Skip to content
OpenAdvisories

Archive

14 February 2012

Vulnerabilities first published on this day (UTC), newest first.

59 results · Feed

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 all…

  • Unscored —

    Unspecified vulnerability in the Webservices for TYPO3 (typo3_webservice) extension before 0.3.8 for TYPO3 allows remot…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 al…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Post data records to facebook (bc_post2facebook) extension before 0.2.2…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Euro Calculator (skt_eurocalc) extension 0.0.1 allows remote attackers …

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TY…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the WP-RecentComments plugin before 2.0…

  • Unscored —
    CVE-2012-0789 Public exploit

    Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (mem…

  • Unscored —
    CVE-2012-0788 Public exploit

    The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote …

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers …

  • Unscored —

    Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to exec…

  • Unscored —

    The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions …

  • Unscored —

    SQL injection vulnerability in GForge Advanced Server 6.0.0 and other versions before 6.0.1 allows remote attackers to …

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in revisioning_theme.inc in the Taxonomy module in the Revisioning …

  • Unscored —

    Heap-based buffer overflow in PhotoLine 17.01 and possibly other versions before 17.02 allows remote attackers to execu…

  • Unscored —
    CVE-2012-1059 Public exploit

    Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce …

  • Unscored —
    CVE-2012-1058 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authenticatio…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote atta…