Skip to content
OpenAdvisories

Archive

28 August 2012

Vulnerabilities first published on this day (UTC), newest first.

12 results · Feed

  • Unscored —

    The Organic Groups (OG) Vocabulary module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with cert…

  • Unscored —

    The Faster Permissions module 7.x-2.x before 7.x-1.2 for Drupal does not check the "administer permissions" permission,…

  • Unscored —

    The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option…

  • Unscored —

    includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce a…

  • Unscored —

    The hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the…

  • Unscored —

    The ZipCart module 6.x before 6.x-1.4 for Drupal checks the "access content" permission instead of the "access ZipCart …

  • Unscored —

    The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the "stand alone PHP application for the OSM Player," as used in…

  • Unscored —
    CVE-2012-4685 Public exploit

    Cross-site scripting (XSS) vulnerability in Arbor Networks Peakflow SP 5.1.1 before patch 6, 5.5 before patch 4, and 5.…

  • Unscored —
    CVE-2012-4686 Public exploit

    SQL injection vulnerability in announcement.php in vBulletin 4.1.10 allows remote attackers to execute arbitrary SQL co…

  • Unscored —

    The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute ar…

  • Critical 9.8
    CVE-2012-4681 Exploited · Ransomware Public exploit EPSS 99%

    Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow…

    KEV Mar 3, 2022