Skip to content
OpenAdvisories

Archive

26 November 2012

Vulnerabilities first published on this day (UTC), newest first.

← October 2012 2012 / November /26 December 2012 →
  1. 17
  2. 28
  3. 33
  4. 449
  5. 5 
  6. 68
  7. 724
  8. 86
  9. 99
  10. 101
  11. 1119
  12. 12 
  13. 138
  14. 1431
  15. 154
  16. 1615
  17. 1734
  18. 1821
  19. 1911
  20. 2012
  21. 2145
  22. 222
  23. 2336
  24. 2413
  25. 25 
  26. 2618
  27. 279
  28. 2814
  29. 293
  30. 3026
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2010-5282

    Multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1 allow remote attacker…

  • Unscored —
    CVE-2010-5286 Public exploit Scanner template EPSS 12%

    Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows remote attackers to read arbitrar…

  • Unscored —
    CVE-2010-5285 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the …

  • Unscored —
    CVE-2010-5283

    Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers t…

  • Unscored —
    CVE-2010-5280 Public exploit

    Directory traversal vulnerability in the Community Builder Enhanced (CBE) (com_cbe) component 1.4.8, 1.4.9, and 1.4.10 …

  • Unscored —
    CVE-2010-5284 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2010-5281 Public exploit

    Directory traversal vulnerability in ibrowser.php in the CMScout 2.09 IBrowser TinyMCE Plugin 1.4.1, when magic_quotes_…

  • Unscored —
    CVE-2012-6042 Public exploit

    GPSMapEdit 1.1.73.2 allows user-assisted remote attackers to cause a denial of service (crash) via a long string in a l…

  • Unscored —
    CVE-2012-6040 Public exploit

    Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers…

  • Unscored —
    CVE-2012-6043 Public exploit

    Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2012-6038 Public exploit

    admin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directori…

  • Unscored —
    CVE-2012-6039 Public exploit

    SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows r…

  • Unscored —
    CVE-2012-6041 Public exploit

    Double free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar (F6) is activated, allows remote…

  • Unscored —
    CVE-2012-6044 Public exploit

    M-Player 0.4 allows remote attackers to cause a denial of service (crash) via a crafted MP3 file.

  • Unscored —
    CVE-2012-0698 Public exploit EPSS 11%

    tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_o…

    trousers Debian
  • Unscored —
    CVE-2012-2438

    ar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be submitted through HTTP re…

  • Unscored —
    CVE-2012-2437 Public exploit

    cookie_gen.php in ar web content manager (AWCM) 2.2 does not require authentication, which allows remote attackers to g…

  • Unscored —
    CVE-2012-5520

    The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute …