Archive
February 2012
Vulnerabilities first published in this month (UTC), newest first.
77 results · Clear filters · Feed
-
Unscored —CVE-2012-1294 Public exploit
SQL injection vulnerability in CONTIMEX Impulsio CMS allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2012-0873 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arb…
-
Unscored —CVE-2012-0241 Public exploit
Advantech/BroadWin WebAccess before 7.0 allows remote attackers to cause a denial of service (memory corruption) via a …
-
Unscored —CVE-2012-0242 Public exploit
Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary cod…
-
Unscored —CVE-2012-0200 Public exploit
The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote au…
-
Unscored —CVE-2012-0865 Public exploit
Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbit…
-
Unscored —CVE-2012-1224 Public exploit
Cross-site scripting (XSS) vulnerability in system/classes/login.php in ContentLion Alpha 1.3 allows remote attackers t…
-
Unscored —
Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files…
-
Unscored —CVE-2012-1220 Public exploit
Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows rem…
-
Unscored —CVE-2012-1221 Public exploit
Directory traversal vulnerability in the telnet server in RabidHamster R2/Extreme 1.65 and earlier allows remote attack…
-
Unscored —CVE-2012-1225 Public exploit
Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to exec…
-
Unscored —CVE-2012-1217 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2012-0996 Public exploit
Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary …
-
Unscored —CVE-2012-0997 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attac…
-
Unscored —CVE-2012-1213 Public exploit
Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) …
-
Unscored —CVE-2012-1208 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly othe…
-
Unscored —
PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allo…
-
Unscored —CVE-2012-1210 Public exploit
SQL injection vulnerability in pfile/file.php in Powie pFile 1.02 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2012-1211 Public exploit
Cross-site scripting (XSS) vulnerability in pfile/kommentar.php in Powie pFile 1.02 allows remote attackers to inject a…
-
Unscored —CVE-2011-4614 Public exploit
PHP remote file inclusion vulnerability in Classes/Controller/AbstractController.php in the workspaces system extension…
-
Unscored —CVE-2012-1198 Public exploit
base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code b…
-
Unscored —CVE-2012-1199 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote atta…
-
Unscored —
Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetu…
-
Unscored —CVE-2012-1200 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Nova CMS allow remote attackers to execute arbitrary PHP code via…
-
Unscored —
Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManageme…
-
Unscored —
Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of s…
-
High 7.8
Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1…
KEV Jun 8, 2022 -
Unscored —
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 U…
-
Unscored —CVE-2010-5083 Public exploit
SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2012-1069 Public exploit
Cross-site scripting (XSS) vulnerability in module/kb/search_word in the search module in lknSupport allows remote atta…
-
Unscored —CVE-2012-1009 Public exploit
NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of …
-
Unscored —CVE-2012-1065 Public exploit
Insecure method vulnerability in TuxScripting.dll in the TuxSystem ActiveX control in 2X ApplicationServer 10.1 Build 1…
-
Unscored —CVE-2012-0789 Public exploit
Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (mem…
-
Unscored —CVE-2012-0788 Public exploit
The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote …
-
Unscored —CVE-2012-1059 Public exploit
Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce …
-
Unscored —CVE-2012-1058 Public exploit
Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authenticatio…
-
Unscored —CVE-2012-1049 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attacker…
-
Low —CVE-2011-4340 Public exploit
Symphony CMS vulnerable to Cross-site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) the profile parameter to extensions/profi…
-
Unscored —CVE-2011-4341 Public exploit
Multiple SQL injection vulnerabilities in symphony/content/content.publish.php in Symphony CMS 2.2.3 and possibly other…
-
Unscored —CVE-2012-1047 Public exploit
Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 …