Skip to content
OpenAdvisories

Archive

November 2012

Vulnerabilities first published in this month (UTC), newest first.

← October 2012 2012 / November December 2012 →
  1. 17
  2. 28
  3. 33
  4. 449
  5. 5 
  6. 68
  7. 724
  8. 86
  9. 99
  10. 101
  11. 1119
  12. 12 
  13. 138
  14. 1431
  15. 154
  16. 1615
  17. 1734
  18. 1821
  19. 1911
  20. 2012
  21. 2145
  22. 222
  23. 2336
  24. 2413
  25. 25 
  26. 2618
  27. 279
  28. 2814
  29. 293
  30. 3026
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.4
    CVE-2012-5864 Public exploit

    Sinapsi eSolar Improper Authentication

    These Sinapsi devices do not check if users that visit pages within the device have properly authenticated. By directly visiting the pages within the device, attackers can gain unauthorized access with administrative privileges.

    Sinapsi eSolar eSolar Light eSolar DUO
  • Critical 10.0
    CVE-2012-5863 Public exploit EPSS 25%

    Sinapsi eSolar OS Command Injection

    These Sinapsi devices do not check for special elements in commands sent to the system. By accessing certain pages with administrative privileges that do not require authentication within the device, attackers can execute arbitrary, unexpected, or dangerous c…

    Sinapsi eSolar Light eSolar DUO eSolar
  • Critical 10.0
    CVE-2012-5862 Public exploit EPSS 12%

    Sinapsi eSolar Hard-Coded Password

    These Sinapsi devices store hard-coded passwords in the PHP file of the device. By using the hard-coded passwords in the device, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.

    Sinapsi eSolar DUO eSolar eSolar Light