Skip to content
OpenAdvisories

Archive

4 September 2012

Vulnerabilities first published on this day (UTC), newest first.

← August 2012 2012 / September /4 October 2012 →
  1. 1 
  2. 2 
  3. 3 
  4. 413
  5. 540
  6. 680
  7. 757
  8. 88
  9. 919
  10. 1044
  11. 118
  12. 128
  13. 1358
  14. 1411
  15. 1529
  16. 1616
  17. 1721
  18. 1824
  19. 1935
  20. 2060
  21. 215
  22. 22 
  23. 2319
  24. 243
  25. 2530
  26. 2631
  27. 279
  28. 2827
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Medium —
    CVE-2012-1608

    Typo3 API XSS Vulnerabilities

    The t3lib_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and inject arbitrary web script or HTML via non pr…

    typo3/cms Packagist
  • Medium —
    CVE-2012-1605

    Typo3 Extbase Framework Unsafe Deserialization

    The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request a…

    typo3/cms Packagist
  • Medium —
    CVE-2012-1607

    TYPO3 allows remote attackers to obtain the database name via a direct request

    The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request.

    typo3/cms Packagist
  • Unscored —
    CVE-2012-1613 Public exploit

    Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote au…

  • Unscored —
    CVE-2012-1614 Public exploit

    Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request…

  • Low —
    CVE-2012-1606

    Typo3 Backend XSS Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified…

    typo3/cms Packagist
  • Unscored —
    CVE-2012-2109 Public exploit

    SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attac…

  • Unscored —
    CVE-2012-0275

    Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and …

  • Unscored —
    CVE-2012-4747

    Bugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3…

  • Unscored —
    CVE-2012-3014

    The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded p…

  • Unscored —
    CVE-2012-3981

    Auth/Verify/LDAP.pm in Bugzilla 2.x and 3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, …

  • Unscored —
    CVE-2012-3582

    Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests…

  • Unscored —
    CVE-2012-2288 Public exploit EPSS 33%

    Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0…