Skip to content
OpenAdvisories

Archive

1 October 2012

Vulnerabilities first published on this day (UTC), newest first.

← September 2012 2012 / October /1 November 2012 →
  1. 149
  2. 24
  3. 312
  4. 425
  5. 512
  6. 614
  7. 710
  8. 850
  9. 963
  10. 1040
  11. 1112
  12. 125
  13. 13 
  14. 14 
  15. 15 
  16. 1667
  17. 1767
  18. 183
  19. 19 
  20. 206
  21. 21 
  22. 2233
  23. 236
  24. 244
  25. 2531
  26. 264
  27. 27 
  28. 281
  29. 299
  30. 301
  31. 3125
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Unscored —
    CVE-2012-1603 Public exploit

    Multiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2012-1604 Public exploit

    Cross-site scripting (XSS) vulnerability in NextBBS 0.6 allows remote attackers to inject arbitrary web script or HTML …

  • Unscored —
    CVE-2012-1470 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in code_editor.php in ocPortal before 7.1.6 allow remote attackers …

  • Unscored —
    CVE-2012-4242 Public exploit

    Cross-site scripting (XSS) vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to i…

  • Unscored —
    CVE-2012-0989 Public exploit

    Cross-site scripting (XSS) vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows …

  • Unscored —
    CVE-2012-1897 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Wolf CMS 0.75 and earlier allow remote attackers to hijac…

  • Unscored —
    CVE-2012-1898 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in wolfcms/admin/user/add in Wolf CMS 0.75 and earlier allow remote…

  • Unscored —
    CVE-2012-5226 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2012-5223 Public exploit EPSS 41%

    The proc_deutf function in includes/functions_vbseocp_abstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier all…

  • Unscored —
    CVE-2012-5231 Public exploit

    miniCMS 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code via a crafted (1) pagename or (2) area variab…

  • Unscored —
    CVE-2012-5229 Public exploit

    Cross-site scripting (XSS) vulnerability in css/gallery-css.php in the Slideshow Gallery2 plugin for WordPress allows r…

    Web / CMS
  • Unscored —
    CVE-2012-5228 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions bef…

  • Unscored —
    CVE-2012-5224 Public exploit

    PHP remote file inclusion vulnerability in vb/includes/vba_cmps_include_bottom.php in vBadvanced CMPS 3.2.2 and earlier…

  • Unscored —
    CVE-2012-5227 Public exploit

    SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2012-5225 Public exploit

    Cross-site scripting (XSS) vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject…

  • Unscored —
    CVE-2012-4415 Public exploit EPSS 14%

    Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote …

  • Unscored —
    CVE-2011-4551 Public exploit

    Cross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware before 8.2 and LTS before 6.5…