Skip to content
OpenAdvisories

Archive

23 May 2013

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —
    CVE-2011-4520 Public exploit

    Heap-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause a…

  • Unscored —
    CVE-2011-4518 Public exploit EPSS 26%

    Directory traversal vulnerability in the PmWebDir object in the web server in MICROSYS PROMOTIC before 8.1.5 allows rem…

  • Unscored —
    CVE-2011-4519 Public exploit

    Stack-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause …

  • Unscored —

    TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in engine/lib/views.php in Elgg before 1.8.5 allows remote attackers to inject…

  • Unscored —
    CVE-2012-6554 Public exploit EPSS 17%

    functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execut…

  • Unscored —
    CVE-2012-6559 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2012-6556 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote …

  • Unscored —

    Heap-based buffer overflow in Resource Hacker 3.6.0.92 allows remote attackers to execute arbitrary code via a Portable…

  • Unscored —

    engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows re…

  • Unscored —

    engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows…

  • Unscored —
    CVE-2012-6555 Public exploit

    Cross-site scripting (XSS) vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to …

  • Unscored —
    CVE-2012-6557 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attacke…

  • Unscored —
    CVE-2012-6560 Public exploit

    SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —

    Heap-based buffer overflow in HeavenTools PE Explorer 1.99 R6 allows remote attackers to execute arbitrary code via the…

  • Unscored —

    Memory leak in the SNMP process in Cisco IOS XR allows remote attackers to cause a denial of service (memory consumptio…

  • Unscored —

    Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause …