Skip to content
OpenAdvisories

Archive

19 September 2012

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2012-5005 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/admin_options.php in VR GPub 4.0 allows remote attackers to hi…

  • Unscored —
    CVE-2012-4993 Public exploit

    torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers…

  • Unscored —
    CVE-2012-4997 Public exploit

    Directory traversal vulnerability in acp/index.php in AneCMS allows remote attackers to include and execute arbitrary l…

  • Unscored —
    CVE-2012-4999 Public exploit

    Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service h…

  • Unscored —
    CVE-2012-4996 Public exploit

    Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2012-4992 Public exploit EPSS 18%

    Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code vi…

  • Unscored —
    CVE-2012-4998 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in starCMS allows remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2012-2105 Public exploit

    Multiple SQL injection vulnerabilities in login.php in Timesheet Next Gen 1.5.2 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2012-5002 Public exploit EPSS 31%

    Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file…

  • Unscored —
    CVE-2012-5000 Public exploit

    SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to…

  • Unscored —
    CVE-2012-0271 Public exploit EPSS 18%

    Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 bef…

  • Unscored —
    CVE-2012-2578 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SmarterMail 9.2 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2012-2586 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Mailtraq 2.17.3.3150 allow remote attackers to inject arbitrary …