server Multiple Reflected XSS Vulnerabilities (CVE-2012-0551) | ||
| CPAI-2012-265 | JPEG Non-Compliant Marker ID | |||
| CPAI-2012-352 |
CVE-2012-1535 |
Adobe Flash Player SWF File Remote Code Execution (APSB12-18; CVE-2012-1535) | ||
| CPAI-2012-351 |
CVE-2012-1852 CVE-2012-1853 |
Microsoft Remote Administration Protocol Heap and Stack Overflow (MS12-054; CVE-2012-1852, CVE-2012-1853) | ||
| CPAI-2012-350 |
CVE-2012-2526 |
Microsoft Remote Desktop Protocol Freed Memory Access (MS12-053; CVE-2012-2526) | ||
| CPAI-2012-349 |
CVE-2012-1851 |
Microsoft Windows Print Spooler Format String Code Execution (MS12-054; CVE-2012-1851) | ||
| CPAI-2012-348 |
CVE-2012-1888 |
Microsoft Visio DXF File Parsing Code Execution (MS12-059; CVE-2012-1888) | ||
| CPAI-2012-347 |
CVE-2012-1856 |
Microsoft Windows Common Controls Remote Code Execution (MS12-060; CVE-2012-1856) | ||
| CPAI-2012-343 |
CVE-2012-2522 |
Internet Explorer Virtual Function Table Corruption Remote Code Execution (MS12-052; CVE-2012-2522) | ||
| CPAI-2012-342 |
CVE-2012-2521 |
Internet Explorer NULL Object Access Remote Code Execution (MS12-052; CVE-2012-2521) | ||
| CPAI-2012-341 |
CVE-2012-2523 |
Internet Explorer JavaScript Integer Overflow Remote Code Execution (MS12-056; CVE-2012-2523) | ||
| CPAI-2012-340 |
CVE-2012-1526 |
Internet Explorer Layout Memory Corruption (MS12-052; CVE-2012-1526) | ||
| CPAI-2012-339 | Microsoft Remote Administration Protocol Denial of Service (MS12-054; CVE-2012-1850) | |||
| CPAI-2012-338 |
CVE-2012-0549 |
Oracle AutoVue AutoVueX ActiveX Control SetMarkupMode Stack Buffer Overflow (CVE-2012-0549) | ||
| CPAI-2012-328 |
CVE-2012-0664 |
Apple QuickTime Text Track Descriptors Heap Buffer Overflow (CVE-2012-0664) | ||
| CPAI-2012-319 |
CVE-2012-2611 |
SAP NetWeaver Dispatcher Stack Buffer Overflow | ||
| CPAI-2012-314 | CVE-2012-2031 | Adobe Shockwave Player Chunk Parsing Out of Bounds (APSB12-13; CVE-2012-2031) | ||
| CPAI-2012-327 |
CVE-2012-2152 |
Dhcpcd Packet Size Stack Buffer Overflow (CVE-2012-2152) | ||
| CPAI-2012-326 | ManageEngine DeviceExpert Directory Traversal | |||
| CPAI-2012-325 |
CVE-2005-0563 |
Microsoft Outlook Exchange Server Cross-Site Scripting (MS05-029; CVE-2005-0563) | ||
| CPAI-2012-322 | CVE-2012-2612 | SAP NetWeaver DiagTraceHex Denial of Service (CVE-2012-2612) | ||
| CPAI-2012-299 | CVE-2012-1196 | LANDesk ThinkManagement Suite SetTaskLogByFile Arbitrary File Deletion (CVE-2012-1196) | ||
| CPAI-2012-288 |
CVE-2012-1923 |
RealNetworks Helix Server SNMP Master Agent Open-PDU Denial of Service | ||
| CPAI-2012-283 | Quest InTrust Annotation Objects ActiveX Control Index out of Bounds | |||
| CPAI-2012-282 | CVE-2012-0198 | IBM Tivoli Provisioning Manager Express ActiveX Control Code Execution (CVE-2012-0198) | ||
| CPAI-2012-239 | CVE-2012-1775 | VideoLAN VLC Media Player MMS Plugin Stack Buffer Overflow (CVE-2012-1775) | ||
| CPAI-2012-323 | CVE-2012-3372 | Cyberoam Unified Threat Management CA Certificate SSL Spoofing (CVE-2012-3372) | ||
| CPAI-2012-321 | CVE-2009-0077 | Microsoft Web Proxy TCP State Limited Denial of Service (MS09-016; CVE-2009-0077) | ||
| CPAI-2012-318 | CVE-2012-0245 | ABB Multiple Products RobNetScanHost.exe Stack Buffer Overflow (CVE-2012-0245) | ||
| CPAI-2012-316 | CVE-2012-0942 | RealNetworks Helix Server rn5auth Credential Parsing Buffer Overflow (CVE-2012-0942) | ||
| CPAI-2012-313 | Cisco WebEx Recording Format Player atdl2006.dll Integer Overflow | |||
| CPAI-2012-311 | CVE-2012-0297 | Symantec Web Gateway Management Console Remote Shell Command Execution (CVE-2012-0297) | ||
| CPAI-2012-294 | CVE-2012-0719 | IBM Tivoli Endpoint Manager Web Reports ScheduleParam Cross-site Scripting (CVE-2012-0719) | ||
| CPAI-2012-281 | CVE-2012-1710 | Oracle WebCenter Forms Recognition Sssplt30.ocx Arbitrary File Creation (CVE-2012-1710) | ||
| CPAI-2012-279 | Adobe Photoshop Asset Elements Stack Buffer Overflow | |||
| CPAI-2012-237 | CVE-2012-0010 | Microsoft Internet Explorer Copy And Paste Information Disclosure (MS12-010; CVE-2012-0010) | ||
| CPAI-2012-236 | Dell Webcam Software ActiveX Control CrazyTalk4Native.dll Code Execution | |||
| CPAI-2012-324 | CVE-2011-4188 | Novell iManager Create Attribute EnteredAttrName Buffer Overflow (CVE-2011-4188) | ||
| CPAI-2012-297 | McAfee Virtual Technician ActiveX Control Insecure Method Code Execution | |||
| CPAI-2012-310 | CVE-2012-1861 | Microsoft SharePoint Script in Username Cross-site Scripting (MS12-050; CVE-2012-1861) | ||
| CPAI-2012-309 | CVE-2012-1858 | Preemptive Protection against Microsoft SharePoint HTML Sanitization Cross-site Scripting (MS12-050; CVE-2012-1858) | ||
| CPAI-2012-308 | CVE-2012-1889 | Preemptive Protection against Microsoft XML Uninitialized Memory Corruption (MS12-043; CVE-2012-1889) | ||
| CPAI-2012-307 | CVE-2012-0175 | Microsoft Windows File and Directory Name Command Injection (MS12-048; CVE-2012-0175) | ||
| CPAI-2012-306 | CVE-2012-1859 | Microsoft SharePoint XSS scriptresx.ashx Elevation of Privilege (MS12-050; CVE-2012-1859) | ||
| CPAI-2012-305 | CVE-2012-1524 | Internet Explorer Attribute Remove Remote Code Execution (MS12-044; CVE-2012-1524) | ||
| CPAI-2012-304 | CVE-2012-0163 | Microsoft .NET Framework Parameter Validation Code Execution (MS12-025; CVE-2012-0163) | ||
| CPAI-2012-303 | CVE-2012-1891 | Microsoft Data Access Components ADO Cachesize Heap Overflow (MS12-045; CVE-2012-1891) | ||
| CPAI-2012-302 | CVE-2012-1863 | Microsoft SharePoint Reflected List Parameter XSS (MS12-050; CVE-2012-1863) | ||
| CPAI-2012-301 | CVE-2012-1522 | Internet Explorer Cached Object Remote Code Execution (MS12-044; CVE-2012-1522) | ||
| CPAI-2012-263 | CVE-2012-1854 | Microsoft Visual Basic for Applications Insecure Library Loading (MS12-046; CVE-2012-1854) | ||
| CPAI-2012-295 | CVE-2012-0708 | IBM Rational ClearQuest CQOle ActiveX Code Execution (CVE-2012-0708) | ||
| CPAI-2012-293 | CVE-2012-0296 | Symantec Web Gateway timer.php Multiple Reflected Cross-site Scripting (CVE-2012-0296) | ||
| CPAI-2012-292 | CVE-2012-1569 | GnuTLS libtasn1 ASN1 Length Fields Buffer Overflow (CVE-2012-1569) | ||
| CPAI-2012-291 | CVE-2012-1569 | GnuTLS libtasn1 ASN1 Length DER Decoding Buffer Overflow (CVE-2012-1569) | ||
| CPAI-2012-287 | CVE-2012-1675 | Oracle Database TNS Listener Service Registration Authentication Weakness (CVE-2012-1675) | ||
| CPAI-2012-286 | Adobe Photoshop TIFF Parsing Heap Buffer Overflow | |||
| CPAI-2012-285 | EMC Data Protection Advisor Denial of Service | |||
| CPAI-2012-225 | CVE-2012-0392 | Apache Struts 2 CookieInterceptor OGNL Script Injection (CVE-2012-0392) | ||
| CPAI-2012-276 | Cisco Linksys PlayerPT ActiveX Control Buffer Overflow | |||
| CPAI-2012-275 | CVE-2012-2038 | Adobe Flash Player Malicious SWF File Security Bypass (APSB12-14; CVE-2012-2038) | ||
| CPAI-2012-274 | CVE-2012-2034 | Adobe Flash Player ActionScript DOM Object Memory Corruption (APSB12-14; CVE-2012-2034) | ||
| CPAI-2012-273 | CVE-2012-2035 | Adobe Flash Player Malicious JavaScript Code Execution (APSB12-14; CVE-2012-2035) | ||
| CPAI-2012-272 | CVE-2012-2037 | Adobe Flash Player Malicious Field Memory Corruption (APSB12-14; CVE-2012-2037) | ||
| CPAI-2012-270 | CVE-2011-3176 | Novell ZENworks Configuration Management PreBoot Opcode 6c Buffer Overflow (CVE-2011-3176) | ||
| CPAI-2012-269 | CVE-2012-2039 | Adobe Flash Player ActionScript NULL Pointer Dereferences (APSB12-14; CVE-2012-2039) | ||
| CPAI-2012-268 | CVE-2012-2036 | Adobe Flash Player ActionScript Integer Overflow (APSB12-14; CVE-2012-2036) | ||
| CPAI-2012-267 | CVE-2008-2253 | Microsoft Media Player Audio Sampling Rate Memory Corruption (MS08-054; CVE-2008-2253) | ||
| CPAI-2012-266 | CVE-2011-3176 | Novell ZENworks Configuration Management PreBoot Service Buffer Overflow | ||
| CPAI-2012-254 | CVE-2012-1849 | Microsoft Lync Insecure Library Loading Code Execution (MS12-039; CVE-2012-1849) | ||
| CPAI-2012-271 | CVE-2012-1889 | Microsoft XML Core Services Remote Code Execution (KB2719615; CVE-2012-1889) | ||
| CPAI-2012-264 | CVE-2012-1874 | Internet Explorer Developer Toolbar Remote Code Execution (MS12-037; CVE-2012-1874) | ||
| CPAI-2012-262 | CVE-2012-1523 | Internet Explorer Center Element Remote Code Execution (MS12-037; CVE-2012-1523) | ||
| CPAI-2012-261 | CVE-2012-0018 | Microsoft Visio Viewer VSD File Attributes Validation Error (MS12-031; CVE-2012-0018) | ||
| CPAI-2012-260 | CVE-2012-1857 | Microsoft Dynamic AX Enterprise Portal Cross-site Scripting (MS12-040; CVE-2012-1857) | ||
| CPAI-2012-259 | CVE-2012-1855 | Microsoft .NET Framework Function Pointer Remote Code Execution (MS12-038; CVE-2012-1855) | ||
| CPAI-2012-258 | CVE-2012-1879 | Internet Explorer insertAdjacentText Remote Code Execution (MS12-037; CVE-2012-1879) | ||
| CPAI-2012-257 | CVE-2012-1878 | Internet Explorer OnBeforeDeactivate Event Remote Code Execution (MS12-037; CVE-2012-1878) | ||
| CPAI-2012-256 | CVE-2012-1877 | Internet Explorer Title Element Change Remote Code Execution (MS12-037; CVE-2012-1877) | ||
| CPAI-2012-255 | CVE-2012-1858 | Internet Explorer HTML Sanitization Information Disclosure (MS12-039; CVE-2012-1858) | ||
| CPAI-2012-253 | CVE-2012-1880 | Internet Explorer insertRow Remote Code Execution (MS12-037; CVE-2012-1880) | ||
| CPAI-2012-252 | CVE-2012-1881 | Internet Explorer OnRowsInserted Event Remote Code Execution (MS12-037; CVE-2012-1881) | ||
| CPAI-2012-251 | CVE-2012-1876 | Internet Explorer Col Element Remote Code Execution (MS12-037; CVE-2012-1876) | ||
| CPAI-2012-249 | CVE-2012-1873 | Internet Explorer Process Memory Information Disclosure (MS12-037; CVE-2012-1873) | ||
| CPAI-2012-248 | CVE-2012-1875 | Internet Explorer Same ID Property Remote Code Execution (MS12-037; CVE-2012-1875) | ||
| CPAI-2012-247 | CVE-2012-1195 | LANDesk ThinkManagement Suite ServerSetup.asmx Directory Traversal (CVE-2012-1195) | ||
| CPAI-2012-246 | CVE-2012-1709 | Oracle WebCenter Forms Recognition ActiveX Control Arbitrary File Creation (CVE-2012-1709) | ||
| CPAI-2012-250 | Microsoft Fraudulent Digital Certificates Spoofing (2718704) | |||
| CPAI-2012-245 | Microsoft Windows Worm.Win32.Flame.A Information Collection | |||
| CPAI-2012-243 | CVE-2011-5007 | Smart Software Solutions CoDeSys ControlService Stack Buffer Overflow (CVE-2011-5007) | ||
| CPAI-2012-242 | CVE-2012-0160 | Microsoft .NET Framework Serialization Data Validation Error (MS12-035; CVE-2012-0160) | ||
| CPAI-2012-241 | CVE-2012-0161 | Microsoft .NET Framework Serialization Code Execution (MS12-035; CVE-2012-0161) | ||
| CPAI-2012-238 | CVE-2011-1965 | Microsoft Windows TCP/IP QOS Denial of Service (MS11-064; CVE-2011-1965) | ||
| CPAI-2012-226 | Digium Asterisk Management Interface Out-of-Bounds Stack Buffer Overflow | |||
| CPAI-2012-223 | CA Total Defense Suite UNCWS exportReport SQL Injection | |||
| CPAI-2012-204 | CVE-2012-0499 | Oracle Java Runtime True Type Font IDEF Opcode Heap Buffer Overflow (CVE-2012-0499) | ||
| CPAI-2012-235 | CVE-2012-0779 | Adobe Flash Player Object Confusion Code Execution (APSB12-09; CVE-2012-0779) | ||
| CPAI-2012-233 | CVE-2012-1823 | PHP php-cgi Query String Parameter Code Execution (CVE-2012-1823) | ||
| CPAI-2012-232 | CVE-2012-0499 | Oracle Java Runtime TTF Heap Buffer Overflow (CVE-2012-0499) | ||
| CPAI-2012-231 | CVE-2011-4191 | Novell Netware XNFS.NLM Caller Name xdrDecodeString Heap Buffer Overflow (CVE-2011-4191) | ||
| CPAI-2012-230 | CVE-2011-3319 | Cisco WebEx Player ATDL2006.dll Heap Memory Corruption (CVE-2011-3319) | ||
| CPAI-2012-227 | CVE-2011-3045 | libpng png_inflate Buffer Overflow (CVE-2011-3045) | ||
| CPAI-2012-224 | CVE-2011-4194 | Novell iPrint Server attributes-natural-language Buffer Overflow (CVE-2011-4194) | ||
| CPAI-2012-222 | CVE-2012-0395 | EMC NetWorker nsrindexd.exe Buffer Overflow (CVE-2012-0395) | ||
| CPAI-2012-221 | CVE-2012-0501 | Oracle Java zip_util readCEN Stack Overflow (CVE-2012-0501) | ||
| CPAI-2012-220 | Novell GroupWise Messenger nmma.exe Login Memory Corruption | |||
| CPAI-2012-219 | CVE-2010-2561 | Microsoft XML Core Services Response Handling Memory Corruption (MS10-051; CVE-2010-2561) | ||
| CPAI-2012-218 | PHP htmlspecialchars htmlentities Buffer Overflow | |||
| CPAI-2012-217 | CVE-2011-3923 | Apache Struts 2 ParametersInterceptor OGNL Command Execution (CVE-2011-3923) | ||
| CPAI-2012-216 | CVE-2012-0199 | IBM Tivoli Provisioning Manager Express User.updateUserValue SQL Injection (CVE-2012-0199) | ||
| CPAI-2012-214 | CVE-2012-0199 | IBM Tivoli Provisioning Manager Express Asset.getMimeType SQL Injection (CVE-2012-0199) | ||
| CPAI-2012-213 | CVE-2010-3269 | Cisco WebEx Player Malformed .WRF File Code Execution (CVE-2010-3269) | ||
| CPAI-2012-212 | CVE-2009-2621 | Squid Proxy Invalid HTTP Request Denial of Service (CVE-2009-2621) | ||
| CPAI-2012-211 | CVE-2011-3478 | Symantec pcAnywhere Host Services Login Remote Code Execution (CVE-2011-3478) | ||
| CPAI-2012-210 | CVE-2012-0110 | Oracle Outside In Lotus 1-2-3 Heap Buffer Overflow (CVE-2012-0110) | ||
| CPAI-2012-209 | CVE-2012-0830 | PHP php_register_variable_ex Function Code Execution (CVE-2012-0830) | ||
| CPAI-2012-208 | CVE-2011-4189 | Novell GroupWise Address Book Heap Buffer Overflow (CVE-2011-4189) | ||
| CPAI-2012-207 | CVE-2011-3026 | libpng png_decompress_chunk Integer Overflow (CVE-2011-3026) | ||
| CPAI-2012-206 | CVE-2011-4789 | HP Diagnostics magentservice.exe Code Execution (CVE-2011-4789) | ||
