PUBLIÉES EN
janvier 2012
316 CVE, des plus récentes aux plus anciennes.
CVE-2012-0312Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online Merchant before 2.3.1, allows remote attackers to inject arbitrary web script or HTM…
4.3 MOYENNE
CVE-2012-0311Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3 MOYENNE
CVE-2011-1941Open redirect vulnerability in the redirector feature in phpMyAdmin 3.4.x before 3.4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks…
4.3 MOYENNE
CVE-2011-1940Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to inject arbitrary web script or HTML via a c…
4.3 MOYENNE
CVE-2011-4276The Bluetooth service (com/android/phone/BluetoothHeadsetService.java) in Android 2.3 before 2.3.6 allows remote attackers within Bluetooth range to obtain contact data via an AT p…
4.3 MOYENNE
CVE-2011-4123Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-3874. Reason: This candidate is a duplicate of CVE-2011-3874. Notes: All CVE users should reference CVE-2…
CVE-2012-0885chan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the res_srtp module is used and media support is improperly configured, allows remote attackers…
4.3 MOYENNE
CVE-2011-3479Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), uses world-writable permissions for product-installati…
6.8 MOYENNE
CVE-2011-3478Symantec pcAnywhere (versions 12.5.x à 12.6.x) est affecté par une faille dans la gestion des données de connexion et d'authentification. Un attaquant peut envoyer une session spéc…
10.0 ÉLEVÉE
CVE-2011-4867The Tencent QQPhoto (com.tencent.qqphoto) application 0.97 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a pas…
5.8 MOYENNE
CVE-2011-4866The Kaixin001 (com.kaixin001.activity) application 1.3.1 and 1.3.3 for Android does not properly protect data, which allows remote attackers to read or modify contact information a…
6.4 MOYENNE
CVE-2011-4865The Tencent WBlog (com.tencent.WBlog) 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message dr…
5.8 MOYENNE
CVE-2011-4864The Tencent MobileQQ (com.tencent.mobileqq) application 2.2 for Android does not properly protect data, which allows remote attackers to read or modify messages and a friends list …
5.8 MOYENNE
CVE-2011-4863The Tencent QQPimSecure (com.tencent.qqpimsecure) application 3.0.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS/MMS messages and…
5.8 MOYENNE
CVE-2011-4773The AnGuanJia (com.anguanjia.safe) application 2.10.343 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list …
5.8 MOYENNE
CVE-2011-4772The 360 KouXin (com.qihoo360.kouxin) application 1.5.3 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list v…
5.8 MOYENNE
CVE-2011-4771The Scan to PDF Free (com.scan.to.pdf.trial) application 2.0.4 for Android does not properly protect data, which allows remote attackers to read or modify scanned files and a Googl…
5.8 MOYENNE
CVE-2011-4770The QIWI Wallet (ru.mw) application before 1.14.2 for Android does not properly protect data, which allows remote attackers to read or modify financial information via a crafted ap…
5.8 MOYENNE
CVE-2011-4769The 360 MobileSafe (com.qihoo360.mobilesafe) application 2.x before 2.3.0 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages a…
5.8 MOYENNE
CVE-2011-4705The Ming Blacklist Free (vc.software.blacklist) application 1.8.1 and 1.9.2.1 for Android does not properly protect data, which allows remote attackers to read or modify blacklists…
5.8 MOYENNE
CVE-2011-4704The Voxofon (com.voxofon) application before 2.5.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS information via a crafted applica…
5.8 MOYENNE
CVE-2011-4703The Limit My Call (com.limited.call.view) application 2.11 for Android does not properly protect data, which allows remote attackers to read or modify call logs and a contact list …
5.8 MOYENNE
CVE-2011-4702The Nimbuzz (com.nimbuzz) application 2.0.8 and 2.0.10 for Android does not properly protect data, which allows remote attackers to read or modify a contact list via a crafted appl…
5.8 MOYENNE
CVE-2011-4701The CallConfirm (jp.gr.java_conf.ofnhwx.callconfirm) application 2.0.0 for Android does not properly protect data, which allows remote attackers to read or modify allow/block lists…
5.8 MOYENNE
CVE-2011-4700The UberMedia UberSocial (com.twidroid) application 7.x before 7.2.4 for Android does not properly protect data, which allows remote attackers to read or modify Twitter information…
