Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
February

CVEs published in February 2012

380 vulnerabilities, 81 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

typo3 beuserswitchUnspecified vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows...CVE-2012-10855.0 MediumFebruary 14, 2012
typo3 beuserswitchCross-site scripting (XSS) vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for...CVE-2012-10844.3 MediumFebruary 14, 2012
typo3 terminalCross-site request forgery (CSRF) vulnerability in the Terminal PHP Shell (terminal) extension 0...CVE-2012-10836.8 MediumFebruary 14, 2012
typo3 terminalCross-site scripting (XSS) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and...CVE-2012-10823.5 LowFebruary 14, 2012
roderick braun ya googlesearchCross-site scripting (XSS) vulnerability in the Yet another Google search (ya_googlesearch)...CVE-2012-10814.3 MediumFebruary 14, 2012
typo3 skt eurocalcCross-site scripting (XSS) vulnerability in the Euro Calculator (skt_eurocalc) extension 0.0.1...CVE-2012-10804.3 MediumFebruary 14, 2012
helmut hummel typo3 webserviceUnspecified vulnerability in the Webservices for TYPO3 (typo3_webservice) extension before 0.3.8...CVE-2012-10796.5 MediumFebruary 14, 2012
claus due sysutilsThe System Utilities (sysutils) extension 1.0.3 and earlier for TYPO3 allows remote attackers to...CVE-2012-10785.0 MediumFebruary 14, 2012
manfred egger bc post2facebookSQL injection vulnerability in the Post data records to facebook (bc_post2facebook) extension...CVE-2012-10777.5 HighFebruary 14, 2012
robert gonda rtg filesCross-site scripting (XSS) vulnerability in the Documents download (rtg_files) extension before 1...CVE-2012-10764.3 MediumFebruary 14, 2012
robert gonda rtg filesSQL injection vulnerability in the Documents download (rtg_files) extension before 1.5.2 for...CVE-2012-10757.5 HighFebruary 14, 2012
typo3 mm whtpprSQL injection vulnerability in the White Papers (mm_whtppr) extension 0.0.4 and earlier for TYPO3...CVE-2012-10747.5 HighFebruary 14, 2012
typo3 toi categoryCross-site scripting (XSS) vulnerability in the Category-System (toi_category) extension 0.6.0...CVE-2012-10734.3 MediumFebruary 14, 2012
typo3 toi categorySQL injection vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for...CVE-2012-10727.5 HighFebruary 14, 2012
mathieu vidal mv cookingSQL injection vulnerability in the Kitchen recipe (mv_cooking) extension before 0.4.1 for TYPO3...CVE-2012-10717.5 HighFebruary 14, 2012
netcreators irfaqCross-site scripting (XSS) vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other...CVE-2012-10704.3 MediumFebruary 14, 2012
instantphp lknsupportCross-site scripting (XSS) vulnerability in module/kb/search_word in the search module in...CVE-2012-1069Public exploit4.3 MediumFebruary 14, 2012
mg12 wp-recentcommentsCross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the WP...CVE-2012-10684.3 MediumFebruary 14, 2012
mg12 wp-recentcommentsSQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote...CVE-2012-10677.5 HighFebruary 14, 2012
smartycmsCross-site scripting (XSS) vulnerability in the template module in SmartyCMS 0.9.4 allows remote...CVE-2012-10664.3 MediumFebruary 14, 2012
2x applicationserverInsecure method vulnerability in TuxScripting.dll in the TuxSystem ActiveX control in 2X...CVE-2012-1065Public exploit4.3 MediumFebruary 14, 2012
netsarang xlpd, xmanager enterprise +1 moreNetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers...CVE-2012-1009Public exploit5.0 MediumFebruary 14, 2012
juergen furrer jftcaformsCross-site scripting (XSS) vulnerability in lib/class.tx_jftcaforms_tceFunc.php in the Additional...CVE-2011-50804.3 MediumFebruary 14, 2012
netcreators irfaqOpen redirect vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1...CVE-2011-50795.8 MediumFebruary 14, 2012
