Skip to content
OpenAdvisories

Archive

March 2012

Vulnerabilities first published in this month (UTC), newest first.

← February 2012 2012 / March April 2012 →
  1. 111
  2. 28
  3. 36
  4. 4 
  5. 517
  6. 63
  7. 728
  8. 874
  9. 96
  10. 101
  11. 11 
  12. 125
  13. 1326
  14. 1425
  15. 1519
  16. 167
  17. 172
  18. 182
  19. 1933
  20. 2012
  21. 2145
  22. 2222
  23. 233
  24. 24 
  25. 25 
  26. 263
  27. 275
  28. 2817
  29. 2913
  30. 308
  31. 312
All Critical High Medium Low Exploited only Public exploit

403 results · Feed

  • Unscored —
    CVE-2012-0710

    IBM DB2 9.1 before FP11, 9.5 before FP9, 9.7 before FP5, and 9.8 before FP4 allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2012-0711

    Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9…

  • Unscored —
    CVE-2012-1796

    Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, allows loca…

  • Unscored —
    CVE-2012-1797

    IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors.

  • Unscored —
    CVE-2012-1795

    webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacte…

  • Unscored —
    CVE-2012-0403

    Directory traversal vulnerability in EMC RSA enVision 4.x before 4.1 Patch 4 allows remote authenticated users to have …

  • Unscored —
    CVE-2012-0402

    EMC RSA enVision 4.x before 4.1 Patch 4 uses unspecified hardcoded credentials, which makes it easier for remote attack…

  • Unscored —
    CVE-2012-0401

    Multiple SQL injection vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote authenticated users to e…

  • Unscored —
    CVE-2012-0400

    EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which …

  • Unscored —
    CVE-2012-0399

    Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote attackers t…

  • Unscored —
    CVE-2012-0328

    Janetter before 3.3.0.0 (aka 3.3.0) allows remote attackers to obtain session information for twitter.com web sites via…

  • Unscored —
    CVE-2012-1181

    fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerC…

    libapache2-mod-fcgid Debian
  • Unscored —
    CVE-2012-1236

    Multiple cross-site request forgery (CSRF) vulnerabilities in Janetter before 3.3.0.0 (aka 3.3.0) allow remote attacker…

  • Low —
    CVE-2012-0054

    GoLismero symlink attack

    libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated usin…

    golismero PyPI
  • Unscored —
    CVE-2012-0808

    as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it e…

    as31 Debian
  • Unscored —
    CVE-2012-0872

    Multiple cross-site scripting (XSS) vulnerabilities in OxWall 1.1.1 and earlier allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2012-1039 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2012-1466 Public exploit

    The Traffic Grapher Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the source code …

  • Unscored —
    CVE-2012-1464 Public exploit

    Dashboard Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the installation path via …

  • Unscored —
    CVE-2012-1498 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Webfolio CMS 1.1.4 and earlier allow remote attackers to …

  • Unscored —
    CVE-2012-1465 Public exploit EPSS 26%

    Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to caus…

  • Unscored —
    CVE-2011-5082

    Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers…

  • Unscored —
    CVE-2011-5083

    Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to …

  • Unscored —
    CVE-2012-1788

    Multiple cross-site scripting (XSS) vulnerabilities in wonderdesk.cgi in WonderDesk SQL 4.14 allow remote attackers to …

  • Unscored —
    CVE-2012-1780

    SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2012-1789

    Multiple cross-site scripting (XSS) vulnerabilities in Kongreg8 1.7.3 allow remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2012-1778 Public exploit

    SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2012-1781

    Multiple cross-site scripting (XSS) vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers t…

  • Unscored —
    CVE-2012-1783 Public exploit

    Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET r…

  • Unscored —
    CVE-2012-1297 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlie…

  • Unscored —
    CVE-2012-1784 Public exploit

    SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid pa…

  • Unscored —
    CVE-2012-1785

    kg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to e…

  • Unscored —
    CVE-2012-1786

    The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers …

  • Unscored —
    CVE-2012-1779

    Cross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2012-1787 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attac…

  • Unscored —
    CVE-2012-1782 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2012-1790 Public exploit

    Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a f…

  • Unscored —
    CVE-2010-5086

    Directory traversal vulnerability in wiki/rankings.php in Bitweaver 2.7 and 2.8.1 allows remote attackers to read arbit…

  • Unscored —
    CVE-2009-5114 Public exploit Scanner template EPSS 12%

    Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbi…

  • Unscored —
    CVE-2009-5113

    Cross-site scripting (XSS) vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to in…