Skip to content
OpenAdvisories

Archive

March 2012

Vulnerabilities first published in this month (UTC), newest first.

← February 2012 2012 / March April 2012 →
  1. 111
  2. 28
  3. 36
  4. 4 
  5. 517
  6. 63
  7. 728
  8. 874
  9. 96
  10. 101
  11. 11 
  12. 125
  13. 1326
  14. 1425
  15. 1519
  16. 167
  17. 172
  18. 182
  19. 1933
  20. 2012
  21. 2145
  22. 2222
  23. 233
  24. 24 
  25. 25 
  26. 263
  27. 275
  28. 2817
  29. 2913
  30. 308
  31. 312
All Critical High Medium Low Exploited only Public exploit

28 results · Clear filters · Feed

  • Unscored —
    CVE-2012-1670 Public exploit

    admin/index.php in PHP Grade Book before 1.9.5 BETA allows remote attackers to read the database via a SaveSQL action.

  • Unscored —
    CVE-2012-1904 Public exploit

    mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 B…

  • Unscored —
    CVE-2007-6752 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authen…

    drupal7 Ubuntu
  • Unscored —
    CVE-2012-1039 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2012-1466 Public exploit

    The Traffic Grapher Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the source code …

  • Unscored —
    CVE-2012-1464 Public exploit

    Dashboard Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the installation path via …

  • Unscored —
    CVE-2012-1498 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Webfolio CMS 1.1.4 and earlier allow remote attackers to …

  • Unscored —
    CVE-2012-1465 Public exploit EPSS 26%

    Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to caus…

  • Unscored —
    CVE-2012-1778 Public exploit

    SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2012-1783 Public exploit

    Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET r…

  • Unscored —
    CVE-2012-1297 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlie…

  • Unscored —
    CVE-2012-1784 Public exploit

    SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid pa…

  • Unscored —
    CVE-2012-1787 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attac…

  • Unscored —
    CVE-2012-1782 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2012-1790 Public exploit

    Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a f…

  • Unscored —
    CVE-2009-5114 Public exploit EPSS 12%

    Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbi…

  • Unscored —
    CVE-2009-5112 Public exploit

    wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted req…

  • Unscored —
    CVE-2012-1775 Public exploit EPSS 44%

    Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code…

    vlc Debian
  • Unscored —
    CVE-2012-1774 Public exploit

    Unspecified vulnerability in the Open URL feature in Gretech GOM Media Player before 2.1.39.5101 has unknown impact and…

  • Unscored —
    CVE-2012-0124 Public exploit EPSS 62%

    Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 1197…

  • Unscored —
    CVE-2012-1663 Public exploit

    Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (ap…

    gnutls28 Debian
  • Unscored —
    CVE-2012-0016 Public exploit EPSS 18%

    Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, …

  • Unscored —
    CVE-2012-0002 Public exploit EPSS 75%

    The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows …

  • Unscored —
    CVE-2012-0152 Public exploit EPSS 85%

    The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 all…

  • Unscored —
    CVE-2012-0292 Public exploit

    The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12…

  • Unscored —
    CVE-2012-0198 Public exploit EPSS 37%

    Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisio…

  • Unscored —
    CVE-2011-4189 Public exploit EPSS 11%

    The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial…

  • Unscored —
    CVE-2012-0201 Public exploit EPSS 36%

    Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x bef…