Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: January 2012

39 records · 1 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2011-4642
    27Monitor

    mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allo

    MediumCVSS 4.6WeaponizedEPSS 28%

    splunk · splunkJan 3, 2012

  • CVE-2011-5052
    36Monitor

    Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long response to a downlo

    MediumCVSS 6.8WeaponizedEPSS 29%

    cocsoft · stream downJan 4, 2012

  • CVE-2011-4858
    44Plan

    Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the abili

    MediumCVSS 5.0WeaponizedEPSS 79%

    apache · tomcatJan 5, 2012

  • CVE-2011-4108
    22Monitor

    The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it

    MediumCVSS 4.3No exploitEPSS 16%

    openssl · opensslJan 5, 2012

  • CVE-2011-4109
    42Plan

    Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspe

    CriticalCVSS 9.3No exploitEPSS 16%

    openssl · opensslJan 5, 2012

  • CVE-2011-4576
    25Monitor

    The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padd

    MediumCVSS 5.0No exploitEPSS 15%

    openssl · opensslJan 5, 2012

  • CVE-2011-4619
    25Monitor

    The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restart

    MediumCVSS 5.0No exploitEPSS 17%

    openssl · opensslJan 5, 2012

  • CVE-2012-0391
    92Now

    The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception ha

    CriticalCVSS 9.8KEVWeaponizedEPSS 75%

    apache · strutsJan 8, 2012

  • CVE-2012-0392
    56Plan

    The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to

    MediumCVSS 6.8Proof of conceptEPSS 97%

    apache · strutsJan 8, 2012

  • CVE-2012-0393
    36Monitor

    The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attac

    MediumCVSS 6.4Proof of conceptEPSS 36%

    apache · strutsJan 8, 2012

  • CVE-2012-0394
    49Plan

    The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrar

    MediumCVSS 6.8WeaponizedEPSS 72%

    apache · strutsJan 8, 2012

  • CVE-2011-5057
    28Monitor

    Apache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly restrict access to collections such as the sessio

    MediumCVSS 5.0Proof of conceptEPSS 27%

    apache · strutsJan 8, 2012

  • CVE-2011-4372
    43Plan

    Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a de

    CriticalCVSS 9.8No exploitEPSS 12%

    adobe · acrobatJan 10, 2012

  • CVE-2011-4373
    48Plan

    Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a de

    CriticalCVSS 9.8No exploitEPSS 30%

    adobe · acrobatJan 10, 2012

  • CVE-2012-0003
    53Plan

    Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Serv

    HighCVSS 8.1WeaponizedEPSS 69%

    microsoft · windows 7Jan 10, 2012

  • CVE-2012-0004
    44Plan

    Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows

    CriticalCVSS 9.3No exploitEPSS 22%

    microsoft · windows 7Jan 10, 2012

  • CVE-2012-0007
    23Monitor

    The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascadi

    MediumCVSS 4.3Proof of conceptEPSS 18%

    microsoft · anti-cross site scripting libraryJan 10, 2012

  • CVE-2012-0009
    42Plan

    Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 all

    CriticalCVSS 9.3No exploitEPSS 17%

    microsoft · windows server 2003Jan 10, 2012

  • CVE-2012-0013
    59Plan

    Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windo

    CriticalCVSS 9.3WeaponizedEPSS 73%

    microsoft · windows 7Jan 10, 2012

  • CVE-2011-4786
    49Plan

    A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitra

    CriticalCVSS 9.3WeaponizedEPSS 39%

    hp · easy printer care softwareJan 12, 2012

  • CVE-2011-4789
    59Plan

    Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbi

    CriticalCVSS 10.0WeaponizedEPSS 64%

    hp · diagnosticsJan 13, 2012

  • CVE-2011-3597
    34Monitor

    Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via

    HighCVSS 7.5Proof of conceptEPSS 13%

    gisle aas · digestJan 13, 2012

  • CVE-2012-0266
    50Plan

    Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a l

    CriticalCVSS 9.3WeaponizedEPSS 42%

    ntrglobal · ntr activex controlJan 14, 2012

  • CVE-2012-0267
    49Plan

    The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule para

    CriticalCVSS 9.3WeaponizedEPSS 38%

    ntrglobal · ntr activex controlJan 14, 2012

  • CVE-2010-5082
    41Plan

    Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and

    CriticalCVSS 9.3No exploitEPSS 14%

    microsoft · windows server 2008Jan 17, 2012

  • CVE-2011-4153
    24Monitor

    PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of servi

    MediumCVSS 5.0Proof of conceptEPSS 11%

    php · phpJan 18, 2012

  • CVE-2012-0781
    23Monitor

    The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application

    MediumCVSS 5.0Proof of conceptEPSS 10%

    php · phpJan 18, 2012

  • CVE-2012-0022
    23Monitor

    Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allo

    MediumCVSS 5.0No exploitEPSS 10%

    apache · tomcatJan 19, 2012

  • CVE-2011-4135
    49Plan

    Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote a

    CriticalCVSS 10.0WeaponizedEPSS 30%

    flexerasoftware · flexnet publisherJan 19, 2012

  • CVE-2012-0050
    24Monitor

    OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) vi

    MediumCVSS 5.0No exploitEPSS 13%

    openssl · opensslJan 19, 2012

  • CVE-2012-0896
    27Monitor

    Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read

    MediumCVSS 5.0Proof of conceptEPSS 22%

    wordpress · wordpressJan 20, 2012

  • CVE-2012-0897
    43Plan

    Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a

    MediumCVSS 6.8WeaponizedEPSS 52%

    irfanview · irfanviewJan 20, 2012

  • CVE-2011-3478
    52Plan

    The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7

    CriticalCVSS 10.0Proof of conceptEPSS 39%

    symantec · pcanywhereJan 25, 2012

  • CVE-2011-3874
    40Plan

    Stack-based buffer overflow in libsysutils in Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6 allows user-assisted remote attackers to e

    CriticalCVSS 9.3No exploitEPSS 11%

    google · androidJan 27, 2012

  • CVE-2012-0056
    30Monitor

    The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<p

    MediumCVSS 6.9Proof of conceptEPSS 10%

    linux · linux kernelJan 27, 2012

  • CVE-2012-0021
    19Monitor

    The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MP

    LowCVSS 2.6No exploitEPSS 30%

    apache · http serverJan 28, 2012

  • CVE-2012-0053
    42Plan

    protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (

    MediumCVSS 4.3Proof of conceptEPSS 82%

    apache · http serverJan 28, 2012

  • CVE-2011-3829
    21Monitor

    ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the fi

    MediumCVSS 4.0WeaponizedEPSS 17%

    sitracker · support incident trackerJan 29, 2012

  • CVE-2011-3833
    30Monitor

    Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users

    MediumCVSS 6.0WeaponizedEPSS 19%

    sitracker · support incident trackerJan 29, 2012