Archive
14 February 2012
Vulnerabilities first published on this day (UTC), newest first.
59 results · Feed
-
Unscored —CVE-2012-0150 EPSS 24%
Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Go…
-
Unscored —CVE-2012-0145 EPSS 17%
Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and…
-
Unscored —
afd.sys in the Ancillary Function Driver in Microsoft Windows Server 2003 SP2 does not properly validate user-mode inpu…
-
Unscored —
Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…
-
Unscored —CVE-2012-0017 EPSS 17%
Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows r…
-
Unscored —
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windo…
-
Unscored —CVE-2012-0138 EPSS 20%
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remo…
-
Unscored —CVE-2012-0012 EPSS 16%
Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows …
-
Unscored —CVE-2012-0019 EPSS 20%
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remo…
-
Unscored —CVE-2012-0011 EPSS 27%
Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to ex…
-
Unscored —CVE-2012-0020 EPSS 20%
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remo…
-
Unscored —CVE-2012-0144 EPSS 17%
Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and S…
-
Unscored —CVE-2012-0137 EPSS 20%
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remo…
-
Unscored —CVE-2012-0010 EPSS 13%
Microsoft Internet Explorer 6 through 9 does not properly perform copy-and-paste operations, which allows user-assisted…
-
High 7.8CVE-2012-0014 EPSS 28%
Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access t…
-
Unscored —CVE-2012-0155 EPSS 65%
Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbi…
-
Unscored —CVE-2012-0136 EPSS 20%
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remo…
-
Unscored —CVE-2012-0015 EPSS 23%
Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allow…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in admin/update_user in Hulihan Amethyst 0.1.5, and possibly…
-
Unscored —CVE-2010-5083 Public exploit
SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL c…
-
Unscored —
The cross-site request forgery (CSRF) protection mechanism in e107 before 0.7.23 uses a predictable random token based …
-
Unscored —
Open redirect vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows …
-
Unscored —
Cross-site scripting (XSS) vulnerability in lib/class.tx_jftcaforms_tceFunc.php in the Additional TCA Forms (jftcaforms…
-
Unscored —
The System Utilities (sysutils) extension 1.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive infor…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows remote a…
-
Unscored —
SQL injection vulnerability in the Kitchen recipe (mv_cooking) extension before 0.4.1 for TYPO3 allows remote attackers…
-
Unscored —
SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for …
-
Unscored —
SQL injection vulnerability in the Post data records to facebook (bc_post2facebook) extension before 0.2.2 for TYPO3 al…
-
Unscored —
SQL injection vulnerability in the White Papers (mm_whtppr) extension 0.0.4 and earlier for TYPO3 allows remote attacke…
-
Unscored —CVE-2012-1069 Public exploit
Cross-site scripting (XSS) vulnerability in module/kb/search_word in the search module in lknSupport allows remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject ar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the UrlTool (aeurltool) extension 0.1.0 for TYPO3 allows remote attackers t…
-
Unscored —CVE-2012-1009 Public exploit
NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of …
-
Unscored —
SQL injection vulnerability in the Documents download (rtg_files) extension before 1.5.2 for TYPO3 allows remote attack…
-
Unscored —
Unspecified vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows remote attackers to obt…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Yet another Google search (ya_googlesearch) extension before 0.3.10 for…
-
Unscored —CVE-2012-1065 Public exploit
Insecure method vulnerability in TuxScripting.dll in the TuxSystem ActiveX control in 2X ApplicationServer 10.1 Build 1…
-
Unscored —
SQL injection vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 allows remote a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Documents download (rtg_files) extension before 1.5.2 for TYPO3 allows …