Skip to content
OpenAdvisories

Archive

15 September 2012

Vulnerabilities first published on this day (UTC), newest first.

← August 2012 2012 / September /15 October 2012 →
  1. 1 
  2. 2 
  3. 3 
  4. 413
  5. 540
  6. 680
  7. 757
  8. 88
  9. 919
  10. 1044
  11. 118
  12. 128
  13. 1358
  14. 1411
  15. 1529
  16. 1616
  17. 1721
  18. 1824
  19. 1935
  20. 2060
  21. 215
  22. 22 
  23. 2319
  24. 243
  25. 2530
  26. 2631
  27. 279
  28. 2827
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2012-4930

    The SPDY protocol 3 and earlier, as used in Mozilla Firefox, Google Chrome, and other products, can perform TLS encrypt…

  • Unscored —
    CVE-2012-4929 Public exploit

    The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compre…

    openssl apache2 nginx lighttpd Debian
  • Unscored —
    CVE-2011-5164 Public exploit EPSS 29%

    Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute a…

  • Unscored —
    CVE-2011-5167 Public exploit

    Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Bui…

  • Unscored —
    CVE-2011-5169 Public exploit

    SQL injection vulnerability in sgms/reports/scheduledreports/configure/scheduleProps.jsp in SonicWall ViewPoint 6.0 SP2…

  • Unscored —
    CVE-2011-5166 Public exploit

    Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string…

  • Unscored —
    CVE-2011-5165 Public exploit EPSS 37%

    Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted re…

  • Unscored —
    CVE-2011-5174

    Buffer overflow in Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) in Intel Q67 Express…

  • Unscored —
    CVE-2011-5163

    Buffer overflow in an unspecified third-party component in the Batch module for Schneider Electric CitectSCADA before 7…

  • Unscored —
    CVE-2011-5170 Public exploit EPSS 32%

    Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2011-5172 Public exploit

    Stack-based buffer overflow in StoryBoard Quick 6 Build 3786, and possibly StoryBoard Artist and StoryBoard Studio, all…

  • Unscored —
    CVE-2011-5175

    SQL injection vulnerability in search.php in Banana Dance, possibly B.1.5 and earlier, allows remote attackers to execu…

  • Unscored —
    CVE-2011-5176

    Multiple cross-site scripting (XSS) vulnerabilities in search.php in Banana Dance, possibly B.1.5 and earlier, allow re…

  • Unscored —
    CVE-2011-5168 Public exploit

    SQL injection vulnerability in user.php in Banana Dance before B.1.5 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2011-5162 Public exploit

    Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2011-5173 Public exploit

    Buffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2011-5171 Public exploit EPSS 46%

    Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to …

  • Unscored —
    CVE-2012-4923 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2012-4928 Public exploit

    Cross-site scripting (XSS) vulnerability in ow_updates/index.php in Oxwall 1.1.1 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2012-4336 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to i…

  • Unscored —
    CVE-2012-4924 Public exploit EPSS 36%

    Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 al…

  • Unscored —
    CVE-2012-4926 Public exploit

    approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the acti…

  • Unscored —
    CVE-2012-4927 Public exploit

    SQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) before 1.91+ Build 120224 and earlier allows remote attac…

  • Unscored —
    CVE-2012-4925 Public exploit

    Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbi…

  • Unscored —
    CVE-2012-3233 Public exploit

    Cross-site scripting (XSS) vulnerability in __swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php in Kayak…

  • Medium 5.3
    CVE-2012-3458

    Beaker Sensitive Information Disclosure vulnerability

    Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.

    beaker beaker Debian PyPI
  • Unscored —
    CVE-2012-2275 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hija…

  • Unscored —
    CVE-2012-4001

    The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allo…

  • Unscored —
    CVE-2012-4360

    Cross-site scripting (XSS) vulnerability in the mod_pagespeed module 0.10.19.1 through 0.10.22.4 for the Apache HTTP Se…