Skip to content
OpenAdvisories

Archive

September 2012

Vulnerabilities first published in this month (UTC), newest first.

← August 2012 2012 / September October 2012 →
  1. 1 
  2. 2 
  3. 3 
  4. 413
  5. 540
  6. 680
  7. 757
  8. 88
  9. 919
  10. 1044
  11. 118
  12. 128
  13. 1358
  14. 1411
  15. 1529
  16. 1616
  17. 1721
  18. 1824
  19. 1935
  20. 2060
  21. 215
  22. 22 
  23. 2319
  24. 243
  25. 2530
  26. 2631
  27. 279
  28. 2827
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

655 results · Feed

  • Unscored —
    CVE-2011-5186 Public exploit

    Cross-site scripting (XSS) vulnerability in jbshop.php in the jbShop plugin for e107 7 allows remote attackers to injec…

  • Unscored —
    CVE-2011-5184 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject …

  • Unscored —
    CVE-2011-5180 Public exploit

    Cross-site scripting (XSS) vulnerability in wp-1pluginjquery.php in the ZooEffect plugin 1.01 for WordPress allows remo…

  • Unscored —
    CVE-2011-5185 Public exploit

    Cross-site scripting (XSS) vulnerability in video_comments.php in Online Subtitles Workshop before 2.0 rev 131 allows r…

  • Unscored —
    CVE-2011-5183 Public exploit

    Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2011-5181 Public exploit Scanner template EPSS 10%

    Cross-site scripting (XSS) vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat plugin 2.0 for WordPres…

  • Unscored —
    CVE-2011-5190

    Multiple cross-site scripting (XSS) vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject…

  • Unscored —
    CVE-2011-5187

    Cross-site scripting (XSS) vulnerability in the Support Ticketing System module 6.x-1.x before 6.x-1.7 for Drupal allow…

  • Unscored —
    CVE-2011-5182 Public exploit

    Cross-site scripting (XSS) vulnerability in lanoba-social-plugin/index.php in the Lanoba Social plugin 1.0 for WordPres…

  • Unscored —
    CVE-2011-5189

    Cross-site scripting (XSS) vulnerability in the Webform Validation module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x…

  • Unscored —
    CVE-2011-5188

    Cross-site scripting (XSS) vulnerability in the Support Timer module 6.x-1.x before 6.x-1.4 for Drupal allows remote au…

  • Unscored —
    CVE-2011-5178

    Multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf in Infoblox NetMRI 6.0.2.42, 6…

  • Unscored —
    CVE-2011-5179 Public exploit Scanner template

    Cross-site scripting (XSS) vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly befo…

  • Unscored —
    CVE-2012-1630

    Cross-site scripting (XSS) vulnerability in the Taxonomy Navigator module for Drupal allows remote authenticated users …

    Web / CMS
  • Unscored —
    CVE-2012-1626

    SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x before 6.x-2.8 for Drupal allo…

  • Unscored —
    CVE-2012-1628

    Cross-site scripting (XSS) vulnerability in the SuperCron module for Drupal allows remote authenticated users to inject…

    Web / CMS
  • Unscored —
    CVE-2012-1631

    Cross-site request forgery (CSRF) vulnerability in the Admin:hover module for Drupal allows remote attackers to hijack …

    Web / CMS
  • Unscored —
    CVE-2012-1625

    Eval injection vulnerability in the fillpdf_form_export_decode function in fillpdf.admin.inc in the Fill PDF module 6.x…

  • Unscored —
    CVE-2012-1629

    Cross-site scripting (XSS) vulnerability in the Taxotouch module for Drupal allows remote authenticated users with cert…

    Web / CMS
  • Unscored —
    CVE-2012-5007

    The Fill PDF module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to write to arbitrary PDF files via unspe…

  • Unscored —
    CVE-2012-0988 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in config/dmsDefaults.php in KnowledgeTree 3.7.0.2 and possibly ear…

  • Unscored —
    CVE-2012-1632

    Cross-site scripting (XSS) vulnerability in password_policy.admin.inc in the Password Policy module before 6.x-1.4 and …

  • Unscored —
    CVE-2012-1627

    Cross-site scripting (XSS) vulnerability in vud_term.module in the Vote Up/Down module 6.x-2.x before 6.x-2.8 and 6.x-3…

  • Unscored —
    CVE-2012-1633

    Cross-site request forgery (CSRF) vulnerability in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drup…

  • Unscored —
    CVE-2012-1640

    Multiple cross-site scripting (XSS) vulnerabilities in the Managesite module 6.x-1.x before 6.1-1.1 for Drupal allow re…

  • Unscored —
    CVE-2012-1638

    SQL injection vulnerability in the Search Autocomplete module before 7.x-2.1 for Drupal allows remote authenticated use…

  • Unscored —
    CVE-2012-5006

    Heap-based buffer overflow in npdjvu.dll in Caminova DjVu Browser Plug-in 6.1.4 Build 27351 and other versions before 6…

  • Unscored —
    CVE-2012-5003

    nxapplet.jar in No Machine NX Web Companion 3.x and earlier does not properly verify the authenticity of updates, which…

  • Unscored —
    CVE-2012-5005 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/admin_options.php in VR GPub 4.0 allows remote attackers to hi…

  • Unscored —
    CVE-2012-5004

    Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3 Patch 1 allow remote attackers to …

  • Unscored —
    CVE-2012-1653

    Cross-site scripting (XSS) vulnerability in the Taxonomy Views Integrator (TVI) module 6.x-1.x before 6.x-1.3 for Drupa…

  • Unscored —
    CVE-2012-1652

    Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 6.x-3.x before 6.x-3.8 for Drupal allows rem…

  • Unscored —
    CVE-2012-1651

    Cross-site scripting (XSS) vulnerability in the Submenu Tree module before 6.x-1.5 for Drupal allows remote authenticat…

  • Unscored —
    CVE-2012-4994

    SQL injection vulnerability in admin/admin.php in LimeSurvey before 1.91+ Build 120224 allows remote authenticated user…

  • Unscored —
    CVE-2012-4993 Public exploit

    torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers…

  • Unscored —
    CVE-2012-4997 Public exploit

    Directory traversal vulnerability in acp/index.php in AneCMS allows remote attackers to include and execute arbitrary l…

  • Unscored —
    CVE-2012-4995

    Cross-site scripting (XSS) vulnerability in admin/userrighthandling.php in LimeSurvey before 1.91+ Build 120224 allows …

  • Unscored —
    CVE-2012-4999 Public exploit

    Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service h…

  • Unscored —
    CVE-2012-4996 Public exploit

    Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2012-4992 Public exploit EPSS 18%

    Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code vi…