19 March 2012

33 results · Feed

• Unscored —
  CVE-2012-0328

  Janetter before 3.3.0.0 (aka 3.3.0) allows remote attackers to obtain session information for twitter.com web sites via…

  Mar 19, 2012
• Unscored —
  CVE-2012-1181

  fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerC…

  libapache2-mod-fcgid Debian
  Mar 19, 2012
• Unscored —
  CVE-2012-1236

  Multiple cross-site request forgery (CSRF) vulnerabilities in Janetter before 3.3.0.0 (aka 3.3.0) allow remote attacker…

  Mar 19, 2012
• Low —
  CVE-2012-0054

  GoLismero symlink attack

  libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated usin…

  golismero PyPI
  Mar 19, 2012
• Unscored —
  CVE-2012-0808

  as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it e…

  as31 Debian
  Mar 19, 2012
• Unscored —
  CVE-2012-0872

  Multiple cross-site scripting (XSS) vulnerabilities in OxWall 1.1.1 and earlier allow remote attackers to inject arbitr…

  Mar 19, 2012
• Unscored —
  CVE-2012-1039 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary…

  Mar 19, 2012
• Unscored —
  CVE-2012-1466 Public exploit

  The Traffic Grapher Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the source code …

  Mar 19, 2012
• Unscored —
  CVE-2012-1464 Public exploit

  Dashboard Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the installation path via …

  Mar 19, 2012
• Unscored —
  CVE-2012-1498 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in Webfolio CMS 1.1.4 and earlier allow remote attackers to …

  Mar 19, 2012
• Unscored —
  CVE-2012-1465 Public exploit EPSS 26%

  Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to caus…

  Mar 19, 2012
• Unscored —
  CVE-2011-5082

  Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers…

  Mar 19, 2012
• Unscored —
  CVE-2011-5083

  Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to …

  Mar 19, 2012
• Unscored —
  CVE-2012-1788

  Multiple cross-site scripting (XSS) vulnerabilities in wonderdesk.cgi in WonderDesk SQL 4.14 allow remote attackers to …

  Mar 19, 2012
• Unscored —
  CVE-2012-1780

  SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands …

  Mar 19, 2012
• Unscored —
  CVE-2012-1789

  Multiple cross-site scripting (XSS) vulnerabilities in Kongreg8 1.7.3 allow remote attackers to inject arbitrary web sc…

  Mar 19, 2012
• Unscored —
  CVE-2012-1778 Public exploit

  SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL c…

  Mar 19, 2012
• Unscored —
  CVE-2012-1781

  Multiple cross-site scripting (XSS) vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers t…

  Mar 19, 2012
• Unscored —
  CVE-2012-1783 Public exploit

  Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET r…

  Mar 19, 2012
• Unscored —
  CVE-2012-1297 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlie…

  Mar 19, 2012
• Unscored —
  CVE-2012-1784 Public exploit

  SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid pa…

  Mar 19, 2012
• Unscored —
  CVE-2012-1785

  kg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to e…

  Mar 19, 2012
• Unscored —
  CVE-2012-1786

  The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers …

  Mar 19, 2012
• Unscored —
  CVE-2012-1779

  Cross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbit…

  Mar 19, 2012
• Unscored —
  CVE-2012-1787 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attac…

  Mar 19, 2012
• Unscored —
  CVE-2012-1782 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitr…

  Mar 19, 2012
• Unscored —
  CVE-2012-1790 Public exploit

  Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a f…

  Mar 19, 2012
• Unscored —
  CVE-2010-5086

  Directory traversal vulnerability in wiki/rankings.php in Bitweaver 2.7 and 2.8.1 allows remote attackers to read arbit…

  Mar 19, 2012
• Unscored —
  CVE-2009-5114 Public exploit EPSS 12%

  Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbi…

  Mar 19, 2012
• Unscored —
  CVE-2009-5113

  Cross-site scripting (XSS) vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to in…

  Mar 19, 2012
• Unscored —
  CVE-2009-5112 Public exploit

  wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted req…

  Mar 19, 2012
• Unscored —
  CVE-2012-1776

  Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial…

  vlc Debian
  Mar 19, 2012
• Unscored —
  CVE-2012-1775 Public exploit EPSS 44%

  Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code…

  vlc Debian
  Mar 19, 2012