Archive
September 2012
Vulnerabilities first published in this month (UTC), newest first.
133 results · Clear filters · Feed
-
Unscored —CVE-2012-2275 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hija…
-
Unscored —CVE-2012-4909 Public exploit
Google Chrome before 18.0.1025308 on Android allows remote attackers to obtain cookie information via a crafted applica…
-
Unscored —CVE-2012-4906 Public exploit
Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attac…
-
Unscored —CVE-2012-4905 Public exploit
Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inj…
-
Unscored —CVE-2012-4908 Public exploit
Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access…
-
Unscored —
file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited…
-
Unscored —
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invali…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inj…
-
Unscored —CVE-2012-4891 Public exploit
Cross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2 allows remote attackers …
-
Unscored —CVE-2011-5160 Public exploit
Cross-site scripting (XSS) vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2011-5161 Public exploit
Unrestricted file upload vulnerability in the patient photograph functionality in OpenEMR 4 allows remote attackers to …
-
Unscored —CVE-2012-1911 Public exploit
Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitra…
-
Unscored —CVE-2012-1912 Public exploit
Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers…
-
Unscored —CVE-2012-2315 Public exploit
admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user rol…
-
Unscored —CVE-2012-2115 Public exploit
SQL injection vulnerability in interface/login/validateUser.php in OpenEMR 4.1.0 and possibly earlier allows remote att…
-
Unscored —CVE-2012-2316 Public exploit
Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions be…
-
Unscored —CVE-2012-1666 Public exploit
Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMw…
-
Unscored —CVE-2010-5240 Public exploit
Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to ga…
-
Unscored —CVE-2010-5227 Public exploit
Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwma…
-
Unscored —CVE-2010-5236 Public exploit
Untrusted search path vulnerability in Roxio Easy Media Creator Home 9.0.136 allows local users to gain privileges via …
-
Unscored —CVE-2010-5230 Public exploit
Multiple untrusted search path vulnerabilities in MicroStation 7.1 allow local users to gain privileges via a Trojan ho…
-
Unscored —CVE-2010-5241 Public exploit
Multiple untrusted search path vulnerabilities in Autodesk AutoCAD 2010 allow local users to gain privileges via a Troj…
-
Unscored —CVE-2010-5239 Public exploit
Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users…
-
Unscored —CVE-2012-1468 Public exploit
Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Auth…
-
Unscored —CVE-2012-1469 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems before 2.3.7 allow remote attackers and rem…
-
Unscored —CVE-2012-1467 Public exploit
Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3…
-
Unscored —CVE-2012-4877 Public exploit
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows rem…
-
Unscored —CVE-2012-4871 Public exploit
Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4…
-
Unscored —
Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera…
-
Unscored —CVE-2012-4873 Public exploit
Cross-site scripting (XSS) vulnerability in the file_download function in GNUBoard before 4.34.21 allows remote attacke…
-
Unscored —
Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to …
-
Unscored —CVE-2006-7247 Public exploit
SQL injection vulnerability in the Weblinks (com_weblinks) component for Joomla! and Mambo 1.0.9 and earlier allows rem…
-
Unscored —CVE-2012-1112 Public exploit
Directory traversal vulnerability in Open-Realty CMS 2.5.8 and earlier allows remote attackers to include and execute a…
-
Unscored —CVE-2012-1110 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrar…
-
Unscored —CVE-2012-4870 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitra…
-
Unscored —CVE-2012-4867 Public exploit
Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote a…
-
Unscored —CVE-2012-4865 Public exploit
Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file.
-
Unscored —CVE-2012-4864 Public exploit
Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service (memory corruption and crash) and possib…
-
Unscored —
The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attack…
-
Unscored —CVE-2012-2741 Public exploit
Cross-site scripting (XSS) vulnerability in public_html/lists/admin/ in phpList before 2.10.18 allows remote attackers …