Archive
1 October 2012
Vulnerabilities first published on this day (UTC), newest first.
49 results · Feed
-
Unscored —
PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain roo…
-
Unscored —CVE-2012-1603 Public exploit
Multiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to execute arbitrary SQL…
-
Unscored —
user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the u…
-
Unscored —CVE-2012-1604 Public exploit
Cross-site scripting (XSS) vulnerability in NextBBS 0.6 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —
Directory traversal vulnerability in catalogue_file.php in ocPortal before 7.1.6 allows remote attackers to read arbitr…
-
Unscored —CVE-2012-1470 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in code_editor.php in ocPortal before 7.1.6 allow remote attackers …
-
Unscored —
Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows rem…
-
Unscored —
The Apache Santuario configuration in Eucalyptus before 3.1.1 does not properly restrict applying XML Signature transfo…
-
Unscored —
Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows rem…
-
Unscored —CVE-2012-4242 Public exploit
Cross-site scripting (XSS) vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to i…
-
Unscored —
Open redirect vulnerability in index.php in ocPortal before 7.1.6 allows remote attackers to redirect users to arbitrar…
-
Unscored —CVE-2012-0989 Public exploit
Cross-site scripting (XSS) vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote authenticated…
-
Unscored —
BazisVirtualCDBus.sys in WinCDEmu 3.6 allows local users to cause a denial of service (system crash) via the unmount co…
-
Unscored —
The myuser_delete function in libathemecore/account.c in Atheme 5.x before 5.2.7, 6.x before 6.0.10, and 7.x before 7.0…
-
Unscored —CVE-2012-1897 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Wolf CMS 0.75 and earlier allow remote attackers to hijac…
-
Unscored —CVE-2012-1898 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in wolfcms/admin/user/add in Wolf CMS 0.75 and earlier allow remote…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in product/commerce_product.module in the Drupal Commerce module fo…
-
Unscored —CVE-2012-5226 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbit…
-
Unscored —
The proc_deutf function in includes/functions_vbseocp_abstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier all…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Quickl Form component for Joomla! allows remote attackers to inject arb…
-
Unscored —CVE-2012-5231 Public exploit
miniCMS 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code via a crafted (1) pagename or (2) area variab…
-
Unscored —CVE-2012-5229 Public exploit
Cross-site scripting (XSS) vulnerability in css/gallery-css.php in the Slideshow Gallery2 plugin for WordPress allows r…
-
Unscored —CVE-2012-5228 Public exploit
Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions bef…
-
Unscored —CVE-2012-5224 Public exploit
PHP remote file inclusion vulnerability in vb/includes/vba_cmps_include_bottom.php in vBadvanced CMPS 3.2.2 and earlier…
-
Unscored —CVE-2012-5227 Public exploit
SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbi…
-
Unscored —
Unspecified vulnerability in the JE Story Submit (com_jesubmit) component before 1.9 for Joomla! has unknown impact and…
-
Unscored —CVE-2012-5225 Public exploit
Cross-site scripting (XSS) vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified services in IBM Rational Team Concert (RTC) 4…
-
Unscored —
Unspecified vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11 and 7.0 through 7.0.0.6 allows remote attacker…
-
Unscored —
fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows loca…
-
Unscored —
IBM Rational Business Developer 8.x before 8.0.1.4 allows remote attackers to obtain potentially sensitive information …
-
Unscored —
Buffer overflow in Emerson DeltaV 9.3.1 and 10.3 through 11.3.1 allows remote attackers to cause a denial of service (d…
-
Unscored —
389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allo…
-
Unscored —
Use-after-free vulnerability in opngreduc.c in OptiPNG Hg and 0.7.x before 0.7.3 might allow remote attackers to execut…
-
Unscored —
The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and installation of arbitrary exten…
-
Medium —
Cross-site Scripting in SmartyException
Cross-site scripting (XSS) vulnerability in the SmartyException class in Smarty (aka smarty-php) before 3.1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger a Smarty exception.
-
Unscored —
Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote …
-
Unscored —CVE-2011-4551 Public exploit
Cross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware before 8.2 and LTS before 6.5…