Skip to content
OpenAdvisories

Archive

September 2012

Vulnerabilities first published in this month (UTC), newest first.

133 results · Clear filters · Feed

  • Unscored —
    CVE-2012-2740 Public exploit

    SQL injection vulnerability in public_html/lists/admin in phpList before 2.10.18 allows remote attackers to execute arb…

  • Unscored —
    CVE-2011-5155 Public exploit

    Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Troja…

  • Unscored —
    CVE-2010-5195 Public exploit

    Untrusted search path vulnerability in Roxio MyDVD 9 allows local users to gain privileges via a Trojan horse HomeUtils…

  • Unscored —
    CVE-2012-3551 Public exploit

    Cross-site scripting (XSS) vulnerability in crowbar_framework/app/views/support/index.html.haml in the Crowbar barclamp…

  • Unscored —
    CVE-2011-4451 Public exploit EPSS 14%

    libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to …

  • Unscored —
    CVE-2011-4448 Public exploit

    SQL injection vulnerability in actions/usersettings/usersettings.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attacke…

  • Unscored —
    CVE-2011-4449 Public exploit

    actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file ext…

  • Unscored —
    CVE-2011-4452 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the AdminUsers component in WikkaWiki 1.3.1 and 1.3.2 allows remote …

  • Unscored —
    CVE-2011-4450 Public exploit

    Directory traversal vulnerability in handlers/files.xml/files.xml.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attack…

  • Unscored —
    CVE-2012-1613 Public exploit

    Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote au…

  • Unscored —
    CVE-2012-1614 Public exploit

    Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request…

  • Unscored —
    CVE-2012-2109 Public exploit

    SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attac…

  • Unscored —
    CVE-2012-2288 Public exploit EPSS 33%

    Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0…