Archive
February 2012
Vulnerabilities first published in this month (UTC), newest first.
77 results · Clear filters · Feed
-
Unscored —CVE-2012-1048 Public exploit
Cross-site scripting (XSS) vulnerability in communityplusplus/www/administrator.php in eFront Community++ edition 3.6.1…
-
Unscored —CVE-2012-0834 Public exploit
Cross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attacke…
-
Unscored —
tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting t…
-
Unscored —CVE-2012-1002 Public exploit
SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary…
-
Unscored —
OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a S…
-
Unscored —CVE-2012-1017 Public exploit
Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allow re…
-
Unscored —CVE-2012-1027 Public exploit
Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x, 3.5.0.1-2, and possi…
-
Unscored —CVE-2012-1029 Public exploit
SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers …
-
Unscored —CVE-2012-1023 Public exploit
Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary…
-
Unscored —CVE-2012-1028 Public exploit
Cross-site scripting (XSS) vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allo…
-
Unscored —CVE-2012-1022 Public exploit
SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2012-1026 Public exploit
Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2012-1018 Public exploit
Cross-site scripting (XSS) vulnerability in includes/convert.php in D-Mack Media Currency Converter (mod_currencyconver…
-
Unscored —CVE-2012-1021 Public exploit
Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject ar…
-
Unscored —CVE-2012-1025 Public exploit
Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows rem…
-
Unscored —CVE-2012-1024 Public exploit
Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read a…
-
Unscored —CVE-2012-0992 Public exploit
interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via she…
-
Unscored —CVE-2012-0991 Public exploit
Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files …
-
Unscored —CVE-2012-0990 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin/settings/update in DClassifieds 0.1 final allows remote attack…
-
Unscored —CVE-2012-1010 Public exploit
Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remot…
-
Unscored —CVE-2012-1005 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attacker…
-
Unscored —CVE-2012-1011 Public exploit
actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restriction…
-
Medium —
Apache Struts Multiple Cross-site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to struts2-showcase/person/editPerson.action, or the (3) clientName …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary …
-
Unscored —
webvrpcs.exe in Advantech/BroadWin WebAccess allows remote attackers to execute arbitrary code or obtain a security-cod…
-
Unscored —
The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2011-4876 Public exploit
Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008…
-
Unscored —
miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA p…
-
Unscored —CVE-2011-4877 Public exploit
HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP,…
-
Unscored —
Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and …
-
Unscored —
Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinC…
-
Unscored —CVE-2012-0983 Public exploit
SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2012-0980 Public exploit
SQL injection vulnerability in download.php in phux Download Manager allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2012-0982 Public exploit
SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attack…
-
Unscored —CVE-2012-0981 Public exploit
Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image fi…
-
Unscored —
Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 th…
-
Unscored —CVE-2012-0809 Public exploit
Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbi…