NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
42765 | CVE-2012-0677 | Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist. | 2 | 9.3 | High | 2017-01-19 | 2013-11-02 | View | |
43021 | CVE-2012-0986 | Multiple cross-site scripting (XSS) vulnerabilities in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) notifications.php, (2) modules/system/admin/images/browser.php, and (3) modules/content/admin/content.php. | 2 | 4.3 | Medium | 2017-01-19 | 2012-10-08 | View | |
43277 | CVE-2012-1328 | Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237. | 2 | 4.6 | Medium | 2017-01-19 | 2012-05-04 | View | |
43533 | CVE-2012-1661 | ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map (.mxd) file. | 2 | 9.3 | High | 2017-01-19 | 2012-07-16 | View | |
43789 | CVE-2012-1930 | Opera before 11.62 on UNIX uses world-readable permissions for temporary files during printing, which allows local users to obtain sensitive information by reading these files. | 2 | 4.6 | Medium | 2017-01-19 | 2012-10-09 | View |
Page 821 of 17672, showing 5 records out of 88360 total, starting on record 4101, ending on 4105