Skip to content
OpenAdvisories

Archive

9 September 2012

Vulnerabilities first published on this day (UTC), newest first.

← August 2012 2012 / September /9 October 2012 →
  1. 1 
  2. 2 
  3. 3 
  4. 413
  5. 540
  6. 680
  7. 757
  8. 88
  9. 919
  10. 1044
  11. 118
  12. 128
  13. 1358
  14. 1411
  15. 1529
  16. 1616
  17. 1721
  18. 1824
  19. 1935
  20. 2060
  21. 215
  22. 22 
  23. 2319
  24. 243
  25. 2530
  26. 2631
  27. 279
  28. 2827
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2011-4942

    Multiple cross-site scripting (XSS) vulnerabilities in admin/configuration.php in Geeklog before 1.7.1sr1 allow remote …

  • Unscored —
    CVE-2011-5159

    Cross-site scripting (XSS) vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers …

  • Unscored —
    CVE-2011-5160 Public exploit

    Cross-site scripting (XSS) vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2011-5161 Public exploit

    Unrestricted file upload vulnerability in the patient photograph functionality in OpenEMR 4 allows remote attackers to …

  • Unscored —
    CVE-2012-1582

    Cross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.1…

    mediawiki Debian
  • Unscored —
    CVE-2012-1911 Public exploit

    Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2012-1580

    Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1…

  • Unscored —
    CVE-2012-1912 Public exploit

    Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers…

  • Unscored —
    CVE-2012-1649

    Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users…

  • Unscored —
    CVE-2012-1579

    The resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private data such as CSRF token…

  • Unscored —
    CVE-2012-1581

    MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes…

    mediawiki Debian
  • Unscored —
    CVE-2012-1648

    Cross-site scripting (XSS) vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated u…

  • Unscored —
    CVE-2012-1152

    Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML (aka YAML-LibYAML and …

    libyaml-libyaml-perl Debian
  • Unscored —
    CVE-2012-1151

    Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for P…

    libdbd-pg-perl Debian
  • Unscored —
    CVE-2012-1578

    Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 a…

  • Unscored —
    CVE-2012-4885

    The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to cause a denia…

    mediawiki Debian
  • Unscored —
    CVE-2012-2315 Public exploit

    admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user rol…

  • Unscored —
    CVE-2012-2115 Public exploit

    SQL injection vulnerability in interface/login/validateUser.php in OpenEMR 4.1.0 and possibly earlier allows remote att…

  • Unscored —
    CVE-2012-2316 Public exploit

    Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions be…