Skip to content
OpenAdvisories

Archive

February 2012

Vulnerabilities first published in this month (UTC), newest first.

343 results · Feed

  • Unscored —

    Cross-site scripting (XSS) vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and earlier allows remote at…

  • Unscored —
    CVE-2012-0980 Public exploit

    SQL injection vulnerability in download.php in phux Download Manager allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2012-0982 Public exploit

    SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attack…

  • Unscored —
    CVE-2012-0981 Public exploit Scanner template

    Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image fi…

  • Unscored —
    CVE-2010-4562 EPSS 14%

    Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a h…

  • Unscored —

    The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sendi…

  • Unscored —

    net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consid…

  • Unscored —

    Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 bef…

  • Unscored —

    Buffer overflow in Novell iPrint Server in Novell Open Enterprise Server 2 (OES2) through SP3 on Linux allows remote at…

  • Unscored —

    The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc funct…

  • Unscored —

    Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitra…

  • Unscored —

    PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a …

  • Unscored —

    Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before …

  • Unscored —
    CVE-2011-3659 Public exploit EPSS 37%

    Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 th…

  • Unscored —

    Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before …

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through …

  • Unscored —

    Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass…

  • Unscored —

    Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recover…

  • Unscored —

    Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before …

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunde…

  • Unscored —

    Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, an…

  • Unscored —
    CVE-2012-0809 Public exploit

    Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbi…