Skip to content
OpenAdvisories

Archive

October 2012

Vulnerabilities first published in this month (UTC), newest first.

← September 2012 2012 / October November 2012 →
  1. 149
  2. 24
  3. 312
  4. 425
  5. 512
  6. 614
  7. 710
  8. 850
  9. 963
  10. 1040
  11. 1112
  12. 125
  13. 13 
  14. 14 
  15. 15 
  16. 1667
  17. 1767
  18. 183
  19. 19 
  20. 206
  21. 21 
  22. 2233
  23. 236
  24. 244
  25. 2531
  26. 264
  27. 27 
  28. 281
  29. 299
  30. 301
  31. 3125
All Critical High Medium Low Exploited only Public exploit

128 results · Clear filters · Feed

  • Unscored —
    CVE-2012-4940 Public exploit EPSS 85%

    Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote at…

  • Unscored —
    CVE-2012-4939 Public exploit

    Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarW…

  • Unscored —
    CVE-2012-5692 Public exploit EPSS 26%

    Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.…

  • Unscored —
    CVE-2012-5470 Public exploit

    libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application cras…

    vlc Debian
  • Unscored —
    CVE-2011-5214 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to inject…

  • Unscored —
    CVE-2011-5230 Public exploit

    Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoaster_core/application/models/Lo…

  • Unscored —
    CVE-2011-5222 Public exploit

    SQL injection vulnerability in rub2_w.php in PHP Flirt-Projekt 4.8 and possibly earlier allows remote attackers to exec…

  • Unscored —
    CVE-2011-5229 Public exploit

    SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote atta…

  • Unscored —
    CVE-2011-5233 Public exploit

    Heap-based buffer overflow in IrfanView before 4.32 allows remote attackers to execute arbitrary code via crafted "Rows…

  • Unscored —
    CVE-2011-5219 Public exploit

    Directory traversal vulnerability in examples/show_code.php in mPDF 5.3 and earlier allows remote attackers to read arb…

  • Unscored —
    CVE-2011-5218 Public exploit

    SQL injection vulnerability in DotA OpenStats 1.3.9 and earlier allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2011-5213 Public exploit

    Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2011-5228 Public exploit

    Cross-site scripting (XSS) vulnerability in the Search module (quickstart/search) in appRain CMF 0.1.5 allows remote at…

  • Unscored —
    CVE-2011-5227 Public exploit EPSS 77%

    Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.…

  • Unscored —
    CVE-2012-5672 Public exploit EPSS 13%

    Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to ca…

  • Unscored —
    CVE-2012-5388 Public exploit

    Cross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for WordPress allows rem…

  • Unscored —
    CVE-2012-5387 Public exploit

    Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for Word…

  • Unscored —
    CVE-2011-5211 Public exploit

    Cross-site scripting (XSS) vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2011-5212 Public exploit

    SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2012-1900 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attacker…

  • Unscored —
    CVE-2012-4773 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack…

  • Unscored —
    CVE-2012-4771 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2012-4231 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to inject a…

  • Unscored —
    CVE-2012-4772 Public exploit

    SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2012-4989 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/plugin-index.php in OpenX 2.8.10 before revision 81823 allows remote …

  • Unscored —
    CVE-2012-5452 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2012-5167 Public exploit

    Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2012-5453 Public exploit

    SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated…

  • Unscored —
    CVE-2010-4821 Public exploit

    Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2012-4751 Public exploit

    Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x befo…

    otrs2 Debian
  • Unscored —
    CVE-2012-3001 Public exploit EPSS 27%

    Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, r…

  • Unscored —
    CVE-2012-4933 Public exploit EPSS 44%

    The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username …

  • Unscored —
    CVE-2012-3221 Public exploit

    Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows loca…

  • Unscored —
    CVE-2012-3186 Public exploit

    Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1…

  • Unscored —
    CVE-2012-3185 Public exploit

    Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1…

  • Unscored —
    CVE-2012-3183 Public exploit

    Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1…

  • Unscored —
    CVE-2012-3184 Public exploit

    Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1…

  • Unscored —
    CVE-2012-3153 Public exploit EPSS 98%

    Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and…

  • Critical 9.1
    CVE-2012-3152 Exploited Public exploit EPSS 99%

    Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2012-1533 Public exploit EPSS 69%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and…