Skip to content
OpenAdvisories

Archive

August 2012

Vulnerabilities first published in this month (UTC), newest first.

← July 2012 2012 / August September 2012 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 663
  7. 720
  8. 812
  9. 96
  10. 107
  11. 11 
  12. 1235
  13. 1356
  14. 1438
  15. 1552
  16. 1623
  17. 1720
  18. 18 
  19. 197
  20. 2037
  21. 2117
  22. 2235
  23. 2330
  24. 244
  25. 2555
  26. 2665
  27. 2719
  28. 2812
  29. 2947
  30. 3017
  31. 3158
All Critical High Medium Low Exploited only Public exploit

735 results · Feed

  • Unscored —
    CVE-2011-4926 Public exploit Scanner template EPSS 11%

    Cross-site scripting (XSS) vulnerability in adminimize/adminimize_page.php in the Adminimize plugin before 1.7.22 for W…

  • Unscored —
    CVE-2011-5128

    Multiple cross-site scripting (XSS) vulnerabilities in the Adminimize plugin before 1.7.22 for WordPress allow remote a…

  • Unscored —
    CVE-2012-1644

    The Organic Groups (OG) Vocabulary module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with cert…

  • Unscored —
    CVE-2012-1643

    The Faster Permissions module 7.x-2.x before 7.x-1.2 for Drupal does not check the "administer permissions" permission,…

  • Unscored —
    CVE-2012-1645

    The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option…

  • Unscored —
    CVE-2012-1642

    includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce a…

  • Unscored —
    CVE-2012-1635

    The hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the…

  • Unscored —
    CVE-2012-1650

    The ZipCart module 6.x before 6.x-1.4 for Drupal checks the "access content" permission instead of the "access ZipCart …

  • Unscored —
    CVE-2012-1641

    The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for…

  • Unscored —
    CVE-2012-1647

    Multiple cross-site scripting (XSS) vulnerabilities in the "stand alone PHP application for the OSM Player," as used in…

  • Unscored —
    CVE-2012-4685 Public exploit

    Cross-site scripting (XSS) vulnerability in Arbor Networks Peakflow SP 5.1.1 before patch 6, 5.5 before patch 4, and 5.…

  • Unscored —
    CVE-2012-4686 Public exploit

    SQL injection vulnerability in announcement.php in vBulletin 4.1.10 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2012-2085

    The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute ar…

    gajim Debian
  • Critical 9.8
    CVE-2012-4681 Exploited · Ransomware Public exploit EPSS 99%

    Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow…

    KEV Mar 3, 2022
  • Unscored —
    CVE-2011-4944

    Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been writt…

    python2.7 Debian
  • Unscored —
    CVE-2012-0855

    Heap-based buffer overflow in the get_sot function in the J2K decoder (j2k.c) in libavcodec in FFmpeg before 0.9.1 allo…

  • Unscored —
    CVE-2012-0849

    Integer overflow in the ff_j2k_dwt_init function in libavcodec/j2k_dwt.c in FFmpeg before 0.9.1 allows remote attackers…

  • Unscored —
    CVE-2012-1586 Public exploit

    mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the fi…

    cifs-utils Debian
  • Unscored —
    CVE-2012-4680 Public exploit

    Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks…

  • Unscored —
    CVE-2012-4036 Public exploit

    Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary …

  • Unscored —
    CVE-2012-3421

    The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connectio…

    pcp Debian
  • Unscored —
    CVE-2012-3420

    Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (m…

    pcp Debian
  • Unscored —
    CVE-2012-3419

    Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensiti…

    pcp Debian
  • Unscored —
    CVE-2012-3418

    libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly exe…

    pcp Debian
  • Unscored —
    CVE-2012-3410

    Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass inten…

    bash Debian
  • Medium —
    CVE-2012-3467

    Apache QPID Allows Remote Authentication Bypass

    Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.

    org.apache.qpid:qpid-parent Maven
  • Unscored —
    CVE-2012-1934 Public exploit

    SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attac…

  • Unscored —
    CVE-2012-1935 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote at…

  • Unscored —
    CVE-2012-1933 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_globa…

  • Unscored —
    CVE-2012-4679 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject …

  • Medium —
    CVE-2012-2112

    Typo3 Exception Handler XSS

    Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.

    typo3/cms Packagist
  • Unscored —
    CVE-2012-2129

    Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arb…

    dokuwiki Debian
  • Unscored —
    CVE-2012-2128

    Cross-site request forgery (CSRF) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to hij…

    dokuwiki Debian
  • Unscored —
    CVE-2012-4678

    munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of s…

    munin Debian
  • Unscored —
    CVE-2012-2103

    The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary …

    munin Debian
  • Unscored —
    CVE-2012-2147

    munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via …

    munin Debian
  • High 7.5
    CVE-2012-2146

    Elixir can leak information due to weak use of crypto

    Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for context-dependent users to obtain sensitive information and decrypt the database.

    elixir elixir Ubuntu PyPI
  • Unscored —
    CVE-2012-2297

    Multiple cross-site scripting (XSS) vulnerabilities in the Creative Commons module 6.x-1.x before 6.x-1.1 for Drupal al…

  • Unscored —
    CVE-2012-2104 Public exploit

    cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might…

    munin Debian
  • Unscored —
    CVE-2012-1921 Public exploit

    Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attacke…