19 September 2012

35 results · Feed

• Unscored —
  CVE-2012-1640

  Multiple cross-site scripting (XSS) vulnerabilities in the Managesite module 6.x-1.x before 6.1-1.1 for Drupal allow re…

  Sep 19, 2012
• Unscored —
  CVE-2012-1638

  SQL injection vulnerability in the Search Autocomplete module before 7.x-2.1 for Drupal allows remote authenticated use…

  Sep 19, 2012
• Unscored —
  CVE-2012-5006

  Heap-based buffer overflow in npdjvu.dll in Caminova DjVu Browser Plug-in 6.1.4 Build 27351 and other versions before 6…

  Sep 19, 2012
• Unscored —
  CVE-2012-5003

  nxapplet.jar in No Machine NX Web Companion 3.x and earlier does not properly verify the authenticity of updates, which…

  Sep 19, 2012
• Unscored —
  CVE-2012-5005 Public exploit

  Cross-site request forgery (CSRF) vulnerability in admin/admin_options.php in VR GPub 4.0 allows remote attackers to hi…

  Sep 19, 2012
• Unscored —
  CVE-2012-5004

  Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3 Patch 1 allow remote attackers to …

  Sep 19, 2012
• Unscored —
  CVE-2012-1653

  Cross-site scripting (XSS) vulnerability in the Taxonomy Views Integrator (TVI) module 6.x-1.x before 6.x-1.3 for Drupa…

  Sep 19, 2012
• Unscored —
  CVE-2012-1652

  Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 6.x-3.x before 6.x-3.8 for Drupal allows rem…

  Sep 19, 2012
• Unscored —
  CVE-2012-1651

  Cross-site scripting (XSS) vulnerability in the Submenu Tree module before 6.x-1.5 for Drupal allows remote authenticat…

  Sep 19, 2012
• Unscored —
  CVE-2012-4994

  SQL injection vulnerability in admin/admin.php in LimeSurvey before 1.91+ Build 120224 allows remote authenticated user…

  Sep 19, 2012
• Unscored —
  CVE-2012-4993 Public exploit

  torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers…

  Sep 19, 2012
• Unscored —
  CVE-2012-4997 Public exploit

  Directory traversal vulnerability in acp/index.php in AneCMS allows remote attackers to include and execute arbitrary l…

  Sep 19, 2012
• Unscored —
  CVE-2012-4995

  Cross-site scripting (XSS) vulnerability in admin/userrighthandling.php in LimeSurvey before 1.91+ Build 120224 allows …

  Sep 19, 2012
• Unscored —
  CVE-2012-4999 Public exploit

  Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service h…

  Sep 19, 2012
• Unscored —
  CVE-2012-4996 Public exploit

  Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL…

  Sep 19, 2012
• Unscored —
  CVE-2012-4992 Public exploit EPSS 18%

  Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code vi…

  Sep 19, 2012
• Unscored —
  CVE-2012-4998 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in starCMS allows remote attackers to inject arbitrary web script…

  Sep 19, 2012
• Unscored —
  CVE-2012-3373

  Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1.5.8 allows remote atta…

  Sep 19, 2012
• Unscored —
  CVE-2012-2105 Public exploit

  Multiple SQL injection vulnerabilities in login.php in Timesheet Next Gen 1.5.2 allow remote attackers to execute arbit…

  Sep 19, 2012
• Unscored —
  CVE-2012-2991

  The PayPal (aka MODULE_PAYMENT_PAYPAL_STANDARD) module before 1.1 in osCommerce Online Merchant before 2.3.4 allows rem…

  Sep 19, 2012
• Unscored —
  CVE-2012-5001

  Multiple unspecified vulnerabilities in Hitachi JP1/Cm2/Network Node Manager i before 09-50-03 allow remote attackers t…

  Sep 19, 2012
• Unscored —
  CVE-2012-5002 Public exploit EPSS 31%

  Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file…

  Sep 19, 2012
• Unscored —
  CVE-2012-5000 Public exploit

  SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to…

  Sep 19, 2012
• Unscored —
  CVE-2011-3827

  The iCalendar component in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 …

  Sep 19, 2012
• Unscored —
  CVE-2012-0271 Public exploit EPSS 18%

  Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 bef…

  Sep 19, 2012
• Unscored —
  CVE-2012-0272

  Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allow…

  Sep 19, 2012
• Unscored —
  CVE-2012-4408

  course/reset.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 checks an update capability i…

  Sep 19, 2012
• Unscored —
  CVE-2012-4402

  webservice/lib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly restrict …

  Sep 19, 2012
• Unscored —
  CVE-2012-4401

  Moodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remote authenticated users to bypass intended capability restri…

  Sep 19, 2012
• Unscored —
  CVE-2012-4407

  lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly check the pu…

  Sep 19, 2012
• Unscored —
  CVE-2012-4400

  repository/repository_ajax.php in Moodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remote authenticated users to…

  Sep 19, 2012
• Unscored —
  CVE-2012-4403

  theme/yui_combo.php in Moodle 2.3.x before 2.3.2 does not properly construct error responses for the drag-and-drop scri…

  Sep 19, 2012
• Unscored —
  CVE-2012-2578 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in SmarterMail 9.2 allow remote attackers to inject arbitrary web s…

  Sep 19, 2012
• Unscored —
  CVE-2012-2586 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Mailtraq 2.17.3.3150 allow remote attackers to inject arbitrary …

  Sep 19, 2012
• Unscored —
  CVE-2012-3258

  Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary c…

  Sep 19, 2012