Skip to content
OpenAdvisories

Archive

6 October 2012

Vulnerabilities first published on this day (UTC), newest first.

← September 2012 2012 / October /6 November 2012 →
  1. 149
  2. 24
  3. 312
  4. 425
  5. 512
  6. 614
  7. 710
  8. 850
  9. 963
  10. 1040
  11. 1112
  12. 125
  13. 13 
  14. 14 
  15. 15 
  16. 1667
  17. 1767
  18. 183
  19. 19 
  20. 206
  21. 21 
  22. 2233
  23. 236
  24. 244
  25. 2531
  26. 264
  27. 27 
  28. 281
  29. 299
  30. 301
  31. 3125
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • High —
    CVE-2012-1618

    Unescaped parameters in the PostgreSQL JDBC driver

    Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard_conforming_strings" option enabled, such as the default configuration of PostgreSQL 9.1, does not properly escape unspecified JDBC statement para…

    org.postgresql:postgresql Maven
  • Unscored —
    CVE-2012-5306 Public exploit EPSS 12%

    Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as…

  • Unscored —
    CVE-2012-5305

    Cross-site scripting (XSS) vulnerability in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allows remote attackers to in…

  • Unscored —
    CVE-2012-5304

    Static code injection vulnerability in administration/install.php in YVS Image Gallery allows remote attackers to injec…

  • High —
    CVE-2011-4932

    ImpressPages CMS eval injection vulnerability

    Eval injection vulnerability in ip_cms/modules/standard/content_management/actions.php in ImpressPages CMS 1.0.12 and possibly other versons before 1.0.13 allows remote attackers to execute arbitrary code via the cm_group parameter.

    impresspages/impresspages Packagist
  • Unscored —
    CVE-2012-0065

    Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 all…

    usbmuxd Debian
  • Unscored —
    CVE-2012-0987

    Directory traversal vulnerability in edituser.php in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final a…

  • Unscored —
    CVE-2012-0986

    Multiple cross-site scripting (XSS) vulnerabilities in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final…

  • Unscored —
    CVE-2012-1624

    Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow rem…

  • Unscored —
    CVE-2012-1565

    Unspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4, 4.5, and 4.6 has unknown impact and attack vectors relate…

  • Unscored —
    CVE-2012-1623

    The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which m…

  • Unscored —
    CVE-2012-1153 Public exploit EPSS 32%

    Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote…

  • Unscored —
    CVE-2012-1634

    Cross-site scripting (XSS) vulnerability in video_filter.codecs.inc in the Video Filter module 6.x-2.x and 7.x-2.x for …

  • Unscored —
    CVE-2012-1564

    Cross-site scripting (XSS) vulnerability in administration/create_album.php in YVS Image Gallery allows remote attacker…