Archive
12 August 2012
Vulnerabilities first published on this day (UTC), newest first.
35 results · Feed
-
Unscored —
The comments API in application/libraries/api/MY_Comments_Api_Object.php in the Ushahidi Platform before 2.5 allows rem…
-
Unscored —
The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attacke…
-
Unscored —
Multiple SQL injection vulnerabilities in application/libraries/api/MY_Countries_Api_Object.php in the Ushahidi Platfor…
-
Unscored —
The email API in application/libraries/api/MY_Email_Api_Object.php in the Ushahidi Platform before 2.5 does not require…
-
Unscored —
Multiple SQL injection vulnerabilities in the edit functions in (1) application/controllers/admin/reports.php and (2) a…
-
Unscored —
Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary …
-
Unscored —
Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary …
-
Unscored —
The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not requi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) application/views/admin/layout.php and (2) themes/default/vi…
-
Unscored —CVE-2012-2585 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow remote attackers to inje…
-
Unscored —CVE-2012-2590 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attack…
-
Unscored —CVE-2012-2571 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in WinWebMail Server 3.8.1.6 allow remote attackers to inject arbit…
-
Unscored —CVE-2012-2587 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote attackers to inject ar…
-
Unscored —CVE-2012-2573 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote attackers to inject arbitra…
-
Unscored —
Dir2web 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attac…
-
Unscored —CVE-2012-4070 Public exploit
SQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —
The Amazon Kindle Touch before 5.1.2 does not properly restrict access to the libkindleplugin.so NPAPI plugin interface…
-
Unscored —
The Amazon Lab126 com.lab126.system sendEvent implementation on the Kindle Touch before 5.1.2 allows context-dependent …
-
Unscored —CVE-2012-2584 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbit…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1…
-
Unscored —CVE-2012-2602 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before…
-
Unscored —
The administrative interface in the embedded web server on the BreakingPoint Storm appliance before 3.0 does not requir…
-
High —
Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.
-
High —
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
-
Unscored —
Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filen…
-
Unscored —
The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI admin…
-
High —
Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters
Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.
-
Unscored —
Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to …
-
Unscored —CVE-2012-4247 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote att…
-
Unscored —CVE-2012-4034 Public exploit
Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2012-4035 Public exploit
The new_password page in PBBoard 2.1.4 allows remote attackers to change the password of arbitrary user accounts via th…
-
Unscored —CVE-2012-4246 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote att…
-
Unscored —CVE-2012-3953 Public exploit
SQL injection vulnerability in admin/index.php in phpList before 2.10.19 allows remote administrators to execute arbitr…
-
Unscored —
PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which allows local users to obt…
-
Unscored —CVE-2012-3952 Public exploit
Cross-site scripting (XSS) vulnerability in admin/index.php in phpList before 2.10.19 allows remote attackers to inject…