phpMemory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a...CVE-2012-0789Public exploit5.0 MediumFebruary 14, 2012
manageengine applications managerMultiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow...CVE-2012-10637.5 HighFebruary 14, 2012
manageengine applications managerMultiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and...CVE-2012-10624.3 MediumFebruary 14, 2012
gforgegroup gforgeSQL injection vulnerability in GForge Advanced Server 6.0.0 and other versions before 6.0.1...CVE-2012-10617.5 HighFebruary 14, 2012
rik de boer revisioningMultiple cross-site scripting (XSS) vulnerabilities in revisioning_theme.inc in the Taxonomy...CVE-2012-10602.1 LowFebruary 14, 2012
oscommerce online merchantCross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages...CVE-2012-1059Public exploit4.3 MediumFebruary 14, 2012
flysprayCross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to...CVE-2012-1058Public exploit6.0 MediumFebruary 14, 2012
sean robertson forwardCross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the...CVE-2012-10576.0 MediumFebruary 14, 2012
sean robertson forwardThe Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not...CVE-2012-10565.0 MediumFebruary 14, 2012
pl32 photolineHeap-based buffer overflow in PhotoLine 17.01 and possibly other versions before 17.02 allows...CVE-2012-10556.8 MediumFebruary 14, 2012
mibew messengerMultiple cross-site request forgery (CSRF) vulnerabilities in Mibew Messenger 1.6.4 and earlier...CVE-2012-08296.0 MediumFebruary 14, 2012
cisco ironport encryption applianceCross-site scripting (XSS) vulnerability in the management interface on the Cisco IronPort...CVE-2012-03404.3 MediumFebruary 13, 2012
ivanviewBuffer overflow in IvanView 1.2.15 allows remote attackers to execute arbitrary code via a...CVE-2012-10526.8 MediumFebruary 13, 2012
xnviewHeap-based buffer overflow in Xjp2.dll in the JPEG2000 plug-in in XnView 1.98.5 allows remote...CVE-2012-10516.8 MediumFebruary 13, 2012
mathopdDirectory traversal vulnerability in Mathopd 1.4.x and 1.5.x before 1.5p7, when configured with...CVE-2012-10504.3 MediumFebruary 13, 2012
manageengine admanager plusMultiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210...CVE-2012-1049Public exploit4.3 MediumFebruary 13, 2012
phpThe PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature...CVE-2012-0788Public exploit5.0 MediumFebruary 13, 2012
efrontlearning efront community \+\+Cross-site scripting (XSS) vulnerability in communityplusplus/www/administrator.php in eFront...CVE-2012-1048Public exploit4.3 MediumFebruary 12, 2012
cyberoam central consoleDirectory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central...CVE-2012-1047Public exploit7.5 HighFebruary 12, 2012
symphony-cms symphony cmsMultiple SQL injection vulnerabilities in symphony/content/content.publish.php in Symphony CMS 2...CVE-2011-4341Public exploit4.3 MediumFebruary 12, 2012
symphony-cms symphony cmsSymphony CMS vulnerable to Cross-site ScriptingCVE-2011-4340Public exploitFix available3.5 LowFebruary 12, 2012
phpldapadmin project phpldapadminCross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier...CVE-2012-0834Public exploitFix available4.3 MediumFebruary 11, 2012
mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0...CVE-2012-04527.5 HighFebruary 11, 2012
phpPHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive...CVE-2012-08316.8 MediumFebruary 10, 2012
ibm cognos tm1Cross-site scripting (XSS) vulnerability in TM1 Web in IBM Cognos TM1 9.5.2 FP1 allows remote...CVE-2012-10464.3 MediumFebruary 10, 2012
apache portable runtimetables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values...CVE-2012-0840Public exploitFix availableEPSS 42.1%5.0 MediumFebruary 10, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open