Archive
August 2012
Vulnerabilities first published in this month (UTC), newest first.
131 results · Clear filters · Feed
-
Unscored —CVE-2012-4746 Public exploit
Cross-site request forgery (CSRF) vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0a_Z29_OV allows remote att…
-
Unscored —CVE-2012-4745 Public exploit
Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote attackers to inject arbit…
-
Unscored —CVE-2011-5149 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SpamTitan 5.08 and earlier allow remote attackers to inject arbi…
-
Unscored —CVE-2011-5148 Public exploit
Multiple incomplete blacklist vulnerabilities in the Simple File Upload (mod_simplefileuploadv1.3) module before 1.3.5 …
-
Unscored —CVE-2011-5140 Public exploit
Multiple SQL injection vulnerabilities in the blog module 1.0 for DiY-CMS allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2011-5139 Public exploit
SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitr…
-
Unscored —CVE-2011-5147 Public exploit
Static code injection vulnerability in ajax_save_name.php in the Ajax File Manager module in the tinymce plugin in Free…
-
Unscored —CVE-2011-5150 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SpamTitan 5.07 and possibly earlier allow remote attackers or au…
-
Unscored —CVE-2010-5194 Public exploit
Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx)…
-
Unscored —
Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageVie…
-
Unscored —CVE-2012-4739 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote att…
-
Unscored —CVE-2012-4600 Public exploit
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x befo…
-
Unscored —
Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a craft…
-
Unscored —
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and…
-
Unscored —
The sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequen…
-
Unscored —CVE-2011-5135 Public exploit
Multiple SQL injection vulnerabilities in the save_connection function in lib/lib.iotask.php in the iotask module in Do…
-
Unscored —
dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers …
-
Unscored —CVE-2011-5129 Public exploit
Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and …
-
Unscored —CVE-2011-2777 Public exploit
samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows …
-
Unscored —CVE-2012-0308 Public exploit
Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers…
-
Unscored —
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier f…
-
Unscored —CVE-2011-4918 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Elxis CMS 2009.2, 2009.3 and 2009.3 Aphrodite before revision 26…
-
Unscored —
Cross-site scripting (XSS) vulnerability in adminimize/adminimize_page.php in the Adminimize plugin before 1.7.22 for W…
-
Unscored —CVE-2012-4685 Public exploit
Cross-site scripting (XSS) vulnerability in Arbor Networks Peakflow SP 5.1.1 before patch 6, 5.5 before patch 4, and 5.…
-
Unscored —CVE-2012-4686 Public exploit
SQL injection vulnerability in announcement.php in vBulletin 4.1.10 allows remote attackers to execute arbitrary SQL co…
-
Critical 9.8
Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow…
KEV Mar 3, 2022 -
Unscored —CVE-2012-1586 Public exploit
mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the fi…
-
Unscored —CVE-2012-4680 Public exploit
Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks…
-
Unscored —CVE-2012-4036 Public exploit
Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary …
-
Unscored —CVE-2012-1934 Public exploit
SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attac…
-
Unscored —CVE-2012-1935 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote at…
-
Unscored —CVE-2012-1933 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_globa…
-
Unscored —CVE-2012-4679 Public exploit
Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject …
-
Unscored —CVE-2012-2104 Public exploit
cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might…
-
Unscored —CVE-2012-1921 Public exploit
Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attacke…
-
Unscored —
Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3…
-
Unscored —
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 a…
-
Unscored —CVE-2012-3485 Public exploit
Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname …
-
Unscored —CVE-2012-3483 Public exploit
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by …
-
Unscored —CVE-2012-2227 Public exploit
Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and exe…