Skip to content
OpenAdvisories

Archive

17 September 2014

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2012-6658 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SpiceWorks 5.3.75941 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2012-2956 Public exploit

    SQL injection vulnerability in SpiceWorks 5.3.75941 allows remote authenticated users to execute arbitrary SQL commands…

  • Unscored —
    CVE-2012-1417 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Local Phone book and Blacklist form in Yealink VOIP Phones allow…

  • Unscored —
    CVE-2012-1507 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.7 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2012-1506 Public exploit

    SQL injection vulnerability in the updateStatus function in lib/models/benefits/Hsp.php in OrangeHRM before 2.7 allows …

  • Unscored —
    CVE-2012-2583 Public exploit

    Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attacker…