Skip to content
OpenAdvisories

Archive

October 2012

Vulnerabilities first published in this month (UTC), newest first.

← September 2012 2012 / October November 2012 →
  1. 149
  2. 24
  3. 312
  4. 425
  5. 512
  6. 614
  7. 710
  8. 850
  9. 963
  10. 1040
  11. 1112
  12. 125
  13. 13 
  14. 14 
  15. 15 
  16. 1667
  17. 1767
  18. 183
  19. 19 
  20. 206
  21. 21 
  22. 2233
  23. 236
  24. 244
  25. 2531
  26. 264
  27. 27 
  28. 281
  29. 299
  30. 301
  31. 3125
All Critical High Medium Low Exploited only Public exploit

128 results · Clear filters · Feed

  • Unscored —
    CVE-2012-1416 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the auth…

  • Unscored —
    CVE-2012-5320 Public exploit

    Cross-site request forgery (CSRF) vulnerability in password.cgi in Sagem F@ST 2604 253180972B allows remote attackers t…

  • Unscored —
    CVE-2012-5321 Public exploit Scanner template EPSS 14%

    tiki-featured_link.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary web site pages into fram…

  • Unscored —
    CVE-2012-5322 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Xavi X7968 allow remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2012-5323 Public exploit

    Cross-site request forgery (CSRF) vulnerability in webconfig/admin_passwd/passwd.html/admin_passwd in Xavi X7968 allows…

  • Unscored —
    CVE-2012-5319 Public exploit

    Cross-site request forgery (CSRF) vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000, and DCS-5300 allows …

  • Unscored —
    CVE-2012-1125 Public exploit EPSS 12%

    Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin before 1.2 f…

  • Unscored —
    CVE-2012-5315 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in php ireport 1.0 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2012-5312 Public exploit

    SQL injection vulnerability in Tribiq CMS allows remote attackers to execute arbitrary SQL commands via the id paramete…

  • Unscored —
    CVE-2012-5318 Public exploit

    Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin 1.2 for Word…

  • Unscored —
    CVE-2012-5313 Public exploit

    SQL injection vulnerability in forum.asp in Snitz Forums 2000 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2011-4640 Public exploit Scanner template

    Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to …

  • Unscored —
    CVE-2010-5063 Public exploit

    SQL injection vulnerability in article.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2011-4909 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.5.12 allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2012-1414 Public exploit

    Cross-site request forgery (CSRF) vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attack…

  • Unscored —
    CVE-2010-5278 Public exploit Scanner template EPSS 19%

    Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and poss…

  • Unscored —
    CVE-2011-3918 Public exploit

    The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs, which allows …

  • Unscored —
    CVE-2012-5306 Public exploit EPSS 12%

    Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as…

  • Unscored —
    CVE-2012-1153 Public exploit EPSS 32%

    Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote…

  • Unscored —
    CVE-2011-5204 Public exploit

    Akiva WebBoard 8.x stores passwords in plaintext, which allows local users to obtain sensitive information by reading f…

  • Unscored —
    CVE-2011-5207 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before …

    Web / CMS
  • Unscored —
    CVE-2011-5203 Public exploit

    SQL injection vulnerability in WB/Default.asp in Akiva WebBoard before 8 SR 1 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2012-5295 Public exploit

    Cross-site scripting (XSS) vulnerability in login.cfm in FuseTalk Forums 3.2 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2012-5294 Public exploit

    SQL injection vulnerability in art_detalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbi…

  • Unscored —
    CVE-2012-5291 Public exploit

    SQL injection vulnerability in team.php in Posse Softball Director CMS allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2012-5288 Public exploit

    SQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2012-5292 Public exploit

    Multiple SQL injection vulnerabilities in Atar2b CMS 4.0.1 allow remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2012-5293 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2012-3819 Public exploit

    Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX an…

  • Unscored —
    CVE-2012-3375 Public exploit

    The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in …

    linux Debian
  • Unscored —
    CVE-2012-3430 Public exploit

    The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure me…

    linux Debian
  • Unscored —
    CVE-2012-1603 Public exploit

    Multiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2012-1604 Public exploit

    Cross-site scripting (XSS) vulnerability in NextBBS 0.6 allows remote attackers to inject arbitrary web script or HTML …

  • Unscored —
    CVE-2012-1470 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in code_editor.php in ocPortal before 7.1.6 allow remote attackers …

  • Unscored —
    CVE-2012-4242 Public exploit Scanner template

    Cross-site scripting (XSS) vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to i…

  • Unscored —
    CVE-2012-0989 Public exploit

    Cross-site scripting (XSS) vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows …

  • Unscored —
    CVE-2012-1897 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Wolf CMS 0.75 and earlier allow remote attackers to hijac…

  • Unscored —
    CVE-2012-1898 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in wolfcms/admin/user/add in Wolf CMS 0.75 and earlier allow remote…

  • Unscored —
    CVE-2012-5226 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2012-5223 Public exploit EPSS 41%

    The proc_deutf function in includes/functions_vbseocp_abstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier all…