Archive
September 2012
Vulnerabilities first published in this month (UTC), newest first.
133 results · Clear filters · Feed
-
Unscored —CVE-2012-2740 Public exploit
SQL injection vulnerability in public_html/lists/admin in phpList before 2.10.18 allows remote attackers to execute arb…
-
Unscored —CVE-2011-5155 Public exploit
Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Troja…
-
Unscored —CVE-2010-5195 Public exploit
Untrusted search path vulnerability in Roxio MyDVD 9 allows local users to gain privileges via a Trojan horse HomeUtils…
-
Unscored —CVE-2012-3551 Public exploit
Cross-site scripting (XSS) vulnerability in crowbar_framework/app/views/support/index.html.haml in the Crowbar barclamp…
-
Unscored —
libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to …
-
Unscored —CVE-2011-4448 Public exploit
SQL injection vulnerability in actions/usersettings/usersettings.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attacke…
-
Unscored —CVE-2011-4449 Public exploit
actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file ext…
-
Unscored —CVE-2011-4452 Public exploit
Cross-site request forgery (CSRF) vulnerability in the AdminUsers component in WikkaWiki 1.3.1 and 1.3.2 allows remote …
-
Unscored —CVE-2011-4450 Public exploit
Directory traversal vulnerability in handlers/files.xml/files.xml.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attack…
-
Unscored —CVE-2012-1613 Public exploit
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote au…
-
Unscored —CVE-2012-1614 Public exploit
Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request…
-
Unscored —CVE-2012-2109 Public exploit
SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attac…
-
Unscored —
Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0…