Skip to content
OpenAdvisories

Archive

6 September 2012

Vulnerabilities first published on this day (UTC), newest first.

20 results · Clear filters · Feed

  • Unscored —
    CVE-2012-1468 Public exploit

    Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Auth…

  • Unscored —
    CVE-2012-1469 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems before 2.3.7 allow remote attackers and rem…

  • Unscored —
    CVE-2012-1467 Public exploit

    Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3…

  • Unscored —
    CVE-2012-4877 Public exploit

    Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows rem…

  • Unscored —
    CVE-2012-4871 Public exploit

    Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4…

  • Unscored —
    CVE-2012-4876 Public exploit EPSS 71%

    Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera…

  • Unscored —
    CVE-2012-4873 Public exploit

    Cross-site scripting (XSS) vulnerability in the file_download function in GNUBoard before 4.34.21 allows remote attacke…

  • Unscored —
    CVE-2012-4878 Public exploit

    Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to …

  • Unscored —
    CVE-2006-7247 Public exploit

    SQL injection vulnerability in the Weblinks (com_weblinks) component for Joomla! and Mambo 1.0.9 and earlier allows rem…

  • Unscored —
    CVE-2012-1112 Public exploit

    Directory traversal vulnerability in Open-Realty CMS 2.5.8 and earlier allows remote attackers to include and execute a…

  • Unscored —
    CVE-2012-1110 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2012-4870 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2012-4867 Public exploit

    Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote a…

  • Unscored —
    CVE-2012-4865 Public exploit

    Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file.

  • Unscored —
    CVE-2012-4864 Public exploit

    Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service (memory corruption and crash) and possib…

  • Unscored —
    CVE-2012-4869 Public exploit EPSS 70%

    The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attack…

  • Unscored —
    CVE-2012-2741 Public exploit

    Cross-site scripting (XSS) vulnerability in public_html/lists/admin/ in phpList before 2.10.18 allows remote attackers …

  • Unscored —
    CVE-2012-2740 Public exploit

    SQL injection vulnerability in public_html/lists/admin in phpList before 2.10.18 allows remote attackers to execute arb…

  • Unscored —
    CVE-2011-5155 Public exploit

    Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Troja…

  • Unscored —
    CVE-2010-5195 Public exploit

    Untrusted search path vulnerability in Roxio MyDVD 9 allows local users to gain privileges via a Trojan horse HomeUtils…