Archive
8 October 2012
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Unscored —CVE-2012-1671 Public exploit
Directory traversal vulnerability in index.php in phpPaleo 4.8b155 and earlier allows remote attackers to include and e…
-
Unscored —CVE-2012-5333 Public exploit
SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2012-5329 Public exploit
Buffer overflow in TYPSoft FTP Server 1.1 allows remote authenticated users to cause a denial of service (application c…
-
Unscored —CVE-2012-5331 Public exploit
Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a .. (d…
-
Unscored —CVE-2012-5334 Public exploit
SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL …
-
Unscored —
at32 Reverse Proxy 1.060.310 allows remote attackers to cause a denial of service (NULL pointer dereference and applica…
-
Unscored —CVE-2012-5335 Public exploit
Directory traversal vulnerability in Tiny Server 1.1.5 allows remote authenticated users to read arbitrary files via a …
-
Unscored —CVE-2012-5330 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web scr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2012-5324 Public exploit
Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChang…
-
Unscored —
Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other versions …
-
Unscored —
Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPre…
-
Unscored —CVE-2012-5326 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the scr_do_redirect function in scr.php in the Shortcode Redirec…
-
Unscored —
Unspecified vulnerability in the bazaar repository adapter in Redmine 1.0.x before 1.0.5 allows remote authenticated us…
-
Unscored —
Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attack…
-
Unscored —
PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows r…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the textile formatter in Redmine before 1.0.5 allows remote attackers to in…
-
Unscored —
Multiple directory traversal vulnerabilities in the BackWPup plugin before 1.4.1 for WordPress allow remote attackers t…
-
Unscored —CVE-2012-1308 Public exploit
Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attac…
-
Unscored —CVE-2012-1189 Public exploit
Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.…
-
Unscored —CVE-2012-1416 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the auth…
-
Unscored —CVE-2012-5320 Public exploit
Cross-site request forgery (CSRF) vulnerability in password.cgi in Sagem F@ST 2604 253180972B allows remote attackers t…
-
Unscored —
tiki-featured_link.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary web site pages into fram…
-
Unscored —CVE-2012-5322 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Xavi X7968 allow remote attackers to inject arbitrary web script…
-
Unscored —CVE-2012-5323 Public exploit
Cross-site request forgery (CSRF) vulnerability in webconfig/admin_passwd/passwd.html/admin_passwd in Xavi X7968 allows…
-
Unscored —CVE-2012-5319 Public exploit
Cross-site request forgery (CSRF) vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000, and DCS-5300 allows …
-
Unscored —
Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin before 1.2 f…
-
Unscored —CVE-2012-5315 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in php ireport 1.0 allow remote attackers to inject arbitrary web s…
-
Unscored —
SQL injection vulnerability in the WP e-Commerce plugin before 3.8.7.6 for WordPress allows remote attackers to execute…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ViewGit 0.0.6 and earlier allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2012-5312 Public exploit
SQL injection vulnerability in Tribiq CMS allows remote attackers to execute arbitrary SQL commands via the id paramete…
-
Unscored —
SQL injection vulnerability in main_bigware_43.php in Bigware Shop before 2.1.5 allows remote attackers to execute arbi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earli…
-
Unscored —CVE-2012-5318 Public exploit
Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin 1.2 for Word…
-
Unscored —CVE-2012-5313 Public exploit
SQL injection vulnerability in forum.asp in Snitz Forums 2000 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
The (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticat…
-
Unscored —
Multiple SQL injection vulnerabilities in SpamTitan WebTitan before 3.60 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2011-4640 Public exploit
Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in servlet/traveler/ILNT.mobileconfig in IBM Lotus Notes Traveler b…