CVEs published in August 2012

741 vulnerabilities, 105 critical, 3 exploited.

• zte zxdsl Cross-site request forgery (CSRF) vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5... CVE-2012-4746 Public exploit 6.8 MediumAugust 31, 2012
• the collective acuity cms Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote... CVE-2012-4745 Public exploit 4.3 MediumAugust 31, 2012
• eos.pe siche search module Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for... CVE-2012-4744 4.3 MediumAugust 31, 2012
• eos.pe siche search module Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard... CVE-2012-4743 7.5 HighAugust 31, 2012
• packetfence The web_node_register function in web.pm in PacketFence before 3.0.2 might allow remote attackers... CVE-2012-4742 7.5 HighAugust 31, 2012
• packetfence The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for... CVE-2012-4741 5.0 MediumAugust 31, 2012
• packetfence Cross-site scripting (XSS) vulnerability in the captive portal in PacketFence before 3.3.0 allows... CVE-2012-4740 4.3 MediumAugust 31, 2012
• yaniv aran-shamir gigya Cross-site scripting (XSS) vulnerability in the Gigya - Social optimization module 6.x before 6.x... CVE-2012-2117 4.3 MediumAugust 31, 2012
• commerceguys commerce reorder Cross-site request forgery (CSRF) vulnerability in the Commerce Reorder module before 7.x-1.1 for... CVE-2012-2116 6.8 MediumAugust 31, 2012
• etalabs musl Stack-based buffer overflow in fprintf in musl before 0.8.8 and earlier allows context-dependent... CVE-2012-2114 7.5 HighAugust 31, 2012
• fusiondrupalthemes fusion Cross-site scripting (XSS) vulnerability in the fusion_core_preprocess_page function in... CVE-2012-2083 4.3 MediumAugust 31, 2012
• egroupware, egroupware enterprise line +1 more Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line (EPL) before... CVE-2011-4951 5.8 MediumAugust 31, 2012
• egroupware, egroupware enterprise line +1 more Cross-site scripting (XSS) vulnerability in phpgwapi/js/jscalendar/test.php in EGroupware... CVE-2011-4950 4.3 MediumAugust 31, 2012
• egroupware, egroupware enterprise line +1 more SQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/with_db/loaddetails.php in... CVE-2011-4949 7.5 HighAugust 31, 2012
• egroupware, egroupware enterprise line +1 more Directory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line (EPL) before... CVE-2011-4948 5.0 MediumAugust 31, 2012
• e107 Cross-site request forgery (CSRF) vulnerability in e107_admin/users_extended.php in e107 before 0... CVE-2011-4947 6.8 MediumAugust 31, 2012
• e107 SQL injection vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote... CVE-2011-4946 6.8 MediumAugust 31, 2012
• spamtitan Multiple cross-site scripting (XSS) vulnerabilities in SpamTitan 5.07 and possibly earlier allow... CVE-2011-5150 Public exploit 4.3 MediumAugust 31, 2012
• spamtitan Multiple cross-site scripting (XSS) vulnerabilities in SpamTitan 5.08 and earlier allow remote... CVE-2011-5149 Public exploit 4.3 MediumAugust 31, 2012
• wasen mod simplefileupload Multiple incomplete blacklist vulnerabilities in the Simple File Upload (mod_simplefileuploadv1.3... CVE-2011-5148 Public exploit 6.8 MediumAugust 31, 2012
• freewebshop Static code injection vulnerability in ajax_save_name.php in the Ajax File Manager module in the... CVE-2011-5147 Public exploit 5.0 MediumAugust 31, 2012
• ingumadev bokken Bokken before 1.6 and 1.5-x before 1.5-3 for Debian allows local users to overwrite arbitrary... CVE-2011-5146 2.6 LowAugust 31, 2012
• obm open business management Multiple SQL injection vulnerabilities in Open Business Management (OBM) 2.4.0-rc13 and probably... CVE-2011-5145 5.5 MediumAugust 31, 2012
• obm open business management Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote attackers to obtain... CVE-2011-5144 5.0 MediumAugust 31, 2012
• obm open business management Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 2.3.20 and... CVE-2011-5143 4.3 MediumAugust 31, 2012
