Archive
November 2012
Vulnerabilities first published in this month (UTC), newest first.
66 results · Clear filters · Feed
-
Unscored —CVE-2012-5898 Public exploit
Cross-site request forgery (CSRF) vulnerability in SAMEDIA LandShop 0.9.2 allows remote attackers to hijack the authent…
-
Unscored —CVE-2012-5909 Public exploit
SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers…
-
Unscored —CVE-2012-5897 Public exploit
The (1) SimpleTree and (2) ReportTree classes in the ARDoc ActiveX control (ARDoc.dll) in Quest InTrust 10.4.0.853 and …
-
Unscored —CVE-2012-5908 Public exploit
Cross-site scripting (XSS) vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows rem…
-
Unscored —CVE-2012-5891 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow…
-
Unscored —CVE-2012-5903 Public exploit
Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 2.0.2 allows remote attackers to inject arbitra…
-
Unscored —CVE-2012-5907 Public exploit
Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers …
-
Unscored —CVE-2012-5900 Public exploit
Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2012-5894 Public exploit
SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbit…
-
Unscored —CVE-2012-5899 Public exploit
Cross-site scripting (XSS) vulnerability in admin/action/objects.php in SAMEDIA LandShop 0.9.2 allows remote attackers …
-
Unscored —CVE-2012-4951 Public exploit
Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 3…
-
Unscored —CVE-2012-5851 Public exploit
html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not conside…
-
Unscored —CVE-2012-4949 Public exploit
SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via…
-
Unscored —
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware P…
-
Unscored —
The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Mot…
-
Unscored —
The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE …
-
Unscored —CVE-2012-4515 Public exploit
Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is…
-
Unscored —
khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) …
-
Unscored —CVE-2012-4514 Public exploit
rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NU…
-
Unscored —
Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a d…
-
Unscored —
Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of …
-
Unscored —
Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or caus…
-
Unscored —
Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2012-0025 Public exploit
Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the Fl…
-
Unscored —
AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages …
-
Unscored —
Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.1…