Skip to content
OpenAdvisories

Archive

October 2012

Vulnerabilities first published in this month (UTC), newest first.

← September 2012 2012 / October November 2012 →
  1. 149
  2. 24
  3. 312
  4. 425
  5. 512
  6. 614
  7. 710
  8. 850
  9. 963
  10. 1040
  11. 1112
  12. 125
  13. 13 
  14. 14 
  15. 15 
  16. 1667
  17. 1767
  18. 183
  19. 19 
  20. 206
  21. 21 
  22. 2233
  23. 236
  24. 244
  25. 2531
  26. 264
  27. 27 
  28. 281
  29. 299
  30. 301
  31. 3125
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.3
    CVE-2012-5379 Public exploit

    Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed in the to…

  • High 7.5
    CVE-2012-4399 Public exploit EPSS 12%

    CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references

    The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.

    cakephp/cakephp Packagist
  • High —
    CVE-2012-4456

    OpenStack Keystone Improper Authentication vulnerability

    The (1) OS-KSADM/services and (2) tenant APIs in OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-2 do not properly validate X-Auth-Token, which allow remote attackers to read the roles for an arbitrary user or get, create, or delete arbitrar…

    keystone keystone Debian PyPI
  • High —
    CVE-2012-1618

    Unescaped parameters in the PostgreSQL JDBC driver

    Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard_conforming_strings" option enabled, such as the default configuration of PostgreSQL 9.1, does not properly escape unspecified JDBC statement para…

    org.postgresql:postgresql Maven
  • High —
    CVE-2011-4932

    ImpressPages CMS eval injection vulnerability

    Eval injection vulnerability in ip_cms/modules/standard/content_management/actions.php in ImpressPages CMS 1.0.12 and possibly other versons before 1.0.13 allows remote attackers to execute arbitrary code via the cm_group parameter.

    impresspages/impresspages Packagist