Archive
4 October 2012
Vulnerabilities first published on this day (UTC), newest first.
25 results · Feed
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 a…
-
Unscored —
The default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH sessions, which makes i…
-
Unscored —
epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.3 uses incorrect OUI data structures du…
-
Unscored —
The dissect_hsrp function in epan/dissectors/packet-hsrp.c in the HSRP dissector in Wireshark 1.8.x before 1.8.3 allows…
-
Unscored —
Buffer overflow in the dissect_tlv function in epan/dissectors/packet-ldp.c in the LDP dissector in Wireshark 1.8.x bef…
-
Unscored —CVE-2011-5204 Public exploit
Akiva WebBoard 8.x stores passwords in plaintext, which allows local users to obtain sensitive information by reading f…
-
Unscored —CVE-2011-5207 Public exploit
Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before …
-
Unscored —
Cross-site scripting (XSS) vulnerability in notes.php in Rapidleech before 2.3 rev42 SVN r399 allows remote attackers t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in audl.php in Rapidleech 2.3 rev42 SVN r358, rev43 SVN r397, and earlier allo…
-
Unscored —CVE-2011-5203 Public exploit
SQL injection vulnerability in WB/Default.asp in Akiva WebBoard before 8 SR 1 allows remote attackers to execute arbitr…
-
Unscored —
SQL injection vulnerability in art_catalogo.php in MyStore Xpress Tienda Virtual 2.0 allows remote attackers to execute…
-
Unscored —CVE-2012-5295 Public exploit
Cross-site scripting (XSS) vulnerability in login.cfm in FuseTalk Forums 3.2 and earlier allows remote attackers to inj…
-
Unscored —CVE-2012-5294 Public exploit
SQL injection vulnerability in art_detalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbi…
-
Unscored —
SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to e…
-
Unscored —
Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access contro…
-
Unscored —
Mavili Guestbook, as released in November 2007, allows remote attackers to edit, delete, and approve arbitrary messages…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote att…
-
Unscored —CVE-2012-5291 Public exploit
SQL injection vulnerability in team.php in Posse Softball Director CMS allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2012-5288 Public exploit
SQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2012-5292 Public exploit
Multiple SQL injection vulnerabilities in Atar2b CMS 4.0.1 allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2012-5293 Public exploit
Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrar…
-
Unscored —
Multiple SQL injection vulnerabilities in EasyWebRealEstate allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.20 allows remote attackers to obtain sensitive informat…
-
Unscored —CVE-2012-3819 Public exploit
Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX an…