Skip to content
OpenAdvisories

Archive

25 October 2012

Vulnerabilities first published on this day (UTC), newest first.

← September 2012 2012 / October /25 November 2012 →
  1. 149
  2. 24
  3. 312
  4. 425
  5. 512
  6. 614
  7. 710
  8. 850
  9. 963
  10. 1040
  11. 1112
  12. 125
  13. 13 
  14. 14 
  15. 15 
  16. 1667
  17. 1767
  18. 183
  19. 19 
  20. 206
  21. 21 
  22. 2233
  23. 236
  24. 244
  25. 2531
  26. 264
  27. 27 
  28. 281
  29. 299
  30. 301
  31. 3125
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2011-5217

    Directory traversal vulnerability in the PXE Mtftp service in Hitachi JP1/ServerConductor/DeploymentManager before 08-5…

  • Unscored —
    CVE-2011-5224

    SQL injection vulnerability in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2011-5223

    Cross-site request forgery (CSRF) vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack …

    cacti Debian
  • Unscored —
    CVE-2011-5214 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to inject…

  • Unscored —
    CVE-2011-5234

    SQL injection vulnerability in user.php in Social Network Community 2 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2011-5225

    Cross-site scripting (XSS) vulnerability in wordpress_sentinel.php in the Sentinel plugin 1.0.0 for WordPress allows re…

  • Unscored —
    CVE-2011-5230 Public exploit

    Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoaster_core/application/models/Lo…

  • Unscored —
    CVE-2011-5222 Public exploit

    SQL injection vulnerability in rub2_w.php in PHP Flirt-Projekt 4.8 and possibly earlier allows remote attackers to exec…

  • Unscored —
    CVE-2011-5221

    Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote att…

  • Unscored —
    CVE-2011-5229 Public exploit

    SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote atta…

  • Unscored —
    CVE-2011-5233 Public exploit

    Heap-based buffer overflow in IrfanView before 4.32 allows remote attackers to execute arbitrary code via crafted "Rows…

  • Unscored —
    CVE-2011-5220

    Cross-site scripting (XSS) vulnerability in templates/default/Admin/Login.html in PHP-SCMS 1.6.8 and earlier allows rem…

  • Unscored —
    CVE-2011-5219 Public exploit

    Directory traversal vulnerability in examples/show_code.php in mPDF 5.3 and earlier allows remote attackers to read arb…

  • Unscored —
    CVE-2011-5218 Public exploit

    SQL injection vulnerability in DotA OpenStats 1.3.9 and earlier allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2011-5226

    Cross-site request forgery (CSRF) vulnerability in wordpress_sentinel.php in the Sentinel plugin 1.0.0 for WordPress al…

  • Unscored —
    CVE-2011-5215

    SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2011-5235

    SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2011-5213 Public exploit

    Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2011-5216

    SQL injection vulnerability in ajax.php in SCORM Cloud For WordPress plugin before 1.0.7 for WordPress allows remote at…

    Web / CMS
  • Unscored —
    CVE-2011-5228 Public exploit

    Cross-site scripting (XSS) vulnerability in the Search module (quickstart/search) in appRain CMF 0.1.5 allows remote at…

  • Unscored —
    CVE-2011-5227 Public exploit EPSS 77%

    Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.…

  • Unscored —
    CVE-2012-3941

    Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.…

  • Unscored —
    CVE-2012-3940

    Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows re…

  • Unscored —
    CVE-2012-3938

    Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows re…

  • Unscored —
    CVE-2012-3936

    Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows re…

  • Unscored —
    CVE-2012-3937

    Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows re…

  • Unscored —
    CVE-2012-3939

    Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows re…

  • Unscored —
    CVE-2012-3506

    Unspecified vulnerability in the Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.03 has unknown impac…

  • Unscored —
    CVE-2012-5672 Public exploit EPSS 13%

    Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to ca…

  • Low —
    CVE-2012-5339

    phpMyAdmin multiple cross-site scripting vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted name of (1) an event, (2) a procedure, or (3) a trigger.

    phpmyadmin/phpmyadmin Packagist
  • Medium —
    CVE-2012-5368

    phpMyAdmin Unsafe Fetching of Javascript Code

    phpMyAdmin 3.5.x before 3.5.3 uses JavaScript code that is obtained through an HTTP session to phpmyadmin.net without SSL, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by modifying this code.

    phpmyadmin/phpmyadmin Packagist