Archive
May 2012
Vulnerabilities first published in this month (UTC), newest first.
59 results · Clear filters · Feed
-
Medium —CVE-2010-5099 Public exploit
TYPO3 Path Traversal vulnerability
The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly filter file types, which allows remote attackers to bypass intended access restrictions and a…
-
Unscored —CVE-2012-2952 Public exploit
SQL injection vulnerability in add_ons.php in Jaow 2.4.5 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2012-2436 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2012-2941 Public exploit
Cross-site scripting (XSS) vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows remote attackers to inj…
-
Unscored —CVE-2012-2939 Public exploit
Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute…
-
Unscored —CVE-2012-2938 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2012-2940 Public exploit
MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted …
-
Unscored —
Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-0…
-
Unscored —CVE-2011-2918 Public exploit
The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated wit…
-
Unscored —CVE-2012-0289 Public exploit
Buffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec Network Access Control (…
-
Unscored —CVE-2012-1990 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric Kerweb before 3.0.1 and Kerwin before 6.0.1 a…
-
Unscored —
Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible be…
-
Unscored —CVE-2012-2925 Public exploit
SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2012-2924 Public exploit
PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attacke…
-
Unscored —CVE-2012-2918 Public exploit
Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbit…
-
Unscored —CVE-2012-2923 Public exploit
SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrar…
-
Unscored —CVE-2012-2919 Public exploit
Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the exis…
-
Unscored —CVE-2012-0298 Public exploit
The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to …
-
Unscored —
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts,…
-
Unscored —
The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to …
-
Unscored —CVE-2012-2338 Public exploit
SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows r…
-
Unscored —CVE-2012-2271 Public exploit
Buffer overflow in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3_vs2005.dll in SkinCrafter 3.…
-
Unscored —CVE-2012-2911 Public exploit
Cross-site scripting (XSS) vulnerability in backupDB.php in SiliSoftware backupDB() 1.2.7a allows remote attackers to i…
-
Unscored —CVE-2012-2904 Public exploit
player.swf in LongTail JW Player 5.9 allows remote attackers to conduct cross-site scripting (XSS) attacks to inject ar…
-
Unscored —CVE-2012-2909 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Viscacha 0.8.1.1 allow remote attackers to inject arbitrary web …
-
Unscored —
Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2012-2905 Public exploit
Artiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web root with insufficient access…
-
Unscored —CVE-2012-2903 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to injec…
-
Unscored —CVE-2012-2908 Public exploit
Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbit…
-
Unscored —CVE-2012-2910 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SiliSoftware phpThumb() 1.7.11 allow remote attackers to inject …
-
Unscored —CVE-2012-2914 Public exploit
Cross-site scripting (XSS) vulnerability in captchademo.php in Unijimpe Captcha allows remote attackers to inject arbit…
-
Unscored —CVE-2012-2906 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in artpublic/recommandation/index.php in Artiphp CMS 5.5.0 Neo (r42…
-
Unscored —CVE-2012-2913 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to…
-
Unscored —CVE-2012-2917 Public exploit
Cross-site scripting (XSS) vulnerability in the Share and Follow plugin 1.80.3 for WordPress allows remote attackers to…
-
Unscored —
Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execu…
-
Unscored —
The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a de…
-
Unscored —
Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbi…
-
Unscored —CVE-2012-2513 Public exploit
The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EH…
-
Unscored —CVE-2012-2512 Public exploit
The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver…
-
Unscored —CVE-2012-2514 Public exploit
The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver…