Skip to content
OpenAdvisories

Archive

17 November 2012

Vulnerabilities first published on this day (UTC), newest first.

15 results · Clear filters · Feed

  • Unscored —
    CVE-2012-5917 Public exploit

    SnackAmp 3.1.3 allows remote attackers to cause a denial of service (application crash) via a long string in an aiff fi…

  • Unscored —
    CVE-2012-5896 Public exploit EPSS 69%

    The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not prop…

  • Unscored —
    CVE-2012-5905 Public exploit

    Buffer overflow in KnFTPd 1.0.0 allows remote authenticated users to cause a denial of service (crash) via a long strin…

  • Unscored —
    CVE-2012-5912 Public exploit

    Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2012-5913 Public exploit Scanner template

    Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress all…

  • Unscored —
    CVE-2012-5898 Public exploit

    Cross-site request forgery (CSRF) vulnerability in SAMEDIA LandShop 0.9.2 allows remote attackers to hijack the authent…

  • Unscored —
    CVE-2012-5909 Public exploit

    SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers…

  • Unscored —
    CVE-2012-5897 Public exploit

    The (1) SimpleTree and (2) ReportTree classes in the ARDoc ActiveX control (ARDoc.dll) in Quest InTrust 10.4.0.853 and …

  • Unscored —
    CVE-2012-5908 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows rem…

  • Unscored —
    CVE-2012-5891 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow…

  • Unscored —
    CVE-2012-5903 Public exploit

    Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 2.0.2 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2012-5907 Public exploit

    Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers …

  • Unscored —
    CVE-2012-5900 Public exploit

    Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2012-5894 Public exploit

    SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2012-5899 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/action/objects.php in SAMEDIA LandShop 0.9.2 allows remote attackers …