Skip to content
OpenAdvisories

Archive

August 2012

Vulnerabilities first published in this month (UTC), newest first.

← July 2012 2012 / August September 2012 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 663
  7. 720
  8. 812
  9. 96
  10. 107
  11. 11 
  12. 1235
  13. 1356
  14. 1438
  15. 1552
  16. 1623
  17. 1720
  18. 18 
  19. 197
  20. 2037
  21. 2117
  22. 2235
  23. 2330
  24. 244
  25. 2555
  26. 2665
  27. 2719
  28. 2812
  29. 2947
  30. 3017
  31. 3158
All Critical High Medium Low Exploited only Public exploit

131 results · Clear filters · Feed

  • Unscored —
    CVE-2012-4335 Public exploit

    Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service (infinite loop) via a negative si…

  • Unscored —
    CVE-2012-4330 Public exploit EPSS 14%

    The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a lon…

  • Unscored —
    CVE-2012-4333 Public exploit EPSS 60%

    Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.…

  • Unscored —
    CVE-2012-4329 Public exploit EPSS 13%

    The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restar…

  • Unscored —
    CVE-2012-2208 Public exploit

    Directory traversal vulnerability in upgrade.php in Piwigo before 2.3.4 allows remote attackers to include and execute …

  • Unscored —
    CVE-2012-2209 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Piwigo before 2.3.4 allow remote attackers to injec…

  • Unscored —
    CVE-2012-1835 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress a…

  • Unscored —
    CVE-2012-4325 Public exploit

    Cross-site request forgery (CSRF) vulnerability in upload/users.php in Utopia News Pro (UNP) 1.4.0 and earlier allows r…

  • Unscored —
    CVE-2012-4282 Public exploit

    SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2012-2332 Public exploit

    SQL injection vulnerability in serendipity/serendipity_admin.php in Serendipity before 1.6.1 allows remote attackers to…

  • Unscored —
    CVE-2012-2274 Public exploit

    Cross-site scripting (XSS) vulnerability in pivotx/ajaxhelper.php in PivotX 2.3.2 and earlier allows remote attackers t…

  • Unscored —
    CVE-2012-2331 Public exploit

    Cross-site scripting (XSS) vulnerability in serendipity/serendipity_admin_image_selector.php in Serendipity before 1.6.…

  • Unscored —
    CVE-2010-5096 Public exploit

    Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.1 allow remote attackers to execute arb…

  • Unscored —
    CVE-2012-4278 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2012-4281 Public exploit

    Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2012-4279 Public exploit

    Multiple SQL injection vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2012-4267 Public exploit

    Cross-site scripting (XSS) vulnerability in user/register in Sockso 1.5 and earlier allows remote attackers to inject a…

  • Unscored —
    CVE-2012-4266 Public exploit

    Cross-site scripting (XSS) vulnerability in client_details.php in Proman Xpress 5.0.1 allows remote attackers to inject…

  • Unscored —
    CVE-2012-4280 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote…

  • Unscored —
    CVE-2012-4265 Public exploit

    SQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2012-2371 Public exploit EPSS 13%

    Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attack…

  • Unscored —
    CVE-2012-4250 Public exploit

    Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msl…

  • Unscored —
    CVE-2012-4254 Public exploit

    MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information (Notices) via a direct request to (1) learn/…

  • Unscored —
    CVE-2012-4262 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2012-4260 Public exploit

    Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the (1)…

  • Unscored —
    CVE-2012-4251 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2012-4258 Public exploit

    Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2012-4253 Public exploit

    Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a…

  • Unscored —
    CVE-2012-4261 Public exploit

    SQL injection vulnerability in modules/patient/mycare2x_pat_info.php in myCare2x allows remote attackers to execute arb…

  • Unscored —
    CVE-2012-4259 Public exploit

    Cross-site scripting (XSS) vulnerability in the contacts in (1) XPhone UC Web and the (2) web frontend for XPhone Virtu…

  • Unscored —
    CVE-2012-4252 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the a…

  • Unscored —
    CVE-2012-2585 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow remote attackers to inje…

  • Unscored —
    CVE-2012-2590 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attack…

  • Unscored —
    CVE-2012-2571 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in WinWebMail Server 3.8.1.6 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2012-2587 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote attackers to inject ar…

  • Unscored —
    CVE-2012-2573 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2012-4070 Public exploit

    SQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2012-2584 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2012-2577 Public exploit EPSS 10%

    Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1…

  • Unscored —
    CVE-2012-2602 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before…