Skip to content
OpenAdvisories

Archive

September 2012

Vulnerabilities first published in this month (UTC), newest first.

← August 2012 2012 / September October 2012 →
  1. 1 
  2. 2 
  3. 3 
  4. 413
  5. 540
  6. 680
  7. 757
  8. 88
  9. 919
  10. 1044
  11. 118
  12. 128
  13. 1358
  14. 1411
  15. 1529
  16. 1616
  17. 1721
  18. 1824
  19. 1935
  20. 2060
  21. 215
  22. 22 
  23. 2319
  24. 243
  25. 2530
  26. 2631
  27. 279
  28. 2827
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

655 results · Feed

  • Unscored —
    CVE-2012-2888

    Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-2891

    The IPC implementation in Google Chrome before 22.0.1229.79 allows attackers to obtain potentially sensitive informatio…

  • Unscored —
    CVE-2012-2881

    Google Chrome before 22.0.1229.79 does not properly handle plug-ins, which allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2012-2880

    Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly ha…

  • Unscored —
    CVE-2012-2893

    Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a …

    libxslt Debian
  • Unscored —
    CVE-2012-2892

    Unspecified vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to bypass the pop-up blocker via…

  • Unscored —
    CVE-2012-2883

    Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly ha…

  • Unscored —
    CVE-2012-2875

    Multiple unspecified vulnerabilities in the PDF functionality in Google Chrome before 22.0.1229.79 allow remote attacke…

  • Unscored —
    CVE-2012-2895

    The PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or poss…

  • Unscored —
    CVE-2012-2887

    Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-2885

    Double free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or …

  • Unscored —
    CVE-2012-2876

    Buffer overflow in the SSE2 optimization functionality in Google Chrome before 22.0.1229.79 allows remote attackers to …

  • Unscored —
    CVE-2012-2894

    Google Chrome before 22.0.1229.79 does not properly handle graphics-context data structures, which allows remote attack…

  • Unscored —
    CVE-2012-2889

    Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2012-2886

    Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2012-2874

    Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly ha…

  • Unscored —
    CVE-2012-2890

    Use-after-free vulnerability in the PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to c…

  • Unscored —
    CVE-2012-2884

    Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service (out-of-bounds…

  • Unscored —
    CVE-2012-2877

    The extension system in Google Chrome before 22.0.1229.79 does not properly handle modal dialogs, which allows remote a…

  • Unscored —
    CVE-2012-2882

    FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote atta…

  • Unscored —
    CVE-2012-1617 Public exploit

    Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbi…

  • Unscored —
    CVE-2012-1116 Public exploit

    SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL co…

  • Medium —
    CVE-2012-1188 Public exploit

    Fork CMS Multiple XSS Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index.

    forkcms/forkcms Packagist
  • Unscored —
    CVE-2012-1117

    Cross-site scripting (XSS) vulnerability in Joomla! 2.5.0 and 2.5.1 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2012-5164

    Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2012-5163

    Cross-site scripting (XSS) vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to i…

  • Unscored —
    CVE-2012-5162

    Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to exec…

  • Unscored —
    CVE-2011-4623

    Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.…

    rsyslog Debian
  • Unscored —
    CVE-2012-0869 Public exploit

    Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows rem…

    fex Debian
  • Unscored —
    CVE-2012-0974 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the getParam function in oc-includes/osclass/core/Params.php in …

  • Unscored —
    CVE-2012-0973 Public exploit

    Multiple SQL injection vulnerabilities in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2012-1646

    Multiple cross-site scripting (XSS) vulnerabilities in the FAQ module 6.x-1.x before 6.x-1.13 and 7.x-1.x-rc1 for Drupa…

  • Unscored —
    CVE-2012-1293

    Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129…

    fex Debian
  • Unscored —
    CVE-2012-1103

    emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to…

    notmuch Debian
  • Unscored —
    CVE-2012-0209 Public exploit EPSS 72%

    Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between Novembe…

  • Unscored —
    CVE-2012-5159 Public exploit EPSS 75%

    phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an …

  • Unscored —
    CVE-2012-3334

    Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 11.50 before 11.50.xC9W2 and 11.70 before 11.70.xC5 al…

  • Unscored —
    CVE-2012-3311

    IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5…

  • Unscored —
    CVE-2012-3306

    IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5…

  • Unscored —
    CVE-2012-3304

    The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 befo…