Archive
September 2012
Vulnerabilities first published in this month (UTC), newest first.
133 results · Clear filters · Feed
-
Unscored —
Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 b…
-
Unscored —CVE-2012-4051 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interf…
-
Unscored —CVE-2012-2998 Public exploit
SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 …
-
Unscored —CVE-2012-5048 Public exploit
APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (NULL poin…
-
Unscored —CVE-2012-5049 Public exploit
APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite …
-
Unscored —CVE-2012-1617 Public exploit
Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbi…
-
Unscored —CVE-2012-1116 Public exploit
SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL co…
-
Medium —CVE-2012-1188 Public exploit
Fork CMS Multiple XSS Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index.
-
Unscored —CVE-2012-0869 Public exploit
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows rem…
-
Unscored —CVE-2012-0974 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the getParam function in oc-includes/osclass/core/Params.php in …
-
Unscored —CVE-2012-0973 Public exploit
Multiple SQL injection vulnerabilities in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands…
-
Unscored —
Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between Novembe…
-
Unscored —
phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an …
-
Unscored —
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbi…
-
Unscored —
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbi…
-
Unscored —CVE-2011-5195 Public exploit
Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference…
-
Unscored —CVE-2011-5193 Public exploit
Cross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin 1.4.2.3 for …
-
Unscored —CVE-2011-5196 Public exploit
Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Sy…
-
Unscored —CVE-2011-5200 Public exploit
Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2011-5197 Public exploit
Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester …
-
Unscored —CVE-2012-5105 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2012-5098 Public exploit
Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2012-5100 Public exploit
Directory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary files via a (1) ..%5c (dot…
-
Unscored —CVE-2012-5104 Public exploit
Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attack…
-
Unscored —CVE-2012-5102 Public exploit
Cross-site scripting (XSS) vulnerability in inc/extensions.php in VertrigoServ 2.25 allows remote attackers to inject a…
-
Unscored —CVE-2012-5099 Public exploit
Cross-site scripting (XSS) vulnerability in list.php in PHPB2B 4.1 and earlier allows remote attackers to inject arbitr…
-
Unscored —
The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 al…
-
Unscored —CVE-2012-3716 Public exploit
CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code or cause a denial of …
-
Unscored —CVE-2011-5177 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote attack…
-
Unscored —CVE-2011-5186 Public exploit
Cross-site scripting (XSS) vulnerability in jbshop.php in the jbShop plugin for e107 7 allows remote attackers to injec…
-
Unscored —CVE-2011-5184 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject …
-
Unscored —CVE-2011-5180 Public exploit
Cross-site scripting (XSS) vulnerability in wp-1pluginjquery.php in the ZooEffect plugin 1.01 for WordPress allows remo…
-
Unscored —CVE-2011-5185 Public exploit
Cross-site scripting (XSS) vulnerability in video_comments.php in Online Subtitles Workshop before 2.0 rev 131 allows r…
-
Unscored —CVE-2011-5183 Public exploit
Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to execute arbitrary SQL co…
-
Unscored —
Cross-site scripting (XSS) vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat plugin 2.0 for WordPres…
-
Unscored —CVE-2011-5182 Public exploit
Cross-site scripting (XSS) vulnerability in lanoba-social-plugin/index.php in the Lanoba Social plugin 1.0 for WordPres…
-
Unscored —CVE-2011-5179 Public exploit
Cross-site scripting (XSS) vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly befo…
-
Unscored —CVE-2012-0988 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in config/dmsDefaults.php in KnowledgeTree 3.7.0.2 and possibly ear…
-
Unscored —CVE-2012-5005 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin/admin_options.php in VR GPub 4.0 allows remote attackers to hi…
-
Unscored —CVE-2012-4993 Public exploit
torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers…