Archive
January 2013
Vulnerabilities first published in this month (UTC), newest first.
72 results · Clear filters · Feed
-
Unscored —CVE-2012-2099 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Wikidforum 2.10 allow remote attackers to inject arbitrary web s…
-
Unscored —
lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requ…
-
Unscored —
Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icing…
-
Unscored —
The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remot…
-
Unscored —
Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remot…
-
Unscored —CVE-2009-5134 Public exploit
Buffer overflow in the "create torrent dialog" functionality in uTorrent 1.8.3 build 15772, and possibly other versions…
-
Unscored —
Firefly Media Server 1.0.0.1359 allows remote attackers to cause a denial of service (NULL pointer dereference) via a (…
-
Low 2.6CVE-2012-5972 Public exploit
SpecView Directory Traversal
Directory traversal vulnerability in the web server in SpecView 2.5 build 853 and earlier allows remote attackers to read arbitrary files via a ... (dot dot dot) in a URI.
-
Unscored —CVE-2013-0397 Public exploit
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, …
-
Critical 9.8
administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and po…
KEV Mar 3, 2022 -
High —
actionpack Improper Input Validation vulnerability
active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks …
-
Unscored —
Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox …
-
Unscored —
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderb…
-
Unscored —
Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunder…
-
Unscored —
Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1…
-
Unscored —CVE-2012-6500 Public exploit
Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read ar…
-
Unscored —
Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows…
-
Unscored —CVE-2012-5874 Public exploit
Multiple SQL injection vulnerabilities in the (1) update_whosonline_reg and (2) update_whosonline_guest functions in El…
-
Unscored —CVE-2013-0722 Public exploit
Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow lo…
-
Critical 9.8
Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) usin…
KEV May 25, 2022 -
Unscored —
Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote atta…
-
Unscored —
win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows …
-
Critical 9.8
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentica…
KEV Mar 7, 2022 -
High 7.5
Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted di…
KEV Mar 7, 2022 -
Unscored —
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly han…
-
Unscored —
The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows …
-
Unscored —CVE-2012-6434 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in e107_admin/download.php in e107 1.0.2 allow remote attack…
-
Unscored —CVE-2012-6433 Public exploit
Cross-site request forgery (CSRF) vulnerability in e107_admin/newspost.php in e107 1.0.1 allows remote attackers to hij…
-
Unscored —CVE-2012-5667 Public exploit
Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code vi…
-
Medium 4.3
MoinMoin Multiple vulnerable to directory traversal
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to overwrite arbitrary files via unspe…
-
Medium 6.3
MoinMoin Multiple unrestricted file upload vulnerabilities
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uplo…
-
Unscored —CVE-2012-6470 Public exploit
Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary…