Skip to content
OpenAdvisories

Archive

20 February 2012

Vulnerabilities first published on this day (UTC), newest first.

← January 2012 2012 / February /20 March 2012 →
  1. 111
  2. 234
  3. 314
  4. 4 
  5. 51
  6. 65
  7. 79
  8. 831
  9. 920
  10. 107
  11. 112
  12. 124
  13. 135
  14. 1459
  15. 1522
  16. 1621
  17. 177
  18. 1811
  19. 19 
  20. 2022
  21. 2137
  22. 224
  23. 2310
  24. 24 
  25. 254
  26. 26 
  27. 27 
  28. 28 
  29. 293
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2011-4187

    Buffer overflow in the GetDriverSettings function in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows …

  • Unscored —
    CVE-2011-4186

    Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to exe…

  • Unscored —
    CVE-2011-4185

    The GetPrinterURLList2 method in the ActiveX control in Novell iPrint Client before 5.78 on Windows allows remote attac…

  • Unscored —
    CVE-2012-0224

    Untrusted search path vulnerability in 7-Technologies (7T) AQUIS 1.5 and earlier allows local users to gain privileges …

  • Unscored —
    CVE-2012-1217 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2012-1214

    Cross-site scripting (XSS) vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows re…

  • Unscored —
    CVE-2012-1216

    Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hija…

  • Unscored —
    CVE-2012-1215

    Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allo…

  • Unscored —
    CVE-2012-0998

    Directory traversal vulnerability in account/preferences.php in LEPTON before 1.1.4 allows remote attackers to include …

  • Unscored —
    CVE-2012-0999

    SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2012-0996 Public exploit

    Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary …

  • Unscored —
    CVE-2012-0997 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attac…

  • Unscored —
    CVE-2012-1213 Public exploit

    Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) …

  • Medium —
    CVE-2012-1209

    Fork CMS XSS via Highlight Parameter

    Cross-site scripting (XSS) vulnerability in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.

    forkcms/forkcms Packagist
  • Unscored —
    CVE-2012-1000

    Multiple cross-site scripting (XSS) vulnerabilities in LEPTON 1.1.3 and other versions before 1.1.4 allow remote attack…

  • Unscored —
    CVE-2012-1208 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly othe…

  • Unscored —
    CVE-2012-1205 Public exploit EPSS 25%

    PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allo…

  • Unscored —
    CVE-2012-1210 Public exploit

    SQL injection vulnerability in pfile/file.php in Powie pFile 1.02 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2012-1212

    Cross-site scripting (XSS) vulnerability in the smwfOnSfSetTargetName function in extensions/SMWHalo/includes/SMW_Initi…

  • Unscored —
    CVE-2012-1211 Public exploit

    Cross-site scripting (XSS) vulnerability in pfile/kommentar.php in Powie pFile 1.02 allows remote attackers to inject a…

  • Unscored —
    CVE-2012-1206

    Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code via large di…

  • Medium —
    CVE-2012-1207

    ForkCMS Directory Traversal vulnerability

    Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter to frontend/js.php.

    forkcms/forkcms Packagist