Skip to content
OpenAdvisories

Archive

18 November 2012

Vulnerabilities first published on this day (UTC), newest first.

← October 2012 2012 / November /18 December 2012 →
  1. 17
  2. 28
  3. 33
  4. 449
  5. 5 
  6. 68
  7. 724
  8. 86
  9. 99
  10. 101
  11. 1119
  12. 12 
  13. 138
  14. 1431
  15. 154
  16. 1615
  17. 1734
  18. 1821
  19. 1911
  20. 2012
  21. 2145
  22. 222
  23. 2336
  24. 2413
  25. 25 
  26. 2618
  27. 279
  28. 2814
  29. 293
  30. 3026
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2012-4552 Public exploit

    Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute…

    plib Debian
  • Unscored —
    CVE-2012-4433 EPSS 13%

    Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote atta…

    gegl Debian
  • High 7.5
    CVE-2012-4520

    Django Allows Arbitrary URL Generation

    The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values.

    python-django django Debian PyPI
  • Unscored —
    CVE-2012-4417

    GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink a…

    glusterfs Debian
  • Unscored —
    CVE-2012-4938

    Cross-site scripting (XSS) vulnerability in the web interface in Pattern Insight 2.3 allows remote authenticated admini…

  • Unscored —
    CVE-2012-4946

    Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it eas…

  • Unscored —
    CVE-2012-4936

    The web interface in Pattern Insight 2.3 allows remote attackers to conduct clickjacking attacks via a FRAME element.

  • Unscored —
    CVE-2012-4937

    Session fixation vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack web sessio…

  • Unscored —
    CVE-2012-4943

    Multiple cross-site request forgery (CSRF) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08…

  • Unscored —
    CVE-2012-4950

    Cross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows …

  • Unscored —
    CVE-2012-4947

    Agile FleetCommander and FleetCommander Kiosk before 4.08 store database credentials in cleartext, which allows remote …

  • Unscored —
    CVE-2012-4942

    Multiple cross-site scripting (XSS) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow …

  • Unscored —
    CVE-2012-4941

    Multiple SQL injection vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attack…

  • Unscored —
    CVE-2012-4945

    Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to execute arbitrary commands via unsp…

  • Unscored —
    CVE-2012-4944

    Multiple unrestricted file upload vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow re…

  • Unscored —
    CVE-2012-4935

    Cross-site request forgery (CSRF) vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to …

  • Unscored —
    CVE-2012-4959 Public exploit EPSS 71%

    Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and e…

  • Unscored —
    CVE-2012-4957 Public exploit EPSS 68%

    Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arb…

  • Unscored —
    CVE-2012-4575

    The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a …

    pgbouncer Debian
  • Unscored —
    CVE-2012-4958 Public exploit EPSS 74%

    Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitra…

  • Unscored —
    CVE-2012-4956 Public exploit EPSS 38%

    Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary c…