21 February 2012

37 results · Feed

• Unscored —
  CVE-2011-1914

  Buffer overflow in the Advantech ADAM OLE for Process Control (OPC) Server ActiveX control in ADAM OPC Server before 3.…

  Feb 21, 2012
• Unscored —
  CVE-2011-4526

  Buffer overflow in an ActiveX control in Advantech/BroadWin WebAccess before 7.0 might allow remote attackers to execut…

  Feb 21, 2012
• Unscored —
  CVE-2011-4521

  SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL…

  Feb 21, 2012
• Unscored —
  CVE-2011-4890

  The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of serv…

  Feb 21, 2012
• Unscored —
  CVE-2011-4524

  Buffer overflow in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via a long…

  Feb 21, 2012
• Unscored —
  CVE-2011-4522

  Cross-site scripting (XSS) vulnerability in bwerrdn.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attack…

  Feb 21, 2012
• Unscored —
  CVE-2011-4523

  Cross-site scripting (XSS) vulnerability in bwview.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attacke…

  Feb 21, 2012
• Unscored —
  CVE-2011-4525

  Advantech/BroadWin WebAccess before 7.0 allows remote attackers to trigger the extraction of arbitrary web content into…

  Feb 21, 2012
• Unscored —
  CVE-2012-0239

  uaddUpAdmin.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remot…

  Feb 21, 2012
• Unscored —
  CVE-2012-0235

  Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to h…

  Feb 21, 2012
• Unscored —
  CVE-2012-0241 Public exploit

  Advantech/BroadWin WebAccess before 7.0 allows remote attackers to cause a denial of service (memory corruption) via a …

  Feb 21, 2012
• Unscored —
  CVE-2012-0243

  Buffer overflow in an ActiveX control in bwocxrun.ocx in Advantech/BroadWin WebAccess before 7.0 allows remote attacker…

  Feb 21, 2012
• Unscored —
  CVE-2012-0242 Public exploit

  Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary cod…

  Feb 21, 2012
• Unscored —
  CVE-2012-0200 Public exploit

  The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote au…

  Feb 21, 2012
• Unscored —
  CVE-2012-0240

  GbScriptAddUp.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows rem…

  Feb 21, 2012
• Unscored —
  CVE-2012-0233

  Cross-site scripting (XSS) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject a…

  Feb 21, 2012
• Unscored —
  CVE-2012-0238

  Stack-based buffer overflow in opcImg.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute…

  Feb 21, 2012
• Unscored —
  CVE-2012-0234

  SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL…

  Feb 21, 2012
• Unscored —
  CVE-2012-0236

  Advantech/BroadWin WebAccess 7.0 and earlier allows remote attackers to obtain sensitive information via a direct reque…

  Feb 21, 2012
• Unscored —
  CVE-2012-0237

  Advantech/BroadWin WebAccess before 7.0 allows remote attackers to (1) enable date and time syncing or (2) disable date…

  Feb 21, 2012
• Unscored —
  CVE-2012-0244

  Multiple SQL injection vulnerabilities in Advantech/BroadWin WebAccess before 7.0 allow remote attackers to execute arb…

  Feb 21, 2012
• Unscored —
  CVE-2012-1234

  SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to execute arbitrary …

  Feb 21, 2012
• Unscored —
  CVE-2012-1235

  Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users t…

  Feb 21, 2012
• Unscored —
  CVE-2012-0995

  Multiple cross-site scripting (XSS) vulnerabilities in ZENphoto 1.4.2 allow remote attackers to inject arbitrary web sc…

  Feb 21, 2012
• Unscored —
  CVE-2012-0993

  Eval injection vulnerability in zp-core/zp-extensions/viewer_size_image.php in ZENphoto 1.4.2, when the viewer_size_ima…

  Feb 21, 2012
• Unscored —
  CVE-2012-0865 Public exploit

  Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbit…

  Feb 21, 2012
• Unscored —
  CVE-2012-0994

  SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote…

  Feb 21, 2012
• Unscored —
  CVE-2012-1219

  Multiple cross-site scripting (XSS) vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary we…

  Feb 21, 2012
• Unscored —
  CVE-2012-1224 Public exploit

  Cross-site scripting (XSS) vulnerability in system/classes/login.php in ContentLion Alpha 1.3 allows remote attackers t…

  Feb 21, 2012
• Unscored —
  CVE-2012-1226 Public exploit EPSS 24%

  Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files…

  Feb 21, 2012
• Unscored —
  CVE-2012-1227

  Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack t…

  Feb 21, 2012
• Unscored —
  CVE-2012-1220 Public exploit

  Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows rem…

  Feb 21, 2012
• Unscored —
  CVE-2012-1222

  Stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier allows remote authenticated users to execute ar…

  Feb 21, 2012
• Unscored —
  CVE-2012-1221 Public exploit

  Directory traversal vulnerability in the telnet server in RabidHamster R2/Extreme 1.65 and earlier allows remote attack…

  Feb 21, 2012
• Unscored —
  CVE-2012-1225 Public exploit

  Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to exec…

  Feb 21, 2012
• Unscored —
  CVE-2012-1223

  RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote at…

  Feb 21, 2012
• Unscored —
  CVE-2012-1218

  Multiple SQL injection vulnerabilities in freelancerKit 2.35 allow remote attackers to execute arbitrary SQL commands v…

  Feb 21, 2012