Skip to content
OpenAdvisories

Archive

17 September 2012

Vulnerabilities first published on this day (UTC), newest first.

← August 2012 2012 / September /17 October 2012 →
  1. 1 
  2. 2 
  3. 3 
  4. 413
  5. 540
  6. 680
  7. 757
  8. 88
  9. 919
  10. 1044
  11. 118
  12. 128
  13. 1358
  14. 1411
  15. 1529
  16. 1616
  17. 1721
  18. 1824
  19. 1935
  20. 2060
  21. 215
  22. 22 
  23. 2319
  24. 243
  25. 2530
  26. 2631
  27. 279
  28. 2827
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2012-1899

    Multiple cross-site scripting (XSS) vulnerabilities in webfolio/admin/users/edit in Webfolio CMS 1.1.4 and earlier allo…

  • Unscored —
    CVE-2012-2059

    Cross-site scripting (XSS) vulnerability in the ticketyboo News Ticker module for Drupal allows remote attackers to inj…

    Web / CMS
  • Unscored —
    CVE-2012-2057

    Cross-site request forgery (CSRF) vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote atta…

    Web / CMS
  • Unscored —
    CVE-2012-2061

    Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal allows remote attackers to hijack …

    Web / CMS
  • Unscored —
    CVE-2012-2058

    The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via…

    Web / CMS
  • Unscored —
    CVE-2012-2056

    Cross-site request forgery (CSRF) vulnerability in the Content Lock module for Drupal allows remote attackers to hijack…

    Web / CMS
  • Unscored —
    CVE-2012-2062

    Open redirect vulnerability in the Redirecting click bouncer module for Drupal allows remote attackers to redirect user…

    Web / CMS
  • Unscored —
    CVE-2012-2060

    Cross-site scripting (XSS) vulnerability in the Admin tools module for Drupal allows remote attackers to inject arbitra…

    Web / CMS
  • Unscored —
    CVE-2011-4959

    SQL injection vulnerability in the addslashes method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6, when c…

  • Unscored —
    CVE-2011-4960

    SQL injection vulnerability in the Folder::findOrMake method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6…

  • Unscored —
    CVE-2011-4961

    SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote authenticated users with the EDIT_PERMISSIONS per…

  • Medium —
    CVE-2011-4962

    Silverstripe CMS Arbitrary Code Execution

    code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized.

    silverstripe/cms Packagist
  • Medium —
    CVE-2012-4968

    Silverstripe XSS Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted string to the AbsoluteLinks, (2) BigSummary, (3) ContextSummary, (4)…

    silverstripe/framework Packagist
  • Unscored —
    CVE-2010-4823

    Cross-site scripting (XSS) vulnerability in the httpError method in sapphire/core/control/RequestHandler.php in SilverS…

  • Unscored —
    CVE-2010-4822

    core/model/MySQLDatabase.php in SilverStripe 2.4.x before 2.4.4, when the site is running in "live mode," allows remote…

  • Unscored —
    CVE-2010-4824

    SQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in SilverStripe 2.3.x before 2.3.10…

  • Unscored —
    CVE-2010-5079

    SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 uses weak entropy when generating tokens for (1) the CSRF prote…

  • Unscored —
    CVE-2010-5078

    SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 stores sensitive information under the web root with insufficie…

  • Unscored —
    CVE-2012-2996 Public exploit

    Cross-site request forgery (CSRF) vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security S…

  • Unscored —
    CVE-2012-2575 Public exploit

    Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 6.0a4 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2012-2995 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1…