Skip to content
OpenAdvisories

Archive

February 2012

Vulnerabilities first published in this month (UTC), newest first.

← January 2012 2012 / February March 2012 →
  1. 111
  2. 234
  3. 314
  4. 4 
  5. 51
  6. 65
  7. 79
  8. 831
  9. 920
  10. 107
  11. 112
  12. 124
  13. 135
  14. 1459
  15. 1522
  16. 1621
  17. 177
  18. 1811
  19. 19 
  20. 2022
  21. 2137
  22. 224
  23. 2310
  24. 24 
  25. 254
  26. 26 
  27. 27 
  28. 28 
  29. 293
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium —
    CVE-2012-1209

    Fork CMS XSS via Highlight Parameter

    Cross-site scripting (XSS) vulnerability in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.

    forkcms/forkcms Packagist
  • Medium —
    CVE-2012-1207

    ForkCMS Directory Traversal vulnerability

    Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter to frontend/js.php.

    forkcms/forkcms Packagist
  • Medium —
    CVE-2011-4320

    Ejabberd DoS via malformed stanza

    The mod_pubsub module (mod_pubsub.erl) in ejabberd 2.1.8 and 3.0.0-alpha-3 allows remote authenticated users to cause a denial of service (infinite loop) via a stanza with a publish tag that lacks a node attribute.

    ejabberd ejabberd Debian Hex
  • Medium 6.1
    CVE-2012-0767 Exploited

    Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Window…

    KEV Jun 8, 2022
  • Medium —
    CVE-2012-1006 Public exploit EPSS 57%

    Apache Struts Multiple Cross-site Scripting Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to struts2-showcase/person/editPerson.action, or the (3) clientName …

    org.apache.struts:struts2-parent Maven