Skip to content
OpenAdvisories

Archive

8 February 2012

Vulnerabilities first published on this day (UTC), newest first.

← January 2012 2012 / February /8 March 2012 →
  1. 111
  2. 234
  3. 314
  4. 4 
  5. 51
  6. 65
  7. 79
  8. 831
  9. 920
  10. 107
  11. 112
  12. 124
  13. 135
  14. 1459
  15. 1522
  16. 1621
  17. 177
  18. 1811
  19. 19 
  20. 2022
  21. 2137
  22. 224
  23. 2310
  24. 24 
  25. 254
  26. 26 
  27. 27 
  28. 28 
  29. 293
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2011-5078

    The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3 and 7.0 before ESD# 7 do…

  • Unscored —
    CVE-2012-1035

    AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability t…

  • Unscored —
    CVE-2012-0839

    OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, w…

    ocaml Debian
  • Unscored —
    CVE-2012-1033 EPSS 13%

    The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the proc…

    bind9 Debian
  • Unscored —
    CVE-2012-0928

    The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealP…

  • Unscored —
    CVE-2012-0927

    Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 throug…

  • Unscored —
    CVE-2012-0924

    RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attack…

  • Unscored —
    CVE-2012-0923

    The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, do…

  • Unscored —
    CVE-2012-0926

    The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, do…

  • Unscored —
    CVE-2012-0925

    Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPl…

  • Unscored —
    CVE-2012-0922

    rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allo…

  • Unscored —
    CVE-2012-1034

    Multiple cross-site scripting (XSS) vulnerabilities in the admin interface in EPiServer CMS through 6R2 allow remote at…

  • Unscored —
    CVE-2012-1031

    Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, a…

  • Unscored —
    CVE-2012-1004

    Multiple cross-site scripting (XSS) vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticate…

  • Unscored —
    CVE-2012-1002 Public exploit

    SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2012-1008 Public exploit EPSS 11%

    OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a S…

  • Unscored —
    CVE-2011-5077

    Unrestricted file upload vulnerability in attachement.php in HDWiki 5.0 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2011-5076

    SQL injection vulnerability in model/comment.class.php in HDWiki 5.0, 5.1, and possibly other versions allows remote at…

  • Unscored —
    CVE-2012-1017 Public exploit

    Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allow re…

  • Unscored —
    CVE-2012-1027 Public exploit

    Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x, 3.5.0.1-2, and possi…

  • Unscored —
    CVE-2012-1029 Public exploit

    SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers …

  • Unscored —
    CVE-2012-1019

    Multiple cross-site scripting (XSS) vulnerabilities in XWiki Enterprise 3.4 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2012-1023 Public exploit

    Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary…

  • Unscored —
    CVE-2012-1028 Public exploit

    Cross-site scripting (XSS) vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allo…

  • Unscored —
    CVE-2012-1022 Public exploit

    SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2012-1020

    Multiple cross-site scripting (XSS) vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to i…

  • Unscored —
    CVE-2012-1026 Public exploit

    Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2012-1018 Public exploit

    Cross-site scripting (XSS) vulnerability in includes/convert.php in D-Mack Media Currency Converter (mod_currencyconver…

  • Unscored —
    CVE-2012-1021 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject ar…

  • Unscored —
    CVE-2012-1025 Public exploit

    Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows rem…

  • Unscored —
    CVE-2012-1024 Public exploit

    Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read a…