| CPAI-2012-205 | CVE-2012-0870 | Samba smbd Packets Infinite Loop Code Execution (CVE-2012-0870) | ||
| CPAI-2012-203 | Novell eDirectory Unchecked Length Denial of Service | |||
| CPAI-2012-202 | CVE-2011-3000 | Mozilla Multiple Products Multiple Location Headers CRLF Injection (CVE-2011-3000) | ||
| CPAI-2012-201 | CVE-2011-3167 | HP OpenView Network Node Manager ov.dll Buffer Overflow (CVE-2011-3167) | ||
| CPAI-2012-196 | CVE-2011-2131 | Adobe Photoshop CS5 Malformed GIF File Code Execution (APSB11-22; CVE-2011-2131) | ||
| CPAI-2012-192 | CVE-2011-3834 | Nullsoft Winamp RIFF INFO Record Heap Buffer Overflow (CVE-2011-3834) | ||
| CPAI-2012-191 | CVE-2011-0609 | Adobe Flash Player Malformed SWF Memory Corruption (APSA11-01; CVE-2011-0609) | ||
| CPAI-2012-188 | CVE-2012-0189 | IBM SPSS VsVIEW6.ocx ActiveX control Code Execution (CVE-2012-0189) | ||
| CPAI-2012-187 | ASUS Net4Switch ipswcom.dll ActiveX Control Stack Buffer Overflow | |||
| CPAI-2012-186 | CVE-2011-4786 | HP Easy Printer Care ActiveX Control Directory Traversal (CVE-2011-4786) | ||
| CPAI-2012-185 | Citrix Provisioning Services streamprocess.exe Integer Underflow | |||
| CPAI-2012-184 | IBM solidDB ROWNUM Subquery Denial of Service | |||
| CPAI-2012-183 | Oracle Outside In OOXML Relationship Tag Parsing Stack Buffer Overflow | |||
| CPAI-2012-182 | CVE-2012-0247 | ImageMagick EXIF ResolutionUnit Handling Memory Corruption (CVE-2012-0247) | ||
| CPAI-2012-181 | CVE-2012-0444 | Mozilla Multiple Products Ogg Vorbis Decoding Memory Corruption (CVE-2012-0444) | ||
| CPAI-2012-177 | CVE-2011-4862 | Multiple Vendors BSD telnetd Encryption Key Buffer Overflow (CVE-2011-4862) | ||
| CPAI-2012-176 | CVE-2011-1388 | IBM Rational Rhapsody BBFlashBack.Recorder.dll Multiple Code Execution (CVE-2011-1388) | ||
| CPAI-2012-175 | CVE-2012-0053 | Apache HTTPD Error Code 400 httpOnly Cookie Handling Information Disclosure (CVE-2012-0053) | ||
| CPAI-2012-174 | Novell GroupWise Messenger nmma.exe createsearch Memory Corruption | |||
| CPAI-2012-172 | CVE-2011-3205 | Squid Proxy Gopher Response Processing Denial of Service (CVE-2011-3205) | ||
| CPAI-2012-171 | CVE-2011-3210 | OpenSSL Handshake Sequence Cipher Suite Use-After-Free (CVE-2011-3210) | ||
| CPAI-2012-170 | CVE-2011-3179 | Novell Groupwise Messenger Server Process Memory Information Disclosure (CVE-2011-3179) | ||
| CPAI-2012-169 | CVE-2011-4536 | WellinTech Kingview SCADA Heap Buffer Overflow (CVE-2011-4536) | ||
| CPAI-2012-168 | CVE-2011-3250 | Apple QuickTime JPEG 2000 COD Length Integer Underflow (CVE-2011-3250) | ||
| CPAI-2012-167 | CVE-2012-0021 | Apache HTTPD mod_log_config Cookie Handling Denial of Service (CVE-2012-0021) | ||
| CPAI-2012-166 | CVE-2012-0200 | IBM solidDB Redundant WHERE Clause Denial Of Service (CVE-2012-0200) | ||
| CPAI-2012-165 | CVE-2011-3166 | HP OpenView Network Node Manager webappmon.exe Buffer Overflow (CVE-2011-3166) | ||
| CPAI-2012-164 | CVE-2011-3210 | OpenSSL Handshake Requests ECDH Use-After-Free (CVE-2011-3210) | ||
| CPAI-2012-151 | CVE-2011-4259 | RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption (CVE-2011-4259) | ||
| CPAI-2012-096 | Microsoft Excel Window2 Record Use-After-Free | |||
| CPAI-2012-215 | CVE-2012-1847 | Microsoft Excel SERIES Record Parsing Code Execution (MS12-030; CVE-2012-1847) | ||
| CPAI-2012-200 | CVE-2012-0162 | Microsoft .NET Framework XBAP Buffer Allocation Code Execution (MS12-034; CVE-2012-0162) | ||
| CPAI-2012-199 | CVE-2012-0176 | Microsoft Silverlight Double-Free Remote Code Execution (MS12-034; CVE-2012-0176) | ||
| CPAI-2012-198 | CVE-2012-0159 | Microsoft Windows Malformed TrueType Font Remote Code Execution (MS12-034; CVE-2012-0159) | ||
| CPAI-2012-197 | CVE-2012-0184 | Microsoft Excel SXLI Record Memory Corruption (MS12-030; CVE-2012-0184) | ||
| CPAI-2012-195 | CVE-2012-0143 | Microsoft Excel Record Structure Memory Corruption (MS12-030; CVE-2012-0143) | ||
| CPAI-2012-194 | CVE-2012-0141 | Microsoft Excel File Format Code Execution (MS12-030; CVE-2012-0141) | ||
| CPAI-2012-190 | CVE-2012-0167 | Microsoft Windows GDI+ EMF Heap Overflow (MS12-034; CVE-2012-0167) | ||
| CPAI-2012-189 | CVE-2012-0183 | Microsoft Office RTF Mismatch Memory Corruption (MS12-029; CVE-2012-0183) | ||
| CPAI-2012-180 | CVE-2012-0165 | Microsoft Windows GDI+ Record Type Code Execution (MS12-034; CVE-2012-0165) | ||
| CPAI-2012-179 | CVE-2012-0142 | Microsoft Excel File Format OBJECTLINK Record Memory Corruption (MS12-030; CVE-2012-0142) | ||
| CPAI-2012-178 | CVE-2012-0185 | Microsoft Excel MergeCells Record Heap Overflow (MS12-030; CVE-2012-0185) | ||
| CPAI-2012-173 | MPlayer for Win32 Calloc Integer Overflow | |||
| CPAI-2012-163 | CVE-2011-1988 | Microsoft Excel Incorrect BIFF2 Record Parsing Code Execution (MS11-072; CVE-2011-1988) | ||
| CPAI-2012-162 | CVE-2011-1273 | Microsoft Office Excel Record Type Confusion (MS11-045; CVE-2011-1273) | ||
| CPAI-2012-161 | CVE-2009-0086 | Microsoft Windows HTTP Services Chunked Encoding Integer Overflow (MS09-013; CVE-2009-0086) | ||
| CPAI-2012-160 | CVE-2011-0653 | Microsoft SharePoint Calendar Cross-Site Scripting (MS11-074; CVE-2011-0653) | ||
| CPAI-2012-158 | CVE-2012-0500 | Oracle Java Web Start Command Argument Injection Remote Code Execution (CVE-2012-0500) | ||
| CPAI-2012-157 | CVE-2012-0774 | Adobe Reader and Acrobat TTF MINDEX Code Execution (APSB12-08; CVE-2012-0774) | ||
| CPAI-2012-156 | CVE-2012-0775 | Adobe Acrobat and Reader JavaScript Memory Corruption (APSB12-08; CVE-2012-0775) | ||
| CPAI-2012-154 | CVE-2011-0961 | Cisco Common Services Framework Help Servlet Cross-Site Scripting (CVE-2011-0961) | ||
| CPAI-2012-153 | CVE-2012-0776 | Adobe Reader Installer Security Bypass (APSB12-08; CVE-2012-0776) | ||
| CPAI-2012-152 | CVE-2011-0097 | Microsoft Excel Substream Parsing Integer Overflow (MS11-021; CVE-2011-0097) | ||
| CPAI-2012-140 | CVE-2011-1983 | Microsoft Office Word Hidden Border Use-After-Free (MS11-089; CVE-2011-1983) | ||
| CPAI-2012-091 | HP Data Protector Media Operations Directory Traversal | |||
| CPAI-2012-150 |
CVE-2012-0507 CVE-2009-1671 |
Protection against Black Hole Toolkit v1.2.3 Java Array Exploits (CVE-2009-1671; CVE-2012-0507) | ||
| CPAI-2012-149 | CVE-2012-0505 | Oracle Java Runtime Environment Sandbox Breach (CVE-2012-0505) | ||
| CPAI-2012-148 | CVE-2011-0531 | VideoLAN VLC MKV Memory Corruption (CVE-2011-0531) | ||
| CPAI-2012-147 | Oracle Java Software Update Remote Code Execution | |||
| CPAI-2012-146 | CVE-2005-0402 | Mozilla Firefox Sidebar Panel Code Execution (CVE-2005-0402) | ||
| CPAI-2012-145 | CVE-2005-2920 | ClamAV AntiVirus UPX Compressed PE Executable Files Buffer Overflow (CVE-2005-2920) | ||
| CPAI-2012-144 | CVE-2010-0268 | Microsoft Windows Media Player ActiveX Control Code Execution (MS10-027; CVE-2010-0268) | ||
| CPAI-2012-143 | CVE-2008-4388 | Symantec AppStream Client LaunchObj ActiveX Control Code Execution (CVE-2008-4388) | ||
| CPAI-2012-142 | CVE-2011-1655 | CA Total Defense Suite getDBConfigSettings Information Disclosure (CVE-2011-1655) | ||
| CPAI-2012-141 | Blue Coat BCAAA Stack Buffer Overflow | |||
| CPAI-2012-139 | CVE-2012-0507 | Oracle Java AtomicReferenceArray Sandbox Breach Code Execution (CVE-2012-0507) | ||
| CPAI-2012-138 | CVE-2011-5001 | Trend Micro Control Manager CmdProcessor.exe AddTask Stack Buffer Overflow (CVE-2011-5001) | ||
| CPAI-2012-137 | CVE-2011-3834 | Nullsoft Winamp AVI Stream Count Integer Overflow (CVE-2011-3834) | ||
| CPAI-2012-136 | CVE-2011-3174 | Flexera InstallShield DoFindReplace Multiple Heap Buffer Overflows (CVE-2011-3174) | ||
| CPAI-2012-135 | Avaya WinPDM Unite Host Router Service Stack Buffer Overflow | |||
| CPAI-2012-134 | CVE-2011-4052 | InduSoft Web Studio Remote Agent Buffer Overflow (CVE-2011-4052) | ||
| CPAI-2012-121 | CVE-2006-0010 | Microsoft Windows Embedded Web Font Handling Buffer Overflow (CVE-2006-0010) | ||
| CPAI-2012-120 | CVE-2012-0391 | Apache Struts 2 ConversionErrorInterceptor OGNL Script Injection (CVE-2012-0391) | ||
| CPAI-2012-133 | CVE-2012-0158 | MSCOMCTL.OCX Killbit: bdd1f04b-858b-11d1-b16a-00c0f0283628 (MS12-027; CVE-2012-0158) | ||
| CPAI-2012-132 | CVE-2012-0158 | MSCOMCTL.OCX Killbit: 996BF5E0-8044-4650-ADEB-0B013914E99C (MS12-027; CVE-2012-0158) | ||
| CPAI-2012-131 | CVE-2012-0158 | MSCOMCTL.OCX Killbit: C74190B6-8589-11d1-B16A-00C0F0283628 (MS12-027; CVE-2012-0158) | ||
| CPAI-2012-130 | CVE-2012-0158 | MSCOMCTL.OCX Killbit: 9181DC5F-E07D-418A-ACA6-8EEA1ECB8E9E (MS12-027; CVE-2012-0158) | ||
| CPAI-2012-129 | CVE-2012-0158 | Microsoft MSCOMCTL.OCX ActiveX Control Remote Code Execution (MS12-027; CVE-2012-0158) | ||
| CPAI-2012-128 | CVE-2012-0177 | Microsoft Office WPS Converter Heap Overflow (MS12-028; CVE-2012-0177) | ||
| CPAI-2012-127 | CVE-2012-0172 | Internet Explorer VML Style Remote Code Execution (MS12-023; CVE-2012-0172) | ||
| CPAI-2012-126 | CVE-2012-0773 | Adobe Flash Player NetStream class Code Execution (APSB12-07; CVE-2012-0773) | ||
| CPAI-2012-125 | CVE-2012-0171 | Internet Explorer SelectAll Remote Code Execution (MS12-023; CVE-2012-0171) | ||
| CPAI-2012-124 | CVE-2012-0170 | Internet Explorer OnReadyStateChange Remote Code Execution (MS12-023; CVE-2012-0170) | ||
| CPAI-2012-123 | CVE-2012-0151 | Microsoft Windows Signature Validation Remote Code Execution (MS12-024; CVE-2012-0151) | ||
| CPAI-2012-122 | CVE-2012-0772 | Adobe Flash Player URL Security Domain Checking Code Execution (APSB12-07; CVE-2012-0772) | ||
| CPAI-2012-119 | WebSocket Traffic Over HTTP port | |||
| CPAI-2012-118 | Non-HTTP Traffic over HTTP Port | |||
| CPAI-2012-116 | CVE-2011-3158 | HP Data Protector Multiple Products RequestCopy SQL Injection (CVE-2011-3158) | ||
| CPAI-2012-115 | CVE-2011-4191 | Novell Netware XNFS.NLM xdrDecodeString Heap Buffer Overflow (CVE-2011-4191) | ||
| CPAI-2012-114 | CVE-2010-0028 | Microsoft Paint JPEG Image Parsing Integer Overflow (MS10-005; CVE-2010-0028) | ||
| CPAI-2012-113 | CVE-2007-0221 | Microsoft Exchange Server IMAP Command Denial of Service (MS07-026; CVE-2007-0221) | ||
| CPAI-2012-111 | CVE-2011-2397 | Autonomy Connected Backup Agent.exe Command Injection | ||
| CPAI-2012-110 | Smart Software Solutions CoDeSys Gateway Server Integer Overflow | |||
| CPAI-2012-109 | Microsoft Excel VBA Module Stream Use-After-Free | |||
| CPAI-2012-108 | CVE-2011-4191 | Novell Netware XNFS.NLM Heap Buffer Overflow (CVE-2011-4191) | ||
| CPAI-2012-107 | CVE-2011-3494 | Interactive Data eSignal Stack Buffer Overflow (CVE-2011-3494) | ||
| CPAI-2012-101 | CVE-2011-3360 | Wireshark Insecure Search Path Script Execution (CVE-2011-3360) | ||
| CPAI-2012-093 | Siemens SIMATIC WinCC Flexible Runtime Stack Buffer Overflow | |||
| CPAI-2012-033 | Nullsoft Winamp Malformed MIDI File Buffer Overflow | |||
| CPAI-2012-106 | CVE-2011-3545 | Oracle Java Array Index Out-of-Bounds Code Execution (CVE-2011-3545) | ||
| CPAI-2012-105 | CVE-2011-3490 | Measuresoft ScadaPro xf Command Execution (CVE-2011-3490) | ||
| CPAI-2012-104 | Viscom Software Image Viewer ActiveX Buffer Overflow | |||
| CPAI-2012-103 | Web Servers Multiple IMAP Initial Connection Requests Denial of Service | |||
| CPAI-2012-102 | Executable File Embedded in JPEG File Vulnerabilities | |||
| CPAI-2012-100 | CVE-2011-3162 | HP Data Protector Multiple Products FinishedCopy SQL Injection (CVE-2011-3162) | ||
| CPAI-2012-098 | CVE-2011-2453 | Adobe Flash Player SWF Tag Size Mismatch Vulnerabilities | ||
| CPAI-2012-097 | CVE-2011-4051 | InduSoft Web Studio Insecure Remote Operations (CVE-2011-4051) | ||
| CPAI-2012-095 | CVE-2011-3157 | HP Data Protector Multiple Products GetPolicies SQL Injection (CVE-2011-3157) | ||
| CPAI-2012-094 | CVE-2011-2657 | Novell ZENworks LaunchHelp.dll ActiveX Control Code Execution (CVE-2011-2657) | ||
| CPAI-2012-092 | CVE-2011-3544 | Oracle Java Applet Rhino Script Engine Policy Bypass (CVE-2011-3544) | ||
| CPAI-2012-090 | CVE-2011-2003 | Microsoft Windows Font Library File Buffer Overflow (CVE-2011-2003) | ||
| CPAI-2012-083 | Microsoft Excel XLS File Memory Corruption | |||
| CPAI-2012-072 | CVE-2007-0041 | Microsoft .NET Framework CLI Loader Memory Corruption (CVE-2007-0041) | ||
| CPAI-2012-035 | Bennet-Tec TList ActiveX SaveData Arbitrary File Creation | |||
| CPAI-2011-580 | CVE-2011-0552 | Symantec IM Manager Multiple Cross Site Scripting vulnerabilities (CVE-2011-0552) | ||
| CPAI-2012-099 | CVE-2012-0152 | Preemptive Protection against Microsoft Terminal Server Denial of Service (MS12-020; CVE-2012-0152) | ||
| CPAI-2012-089 | CVE-2012-0768 | Adobe Flash Player Stage3D NULL Pointer Dereference (APSB12-05; CVE-2012-0768) | ||
| CPAI-2012-088 | CVE-2012-0769 | Adobe Flash Player ActionScript3 Out Of Bounds Integer Overflow (APSB12-05; CVE-2012-0769) | ||
| CPAI-2012-087 | CVE-2012-0006 | Microsoft DNS Server Denial of Service (MS12-017; CVE-2012-0006) | ||
| CPAI-2012-086 | CVE-2012-0016 | Microsoft Expression Design Insecure Library Loading (MS12-022; CVE-2012-0016) | ||
| CPAI-2012-085 | CVE-2012-0008 | Microsoft Visual Studio Add-In Insecure Library Loading (MS12-021; CVE-2012-0008) | ||
| CPAI-2012-084 | CVE-2012-0002 | Microsoft Windows Remote Desktop Protocol Code Execution (MS12-020; CVE-2012-0002) | ||
| CPAI-2012-082 | CVE-2011-4155 | HP Network Node Manager i Multiple Cross-Site Scripting (CVE-2011-4155) | ||
