Skip to content
OpenAdvisories

Archive

7 October 2012

Vulnerabilities first published on this day (UTC), newest first.

10 results · Feed

  • Unscored —

    Joomla! before 1.5.12 does not perform a JEXEC check in unspecified files, which allows remote attackers to obtain the …

  • Unscored —

    ProcessTable.pm in the Proc::ProcessTable module 0.45 for Perl, when TTY information caching is enabled, allows local u…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Joomla! before 1.5.12 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2011-4909 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.5.12 allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2012-1414 Public exploit

    Cross-site request forgery (CSRF) vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attack…

  • Unscored —
    CVE-2010-5278 Public exploit EPSS 19%

    Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and poss…

  • Unscored —

    Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in memcache_admin in the Memcache module 5.x before 5.x-1.10 and 6.x before 6.…

  • Unscored —

    The Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal does not properly handle the $user object in …

  • Unscored —
    CVE-2011-3918 Public exploit

    The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs, which allows …