Skip to content
OpenAdvisories

Archive

October 2012

Vulnerabilities first published in this month (UTC), newest first.

128 results · Clear filters · Feed

  • Unscored —
    CVE-2012-5231 Public exploit

    miniCMS 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code via a crafted (1) pagename or (2) area variab…

  • Unscored —
    CVE-2012-5229 Public exploit

    Cross-site scripting (XSS) vulnerability in css/gallery-css.php in the Slideshow Gallery2 plugin for WordPress allows r…

  • Unscored —
    CVE-2012-5228 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions bef…

  • Unscored —
    CVE-2012-5224 Public exploit

    PHP remote file inclusion vulnerability in vb/includes/vba_cmps_include_bottom.php in vBadvanced CMPS 3.2.2 and earlier…

  • Unscored —
    CVE-2012-5227 Public exploit

    SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2012-5225 Public exploit

    Cross-site scripting (XSS) vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject…

  • Unscored —
    CVE-2012-4415 Public exploit EPSS 14%

    Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote …

  • Unscored —
    CVE-2011-4551 Public exploit

    Cross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware before 8.2 and LTS before 6.5…