Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: April 2012

31 records · 2 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2012-0221
    23Monitor

    The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 2

    MediumCVSS 5.0Proof of conceptEPSS 10%

    rockwellautomation · factorytalkApr 2, 2012

  • CVE-2011-4044
    40Plan

    An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to

    MediumCVSS 5.8WeaponizedEPSS 26%

    arcinfo · frontvueApr 2, 2012

  • CVE-2011-4535
    40Plan

    Buffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and earlier, ScadaTEC ModbusTagServer 4.1.1.81

    MediumCVSS 6.8WeaponizedEPSS 26%

    scadatec · modbustagserverApr 2, 2012

  • CVE-2012-1337
    44Plan

    Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10,

    CriticalCVSS 9.3No exploitEPSS 23%

    cisco · webex recording format playerApr 5, 2012

  • CVE-2011-3175
    60This week

    Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers

    CriticalCVSS 10.0WeaponizedEPSS 66%

    novell · zenworks configuration managementApr 9, 2012

  • CVE-2011-3176
    61This week

    Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers

    CriticalCVSS 10.0WeaponizedEPSS 70%

    novell · zenworks configuration managementApr 9, 2012

  • CVE-2012-2215
    40Plan

    Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote atta

    MediumCVSS 5.0WeaponizedEPSS 27%

    novell · zenworks configuration managementApr 9, 2012

  • CVE-2012-0146
    26Monitor

    Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirec

    MediumCVSS 5.8No exploitEPSS 10%

    microsoft · forefront unified access gatewayApr 10, 2012

  • CVE-2012-0147
    31Monitor

    Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows re

    MediumCVSS 5.0No exploitEPSS 35%

    microsoft · forefront unified access gatewayApr 10, 2012

  • CVE-2012-0151
    87Now

    The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Se

    HighCVSS 7.8KEVWeaponizedEPSS 87%

    microsoft · windows 7Apr 10, 2012

  • CVE-2012-0158
    95Now

    The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office

    HighCVSS 8.8KEVWeaponizedEPSS 99%

    microsoft · officeApr 10, 2012

  • CVE-2012-0163
    48Plan

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remo

    CriticalCVSS 9.3Proof of conceptEPSS 38%

    microsoft · .net frameworkApr 10, 2012

  • CVE-2012-0168
    35Monitor

    Microsoft Internet Explorer 6 through 9 allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document that is

    HighCVSS 7.6No exploitEPSS 18%

    microsoft · internet explorerApr 10, 2012

  • CVE-2012-0169
    46Plan

    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    CriticalCVSS 9.3No exploitEPSS 30%

    microsoft · internet explorerApr 10, 2012

  • CVE-2012-0170
    44Plan

    Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by a

    CriticalCVSS 9.3No exploitEPSS 22%

    microsoft · internet explorerApr 10, 2012

  • CVE-2012-0171
    45Plan

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    CriticalCVSS 9.3No exploitEPSS 27%

    microsoft · internet explorerApr 10, 2012

  • CVE-2012-0172
    44Plan

    Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    CriticalCVSS 9.3No exploitEPSS 21%

    microsoft · internet explorerApr 10, 2012

  • CVE-2012-0177
    46Plan

    Heap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6-9 File Converter allows rem

    CriticalCVSS 9.3No exploitEPSS 30%

    microsoft · officeApr 10, 2012

  • CVE-2012-1182
    62This week

    The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array len

    CriticalCVSS 10.0WeaponizedEPSS 74%

    samba · sambaApr 10, 2012

  • CVE-2012-0774
    45Plan

    Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code via a crafte

    CriticalCVSS 10.0No exploitEPSS 15%

    adobe · acrobat readerApr 10, 2012

  • CVE-2012-1593
    16Monitor

    epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to c

    LowCVSS 3.3Proof of conceptEPSS 11%

    wireshark · wiresharkApr 11, 2012

  • CVE-2012-0036
    35Monitor

    curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows rem

    HighCVSS 7.5No exploitEPSS 16%

    curl · curlApr 13, 2012

  • CVE-2012-1923
    19Monitor

    RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local

    LowCVSS 2.1No exploitEPSS 38%

    realnetworks · helix serverApr 17, 2012

  • CVE-2012-1180
    23Monitor

    Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from

    MediumCVSS 5.0No exploitEPSS 10%

    f5 · nginxApr 17, 2012

  • CVE-2012-0278
    40Plan

    Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a

    CriticalCVSS 9.3Proof of conceptEPSS 10%

    irfanview · flashpix pluginApr 18, 2012

  • CVE-2012-2110
    44Plan

    The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not pro

    HighCVSS 7.5Proof of conceptEPSS 47%

    openssl · opensslApr 19, 2012

  • CVE-2012-0708
    46Plan

    Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 b

    CriticalCVSS 9.3WeaponizedEPSS 31%

    ibm · rational clearquestApr 22, 2012

  • CVE-2012-2131
    35Monitor

    Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, an

    HighCVSS 7.5Proof of conceptEPSS 16%

    openssl · opensslApr 24, 2012

  • CVE-2012-0470
    43Plan

    Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x b

    CriticalCVSS 10.0No exploitEPSS 10%

    mozilla · firefoxApr 25, 2012

  • CVE-2012-1803
    49Plan

    RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the b

    HighCVSS 8.5WeaponizedEPSS 49%

    siemens · ruggedcom rugged operating systemApr 27, 2012

  • CVE-2012-2213
    24Monitor

    Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in

    MediumCVSS 5.0No exploitEPSS 12%

    squid-cache · squidApr 28, 2012