• obm open business management Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 2.4.0-rc13... CVE-2011-5142 4.3 MediumAugust 31, 2012
• obm open business management Directory traversal vulnerability in exportcsv/exportcsv_index.php in Open Business Management ... CVE-2011-5141 6.0 MediumAugust 31, 2012
• diy-cms blog Multiple SQL injection vulnerabilities in the blog module 1.0 for DiY-CMS allow remote attackers... CVE-2011-5140 Public exploit 7.5 HighAugust 31, 2012
• preprojects business cards designer SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote... CVE-2011-5139 Public exploit 7.5 HighAugust 31, 2012
• tforum Cross-site scripting (XSS) vulnerability in member.php in tForum b0.915 allows remote attackers... CVE-2011-5138 4.3 MediumAugust 31, 2012
• tforum Multiple SQL injection vulnerabilities in tForum b0.915 allow remote attackers to execute... CVE-2011-5137 7.5 HighAugust 31, 2012
• viscomsoft image viewer cp gold sdk, image viewer cp pro sdk +1 more Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX... CVE-2010-5194 Public exploit 9.3 HighAugust 31, 2012
• viscomsoft image viewer cp gold sdk, image viewer cp pro sdk +1 more Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1... CVE-2010-5193 Public exploit EPSS 32.0% 9.3 HighAugust 31, 2012
• barracudanetworks barracuda ssl vpn Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012... CVE-2012-4739 Public exploit 4.3 MediumAugust 31, 2012
• gnugk gnu gatekeeper, opensuse leap, opensuse +2 more GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which... CVE-2012-3534 Fix available 5.0 MediumAugust 31, 2012
• ovirt, ovirt ovirt-engine-cli, ovirt-engine-sdk 3.1.0.5 +2 more The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL... CVE-2012-3533 5.0 MediumAugust 31, 2012
• john franklin advertisement The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to... CVE-2012-2704 5.0 MediumAugust 31, 2012
• adobe air, air sdk, flash player +1 more +3 more Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X,... CVE-2012-4171 5.0 MediumAugust 31, 2012
• google chrome, opensuse +1 more Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0... CVE-2012-2872 Fix available 4.3 MediumAugust 31, 2012
• google chrome, xmlsoft libxml2, apple iphone os +2 more libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly... CVE-2012-2871 Fix available 6.8 MediumAugust 31, 2012
• google chrome, xmlsoft libxslt, apple iphone os +2 more libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly... CVE-2012-2870 Fix available 4.3 MediumAugust 31, 2012
• google chrome, opensuse +1 more Google Chrome before 21.0.1180.89 does not properly load URLs, which allows remote attackers to... CVE-2012-2869 Fix available 7.5 HighAugust 31, 2012
• google chrome, opensuse +1 more Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of... CVE-2012-2868 Fix available 6.8 MediumAugust 31, 2012
• google chrome, opensuse +1 more The SPDY implementation in Google Chrome before 21.0.1180.89 allows remote attackers to cause a... CVE-2012-2867 Fix available 5.0 MediumAugust 31, 2012
• google chrome, opensuse +1 more Google Chrome before 21.0.1180.89 does not properly perform a cast of an unspecified variable... CVE-2012-2866 Fix available 7.5 HighAugust 31, 2012
• google chrome, opensuse +1 more Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote... CVE-2012-2865 Fix available 4.3 MediumAugust 31, 2012
• gimp The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote... CVE-2012-4245 6.8 MediumAugust 31, 2012
• wargio naxsi Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for... CVE-2012-3380 Fix available 2.1 LowAugust 31, 2012
• gnome at-spi2-atk The register_application function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not... CVE-2012-3378 Fix available 3.3 LowAugust 31, 2012
• qemu, xen, redhat enterprise linux +2 more +4 more The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local... CVE-2015-3456 Public exploitFix available EPSS 15.3% 7.7 HighAugust 31, 2012
• Show olderLoading…