Skip to content
OpenAdvisories

Archive

January 2012

Vulnerabilities first published in this month (UTC), newest first.

← December 2011 2012 / January February 2012 →
  1. 1 
  2. 24
  3. 37
  4. 410
  5. 53
  6. 611
  7. 73
  8. 818
  9. 9 
  10. 1014
  11. 11 
  12. 123
  13. 1314
  14. 147
  15. 157
  16. 16 
  17. 172
  18. 1880
  19. 1916
  20. 2014
  21. 21 
  22. 22 
  23. 231
  24. 2423
  25. 2523
  26. 264
  27. 2720
  28. 285
  29. 2920
  30. 305
  31. 31 
All Critical High Medium Low Exploited only Public exploit

63 results · Clear filters · Feed

  • Unscored —
    CVE-2011-4898 Public exploit

    wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messag…

    wordpress Debian
  • Unscored —
    CVE-2011-4899 Public exploit

    wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specifi…

    wordpress Debian
  • Unscored —
    CVE-2012-0937 Public exploit

    wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MyS…

    wordpress Debian
  • Unscored —
    CVE-2012-0782 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordP…

    wordpress Debian
  • Unscored —
    CVE-2011-4337 Public exploit

    Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows re…

  • Unscored —
    CVE-2011-5072 Public exploit

    Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to exe…

  • Unscored —
    CVE-2011-5073 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote att…

  • Unscored —
    CVE-2011-5075 Public exploit

    translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive info…

  • Unscored —
    CVE-2011-5074 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow rem…

  • Unscored —
    CVE-2011-3833 Public exploit EPSS 19%

    Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote…

  • Unscored —
    CVE-2011-3829 Public exploit EPSS 17%

    ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive i…

  • Unscored —
    CVE-2011-5071 Public exploit

    Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to exe…

  • Unscored —
    CVE-2012-0932 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inje…

  • Unscored —
    CVE-2012-0935 Public exploit

    SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2012-0933 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remo…

  • Unscored —
    CVE-2012-0053 Public exploit EPSS 82%

    protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construc…

    apache2 Debian
  • Unscored —
    CVE-2012-0056 Public exploit EPSS 11%

    The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions whe…

  • Unscored —
    CVE-2011-3478 Public exploit EPSS 40%

    The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7…

  • Unscored —
    CVE-2011-3479 Public exploit

    Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12…

  • Unscored —
    CVE-2012-0389 Public exploit

    Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium …

  • Unscored —
    CVE-2012-0913 Public exploit

    SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute …

  • Unscored —
    CVE-2012-0285 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to in…

  • Unscored —
    CVE-2012-0286 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijac…

  • Unscored —
    CVE-2012-0905 Public exploit

    SQL injection vulnerability in deV!L'z Clanportal (DZCP) Gamebase addon allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2012-0900 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2012-0902 Public exploit

    AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin…

  • Unscored —
    CVE-2012-0901 Public exploit

    Cross-site scripting (XSS) vulnerability in yousaytoo.php in YouSayToo auto-publishing plugin 1.0 for WordPress allows …

  • Unscored —
    CVE-2012-0904 Public exploit

    VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file.

  • Unscored —
    CVE-2012-0899 Public exploit

    Cross-site scripting (XSS) vulnerability in referencement/sites_inscription.php in Annuaire PHP allows remote attackers…

  • Unscored —
    CVE-2012-0895 Public exploit

    Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows r…

  • Unscored —
    CVE-2012-0897 Public exploit EPSS 52%

    Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute …

  • Unscored —
    CVE-2012-0906 Public exploit

    SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal (DZCP) 1.5.5 allows remote attackers to execu…

  • Unscored —
    CVE-2012-0896 Public exploit EPSS 23%

    Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows rem…

  • Unscored —
    CVE-2011-4135 Public exploit EPSS 30%

    Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Ma…

  • Unscored —
    CVE-2011-4153 Public exploit EPSS 12%

    PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to ca…

  • Unscored —
    CVE-2012-0031 Public exploit

    scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon …

    apache2 Debian
  • Unscored —
    CVE-2012-0781 Public exploit EPSS 10%

    The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer derefer…

  • Unscored —
    CVE-2012-0266 Public exploit EPSS 42%

    Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2012-0267 Public exploit EPSS 39%

    The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a…

  • Unscored —
    CVE-2011-3597 Public exploit EPSS 13%

    Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute ar…

    perl Debian