Skip to content
OpenAdvisories

Archive

21 May 2012

Vulnerabilities first published on this day (UTC), newest first.

  1. 19
  2. 231
  3. 3111
  4. 48
  5. 5 
  6. 6 
  7. 7 
  8. 83
  9. 942
  10. 10 
  11. 1119
  12. 12 
  13. 13 
  14. 145
  15. 159
  16. 1630
  17. 1721
  18. 1812
  19. 19 
  20. 20 
  21. 2143
  22. 227
  23. 235
  24. 2433
  25. 258
  26. 26 
  27. 2714
  28. 28 
  29. 2911
  30. 301
  31. 313

23 results · Clear filters · Feed

  • Unscored —
    CVE-2012-2925 Public exploit

    SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2012-2924 Public exploit

    PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attacke…

  • Unscored —
    CVE-2012-2918 Public exploit

    Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2012-2923 Public exploit

    SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2012-2919 Public exploit

    Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the exis…

  • Unscored —
    CVE-2012-0298 Public exploit

    The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to …

  • Unscored —
    CVE-2012-0297 Public exploit EPSS 73%

    The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts,…

  • Unscored —
    CVE-2012-0299 Public exploit EPSS 64%

    The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to …

  • Unscored —
    CVE-2012-2338 Public exploit

    SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows r…

  • Unscored —
    CVE-2012-2271 Public exploit

    Buffer overflow in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3_vs2005.dll in SkinCrafter 3.…

  • Unscored —
    CVE-2012-2911 Public exploit

    Cross-site scripting (XSS) vulnerability in backupDB.php in SiliSoftware backupDB() 1.2.7a allows remote attackers to i…

  • Unscored —
    CVE-2012-2904 Public exploit

    player.swf in LongTail JW Player 5.9 allows remote attackers to conduct cross-site scripting (XSS) attacks to inject ar…

  • Unscored —
    CVE-2012-2909 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Viscacha 0.8.1.1 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2012-2915 Public exploit EPSS 29%

    Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2012-2905 Public exploit

    Artiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web root with insufficient access…

  • Unscored —
    CVE-2012-2903 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to injec…

  • Unscored —
    CVE-2012-2908 Public exploit

    Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2012-2910 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SiliSoftware phpThumb() 1.7.11 allow remote attackers to inject …

  • Unscored —
    CVE-2012-2914 Public exploit

    Cross-site scripting (XSS) vulnerability in captchademo.php in Unijimpe Captcha allows remote attackers to inject arbit…

  • Unscored —
    CVE-2012-2906 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in artpublic/recommandation/index.php in Artiphp CMS 5.5.0 Neo (r42…

  • Unscored —
    CVE-2012-2913 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to…

  • Unscored —
    CVE-2012-2917 Public exploit

    Cross-site scripting (XSS) vulnerability in the Share and Follow plugin 1.80.3 for WordPress allows remote attackers to…

  • Unscored —
    CVE-2012-2376 Public exploit EPSS 20%

    Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execu…