| CPAI-2012-081 | CVE-2010-0270 | Microsoft SMB Client Response Parsing Code Execution (MS10-020; CVE-2010-0270) | ||
| CPAI-2012-080 | CVE-2011-3156 | HP Data Protector Multiple Products LogClientInstallation SQL Injection (CVE-2011-3156) | ||
| CPAI-2012-079 | CVE-2011-1508 | Microsoft Publisher Function Pointer Overwrite (MS11-091; CVE-2011-1508) | ||
| CPAI-2012-078 | CVE-2009-0195 | CUPS and Xpdf PDF JBIG2 Symbol Dictionary Buffer Overflow (CVE-2009-0195) | ||
| CPAI-2012-077 | CVE-2011-3368 | Apache HTTPD mod_proxy Security Bypass (CVE-2011-3368) | ||
| CPAI-2012-071 | CVE-2012-0753 | Adobe Flash Player Malformed MP4 Code Execution (APSB12-03; CVE-2012-0753) | ||
| CPAI-2012-070 | CVE-2012-0752 | Adobe Flash Player AVM2 Null Dereference Memory Corruption (APSB12-03; CVE-2012-0752) | ||
| CPAI-2012-076 | Non-SNMP Traffic Over Port 161/162 | |||
| CPAI-2012-075 | Non-Telnet Traffic Over Port 23 | |||
| CPAI-2012-074 | Non-SSH Traffic Over Port 22 | |||
| CPAI-2012-073 | Non-FTP Traffic Over Port 20/21 | |||
| CPAI-2012-069 | CVE-2012-0754 | Adobe Flash Player MP4 File Memory Corruption (APSB12-03; CVE-2012-0754) | ||
| CPAI-2012-068 | CVE-2012-0767 | Adobe Flash Player ActiveX Control Cross-Site Scripting (APSB12-03; CVE-2012-0767) | ||
| CPAI-2012-067 | CVE-2012-0756 | Adobe Flash Player Insecure Library Loading (APSB12-03; CVE-2012-0756) | ||
| CPAI-2012-066 | CVE-2012-0751 | Adobe Flash Player ActiveX Control Memory Corruption (APSB12-03; CVE-2012-0751) | ||
| CPAI-2012-064 | CVE-2007-1747 | Microsoft Office Drawing Object Code Execution (MS07-025; CVE-2007-1747) | ||
| CPAI-2012-062 | CVE-2010-4221 | ProFTPD FTP Server TELNET_IAC Stack Buffer Overflow (CVE-2010-4221) | ||
| CPAI-2012-065 | CVE-2006-0025 | Microsoft Windows Media Player PNG Chunk Handling Code Execution (CVE-2006-0025) | ||
| CPAI-2012-061 | CVE-2010-3138 | Microsoft Windows Indeo Codec Insecure Library Loading (MS12-014; CVE-2010-3138) | ||
| CPAI-2012-060 | CVE-2012-0150 | Microsoft Windows msvcrt.dll Media File Code Execution (MS12-013; CVE-2012-0150) | ||
| CPAI-2012-059 | CVE-2012-0138 | Microsoft Visio Viewer File Format Code Execution (MS12-015; CVE-2012-0138) | ||
| CPAI-2012-058 | CVE-2012-0137 | Microsoft Visio Viewer File Format Code Execution (MS12-015; CVE-2012-0137) | ||
| CPAI-2012-057 | CVE-2012-0136 | Microsoft Visio Viewer File Format Code Execution (MS12-015; CVE-2012-0136) | ||
| CPAI-2012-056 | CVE-2012-0014 | Microsoft.NET and Silevrlight Unmanaged Objects Code Execution (MS12-016; CVE-2012-0014) | ||
| CPAI-2012-055 | CVE-2012-0019 | Microsoft Visio Viewer VSD File Format Memory Corruption (MS12-015; CVE-2012-0019) | ||
| CPAI-2012-054 | CVE-2012-0155 | Internet Explorer VML Remote Code Execution (MS12-010; CVE-2012-0155) | ||
| CPAI-2012-053 | CVE-2012-0011 | Internet Explorer HtmlLayout Remote Code Execution (MS12-010; CVE-2012-0011) | ||
| CPAI-2012-052 | CVE-2012-0020 | Microsoft Visio Viewer File Format Code Execution (MS12-015; CVE-2012-0020) | ||
| CPAI-2012-051 | CVE-2010-5082 | Microsoft Color Control Panel Insecure Library Loading (MS12-012; CVE-2010-5082) | ||
| CPAI-2012-050 | CVE-2012-0012 | Internet Explorer Null Byte Information Disclosure (MS12-010; CVE-2012-0012) | ||
| CPAI-2012-049 | CVE-2012-0145 | Microsoft SharePoint wizardlist.aspx Cross-Site Scripting (MS12-011; CVE-2012-0145) | ||
| CPAI-2012-048 | CVE-2012-0144 | Microsoft SharePoint themeweb.aspx Cross-Site Scripting (MS12-011; CVE-2012-0144) | ||
| CPAI-2012-047 | CVE-2012-0017 | Microsoft SharePoint inplview.aspx Cross-Site Scripting (MS12-011; CVE-2012-0017) | ||
| CPAI-2012-046 | CVE-2012-0015 | Microsoft .NET Heap Corruption Code Execution (MS12-016; CVE-2012-0015) | ||
| CPAI-2012-043 | CVE-2010-1883 | Microsoft Embedded OpenType EOT Font Integer Overflow (MS10-076; CVE-2010-1883) | ||
| CPAI-2012-032 | Broadwin WebAccess Client Bwocxrun ActiveX OcxSpool Format String | |||
| CPAI-2012-063 | CVE-2011-1865 | HP OpenView Storage Data Protector Opcode 27 Stack Buffer Overflow | ||
| CPAI-2012-045 | Suspected LOIC Traffic Domains Block List | |||
| CPAI-2012-044 | Web Servers Multiple Requests LOIC Distributed Denial of Service | |||
| CPAI-2012-042 | CVE-2011-0799 | Oracle Warehouse Builder WB_RT_AUDIT_SHADOW_TABLE Multiple SQL Injections (CVE-2011-0799) | ||
| CPAI-2012-041 | CVE-2011-2014 | Microsoft Windows Active Directory LDAPS Authentication Bypass (MS11-086; CVE-2011-2014) | ||
| CPAI-2012-040 | Oracle AutoVue AutoVueX ActiveX Control Export3DBom Remote File Creation | |||
| CPAI-2012-039 | Oracle AutoVue AutoVueX ActiveX Control ExportEdaBom Remote File Creation | |||
| CPAI-2012-038 | CVE-2011-0799 | Oracle Warehouse Builder WB_OLAP_AW_REMOVE_SOLVE_ID SQL Injection (CVE-2011-0799) | ||
| CPAI-2012-037 | Broadwin WebAccess Client Bwocxrun ActiveX OcxSpool Format String | |||
| CPAI-2012-034 | CVE-2007-2446 | Samba SRVSVC RPC sec_io_acl Request Handling Heap Buffer Overflow | ||
| CPAI-2012-032 | CVE-2011-0098 | Microsoft Office Excel Label Record Buffer Overflow | ||
| CPAI-2012-1345 |
CVE-2012-4956 |
NFR Agent Heap Overflow (CVE-2012-4956) | ||
| CPAI-2012-031 | CVE-2011-4372CVE-2011-2438 | Preemptive Protection against Adobe Reader and Acrobat Embedded BMP Malicious JavaScript Memory Corruption (APSB12-01; CVE-2011-4372) | ||
| CPAI-2012-030 | CVE-2011-4373 | Adobe Reader and Acrobat Embedded BMP Memory Corruption (APSB12-01; CVE-2012-4373) | ||
| CPAI-2012-029 | CVE-2011-4371 | Adobe Reader and Acrobat Malformed JavaScript Heap Corruption (APSB12-01; CVE-2011-4371) | ||
| CPAI-2012-028 | CVE-2011-4370 | Adobe Acrobat and Reader JPEG DCT Dequantizer Memory Corruption (APSB12-01; CVE-2011-4370) | ||
| CPAI-2012-027 | CVE-2011-1527 | MIT Kerberos KDC LDAP Back Null Pointer Dereference Denial of Service (CVE-2011-1527) | ||
| CPAI-2012-026 | CVE-2011-2301 | Oracle Database CTXSYS.DRVDISP.TABLEFUNC_ASOWN Buffer Overflow (CVE-2011-2301) | ||
| CPAI-2012-025 | CVE-2011-2813 | Apple Safari WebKit Form Elements Denial of Service (CVE-2011-2813) | ||
| CPAI-2012-024 | CVE-2011-1440 | Google Chrome and Apple Safari Apple Webkit Ruby Memory Corruption (CVE-2011-1440) | ||
| CPAI-2012-023 | Oracle Hyperion Strategic Finance Client ActiveX Control Code Execution | |||
| CPAI-2012-022 | Embarcadero InterBase Connect Request Multiple Stack Buffer Overflows | |||
| CPAI-2012-021 | CVE-2011-4063 | Digium Asterisk SIP Channel Driver Denial of Service (CVE-2011-4063) | ||
| CPAI-2012-015 | CVE-2011-1865 | HP OpenView Storage Data Protector Stack Buffer Overflow (CVE-2011-1865) | ||
| CPAI-2012-011 | CVE-2011-2569 | Cisco NX-OS Interface Commands Privilege Escalation (CVE-2011-2569) | ||
| CPAI-2012-010 | CVE-2011-4096 | Squid DNS Replies Invalid Free Code Execution (CVE-2011-4096) | ||
| CPAI-2012-009 | Nullsoft Winamp Advanced Module Format File Buffer Overflow | |||
| CPAI-2012-008 | CVE-2011-0283 | MIT Kerberos KDC NULL Pointer Denial Of Service (CVE-2011-0283) | ||
| CPAI-2012-007 | CVE-2007-1398 | Sourcefire Snort Packet Fragmentation Reassembly Denial of Service (CVE-2007-1398) | ||
| CPAI-2012-020 | CVE-2011-3389 | Preemptive Protection against SSL and TLS Protocols Information Disclosure (MS12-006; CVE-2011-3389) | ||
| CPAI-2012-019 | CVE-2012-0004 | Microsoft Windows DirectShow Filters Remote Code Execution (MS12-004; CVE-2012-0004) | ||
| CPAI-2012-018 | CVE-2012-0013 | Microsoft Windows Assembly Execution Vulnerability (MS12-005; CVE-2012-0013) | ||
| CPAI-2012-017 | CVE-2012-0007 | Microsoft AntiXSS Library Bypass Information Disclosure (MS12-007; CVE-2012-0007) | ||
| CPAI-2012-016 | CVE-2012-0009 | Microsoft Windows Object Packager Insecure Executable Launching (MS12-002; CVE-2012-0009) | ||
| CPAI-2012-014 | CVE-2012-0003 | Microsoft Windows Media Player MIDI Code Execution (MS12-004; CVE-2012-0003) | ||
| CPAI-2011-128 | Preemptive Protection against Freefloat FTP Server Invalid Command Buffer Overflow | |||
| CPAI-2011-127 | Trend Micro Control Manager CSRF | |||
| CPAI-2011-126 | Novell ZENworks Handheld Management Upload Directory Traversal | |||
| CPAI-2012-013 | CVE-2011-5046 | Microsoft Windows Win32k.sys Malformed IFrame Memory Corruption (MS12-008; CVE-2011-5046) | ||
| CPAI-2012-012 | CVE-2011-3416 | Microsoft ASP.NET Authentication Bypass Elevation of Privilege (MS11-100; CVE-2011-3416) | ||
| CPAI-2012-001 | CVE-2011-3414 | Microsoft ASP.NET and PHP Hash Collision Denial of Service (CVE-2011-3414) | ||
| CPAI-2011-597 | CVE-2011-0084 | Mozilla Multiple Products Malformed SVG Use After Free (CVE-2011-0084) | ||
| CPAI-2011-596 | HP Data Protector Media Operations Memory Corruption | |||
| CPAI-2011-595 | CVE-2011-0554 | Symantec IM Manager Web Interface ProcessAction Code Execution (CVE-2011-0554) | ||
| CPAI-2011-594 | Oracle AutoVue ActiveX Control File Overwrite | |||
| CPAI-2011-592 | CVE-2009-2994 | Adobe Acrobat and Reader U3D CLODMeshDeclaration Memory Corruption (CVE-2009-2994) |
Archives