Archive
January 2012
Vulnerabilities first published in this month (UTC), newest first.
314 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in display_renderers/panels_renderer_editor.class.php in the admin view in the…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before 4.0.6 allows remote at…
-
Unscored —
Integer signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via crafted dimensions of…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Analyzer 02-01, 02-51 through 02-51-01, and 02-53 thr…
-
Unscored —CVE-2012-0389 Public exploit
Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium …
-
Unscored —
Cross-site scripting (XSS) vulnerability in modules/core/www/no_cookie.php in SimpleSAMLphp 1.8.1 and possibly other ve…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 through 03-…
-
Unscored —
SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2012-0913 Public exploit
SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute …
-
Unscored —
Cross-site scripting (XSS) vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 …
-
Unscored —
Unspecified vulnerability in Hitachi COBOL2002 Net Developer, Net Server Suite, and Net Client Suite 01-00, 01-01 throu…
-
Unscored —CVE-2012-0285 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to in…
-
Unscored —
SQL injection vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2012-0286 Public exploit
Cross-site request forgery (CSRF) vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijac…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service o…
-
Unscored —
Use-after-free vulnerability in the Safe Browsing feature in Google Chrome before 16.0.912.75 allows remote attackers t…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service o…
-
Unscored —
Skia, as used in Google Chrome before 16.0.912.77, does not perform all required initialization of values, which allows…
-
Unscored —
Heap-based buffer overflow in the tree builder in Google Chrome before 16.0.912.77 allows remote attackers to cause a d…
-
Unscored —
Cross-site scripting (XSS) vulnerability in glucose 2 before stage 6.2 allows remote attackers to inject arbitrary web …
-
Unscored —
Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might all…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Desktop 7.1.2 b10978 allow remote attackers to inject arb…
-
Unscored —
Directory traversal vulnerability in meb_download.php in the myEASYbackup plugin 1.0.8.1 for WordPress allows remote at…
-
Unscored —CVE-2012-0905 Public exploit
SQL injection vulnerability in deV!L'z Clanportal (DZCP) Gamebase addon allows remote attackers to execute arbitrary SQ…
-
Unscored —
Directory traversal vulnerability in the web player in NeoAxis NeoAxis web player 1.4 and earlier allows user-assisted …
-
Unscored —CVE-2012-0900 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2012-0902 Public exploit
AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin…
-
Unscored —
Cross-site scripting (XSS) vulnerability in yousaytoo.php in YouSayToo auto-publishing plugin 1.0 for WordPress allows …
-
Unscored —CVE-2012-0904 Public exploit
VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file.
-
Unscored —CVE-2012-0899 Public exploit
Cross-site scripting (XSS) vulnerability in referencement/sites_inscription.php in Annuaire PHP allows remote attackers…
-
Unscored —CVE-2012-0895 Public exploit
Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows r…
-
Unscored —
Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute …
-
Unscored —CVE-2012-0906 Public exploit
SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal (DZCP) 1.5.5 allows remote attackers to execu…
-
Unscored —
Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows rem…
-
Unscored —
IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8…
-
Unscored —
Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Ser…
-
Unscored —
Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Ma…
-
Unscored —
Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified v…
-
Unscored —
Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allows re…
-
Unscored —CVE-2012-0050 EPSS 14%
OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial …