Archive
November 2012
Vulnerabilities first published in this month (UTC), newest first.
66 results · Clear filters · Feed
-
Unscored —CVE-2012-4220 Public exploit
diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 thro…
-
Unscored —CVE-2012-6048 Public exploit
Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service (crash) via a long string in a gpx file.
-
Unscored —CVE-2012-6050 Public exploit
The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU cons…
-
Unscored —CVE-2012-6045 Public exploit
Cross-site scripting (XSS) vulnerability in gb/user/index.php in Ramui Forum, possibly 1.0 Beta, allows remote attacker…
-
Unscored —CVE-2012-6047 Public exploit
Cross-site request forgery (CSRF) vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the au…
-
Unscored —CVE-2012-6046 Public exploit
Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP c…
-
Unscored —
Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows remote attackers to read arbitrar…
-
Unscored —CVE-2010-5285 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the …
-
Unscored —CVE-2010-5280 Public exploit
Directory traversal vulnerability in the Community Builder Enhanced (CBE) (com_cbe) component 1.4.8, 1.4.9, and 1.4.10 …
-
Unscored —CVE-2010-5284 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2010-5281 Public exploit
Directory traversal vulnerability in ibrowser.php in the CMScout 2.09 IBrowser TinyMCE Plugin 1.4.1, when magic_quotes_…
-
Unscored —CVE-2012-6042 Public exploit
GPSMapEdit 1.1.73.2 allows user-assisted remote attackers to cause a denial of service (crash) via a long string in a l…
-
Unscored —CVE-2012-6040 Public exploit
Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers…
-
Unscored —CVE-2012-6043 Public exploit
Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbit…
-
Unscored —CVE-2012-6038 Public exploit
admin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directori…
-
Unscored —CVE-2012-6039 Public exploit
SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows r…
-
Unscored —CVE-2012-6041 Public exploit
Double free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar (F6) is activated, allows remote…
-
Unscored —CVE-2012-6044 Public exploit
M-Player 0.4 allows remote attackers to cause a denial of service (crash) via a crafted MP3 file.
-
Unscored —
tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_o…
-
Unscored —CVE-2012-2437 Public exploit
cookie_gen.php in ar web content manager (AWCM) 2.2 does not require authentication, which allows remote attackers to g…
-
Unscored —
The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial …
-
Critical 9.4CVE-2012-5864 Public exploit
Sinapsi eSolar Improper Authentication
These Sinapsi devices do not check if users that visit pages within the device have properly authenticated. By directly visiting the pages within the device, attackers can gain unauthorized access with administrative privileges.
-
Critical 10.0
Sinapsi eSolar OS Command Injection
These Sinapsi devices do not check for special elements in commands sent to the system. By accessing certain pages with administrative privileges that do not require authentication within the device, attackers can execute arbitrary, unexpected, or dangerous c…
-
Critical 10.0
Sinapsi eSolar Hard-Coded Password
These Sinapsi devices store hard-coded passwords in the PHP file of the device. By using the hard-coded passwords in the device, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.
-
High 7.8CVE-2012-5861 Public exploit
Sinapsi eSolar SQL Injection
These Sinapsi devices do not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication within the device, attackers can leak information from the device. This could allow the attack…
-
Unscored —
Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted…
-
Unscored —CVE-2012-4366 Public exploit
Belkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2, and N300 Model F7D2301v1…
-
Unscored —CVE-2012-5519 Public exploit
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrato…
-
Unscored —CVE-2012-5918 Public exploit
razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a…
-
Unscored —CVE-2012-5919 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbi…
-
Unscored —CVE-2012-4552 Public exploit
Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute…
-
Unscored —
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and e…
-
Unscored —
Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arb…
-
Unscored —
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitra…
-
Unscored —
Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2012-5917 Public exploit
SnackAmp 3.1.3 allows remote attackers to cause a denial of service (application crash) via a long string in an aiff fi…
-
Unscored —
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not prop…
-
Unscored —CVE-2012-5905 Public exploit
Buffer overflow in KnFTPd 1.0.0 allows remote authenticated users to cause a denial of service (crash) via a long strin…
-
Unscored —CVE-2012-5912 Public exploit
Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2012-5913 Public exploit
Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress all…