Archive
October 2012
Vulnerabilities first published in this month (UTC), newest first.
553 results · Feed
-
Unscored —
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote at…
-
Unscored —CVE-2012-4939 Public exploit
Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarW…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the administrative interface in the Campaign Monitor module before 6.x-2.5 …
-
Unscored —
The commons_discussion_views_default_views function in modules/features/commons_discussion/commons_discussion.views_def…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the galleryformatter_field_formatter_view functiuon in galleryfo…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Excluded Users module 6.x-1.x before 6.x-1.1 for Drupal allo…
-
Unscored —
The Announcements module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the "access announcem…
-
Unscored —
The contact formatter page in the Email Field module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal allow…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Custom Publishing Options module 6.x-1.x before 6.x-1.4 for Drupal allo…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Shorten URLs module 6.x-1.x before 6.x-1.13 and 7.x-1.x befo…
-
Unscored —
The Location module 6.x before 6.x-3.2 and 7.x before 7.x-3.0-alpha1 for Drupal does not properly check user or node ac…
-
Unscored —
The Monthly Archive by Node Type module 6.x for Drupal does not properly check permissions defined by node_access modul…
-
Unscored —
The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) afte…
-
Unscored —
Cross-site scripting (XSS) vulnerability in modules/mod_languages/tmpl/default.php in the Language Switcher module for …
-
Unscored —
The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification informati…
-
Unscored —
The Shibboleth authentication module 7.x-4.0 for Drupal does not properly check the active status of users, which allow…
-
Unscored —
The Mime Mail module 6.x-1.x before 6.x-1.1 for Drupal does not properly restrict access to files outside Drupal's publ…
-
Unscored —
Open redirect vulnerability in the securelogin_secure_redirect function in the Secure Login module 7.x-1.x before 7.x-1…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web …
-
Unscored —
The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtuali…
-
Unscored —
Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through 4.80, when DKIM suppo…
-
Unscored —
EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remot…
-
Unscored —
Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors.
-
Unscored —
TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users…
-
Unscored —
Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.…
-
Unscored —
Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 thr…
-
Unscored —
Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series dev…
-
Unscored —
The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in…
-
Unscored —
The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devic…
-
Unscored —
The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module …
-
Unscored —
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Modu…
-
Unscored —
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Modu…
-
Unscored —
Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before …
-
Unscored —
Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before …
-
Unscored —
The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before…
-
Unscored —
Heap-based buffer overflow in tif_pixarlog.c in LibTIFF before 4.0.3 allows remote attackers to cause a denial of servi…
-
Unscored —
Wing FTP Server before 4.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via two zip …
-
Unscored —
Cross-site scripting (XSS) vulnerability in tokyo_bbs.cgi in Come on Girls Interface (CGI) Tokyo BBS allows remote atta…
-
Unscored —
Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by …
-
Unscored —CVE-2012-5470 Public exploit
libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application cras…