Archive
6 September 2012
Vulnerabilities first published on this day (UTC), newest first.
80 results · Feed
-
Unscored —
Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain sensitive "administrat…
-
Unscored —CVE-2012-1468 Public exploit
Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Auth…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to…
-
Unscored —CVE-2012-1469 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems before 2.3.7 allow remote attackers and rem…
-
Unscored —CVE-2012-1467 Public exploit
Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to …
-
Unscored —
Heap-based buffer overflow in gdevwpr2.c in Ghostscript 9.04, when processing the OutputFile device parameter, allows u…
-
Unscored —CVE-2012-4877 Public exploit
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows rem…
-
Unscored —CVE-2012-4871 Public exploit
Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4…
-
Unscored —
Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera…
-
Unscored —CVE-2012-4873 Public exploit
Cross-site scripting (XSS) vulnerability in the file_download function in GNUBoard before 4.34.21 allows remote attacke…
-
Unscored —
Unspecified vulnerability in the Another WordPress Classifieds Plugin before 2.0 for WordPress has unknown impact and a…
-
Unscored —CVE-2012-4878 Public exploit
Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to …
-
Unscored —
Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to obtain sensitive informati…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to inject arbi…
-
Unscored —
Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain sensitive inf…
-
Unscored —
Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain the installation path via unspecified vect…
-
Unscored —
Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to obtain sensitive informati…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Joomla! 1.6 and 1.7.x before 1.7.4 allows remote attackers to inject arbitr…
-
Unscored —
Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 allows attackers to read the error log via unknown vectors.
-
Unscored —CVE-2006-7247 Public exploit
SQL injection vulnerability in the Weblinks (com_weblinks) component for Joomla! and Mambo 1.0.9 and earlier allows rem…
-
Unscored —
Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent atta…
-
Unscored —CVE-2012-1112 Public exploit
Directory traversal vulnerability in Open-Realty CMS 2.5.8 and earlier allows remote attackers to include and execute a…
-
Unscored —
The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2012-1110 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrar…
-
Unscored —
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to ca…
-
Unscored —CVE-2012-4870 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitra…
-
Unscored —CVE-2012-4867 Public exploit
Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote a…
-
Unscored —
Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hija…
-
Unscored —CVE-2012-4865 Public exploit
Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file.
-
Unscored —CVE-2012-4864 Public exploit
Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service (memory corruption and crash) and possib…
-
Unscored —
SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows remote attackers to execute ar…
-
Unscored —
The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attack…
-
Unscored —CVE-2012-2741 Public exploit
Cross-site scripting (XSS) vulnerability in public_html/lists/admin/ in phpList before 2.10.18 allows remote attackers …
-
Unscored —CVE-2012-2740 Public exploit
SQL injection vulnerability in public_html/lists/admin in phpList before 2.10.18 allows remote attackers to execute arb…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Wishlist module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.…
-
Unscored —
Multiple untrusted search path vulnerabilities in ACDSee Photo Editor 2008 5.x build 291 allow local users to gain priv…
-
Unscored —
Untrusted search path vulnerability in ACDSee Picture Frame Manager 1.0 Build 81 allows local users to gain privileges …
-
Unscored —
Untrusted search path vulnerability in Effective File Search 6.7 allows local users to gain privileges via a Trojan hor…
-
Unscored —
Untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges via …