Skip to content
OpenAdvisories

Archive

18 September 2012

Vulnerabilities first published on this day (UTC), newest first.

← August 2012 2012 / September /18 October 2012 →
  1. 1 
  2. 2 
  3. 3 
  4. 413
  5. 540
  6. 680
  7. 757
  8. 88
  9. 919
  10. 1044
  11. 118
  12. 128
  13. 1358
  14. 1411
  15. 1529
  16. 1616
  17. 1721
  18. 1824
  19. 1935
  20. 2060
  21. 215
  22. 22 
  23. 2319
  24. 243
  25. 2530
  26. 2631
  27. 279
  28. 2827
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2012-1657

    Cross-site scripting (XSS) vulnerability in block_class.module in the Block Class module before 7.x-1.1 for Drupal allo…

  • Unscored —
    CVE-2012-1656

    SQL injection vulnerability in the Multisite Search module 6.x-2.2 for Drupal allows remote authenticated users with ce…

  • Unscored —
    CVE-2012-1660

    Multiple cross-site scripting (XSS) vulnerabilities in components/select.inc in the Webform module 6.x-3.x before 6.x-3…

  • Unscored —
    CVE-2012-1658

    Cross-site scripting (XSS) vulnerability in the Read More Link module 6.x-3.x before 6.x-3.1 for Drupal allows remote a…

  • Unscored —
    CVE-2012-1655

    Unspecified vulnerability in the UC PayDutchGroup / WeDeal payment module 6.x-1.0 for Drupal allows remote authenticate…

  • Unscored —
    CVE-2012-1654

    Multiple cross-site scripting (XSS) vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.…

  • Unscored —
    CVE-2012-1659

    Cross-site scripting (XSS) vulnerability in the Node Recommendation module 6.x-1.x before 6.x-1.1 for Drupal allows rem…

  • Medium —
    CVE-2011-4941

    Piwik (now Matomo) Vulnerable to Arbitrary Code Execution

    Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors.

    matomo/matomo piwik/piwik Packagist
  • Unscored —
    CVE-2012-1184 Public exploit EPSS 16%

    Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x…

    asterisk Debian
  • Unscored —
    CVE-2012-1183

    Stack-based buffer overflow in the milliwatt_generate function in the Miliwatt application in Asterisk 1.4.x before 1.4…

    asterisk Debian
  • Unscored —
    CVE-2012-1901 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to (1) h…

  • Unscored —
    CVE-2012-4425 Public exploit

    libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users t…

    spice-gtk Debian
  • Medium —
    CVE-2012-4413

    OpenStack Keystone does not invalidate existing tokens when granting or revoking roles

    OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.

    keystone keystone Debian PyPI
  • Unscored —
    CVE-2012-4405

    Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icc…

    ghostscript argyll Debian
  • Unscored —
    CVE-2012-3547

    Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP …

    freeradius Debian
  • Unscored —
    CVE-2012-3524 Public exploit

    libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allow…

    glib2.0 dbus Debian
  • Unscored —
    CVE-2012-3034

    WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers …

  • Unscored —
    CVE-2012-3031

    Multiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SI…

  • Unscored —
    CVE-2012-3028

    Cross-site request forgery (CSRF) vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATI…

  • Unscored —
    CVE-2012-3032

    SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other pro…

  • Unscored —
    CVE-2012-3030

    WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, stores sensitive informa…

  • High 8.1
    CVE-2012-4969 Exploited Public exploit EPSS 80%

    Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 a…

    KEV Jun 8, 2022
  • Unscored —
    CVE-2012-2994 Public exploit

    The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial numbe…

  • Medium 5.9
    CVE-2012-2993

    Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field of an X.509 certifica…