Skip to content
OpenAdvisories

Archive

October 2012

Vulnerabilities first published in this month (UTC), newest first.

← September 2012 2012 / October November 2012 →
  1. 149
  2. 24
  3. 312
  4. 425
  5. 512
  6. 614
  7. 710
  8. 850
  9. 963
  10. 1040
  11. 1112
  12. 125
  13. 13 
  14. 14 
  15. 15 
  16. 1667
  17. 1767
  18. 183
  19. 19 
  20. 206
  21. 21 
  22. 2233
  23. 236
  24. 244
  25. 2531
  26. 264
  27. 27 
  28. 281
  29. 299
  30. 301
  31. 3125
All Critical High Medium Low Exploited only Public exploit

128 results · Clear filters · Feed

  • Unscored —
    CVE-2012-5088 Public exploit EPSS 79%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allo…

  • Unscored —
    CVE-2012-5067 Public exploit EPSS 64%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allo…

  • Critical 9.8
    CVE-2012-5076 Exploited Public exploit EPSS 91%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allo…

    KEV Mar 28, 2022
  • Unscored —
    CVE-2012-5081 Public exploit EPSS 45%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 U…

  • Unscored —
    CVE-2012-5386 Public exploit

    Directory traversal vulnerability in index.php in phpPaleo 4.8b180 allows remote attackers to include and execute arbit…

  • Medium 6.7
    CVE-2012-5380 Public exploit

    Untrusted search path vulnerability in the installation functionality in Ruby 1.9.3-p194, when installed in the top-lev…

  • Unscored —
    CVE-2012-5382 Public exploit

    Untrusted search path vulnerability in the installation functionality in Zend Server 5.6.0 SP4, when installed in the t…

  • Unscored —
    CVE-2012-5378 Public exploit

    Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-le…

  • High 7.3
    CVE-2012-5379 Public exploit

    Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed in the to…

  • Unscored —
    CVE-2012-5383 Public exploit

    Untrusted search path vulnerability in the installation functionality in Oracle MySQL 5.5.28, when installed in the top…

  • Unscored —
    CVE-2012-5381 Public exploit

    Untrusted search path vulnerability in the installation functionality in PHP 5.3.17, when installed in the top-level C:…

  • Unscored —
    CVE-2012-5377 Public exploit

    Untrusted search path vulnerability in the installation functionality in ActivePerl 5.16.1.1601, when installed in the …

  • Unscored —
    CVE-2009-5067 Public exploit

    Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (dot…

    html2ps Debian
  • Unscored —
    CVE-2012-3993 Public exploit EPSS 43%

    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderb…

  • High 7.5
    CVE-2012-4399 Public exploit EPSS 12%

    CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references

    The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.

    cakephp/cakephp Packagist
  • Unscored —
    CVE-2012-3549 Public exploit

    The SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference a…

  • Unscored —
    CVE-2011-5209 Public exploit

    Cross-site scripting (XSS) vulnerability in search/ in GraphicsClone Script, possibly 1.11, allows remote attackers to …

  • Unscored —
    CVE-2012-5350 Public exploit

    SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users wit…

  • Unscored —
    CVE-2012-5341 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in statistik.php in Otterware StatIt 4 allow remote attackers to in…

  • Unscored —
    CVE-2012-5344 Public exploit

    Directory traversal vulnerability in the WebServer (Thttpd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4 allows remote…

  • Unscored —
    CVE-2012-5346 Public exploit

    Cross-site scripting (XSS) vulnerability in wp-live.php in the WP Live.php module 1.2.1 for WordPress allows remote att…

  • Unscored —
    CVE-2012-5347 Public exploit

    TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters in the command paramete…

  • Unscored —
    CVE-2012-5345 Public exploit

    Buffer overflow in the Remote command server (Rcmd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4 allows remote attacke…

  • Unscored —
    CVE-2012-5342 Public exploit

    Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2012-5348 Public exploit

    SQL injection vulnerability in MangosWeb Enhanced 3.0.3 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2012-5343 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/login.php in Limny 3.0.1 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2012-5349 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote att…

  • Unscored —
    CVE-2012-1671 Public exploit

    Directory traversal vulnerability in index.php in phpPaleo 4.8b155 and earlier allows remote attackers to include and e…

  • Unscored —
    CVE-2012-5333 Public exploit

    SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2012-5329 Public exploit

    Buffer overflow in TYPSoft FTP Server 1.1 allows remote authenticated users to cause a denial of service (application c…

  • Unscored —
    CVE-2012-5331 Public exploit

    Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a .. (d…

  • Unscored —
    CVE-2012-5334 Public exploit

    SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2012-5335 Public exploit

    Directory traversal vulnerability in Tiny Server 1.1.5 allows remote authenticated users to read arbitrary files via a …

  • Unscored —
    CVE-2012-5330 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2012-5324 Public exploit

    Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChang…

  • Unscored —
    CVE-2012-5326 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers …

  • Unscored —
    CVE-2011-4929 Public exploit EPSS 46%

    Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attack…

    redmine Debian
  • Unscored —
    CVE-2011-4342 Public exploit EPSS 11%

    PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows r…

  • Unscored —
    CVE-2012-1308 Public exploit

    Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attac…

  • Unscored —
    CVE-2012-1189 Public exploit

    Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.…

    torcs Debian