Archive
November 2012
Vulnerabilities first published in this month (UTC), newest first.
436 results · Feed
-
Unscored —
Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service …
-
Unscored —
Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of service (out-of-bounds…
-
Unscored —
Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used i…
-
Unscored —
EMC Smarts Network Configuration Manager (NCM) before 9.1 uses a hardcoded encryption key for the storage of credential…
-
Unscored —
The default configuration of EMC Smarts Network Configuration Manager (NCM) before 9.1 does not require authentication …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Adaptive Authentication On-Premise (AAOP) before 7.0 all…
-
Unscored —CVE-2012-6048 Public exploit
Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service (crash) via a long string in a gpx file.
-
Unscored —CVE-2012-6050 Public exploit
The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU cons…
-
Unscored —CVE-2012-6045 Public exploit
Cross-site scripting (XSS) vulnerability in gb/user/index.php in Ramui Forum, possibly 1.0 Beta, allows remote attacker…
-
Unscored —CVE-2012-6047 Public exploit
Cross-site request forgery (CSRF) vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the au…
-
Unscored —
Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via (1) a long string or (2) inval…
-
Unscored —CVE-2012-6046 Public exploit
Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP c…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1 allow remote attacker…
-
Unscored —
Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows remote attackers to read arbitrar…
-
Unscored —CVE-2010-5285 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers t…
-
Unscored —CVE-2010-5280 Public exploit
Directory traversal vulnerability in the Community Builder Enhanced (CBE) (com_cbe) component 1.4.8, 1.4.9, and 1.4.10 …
-
Unscored —CVE-2010-5284 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2010-5281 Public exploit
Directory traversal vulnerability in ibrowser.php in the CMScout 2.09 IBrowser TinyMCE Plugin 1.4.1, when magic_quotes_…
-
Unscored —CVE-2012-6042 Public exploit
GPSMapEdit 1.1.73.2 allows user-assisted remote attackers to cause a denial of service (crash) via a long string in a l…
-
Unscored —CVE-2012-6040 Public exploit
Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers…
-
Unscored —CVE-2012-6043 Public exploit
Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbit…
-
Unscored —CVE-2012-6038 Public exploit
admin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directori…
-
Unscored —CVE-2012-6039 Public exploit
SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows r…
-
Unscored —CVE-2012-6041 Public exploit
Double free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar (F6) is activated, allows remote…
-
Unscored —CVE-2012-6044 Public exploit
M-Player 0.4 allows remote attackers to cause a denial of service (crash) via a crafted MP3 file.
-
Unscored —
tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_o…
-
Unscored —
ar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be submitted through HTTP re…
-
Unscored —CVE-2012-2437 Public exploit
cookie_gen.php in ar web content manager (AWCM) 2.2 does not require authentication, which allows remote attackers to g…
-
Unscored —
The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute …
-
Unscored —
Remote Login Service (RLS) 1.0.0 does not properly clear account information when switching users, which might allow ph…
-
Unscored —
Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, whic…
-
Unscored —
The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows contex…
-
Unscored —
The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running o…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4, and other vers…
-
Unscored —
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by…
-
Unscored —
Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connecti…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to…
-
Unscored —
Cross-site scripting (XSS) vulnerability in group/members.php in Mahara 1.5.x before 1.5.7 and 1.6.x before 1.6.2 allow…
-
Unscored —
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbi…