Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2012
February

CVEs published in February 2012

380 vulnerabilities, 81 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

advantech webaccessGbScriptAddUp.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform...CVE-2012-024010.0 HighFebruary 21, 2012
advantech webaccessuaddUpAdmin.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform...CVE-2012-02395.0 MediumFebruary 21, 2012
advantech webaccessStack-based buffer overflow in opcImg.asp in Advantech/BroadWin WebAccess before 7.0 allows...CVE-2012-023810.0 HighFebruary 21, 2012
advantech webaccessAdvantech/BroadWin WebAccess before 7.0 allows remote attackers to (1) enable date and time...CVE-2012-02376.4 MediumFebruary 21, 2012
advantech webaccessAdvantech/BroadWin WebAccess 7.0 and earlier allows remote attackers to obtain sensitive...CVE-2012-02365.0 MediumFebruary 21, 2012
advantech webaccessCross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows...CVE-2012-02356.0 MediumFebruary 21, 2012
advantech webaccessSQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to...CVE-2012-02347.5 HighFebruary 21, 2012
advantech webaccessCross-site scripting (XSS) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote...CVE-2012-02334.3 MediumFebruary 21, 2012
ibm soliddbThe server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures,...CVE-2012-0200Public exploit4.0 MediumFebruary 21, 2012
ibm soliddbThe server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to...CVE-2011-48904.0 MediumFebruary 21, 2012
advantech webaccessBuffer overflow in an ActiveX control in Advantech/BroadWin WebAccess before 7.0 might allow...CVE-2011-452610.0 HighFebruary 21, 2012
advantech webaccessAdvantech/BroadWin WebAccess before 7.0 allows remote attackers to trigger the extraction of...CVE-2011-452510.0 HighFebruary 21, 2012
advantech webaccessBuffer overflow in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute...CVE-2011-452410.0 HighFebruary 21, 2012
advantech webaccessCross-site scripting (XSS) vulnerability in bwview.asp in Advantech/BroadWin WebAccess before 7.0...CVE-2011-45234.3 MediumFebruary 21, 2012
advantech webaccessCross-site scripting (XSS) vulnerability in bwerrdn.asp in Advantech/BroadWin WebAccess before 7...CVE-2011-45224.3 MediumFebruary 21, 2012
advantech webaccessSQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to...CVE-2011-45217.5 HighFebruary 21, 2012
advantech adam opc server, modbus rtu opc server, modbus tcp opc server +2 moreBuffer overflow in the Advantech ADAM OLE for Process Control (OPC) Server ActiveX control in...CVE-2011-191410.0 HighFebruary 21, 2012
ulli horlacher fexMultiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX,...CVE-2012-1293Fix available4.3 MediumFebruary 21, 2012
pluck-cms pluckMultiple cross-site request forgery (CSRF) vulnerabilities in admin.php in pluck 4.7 allow remote...CVE-2012-12276.8 MediumFebruary 21, 2012
dolibarr erp\/crmMultiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers...CVE-2012-1226Public exploitEPSS 23.6%7.5 HighFebruary 21, 2012
dolibarr erp\/crmMultiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote...CVE-2012-1225Public exploit7.5 HighFebruary 21, 2012
contentlion alphaCross-site scripting (XSS) vulnerability in system/classes/login.php in ContentLion Alpha 1.3...CVE-2012-1224Public exploit4.3 MediumFebruary 21, 2012
rabidhamster r2\/extremeRabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number,...CVE-2012-12235.0 MediumFebruary 21, 2012
rabidhamster r2\/extremeStack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier allows remote...CVE-2012-12228.5 HighFebruary 21, 2012
rabidhamster r2\/, r2\/extreme +1 moreDirectory traversal vulnerability in the telnet server in RabidHamster R2/Extreme 1.65 and...CVE-2012-1221Public exploit5.0 MediumFebruary 21, 2012
devincentiis gazieCross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20...CVE-2012-1220Public exploit6.8 MediumFebruary 21, 2012
freelancerkitMultiple cross-site scripting (XSS) vulnerabilities in freelancerKit 2.35 allow remote attackers...CVE-2012-12194.3 MediumFebruary 21, 2012
freelancerkitMultiple SQL injection vulnerabilities in freelancerKit 2.35 allow remote attackers to execute...CVE-2012-12187.5 HighFebruary 21, 2012
zenphotoMultiple cross-site scripting (XSS) vulnerabilities in ZENphoto 1.4.2 allow remote attackers to...CVE-2012-09954.3 MediumFebruary 21, 2012
zenphotoSQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in...CVE-2012-09946.0 MediumFebruary 21, 2012
zenphotoEval injection vulnerability in zp-core/zp-extensions/viewer_size_image.php in ZENphoto 1.4.2,...CVE-2012-09936.8 MediumFebruary 21, 2012
ulli horlacher fexCross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex)...CVE-2012-0869Public exploitFix available4.3 MediumFebruary 21, 2012
cubecartMultiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to...CVE-2012-0865Public exploit5.8 MediumFebruary 21, 2012
konstanty bialkowski libmodplugOff-by-one error in the CSoundFile::ReadAMS2 function in src/load_ams.cpp in libmodplug before 0...CVE-2011-2915Fix available6.8 MediumFebruary 21, 2012
konstanty bialkowski libmodplugOff-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8...CVE-2011-2914Fix available6.8 MediumFebruary 21, 2012
konstanty bialkowski libmodplugOff-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug before 0.8...CVE-2011-2913Fix available6.8 MediumFebruary 21, 2012
konstanty bialkowski libmodplugStack-based buffer overflow in the CSoundFile::ReadS3M function in src/load_s3m.cpp in libmodplug...CVE-2011-2912Fix available6.8 MediumFebruary 21, 2012
konstanty bialkowski libmodplugInteger overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8...CVE-2011-2911Fix available6.8 MediumFebruary 21, 2012
konstanty bialkowski libmodplugMultiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions...CVE-2011-1761Public exploitFix availableEPSS 11.0%6.8 MediumFebruary 21, 2012
7t aquisUntrusted search path vulnerability in 7-Technologies (7T) AQUIS 1.5 and earlier allows local...CVE-2012-02249.3 HighFebruary 20, 2012
novell iprintBuffer overflow in the GetDriverSettings function in nipplib.dll in Novell iPrint Client before 5...CVE-2011-418710.0 HighFebruary 20, 2012
novell iprintHeap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows...CVE-2011-41869.3 HighFebruary 20, 2012
novell iprintThe GetPrinterURLList2 method in the ActiveX control in Novell iPrint Client before 5.78 on...CVE-2011-418510.0 HighFebruary 20, 2012
simhl sths v2 web portalMultiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote...CVE-2012-1217Public exploit4.3 MediumFebruary 20, 2012
pbboardMultiple cross-site request forgery (CSRF) vulnerabilities in admin.php in PBBoard 2.1.4 allow...CVE-2012-12166.8 MediumFebruary 20, 2012
yoono for firefoxCross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before...CVE-2012-12154.3 MediumFebruary 20, 2012
yoono desktopCross-site scripting (XSS) vulnerability in the Add friends module in Yoono Desktop Application...CVE-2012-12144.3 MediumFebruary 20, 2012
zimbraCross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra...CVE-2012-1213Public exploit4.3 MediumFebruary 20, 2012
smwplus smw\+Cross-site scripting (XSS) vulnerability in the smwfOnSfSetTargetName function in extensions...CVE-2012-12124.3 MediumFebruary 20, 2012
powie pfileCross-site scripting (XSS) vulnerability in pfile/kommentar.php in Powie pFile 1.02 allows remote...CVE-2012-1211Public exploit4.3 MediumFebruary 20, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open