Skip to content
OpenAdvisories

Archive

9 October 2012

Vulnerabilities first published on this day (UTC), newest first.

← September 2012 2012 / October /9 November 2012 →
  1. 149
  2. 24
  3. 312
  4. 425
  5. 512
  6. 614
  7. 710
  8. 850
  9. 963
  10. 1040
  11. 1112
  12. 125
  13. 13 
  14. 14 
  15. 15 
  16. 1667
  17. 1767
  18. 183
  19. 19 
  20. 206
  21. 21 
  22. 2233
  23. 236
  24. 244
  25. 2531
  26. 264
  27. 27 
  28. 281
  29. 299
  30. 301
  31. 3125
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.5
    CVE-2012-4399 Public exploit EPSS 12%

    CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references

    The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.

    cakephp/cakephp Packagist
  • Unscored —
    CVE-2012-3549 Public exploit

    The SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference a…

  • Unscored —
    CVE-2011-5209 Public exploit

    Cross-site scripting (XSS) vulnerability in search/ in GraphicsClone Script, possibly 1.11, allows remote attackers to …

  • Unscored —
    CVE-2012-5350 Public exploit

    SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users wit…

  • Unscored —
    CVE-2012-5341 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in statistik.php in Otterware StatIt 4 allow remote attackers to in…

  • Unscored —
    CVE-2012-5344 Public exploit

    Directory traversal vulnerability in the WebServer (Thttpd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4 allows remote…

  • Unscored —
    CVE-2012-5346 Public exploit

    Cross-site scripting (XSS) vulnerability in wp-live.php in the WP Live.php module 1.2.1 for WordPress allows remote att…

  • Unscored —
    CVE-2012-5347 Public exploit

    TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters in the command paramete…

  • Unscored —
    CVE-2012-5345 Public exploit

    Buffer overflow in the Remote command server (Rcmd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4 allows remote attacke…

  • Unscored —
    CVE-2012-5342 Public exploit

    Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2012-5348 Public exploit

    SQL injection vulnerability in MangosWeb Enhanced 3.0.3 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2012-5343 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/login.php in Limny 3.0.1 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2012-5349 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote att…