Archive
September 2012
Vulnerabilities first published in this month (UTC), newest first.
133 results · Clear filters · Feed
-
Unscored —CVE-2012-4997 Public exploit
Directory traversal vulnerability in acp/index.php in AneCMS allows remote attackers to include and execute arbitrary l…
-
Unscored —CVE-2012-4999 Public exploit
Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service h…
-
Unscored —CVE-2012-4996 Public exploit
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL…
-
Unscored —
Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code vi…
-
Unscored —CVE-2012-4998 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in starCMS allows remote attackers to inject arbitrary web script…
-
Unscored —CVE-2012-2105 Public exploit
Multiple SQL injection vulnerabilities in login.php in Timesheet Next Gen 1.5.2 allow remote attackers to execute arbit…
-
Unscored —
Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file…
-
Unscored —CVE-2012-5000 Public exploit
SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to…
-
Unscored —
Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 bef…
-
Unscored —CVE-2012-2578 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SmarterMail 9.2 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2012-2586 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Mailtraq 2.17.3.3150 allow remote attackers to inject arbitrary …
-
Unscored —
Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x…
-
Unscored —CVE-2012-1901 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to (1) h…
-
Unscored —CVE-2012-4425 Public exploit
libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users t…
-
Unscored —CVE-2012-3524 Public exploit
libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allow…
-
High 8.1
Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 a…
KEV Jun 8, 2022 -
Unscored —CVE-2012-2994 Public exploit
The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial numbe…
-
Unscored —CVE-2012-2996 Public exploit
Cross-site request forgery (CSRF) vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security S…
-
Unscored —CVE-2012-2575 Public exploit
Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 6.0a4 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2012-2995 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1…
-
Unscored —CVE-2012-4929 Public exploit
The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compre…
-
Unscored —
Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute a…
-
Unscored —CVE-2011-5167 Public exploit
Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Bui…
-
Unscored —CVE-2011-5169 Public exploit
SQL injection vulnerability in sgms/reports/scheduledreports/configure/scheduleProps.jsp in SonicWall ViewPoint 6.0 SP2…
-
Unscored —CVE-2011-5166 Public exploit
Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string…
-
Unscored —
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted re…
-
Unscored —
Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code v…
-
Unscored —CVE-2011-5172 Public exploit
Stack-based buffer overflow in StoryBoard Quick 6 Build 3786, and possibly StoryBoard Artist and StoryBoard Studio, all…
-
Unscored —CVE-2011-5168 Public exploit
SQL injection vulnerability in user.php in Banana Dance before B.1.5 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2011-5162 Public exploit
Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code v…
-
Unscored —CVE-2011-5173 Public exploit
Buffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to cause a denial of servic…
-
Unscored —
Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to …
-
Unscored —CVE-2012-4923 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2012-4928 Public exploit
Cross-site scripting (XSS) vulnerability in ow_updates/index.php in Oxwall 1.1.1 allows remote attackers to inject arbi…
-
Unscored —CVE-2012-4336 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to i…
-
Unscored —
Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 al…
-
Unscored —CVE-2012-4926 Public exploit
approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the acti…
-
Unscored —CVE-2012-4927 Public exploit
SQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) before 1.91+ Build 120224 and earlier allows remote attac…
-
Unscored —CVE-2012-4925 Public exploit
Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbi…
-
Unscored —CVE-2012-3233 Public exploit
Cross-site scripting (XSS) vulnerability in __swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php in Kayak…