Skip to content
OpenAdvisories

Archive

November 2012

Vulnerabilities first published in this month (UTC), newest first.

← October 2012 2012 / November December 2012 →
  1. 17
  2. 28
  3. 33
  4. 449
  5. 5 
  6. 68
  7. 724
  8. 86
  9. 99
  10. 101
  11. 1119
  12. 12 
  13. 138
  14. 1431
  15. 154
  16. 1615
  17. 1734
  18. 1821
  19. 1911
  20. 2012
  21. 2145
  22. 222
  23. 2336
  24. 2413
  25. 25 
  26. 2618
  27. 279
  28. 2814
  29. 293
  30. 3026
All Critical High Medium Low Exploited only Public exploit

436 results · Feed

  • Unscored —
    CVE-2012-4942

    Multiple cross-site scripting (XSS) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow …

  • Unscored —
    CVE-2012-4941

    Multiple SQL injection vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attack…

  • Unscored —
    CVE-2012-4945

    Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to execute arbitrary commands via unsp…

  • Unscored —
    CVE-2012-4944

    Multiple unrestricted file upload vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow re…

  • Unscored —
    CVE-2012-4935

    Cross-site request forgery (CSRF) vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to …

  • Unscored —
    CVE-2012-4959 Public exploit EPSS 71%

    Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and e…

  • Unscored —
    CVE-2012-4957 Public exploit EPSS 68%

    Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arb…

  • Unscored —
    CVE-2012-4575

    The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a …

    pgbouncer Debian
  • Unscored —
    CVE-2012-4958 Public exploit EPSS 74%

    Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitra…

  • Unscored —
    CVE-2012-4956 Public exploit EPSS 38%

    Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2012-5906

    Multiple cross-site scripting (XSS) vulnerabilities in GreenBrowser 6.1.0117 and 6.1.0216 allow remote attackers to inj…

  • Unscored —
    CVE-2012-5917 Public exploit

    SnackAmp 3.1.3 allows remote attackers to cause a denial of service (application crash) via a long string in an aiff fi…

  • Unscored —
    CVE-2012-5896 Public exploit EPSS 69%

    The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not prop…

  • Unscored —
    CVE-2012-5905 Public exploit

    Buffer overflow in KnFTPd 1.0.0 allows remote authenticated users to cause a denial of service (crash) via a long strin…

  • Low —
    CVE-2012-5888

    Basic SEO Features (seo_basics) extension TYPO3 vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in Basic SEO Features (seo_basics) extension before 0.8.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    b13/seo_basics Packagist
  • Unscored —
    CVE-2012-5893

    Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and earlier allows remote attackers to …

  • Unscored —
    CVE-2012-5912 Public exploit

    Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2012-5913 Public exploit Scanner template

    Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress all…

  • Unscored —
    CVE-2012-5898 Public exploit

    Cross-site request forgery (CSRF) vulnerability in SAMEDIA LandShop 0.9.2 allows remote attackers to hijack the authent…

  • Unscored —
    CVE-2012-5909 Public exploit

    SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers…

  • Unscored —
    CVE-2012-5916

    Neocrome Seditio build 161 allows remote attackers to obtain sensitive information via a direct request to (1) docs/new…

  • Unscored —
    CVE-2012-5910

    SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execu…

  • Unscored —
    CVE-2012-5897 Public exploit

    The (1) SimpleTree and (2) ReportTree classes in the ARDoc ActiveX control (ARDoc.dll) in Quest InTrust 10.4.0.853 and …

  • Unscored —
    CVE-2012-5902

    Cross-site scripting (XSS) vulnerability in ptk/lib/modal_bookmark.php in DFLabs PTK 1.0.5 allows remote attackers to i…

  • Unscored —
    CVE-2012-5914

    Multiple cross-site scripting (XSS) vulnerabilities in the sed_import function in system/functions.php in Neocrome Sedi…

  • Unscored —
    CVE-2012-5904

    Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE…

  • Unscored —
    CVE-2012-5895

    Multiple unspecified vulnerabilities in iRODS before 3.1 have unknown impact and attack vectors.

  • Unscored —
    CVE-2012-5908 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows rem…

  • Unscored —
    CVE-2012-5891 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow…

  • Unscored —
    CVE-2012-5903 Public exploit

    Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 2.0.2 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2012-5892

    Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which …

  • Unscored —
    CVE-2012-5907 Public exploit

    Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers …

  • Unscored —
    CVE-2012-5911

    Cross-site scripting (XSS) vulnerability in blogs/blog1.php in b2evolution 4.1.3 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2012-5900 Public exploit

    Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2012-5894 Public exploit

    SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbit…

  • Low —
    CVE-2012-5889

    powermail extension for TYPO3 has Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    in2code/powermail Packagist
  • Unscored —
    CVE-2012-5901

    DFLabs PTK 1.0.5 stores data files with predictable names under the web document root with insufficient access control,…

  • Medium —
    CVE-2012-5890

    Front End User Registration (sr_feuser_register) extension for TYPO3 allows remote attackers to obtain user names, passwords

    The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.

    sjbr/sr-feuser-register Packagist
  • Unscored —
    CVE-2012-5915

    Neocrome Seditio build 161 and earlier allows remote attackers to obtain sensitive information via direct request to (1…

  • Unscored —
    CVE-2012-5899 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/action/objects.php in SAMEDIA LandShop 0.9.2 allows remote attackers …