Archive
August 2012
Vulnerabilities first published in this month (UTC), newest first.
735 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitr…
-
Unscored —CVE-2011-5116 Public exploit
SQL injection vulnerability in setseed-hub in SetSeed CMS 5.8.20, 5.11.2, and earlier allows remote attackers to execut…
-
Unscored —CVE-2011-5108 Public exploit
Cross-site scripting (XSS) vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject ar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for Word…
-
Unscored —CVE-2011-5103 Public exploit
SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2011-5111 Public exploit
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in post_alert.php in Alert Before Your Post plugin, possibly 0.1.1 and earlier…
-
Unscored —CVE-2011-5109 Public exploit
Multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier allow remote attackers to inject arbitra…
-
Unscored —CVE-2011-5110 Public exploit
Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2011-5112 Public exploit
SQL injection vulnerability in Alameda (com_alameda) component before 1.0.1 for Joomla! allows remote attackers to exec…
-
Unscored —
Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF documen…
-
Unscored —
The Investigative Reports web interface in the TRITON management console in Websense Web Security 7.1 before Hotfix 109…
-
Unscored —
The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in …
-
Unscored —
The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentic…
-
Unscored —CVE-2012-2582 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13,…
-
Unscored —
The Filtering Service in Websense Enterprise 5.2 through 6.3 does not consider the IP address during URL categorization…
-
Unscored —
The Remote Filtering component in Websense Web Security and Web Filter before 7.1 Hotfix 66 allows local users to bypas…
-
Unscored —
Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set the secure flag for the Encrypted Session (SSL) co…
-
Unscored —
The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when…
-
Unscored —
The Remote Filtering component in Websense Web Security and Web Filter before 6.3.3 Hotfix 18 and 7.x before 7.1.1 allo…
-
Unscored —
Websense Web Security and Web Filter before 6.3.3 Hotfix 27 and 7.x before 7.1.1 allow remote attackers to cause a deni…
-
Unscored —
The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 136 and 7.x before 7.1.1 on Windows a…
-
Unscored —
Websense Email Security 7.1 before Hotfix 4 allows remote attackers to bypass the sender-based blacklist by using the 8…
-
Unscored —
The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 allows c…
-
Unscored —
The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 enables …
-
Unscored —
The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentiall…
-
Unscored —
The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_ht…
-
Unscored —CVE-2012-2687 EPSS 23%
Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_n…
-
Unscored —
The web interface in McAfee Firewall Reporter before 5.1.0.13 does not properly implement cookie authentication, which …
-
Unscored —
The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages v…
-
Unscored —
Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third…
-
Unscored —
McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 a…
-
Unscored —
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 b…
-
Unscored —
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 b…
-
Unscored —
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 b…
-
Unscored —
About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name of the user account…
-
Unscored —
McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass intended access restric…
-
Unscored —
McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode…
-
Unscored —
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 b…