Archive
August 2012
Vulnerabilities first published in this month (UTC), newest first.
131 results · Clear filters · Feed
-
Unscored —CVE-2012-4668 Public exploit
Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbit…
-
Unscored —CVE-2012-3508 Public exploit
Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers …
-
Unscored —CVE-2012-3480 Public exploit
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related fun…
-
Unscored —CVE-2012-2984 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in monitor/m_overview.ink in Websense Content Gateway before 7.7.3 …
-
Unscored —CVE-2011-5105 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Bu…
-
Unscored —CVE-2011-5113 Public exploit
SQL injection vulnerability in frontend/models/techfoliodetail.php in Techfolio (com_techfolio) component 1.0 for Jooml…
-
Unscored —CVE-2011-5116 Public exploit
SQL injection vulnerability in setseed-hub in SetSeed CMS 5.8.20, 5.11.2, and earlier allows remote attackers to execut…
-
Unscored —CVE-2011-5108 Public exploit
Cross-site scripting (XSS) vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject ar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for Word…
-
Unscored —CVE-2011-5103 Public exploit
SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2011-5111 Public exploit
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary …
-
Unscored —CVE-2011-5107 Public exploit
Cross-site scripting (XSS) vulnerability in post_alert.php in Alert Before Your Post plugin, possibly 0.1.1 and earlier…
-
Unscored —CVE-2011-5109 Public exploit
Multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier allow remote attackers to inject arbitra…
-
Unscored —CVE-2011-5110 Public exploit
Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2011-5112 Public exploit
SQL injection vulnerability in Alameda (com_alameda) component before 1.0.1 for Joomla! allows remote attackers to exec…
-
Unscored —CVE-2012-2582 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13,…
-
Unscored —
An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to e…
-
Unscored —
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to ex…
-
Unscored —CVE-2012-4362 Public exploit
hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$…
-
Unscored —CVE-2012-2986 Public exploit
lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute a…
-
Unscored —CVE-2012-4237 Public exploit
Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or great…
-
Unscored —CVE-2012-4236 Public exploit
Cross-site scripting (XSS) vulnerability in the refresh_page function in application/modules/_main/views/_top.php in To…
-
Unscored —
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import …
-
Unscored —CVE-2012-4355 Public exploit
TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote a…
-
Unscored —CVE-2012-4357 Public exploit
Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow re…
-
Unscored —
Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA be…
-
Unscored —
Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA befo…
-
Unscored —CVE-2012-4354 Public exploit
TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote a…
-
Unscored —CVE-2012-0744 Public exploit
IBM Rational ClearQuest 7.1.x through 7.1.2.7 and 8.x through 8.0.0.3 allows remote attackers to obtain potentially sen…
-
Unscored —CVE-2012-3294 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transf…
-
Unscored —CVE-2012-2206 Public exploit
The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users…
-
Unscored —CVE-2012-1597 Public exploit
Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ…
-
Unscored —CVE-2009-5026 Public exploit
The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave conf…
-
Unscored —CVE-2012-4344 Public exploit
Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2012-2601 Public exploit
SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute a…
-
Unscored —CVE-2012-3435 Public exploit
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, …
-
Unscored —CVE-2012-2570 Public exploit
Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbit…
-
High 7.8
Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on …
KEV Mar 3, 2022 -
Unscored —CVE-2011-5099 Public exploit
SQL injection vulnerability in helper/popup.php in the ccNewsletter (mod_ccnewsletter) component 1.0.7 through 1.0.9 fo…
-
Unscored —CVE-2012-4334 Public exploit
The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i …