5.8 MOYENNE
CVE-2011-4699The Ubermedia Twidroyd Legacy (com.twidroydlegacy) application 4.3.11 for Android does not properly protect data, which allows remote attackers to read or modify Twitter informatio…
6.4 MOYENNE
CVE-2011-4698The AndroidAppTools Easy Filter (com.phoneblocker.android) application 1.1 and 1.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS m…
6.4 MOYENNE
CVE-2011-4697The Xiaomi MiTalk Messenger (com.xiaomi.channel) application before 2.1.320 for Android does not properly protect data, which allows remote attackers to read or modify messaging in…
6.4 MOYENNE
CVE-2012-0919Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 through 03-00-04, and possibly other versions before 03-00-06, allows re…
4.3 MOYENNE
CVE-2012-0918Les suites Hitachi COBOL2002 Net Developer, Net Server et Net Client sont affectées par une faille qui permet à des attaquants distants d'exécuter du code arbitraire sur le système…
10.0 ÉLEVÉE
CVE-2012-0917Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Analyzer 02-01, 02-51 through 02-51-01, and 02-53 through 02-53-02 allows remote attackers to inject arbitrary web…
4.3 MOYENNE
CVE-2012-0916Les utilisateurs de RenRen Talk 2.9 sont touchés par une faille de corruption de mémoire déclenchée lorsque l'application traite un fichier image spécialement conçu. Un attaquant p…
9.3 ÉLEVÉE
CVE-2012-0915RenRen Talk 2.9 est affecté par une faille de corruption de mémoire déclenchée par des fichiers de skins spécialement conçus, comme une image BMP. Un attaquant distant non authenti…
9.3 ÉLEVÉE
CVE-2012-0914Cross-site scripting (XSS) vulnerability in display_renderers/panels_renderer_editor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x…
4.3 MOYENNE
CVE-2012-0913ICloudCenter ICTimeAttendance 1.0 est affecté par une faille dans sa page de connexion qui permet à un attaquant d'envoyer des commandes SQL malveillantes via le champ du mot de pa…
7.5 ÉLEVÉE
CVE-2012-0909Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecifie…
4.3 MOYENNE
CVE-2012-0908Cross-site scripting (XSS) vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTM…
4.3 MOYENNE
CVE-2012-0791Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web scrip…
4.3 MOYENNE
CVE-2012-0790Cross-site scripting (XSS) vulnerability in smokeping_cgi in Smokeping 2.4.2, 2.6.6, and other versions before 2.6.7 allows remote attackers to inject arbitrary web script or HTML …
4.3 MOYENNE
CVE-2012-0389Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows…
4.3 MOYENNE
CVE-2012-0069Les applications web Batavi antérieures à la version 1.2.1 sont vulnérables à l'injection SQL via un paramètre spécifique dans le fichier ajax.php. Un attaquant distant non authent…
7.5 ÉLEVÉE
CVE-2012-0040Cross-site scripting (XSS) vulnerability in modules/core/www/no_cookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitra…
4.3 MOYENNE
CVE-2012-0912Les versions de Stoneware webNetwork antérieures à la 6.0.8.0 sont vulnérables aux injections SQL. Un attaquant distant peut envoyer des requêtes spécialement conçues au serveur po…
7.5 ÉLEVÉE
CVE-2012-0286Cross-site request forgery (CSRF) vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication of unspecified victims for requests that…
6.8 MOYENNE
CVE-2012-0285Multiple cross-site scripting (XSS) vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3 MOYENNE
CVE-2012-0313Cross-site scripting (XSS) vulnerability in glucose 2 before stage 6.2 allows remote attackers to inject arbitrary web script or HTML via an RSS feed.
4.3 MOYENNE
CVE-2011-3928Les versions de Google Chrome antérieures à la 16.0.912.77 sont affectées par un défaut de gestion de la mémoire dans la manière dont le navigateur traite les éléments DOM. Un atta…
7.5 ÉLEVÉE
CVE-2011-3927Les versions de Google Chrome antérieures à la 16.0.912.77 sont concernées en raison d'une initialisation incorrecte dans la bibliothèque graphique Skia. Un attaquant distant peut …
7.5 ÉLEVÉE
CVE-2011-3926Les versions de Google Chrome antérieures à la 16.0.912.77 sont affectées par une faille de corruption de mémoire dans le constructeur d'arborescence (tree builder) du navigateur. …
7.5 ÉLEVÉE
CVE-2011-3925Les versions plus anciennes de Google Chrome (antérieures à la 16.0.912.75) sont affectées par une faille de corruption de mémoire dans la fonctionnalité Safe Browsing. Un attaquan…
7.5 ÉLEVÉE