Skip to content
OpenAdvisories

Archive

September 2012

Vulnerabilities first published in this month (UTC), newest first.

← August 2012 2012 / September October 2012 →
  1. 1 
  2. 2 
  3. 3 
  4. 413
  5. 540
  6. 680
  7. 757
  8. 88
  9. 919
  10. 1044
  11. 118
  12. 128
  13. 1358
  14. 1411
  15. 1529
  16. 1616
  17. 1721
  18. 1824
  19. 1935
  20. 2060
  21. 215
  22. 22 
  23. 2319
  24. 243
  25. 2530
  26. 2631
  27. 279
  28. 2827
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

655 results · Feed

  • Unscored —
    CVE-2011-5160 Public exploit

    Cross-site scripting (XSS) vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2011-5161 Public exploit

    Unrestricted file upload vulnerability in the patient photograph functionality in OpenEMR 4 allows remote attackers to …

  • Unscored —
    CVE-2012-1582

    Cross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.1…

    mediawiki Debian
  • Unscored —
    CVE-2012-1911 Public exploit

    Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2012-1580

    Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1…

  • Unscored —
    CVE-2012-1912 Public exploit

    Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers…

  • Unscored —
    CVE-2012-1649

    Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users…

  • Unscored —
    CVE-2012-1579

    The resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private data such as CSRF token…

  • Unscored —
    CVE-2012-1581

    MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes…

    mediawiki Debian
  • Unscored —
    CVE-2012-1648

    Cross-site scripting (XSS) vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated u…

  • Unscored —
    CVE-2012-1152

    Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML (aka YAML-LibYAML and …

    libyaml-libyaml-perl Debian
  • Unscored —
    CVE-2012-1151

    Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for P…

    libdbd-pg-perl Debian
  • Unscored —
    CVE-2012-1578

    Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 a…

  • Unscored —
    CVE-2012-4885

    The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to cause a denia…

    mediawiki Debian
  • Unscored —
    CVE-2012-2315 Public exploit

    admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user rol…

  • Unscored —
    CVE-2012-2115 Public exploit

    SQL injection vulnerability in interface/login/validateUser.php in OpenEMR 4.1.0 and possibly earlier allows remote att…

  • Unscored —
    CVE-2012-2316 Public exploit

    Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions be…

  • Unscored —
    CVE-2012-0254

    Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions (HPS) …

  • Unscored —
    CVE-2012-1666 Public exploit

    Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMw…

  • Unscored —
    CVE-2012-4011

    The Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary Java methods, and ob…

  • Unscored —
    CVE-2012-4012

    The WebView class in the Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2012-3256

    Cross-site request forgery (CSRF) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers t…

  • Unscored —
    CVE-2012-3257

    HP Business Availability Center (BAC) 8.07 allows remote authenticated users to hijack web sessions via unspecified vec…

  • Unscored —
    CVE-2012-3255

    Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to injec…

  • Unscored —
    CVE-2012-3004

    Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDe…

  • Unscored —
    CVE-2012-4388

    The sapi_header_op function in main/SAPI.c in PHP 5.4.0RC2 through 5.4.0 does not properly determine a pointer during c…

  • Unscored —
    CVE-2011-5158

    Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grund…

  • Unscored —
    CVE-2012-4883

    Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain…

  • Unscored —
    CVE-2012-4880

    Multiple untrusted search path vulnerabilities in DVD Architect Pro 5.2 Build 133 and DVD Architect Studio 5.0 Build 15…

  • Unscored —
    CVE-2012-4882

    Multiple untrusted search path vulnerabilities in 3D XML Player 6.212.13.12076 allow local users to gain privileges via…

  • Unscored —
    CVE-2012-4881

    Untrusted search path vulnerability in moviEZ HD 1.0 Build 2554-29894-A allows local users to gain privileges via a Tro…

  • Unscored —
    CVE-2010-5270

    Multiple untrusted search path vulnerabilities in Adobe Device Central CS4 2.0.0 0476 allow local users to gain privile…

  • Unscored —
    CVE-2010-5231

    Untrusted search path vulnerability in DivX Player 7.2.019 allows local users to gain privileges via a Trojan horse Ver…

  • Unscored —
    CVE-2010-5240 Public exploit

    Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to ga…

  • Unscored —
    CVE-2010-5262

    Multiple untrusted search path vulnerabilities in libmcl-5.4.0.dll in Gromada Multimedia Conversion Library 5.4.0 allow…

  • Unscored —
    CVE-2010-5232

    Untrusted search path vulnerability in DivX Plus Player 8.1.0 allows local users to gain privileges via a Trojan horse …

  • Unscored —
    CVE-2010-5250

    Untrusted search path vulnerability in the pthread_win32_process_attach_np function in pthreadGC2.dll in Pthreads-win32…

  • Unscored —
    CVE-2010-5258

    Untrusted search path vulnerability in Adobe Audition 3.0 build 7283.0 allows local users to gain privileges via a Troj…

  • Unscored —
    CVE-2010-5253

    Untrusted search path vulnerability in WinImage 8.50 allows local users to gain privileges via a Trojan horse wnaspi32.…

  • Unscored —
    CVE-2010-5249

    Untrusted search path vulnerability in Sophos Free Encryption 2.40.1.1 and Sophos SafeGuard PrivateCrypto 2.40.1.2 allo…