Archive
August 2012
Vulnerabilities first published in this month (UTC), newest first.
735 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpgwapi/js/jscalendar/test.php in EGroupware Enterprise Line (EPL) before …
-
Unscored —
Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and E…
-
Unscored —
SQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/with_db/loaddetails.php in EGroupware Enterprise Line (EP…
-
Unscored —
SQL injection vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote attackers to execute a…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote at…
-
Unscored —
Directory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EG…
-
Unscored —
Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers t…
-
Unscored —CVE-2012-4746 Public exploit
Cross-site request forgery (CSRF) vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0a_Z29_OV allows remote att…
-
Unscored —CVE-2012-4745 Public exploit
Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote attackers to inject arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the captive portal in PacketFence before 3.3.0 allows remote attackers to i…
-
Unscored —
The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication for users w…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote atta…
-
Unscored —
The web_node_register function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute arbitrary …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the fusion_core_preprocess_page function in fusion_core/template.php in the…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Gigya - Social optimization module 6.x before 6.x-3.2 for Drupal allows…
-
Unscored —
Stack-based buffer overflow in fprintf in musl before 0.8.8 and earlier allows context-dependent attackers to cause a d…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 2.3.20 and probably earlier allow…
-
Unscored —CVE-2011-5149 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SpamTitan 5.08 and earlier allow remote attackers to inject arbi…
-
Unscored —CVE-2011-5148 Public exploit
Multiple incomplete blacklist vulnerabilities in the Simple File Upload (mod_simplefileuploadv1.3) module before 1.3.5 …
-
Unscored —
Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote attackers to obtain configuration information via a…
-
Unscored —CVE-2011-5140 Public exploit
Multiple SQL injection vulnerabilities in the blog module 1.0 for DiY-CMS allow remote attackers to execute arbitrary S…
-
Unscored —
Directory traversal vulnerability in exportcsv/exportcsv_index.php in Open Business Management (OBM) 2.4.0-rc13 and ear…
-
Unscored —CVE-2011-5139 Public exploit
SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitr…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 2.4.0-rc13 and probably earlier a…
-
Unscored —
Multiple SQL injection vulnerabilities in Open Business Management (OBM) 2.4.0-rc13 and probably earlier allow remote a…
-
Unscored —
Bokken before 1.6 and 1.5-x before 1.5-3 for Debian allows local users to overwrite arbitrary files via a symlink attac…
-
Unscored —CVE-2011-5147 Public exploit
Static code injection vulnerability in ajax_save_name.php in the Ajax File Manager module in the tinymce plugin in Free…
-
Unscored —
Multiple SQL injection vulnerabilities in tForum b0.915 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —
Cross-site scripting (XSS) vulnerability in member.php in tForum b0.915 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2011-5150 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SpamTitan 5.07 and possibly earlier allow remote attackers or au…
-
Unscored —CVE-2010-5194 Public exploit
Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx)…
-
Unscored —
Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageVie…
-
Unscored —CVE-2012-4739 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote att…
-
Unscored —
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against th…
-
Unscored —
GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to…
-
Unscored —
The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, whic…
-
Unscored —
Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x…
-
Unscored —
libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an uns…
-
Unscored —
Google Chrome before 21.0.1180.89 does not properly perform a cast of an unspecified variable during handling of run-in…