Skip to content
OpenAdvisories

Archive

25 October 2012

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Unscored —
    CVE-2011-5214 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to inject…

  • Unscored —
    CVE-2011-5230 Public exploit

    Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoaster_core/application/models/Lo…

  • Unscored —
    CVE-2011-5222 Public exploit

    SQL injection vulnerability in rub2_w.php in PHP Flirt-Projekt 4.8 and possibly earlier allows remote attackers to exec…

  • Unscored —
    CVE-2011-5229 Public exploit

    SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote atta…

  • Unscored —
    CVE-2011-5233 Public exploit

    Heap-based buffer overflow in IrfanView before 4.32 allows remote attackers to execute arbitrary code via crafted "Rows…

  • Unscored —
    CVE-2011-5219 Public exploit

    Directory traversal vulnerability in examples/show_code.php in mPDF 5.3 and earlier allows remote attackers to read arb…

  • Unscored —
    CVE-2011-5218 Public exploit

    SQL injection vulnerability in DotA OpenStats 1.3.9 and earlier allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2011-5213 Public exploit

    Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2011-5228 Public exploit

    Cross-site scripting (XSS) vulnerability in the Search module (quickstart/search) in appRain CMF 0.1.5 allows remote at…

  • Unscored —
    CVE-2011-5227 Public exploit EPSS 77%

    Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.…

  • Unscored —
    CVE-2012-5672 Public exploit EPSS 13%

    Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to ca…